@shware/http 2.11.4 → 2.12.0

package/dist/google-one-tap/index.cjs

@@ -1,145 +1,142 @@
-"use strict";
-var __defProp = Object.defineProperty;
-var __getOwnPropDesc = Object.getOwnPropertyDescriptor;
-var __getOwnPropNames = Object.getOwnPropertyNames;
-var __hasOwnProp = Object.prototype.hasOwnProperty;
-var __export = (target, all) => {
-  for (var name in all)
-    __defProp(target, name, { get: all[name], enumerable: true });
-};
-var __copyProps = (to, from, except, desc) => {
-  if (from && typeof from === "object" || typeof from === "function") {
-    for (let key of __getOwnPropNames(from))
-      if (!__hasOwnProp.call(to, key) && key !== except)
-        __defProp(to, key, { get: () => from[key], enumerable: !(desc = __getOwnPropDesc(from, key)) || desc.enumerable });
-  }
-  return to;
-};
-var __toCommonJS = (mod) => __copyProps(__defProp({}, "__esModule", { value: true }), mod);
-
-// src/google-one-tap/index.ts
-var google_one_tap_exports = {};
-__export(google_one_tap_exports, {
-  prompt: () => prompt,
-  requestCode: () => requestCode
-});
-module.exports = __toCommonJS(google_one_tap_exports);
-var script = null;
+Object.defineProperty(exports, Symbol.toStringTag, { value: "Module" });
+//#region src/google-one-tap/index.ts
+let script = null;
 function loadScript() {
-  return new Promise((resolve, reject) => {
-    if (script) {
-      if (window.google?.accounts?.id) {
-        resolve();
-      } else {
-        script.addEventListener("load", () => resolve());
-        script.addEventListener("error", () => {
-          script = null;
-          reject(new Error("Failed to load Google One Tap script"));
-        });
-      }
-      return;
-    }
-    script = document.createElement("script");
-    script.id = "google-one-tap";
-    script.async = true;
-    script.defer = true;
-    script.src = "https://accounts.google.com/gsi/client";
-    script.onload = () => resolve();
-    script.onerror = () => {
-      script = null;
-      reject(new Error("Failed to load Google One Tap script"));
-    };
-    document.head.appendChild(script);
-  });
+	return new Promise((resolve, reject) => {
+		if (script) {
+			if (window.google?.accounts?.id) resolve();
+			else {
+				script.addEventListener("load", () => resolve());
+				script.addEventListener("error", () => {
+					script = null;
+					reject(/* @__PURE__ */ new Error("Failed to load Google One Tap script"));
+				});
+			}
+			return;
+		}
+		script = document.createElement("script");
+		script.id = "google-one-tap";
+		script.async = true;
+		script.defer = true;
+		script.src = "https://accounts.google.com/gsi/client";
+		script.onload = () => resolve();
+		script.onerror = () => {
+			script = null;
+			reject(/* @__PURE__ */ new Error("Failed to load Google One Tap script"));
+		};
+		document.head.appendChild(script);
+	});
 }
+/** FedCM feature detection — `IdentityCredential` is absent on Safari, Firefox and pre-117 Chrome. */
 function isFedcmSupported() {
-  return typeof window !== "undefined" && "IdentityCredential" in window;
+	return typeof window !== "undefined" && "IdentityCredential" in window;
 }
-async function prompt({
-  nonce,
-  client_id,
-  auto_select = false,
-  use_fedcm_for_prompt = true,
-  cancel_on_tap_outside = false
-}) {
-  if (use_fedcm_for_prompt !== false && !isFedcmSupported()) {
-    return { authorized: false, unsupported: true, reason: "fedcm_unsupported" };
-  }
-  try {
-    await loadScript();
-  } catch {
-    return { authorized: false, unsupported: true, reason: "script_load_failed" };
-  }
-  return new Promise((resolve) => {
-    let settled = false;
-    const settle = (result) => {
-      if (settled) return;
-      settled = true;
-      resolve(result);
-    };
-    try {
-      window.google.accounts.id.initialize({
-        ux_mode: "popup",
-        context: "signin",
-        auto_select,
-        nonce,
-        client_id,
-        use_fedcm_for_prompt,
-        cancel_on_tap_outside,
-        callback: (credential) => settle({ authorized: true, credential }),
-        native_callback: (credential) => settle({ authorized: true, credential })
-      });
-      window.google.accounts.id.prompt((notification) => {
-        if (settled) return;
-        const skipped = notification.isSkippedMoment();
-        const dismissed = notification.isDismissedMoment();
-        const dismissedReason = notification.getDismissedReason();
-        if (skipped || dismissed && dismissedReason !== "credential_returned") {
-          settle({
-            authorized: false,
-            moment: { skipped, dismissed, dismissedReason }
-          });
-        }
-      });
-    } catch {
-      settle({ authorized: false, unsupported: true, reason: "prompt_error" });
-    }
-  });
+/** debug: chrome://settings/content/federatedIdentityApi */
+async function prompt({ nonce, client_id, auto_select = false, use_fedcm_for_prompt = true, cancel_on_tap_outside = false }) {
+	if (use_fedcm_for_prompt !== false && !isFedcmSupported()) return {
+		authorized: false,
+		unsupported: true,
+		reason: "fedcm_unsupported"
+	};
+	try {
+		await loadScript();
+	} catch {
+		return {
+			authorized: false,
+			unsupported: true,
+			reason: "script_load_failed"
+		};
+	}
+	return new Promise((resolve) => {
+		let settled = false;
+		const settle = (result) => {
+			if (settled) return;
+			settled = true;
+			resolve(result);
+		};
+		try {
+			window.google.accounts.id.initialize({
+				ux_mode: "popup",
+				context: "signin",
+				auto_select,
+				nonce,
+				client_id,
+				use_fedcm_for_prompt,
+				cancel_on_tap_outside,
+				callback: (credential) => settle({
+					authorized: true,
+					credential
+				}),
+				native_callback: (credential) => settle({
+					authorized: true,
+					credential
+				})
+			});
+			window.google.accounts.id.prompt((notification) => {
+				if (settled) return;
+				const skipped = notification.isSkippedMoment();
+				const dismissed = notification.isDismissedMoment();
+				const dismissedReason = notification.getDismissedReason();
+				if (skipped || dismissed && dismissedReason !== "credential_returned") settle({
+					authorized: false,
+					moment: {
+						skipped,
+						dismissed,
+						dismissedReason
+					}
+				});
+			});
+		} catch {
+			settle({
+				authorized: false,
+				unsupported: true,
+				reason: "prompt_error"
+			});
+		}
+	});
 }
-async function requestCode({
-  client_id,
-  scope = "openid email profile",
-  ux_mode = "popup",
-  redirect_uri,
-  state,
-  login_hint,
-  hd
-}) {
-  await loadScript();
-  return new Promise((resolve) => {
-    let settled = false;
-    const settle = (result) => {
-      if (settled) return;
-      settled = true;
-      resolve(result);
-    };
-    const client = window.google.accounts.oauth2.initCodeClient({
-      client_id,
-      scope,
-      ux_mode,
-      redirect_uri,
-      state,
-      login_hint,
-      hd,
-      callback: (response) => settle(response.code ? { ok: true, response } : { ok: false, error: response }),
-      error_callback: (error) => settle({ ok: false, error })
-    });
-    client.requestCode();
-  });
+/**
+* OAuth 2.0 authorization-code fallback for environments where One Tap / FedCM
+* is unavailable (i.e. prompt() resolved with `unsupported: true`). It reuses
+* the same GSI script, so there is no extra dependency.
+*
+* Unlike One Tap it returns an authorization `code` for the backend to
+* exchange, not an ID token, and it must be triggered by a user gesture or the
+* popup may be blocked.
+*/
+async function requestCode({ client_id, scope = "openid email profile", ux_mode = "popup", redirect_uri, state, login_hint, hd }) {
+	await loadScript();
+	return new Promise((resolve) => {
+		let settled = false;
+		const settle = (result) => {
+			if (settled) return;
+			settled = true;
+			resolve(result);
+		};
+		window.google.accounts.oauth2.initCodeClient({
+			client_id,
+			scope,
+			ux_mode,
+			redirect_uri,
+			state,
+			login_hint,
+			hd,
+			callback: (response) => settle(response.code ? {
+				ok: true,
+				response
+			} : {
+				ok: false,
+				error: response
+			}),
+			error_callback: (error) => settle({
+				ok: false,
+				error
+			})
+		}).requestCode();
+	});
 }
-// Annotate the CommonJS export names for ESM import in node:
-0 && (module.exports = {
-  prompt,
-  requestCode
-});
+//#endregion
+exports.prompt = prompt;
+exports.requestCode = requestCode;
+
 //# sourceMappingURL=index.cjs.map

package/dist/google-one-tap/index.cjs.map

@@ -1 +1 @@
-{"version":3,"sources":["../../src/google-one-tap/index.ts"],"sourcesContent":["import type {\n  ClientConfigError,\n  CodeResponse,\n  CredentialResponse,\n  GoogleAccounts,\n  PromptMomentNotification,\n} from './types';\n\ndeclare global {\n  interface Window {\n    google: {\n      accounts: GoogleAccounts;\n    };\n  }\n}\n\nexport type Props = {\n  /**\n   * Opaque nonce string forwarded as-is to Google. Google echoes it back in\n   * the ID Token's `nonce` claim per the OIDC spec; the caller is responsible\n   * for any hashing/encoding required by its verifier.\n   */\n  nonce?: string;\n  client_id: string;\n  auto_select?: boolean;\n  cancel_on_tap_outside?: boolean;\n  use_fedcm_for_prompt?: boolean;\n};\n\nexport type PromptMoment = {\n  skipped: boolean;\n  dismissed: boolean;\n  dismissedReason: ReturnType<PromptMomentNotification['getDismissedReason']>;\n};\n\n/**\n * Why prompt() could not run One Tap, so the caller can decide to fall back\n * to requestCode().\n * - `fedcm_unsupported`: browser has no FedCM (Safari/Firefox/pre-117 Chrome).\n * - `script_load_failed`: the GSI script failed to load (network/CSP).\n * - `prompt_error`: GIS threw synchronously while initializing/prompting.\n */\nexport type UnsupportedReason = 'fedcm_unsupported' | 'script_load_failed' | 'prompt_error';\n\nexport type PromptResult =\n  | { authorized: true; credential: CredentialResponse }\n  | { authorized: false; moment: PromptMoment }\n  | { authorized: false; unsupported: true; reason: UnsupportedReason };\n\nlet script: HTMLScriptElement | null = null;\n\nfunction loadScript(): Promise<void> {\n  return new Promise((resolve, reject) => {\n    if (script) {\n      if (window.google?.accounts?.id) {\n        resolve();\n      } else {\n        script.addEventListener('load', () => resolve());\n        script.addEventListener('error', () => {\n          script = null; // allow a later call to recreate the element instead of hanging\n          reject(new Error('Failed to load Google One Tap script'));\n        });\n      }\n      return;\n    }\n\n    script = document.createElement('script');\n    script.id = 'google-one-tap';\n    script.async = true;\n    script.defer = true;\n    script.src = 'https://accounts.google.com/gsi/client';\n    script.onload = () => resolve();\n    script.onerror = () => {\n      script = null; // allow a later call to recreate the element instead of hanging\n      reject(new Error('Failed to load Google One Tap script'));\n    };\n\n    document.head.appendChild(script);\n  });\n}\n\n/** FedCM feature detection — `IdentityCredential` is absent on Safari, Firefox and pre-117 Chrome. */\nfunction isFedcmSupported(): boolean {\n  return typeof window !== 'undefined' && 'IdentityCredential' in window;\n}\n\n/** debug: chrome://settings/content/federatedIdentityApi */\nexport async function prompt({\n  nonce,\n  client_id,\n  auto_select = false,\n  use_fedcm_for_prompt = true,\n  cancel_on_tap_outside = false,\n}: Props): Promise<PromptResult> {\n  // FedCM is mandatory for One Tap on capable browsers (GIS completed the\n  // migration in early 2025) and there is no viable legacy fallback anymore.\n  // When the caller wants FedCM but the browser lacks it, bail early instead\n  // of letting GIS throw an async `NotSupportedError: Missing request type`\n  // from navigator.credentials.get. Callers should fall back to requestCode().\n  if (use_fedcm_for_prompt !== false && !isFedcmSupported()) {\n    return { authorized: false, unsupported: true, reason: 'fedcm_unsupported' };\n  }\n\n  try {\n    await loadScript();\n  } catch {\n    return { authorized: false, unsupported: true, reason: 'script_load_failed' };\n  }\n\n  return new Promise<PromptResult>((resolve) => {\n    let settled = false;\n    const settle = (result: PromptResult) => {\n      if (settled) return;\n      settled = true;\n      resolve(result);\n    };\n\n    try {\n      window.google.accounts.id.initialize({\n        ux_mode: 'popup',\n        context: 'signin',\n        auto_select,\n        nonce,\n        client_id,\n        use_fedcm_for_prompt,\n        cancel_on_tap_outside,\n        callback: (credential) => settle({ authorized: true, credential }),\n        native_callback: (credential) => settle({ authorized: true, credential }),\n      });\n\n      window.google.accounts.id.prompt((notification) => {\n        if (settled) return;\n\n        const skipped = notification.isSkippedMoment();\n        const dismissed = notification.isDismissedMoment();\n        const dismissedReason = notification.getDismissedReason();\n\n        if (skipped || (dismissed && dismissedReason !== 'credential_returned')) {\n          settle({\n            authorized: false,\n            moment: { skipped, dismissed, dismissedReason },\n          });\n        }\n      });\n    } catch {\n      settle({ authorized: false, unsupported: true, reason: 'prompt_error' });\n    }\n  });\n}\n\nexport type CodeProps = {\n  client_id: string;\n  /**\n   * Space-delimited OAuth scopes. Defaults to OpenID Connect scopes so the\n   * backend can exchange the code for an ID token, mirroring One Tap's intent.\n   */\n  scope?: string;\n  /** 'popup' resolves the returned promise; 'redirect' navigates away and never resolves. */\n  ux_mode?: 'popup' | 'redirect';\n  /** Required when ux_mode is 'redirect'; for 'popup' Google uses postMessage. */\n  redirect_uri?: string;\n  state?: string;\n  login_hint?: string;\n  hd?: string;\n};\n\nexport type CodeResult =\n  | { ok: true; response: CodeResponse }\n  | { ok: false; error: ClientConfigError | CodeResponse };\n\n/**\n * OAuth 2.0 authorization-code fallback for environments where One Tap / FedCM\n * is unavailable (i.e. prompt() resolved with `unsupported: true`). It reuses\n * the same GSI script, so there is no extra dependency.\n *\n * Unlike One Tap it returns an authorization `code` for the backend to\n * exchange, not an ID token, and it must be triggered by a user gesture or the\n * popup may be blocked.\n */\nexport async function requestCode({\n  client_id,\n  scope = 'openid email profile',\n  ux_mode = 'popup',\n  redirect_uri,\n  state,\n  login_hint,\n  hd,\n}: CodeProps): Promise<CodeResult> {\n  await loadScript();\n\n  return new Promise<CodeResult>((resolve) => {\n    let settled = false;\n    const settle = (result: CodeResult) => {\n      if (settled) return;\n      settled = true;\n      resolve(result);\n    };\n\n    const client = window.google.accounts.oauth2.initCodeClient({\n      client_id,\n      scope,\n      ux_mode,\n      redirect_uri,\n      state,\n      login_hint,\n      hd,\n      callback: (response) =>\n        settle(response.code ? { ok: true, response } : { ok: false, error: response }),\n      error_callback: (error) => settle({ ok: false, error }),\n    });\n\n    client.requestCode();\n  });\n}\n"],"mappings":";;;;;;;;;;;;;;;;;;;;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAiDA,IAAI,SAAmC;AAEvC,SAAS,aAA4B;AACnC,SAAO,IAAI,QAAQ,CAAC,SAAS,WAAW;AACtC,QAAI,QAAQ;AACV,UAAI,OAAO,QAAQ,UAAU,IAAI;AAC/B,gBAAQ;AAAA,MACV,OAAO;AACL,eAAO,iBAAiB,QAAQ,MAAM,QAAQ,CAAC;AAC/C,eAAO,iBAAiB,SAAS,MAAM;AACrC,mBAAS;AACT,iBAAO,IAAI,MAAM,sCAAsC,CAAC;AAAA,QAC1D,CAAC;AAAA,MACH;AACA;AAAA,IACF;AAEA,aAAS,SAAS,cAAc,QAAQ;AACxC,WAAO,KAAK;AACZ,WAAO,QAAQ;AACf,WAAO,QAAQ;AACf,WAAO,MAAM;AACb,WAAO,SAAS,MAAM,QAAQ;AAC9B,WAAO,UAAU,MAAM;AACrB,eAAS;AACT,aAAO,IAAI,MAAM,sCAAsC,CAAC;AAAA,IAC1D;AAEA,aAAS,KAAK,YAAY,MAAM;AAAA,EAClC,CAAC;AACH;AAGA,SAAS,mBAA4B;AACnC,SAAO,OAAO,WAAW,eAAe,wBAAwB;AAClE;AAGA,eAAsB,OAAO;AAAA,EAC3B;AAAA,EACA;AAAA,EACA,cAAc;AAAA,EACd,uBAAuB;AAAA,EACvB,wBAAwB;AAC1B,GAAiC;AAM/B,MAAI,yBAAyB,SAAS,CAAC,iBAAiB,GAAG;AACzD,WAAO,EAAE,YAAY,OAAO,aAAa,MAAM,QAAQ,oBAAoB;AAAA,EAC7E;AAEA,MAAI;AACF,UAAM,WAAW;AAAA,EACnB,QAAQ;AACN,WAAO,EAAE,YAAY,OAAO,aAAa,MAAM,QAAQ,qBAAqB;AAAA,EAC9E;AAEA,SAAO,IAAI,QAAsB,CAAC,YAAY;AAC5C,QAAI,UAAU;AACd,UAAM,SAAS,CAAC,WAAyB;AACvC,UAAI,QAAS;AACb,gBAAU;AACV,cAAQ,MAAM;AAAA,IAChB;AAEA,QAAI;AACF,aAAO,OAAO,SAAS,GAAG,WAAW;AAAA,QACnC,SAAS;AAAA,QACT,SAAS;AAAA,QACT;AAAA,QACA;AAAA,QACA;AAAA,QACA;AAAA,QACA;AAAA,QACA,UAAU,CAAC,eAAe,OAAO,EAAE,YAAY,MAAM,WAAW,CAAC;AAAA,QACjE,iBAAiB,CAAC,eAAe,OAAO,EAAE,YAAY,MAAM,WAAW,CAAC;AAAA,MAC1E,CAAC;AAED,aAAO,OAAO,SAAS,GAAG,OAAO,CAAC,iBAAiB;AACjD,YAAI,QAAS;AAEb,cAAM,UAAU,aAAa,gBAAgB;AAC7C,cAAM,YAAY,aAAa,kBAAkB;AACjD,cAAM,kBAAkB,aAAa,mBAAmB;AAExD,YAAI,WAAY,aAAa,oBAAoB,uBAAwB;AACvE,iBAAO;AAAA,YACL,YAAY;AAAA,YACZ,QAAQ,EAAE,SAAS,WAAW,gBAAgB;AAAA,UAChD,CAAC;AAAA,QACH;AAAA,MACF,CAAC;AAAA,IACH,QAAQ;AACN,aAAO,EAAE,YAAY,OAAO,aAAa,MAAM,QAAQ,eAAe,CAAC;AAAA,IACzE;AAAA,EACF,CAAC;AACH;AA+BA,eAAsB,YAAY;AAAA,EAChC;AAAA,EACA,QAAQ;AAAA,EACR,UAAU;AAAA,EACV;AAAA,EACA;AAAA,EACA;AAAA,EACA;AACF,GAAmC;AACjC,QAAM,WAAW;AAEjB,SAAO,IAAI,QAAoB,CAAC,YAAY;AAC1C,QAAI,UAAU;AACd,UAAM,SAAS,CAAC,WAAuB;AACrC,UAAI,QAAS;AACb,gBAAU;AACV,cAAQ,MAAM;AAAA,IAChB;AAEA,UAAM,SAAS,OAAO,OAAO,SAAS,OAAO,eAAe;AAAA,MAC1D;AAAA,MACA;AAAA,MACA;AAAA,MACA;AAAA,MACA;AAAA,MACA;AAAA,MACA;AAAA,MACA,UAAU,CAAC,aACT,OAAO,SAAS,OAAO,EAAE,IAAI,MAAM,SAAS,IAAI,EAAE,IAAI,OAAO,OAAO,SAAS,CAAC;AAAA,MAChF,gBAAgB,CAAC,UAAU,OAAO,EAAE,IAAI,OAAO,MAAM,CAAC;AAAA,IACxD,CAAC;AAED,WAAO,YAAY;AAAA,EACrB,CAAC;AACH;","names":[]}
+{"version":3,"file":"index.cjs","names":[],"sources":["../../src/google-one-tap/index.ts"],"sourcesContent":["import type {\n  ClientConfigError,\n  CodeResponse,\n  CredentialResponse,\n  GoogleAccounts,\n  PromptMomentNotification,\n} from './types';\n\ndeclare global {\n  interface Window {\n    google: {\n      accounts: GoogleAccounts;\n    };\n  }\n}\n\nexport type Props = {\n  /**\n   * Opaque nonce string forwarded as-is to Google. Google echoes it back in\n   * the ID Token's `nonce` claim per the OIDC spec; the caller is responsible\n   * for any hashing/encoding required by its verifier.\n   */\n  nonce?: string;\n  client_id: string;\n  auto_select?: boolean;\n  cancel_on_tap_outside?: boolean;\n  use_fedcm_for_prompt?: boolean;\n};\n\nexport type PromptMoment = {\n  skipped: boolean;\n  dismissed: boolean;\n  dismissedReason: ReturnType<PromptMomentNotification['getDismissedReason']>;\n};\n\n/**\n * Why prompt() could not run One Tap, so the caller can decide to fall back\n * to requestCode().\n * - `fedcm_unsupported`: browser has no FedCM (Safari/Firefox/pre-117 Chrome).\n * - `script_load_failed`: the GSI script failed to load (network/CSP).\n * - `prompt_error`: GIS threw synchronously while initializing/prompting.\n */\nexport type UnsupportedReason = 'fedcm_unsupported' | 'script_load_failed' | 'prompt_error';\n\nexport type PromptResult =\n  | { authorized: true; credential: CredentialResponse }\n  | { authorized: false; moment: PromptMoment }\n  | { authorized: false; unsupported: true; reason: UnsupportedReason };\n\nlet script: HTMLScriptElement | null = null;\n\nfunction loadScript(): Promise<void> {\n  return new Promise((resolve, reject) => {\n    if (script) {\n      if (window.google?.accounts?.id) {\n        resolve();\n      } else {\n        script.addEventListener('load', () => resolve());\n        script.addEventListener('error', () => {\n          script = null; // allow a later call to recreate the element instead of hanging\n          reject(new Error('Failed to load Google One Tap script'));\n        });\n      }\n      return;\n    }\n\n    script = document.createElement('script');\n    script.id = 'google-one-tap';\n    script.async = true;\n    script.defer = true;\n    script.src = 'https://accounts.google.com/gsi/client';\n    script.onload = () => resolve();\n    script.onerror = () => {\n      script = null; // allow a later call to recreate the element instead of hanging\n      reject(new Error('Failed to load Google One Tap script'));\n    };\n\n    document.head.appendChild(script);\n  });\n}\n\n/** FedCM feature detection — `IdentityCredential` is absent on Safari, Firefox and pre-117 Chrome. */\nfunction isFedcmSupported(): boolean {\n  return typeof window !== 'undefined' && 'IdentityCredential' in window;\n}\n\n/** debug: chrome://settings/content/federatedIdentityApi */\nexport async function prompt({\n  nonce,\n  client_id,\n  auto_select = false,\n  use_fedcm_for_prompt = true,\n  cancel_on_tap_outside = false,\n}: Props): Promise<PromptResult> {\n  // FedCM is mandatory for One Tap on capable browsers (GIS completed the\n  // migration in early 2025) and there is no viable legacy fallback anymore.\n  // When the caller wants FedCM but the browser lacks it, bail early instead\n  // of letting GIS throw an async `NotSupportedError: Missing request type`\n  // from navigator.credentials.get. Callers should fall back to requestCode().\n  if (use_fedcm_for_prompt !== false && !isFedcmSupported()) {\n    return { authorized: false, unsupported: true, reason: 'fedcm_unsupported' };\n  }\n\n  try {\n    await loadScript();\n  } catch {\n    return { authorized: false, unsupported: true, reason: 'script_load_failed' };\n  }\n\n  return new Promise<PromptResult>((resolve) => {\n    let settled = false;\n    const settle = (result: PromptResult) => {\n      if (settled) return;\n      settled = true;\n      resolve(result);\n    };\n\n    try {\n      window.google.accounts.id.initialize({\n        ux_mode: 'popup',\n        context: 'signin',\n        auto_select,\n        nonce,\n        client_id,\n        use_fedcm_for_prompt,\n        cancel_on_tap_outside,\n        callback: (credential) => settle({ authorized: true, credential }),\n        native_callback: (credential) => settle({ authorized: true, credential }),\n      });\n\n      window.google.accounts.id.prompt((notification) => {\n        if (settled) return;\n\n        const skipped = notification.isSkippedMoment();\n        const dismissed = notification.isDismissedMoment();\n        const dismissedReason = notification.getDismissedReason();\n\n        if (skipped || (dismissed && dismissedReason !== 'credential_returned')) {\n          settle({\n            authorized: false,\n            moment: { skipped, dismissed, dismissedReason },\n          });\n        }\n      });\n    } catch {\n      settle({ authorized: false, unsupported: true, reason: 'prompt_error' });\n    }\n  });\n}\n\nexport type CodeProps = {\n  client_id: string;\n  /**\n   * Space-delimited OAuth scopes. Defaults to OpenID Connect scopes so the\n   * backend can exchange the code for an ID token, mirroring One Tap's intent.\n   */\n  scope?: string;\n  /** 'popup' resolves the returned promise; 'redirect' navigates away and never resolves. */\n  ux_mode?: 'popup' | 'redirect';\n  /** Required when ux_mode is 'redirect'; for 'popup' Google uses postMessage. */\n  redirect_uri?: string;\n  state?: string;\n  login_hint?: string;\n  hd?: string;\n};\n\nexport type CodeResult =\n  | { ok: true; response: CodeResponse }\n  | { ok: false; error: ClientConfigError | CodeResponse };\n\n/**\n * OAuth 2.0 authorization-code fallback for environments where One Tap / FedCM\n * is unavailable (i.e. prompt() resolved with `unsupported: true`). It reuses\n * the same GSI script, so there is no extra dependency.\n *\n * Unlike One Tap it returns an authorization `code` for the backend to\n * exchange, not an ID token, and it must be triggered by a user gesture or the\n * popup may be blocked.\n */\nexport async function requestCode({\n  client_id,\n  scope = 'openid email profile',\n  ux_mode = 'popup',\n  redirect_uri,\n  state,\n  login_hint,\n  hd,\n}: CodeProps): Promise<CodeResult> {\n  await loadScript();\n\n  return new Promise<CodeResult>((resolve) => {\n    let settled = false;\n    const settle = (result: CodeResult) => {\n      if (settled) return;\n      settled = true;\n      resolve(result);\n    };\n\n    const client = window.google.accounts.oauth2.initCodeClient({\n      client_id,\n      scope,\n      ux_mode,\n      redirect_uri,\n      state,\n      login_hint,\n      hd,\n      callback: (response) =>\n        settle(response.code ? { ok: true, response } : { ok: false, error: response }),\n      error_callback: (error) => settle({ ok: false, error }),\n    });\n\n    client.requestCode();\n  });\n}\n"],"mappings":";;AAiDA,IAAI,SAAmC;AAEvC,SAAS,aAA4B;CACnC,OAAO,IAAI,SAAS,SAAS,WAAW;EACtC,IAAI,QAAQ;GACV,IAAI,OAAO,QAAQ,UAAU,IAC3B,QAAQ;QACH;IACL,OAAO,iBAAiB,cAAc,QAAQ,CAAC;IAC/C,OAAO,iBAAiB,eAAe;KACrC,SAAS;KACT,uBAAO,IAAI,MAAM,sCAAsC,CAAC;IAC1D,CAAC;GACH;GACA;EACF;EAEA,SAAS,SAAS,cAAc,QAAQ;EACxC,OAAO,KAAK;EACZ,OAAO,QAAQ;EACf,OAAO,QAAQ;EACf,OAAO,MAAM;EACb,OAAO,eAAe,QAAQ;EAC9B,OAAO,gBAAgB;GACrB,SAAS;GACT,uBAAO,IAAI,MAAM,sCAAsC,CAAC;EAC1D;EAEA,SAAS,KAAK,YAAY,MAAM;CAClC,CAAC;AACH;;AAGA,SAAS,mBAA4B;CACnC,OAAO,OAAO,WAAW,eAAe,wBAAwB;AAClE;;AAGA,eAAsB,OAAO,EAC3B,OACA,WACA,cAAc,OACd,uBAAuB,MACvB,wBAAwB,SACO;CAM/B,IAAI,yBAAyB,SAAS,CAAC,iBAAiB,GACtD,OAAO;EAAE,YAAY;EAAO,aAAa;EAAM,QAAQ;CAAoB;CAG7E,IAAI;EACF,MAAM,WAAW;CACnB,QAAQ;EACN,OAAO;GAAE,YAAY;GAAO,aAAa;GAAM,QAAQ;EAAqB;CAC9E;CAEA,OAAO,IAAI,SAAuB,YAAY;EAC5C,IAAI,UAAU;EACd,MAAM,UAAU,WAAyB;GACvC,IAAI,SAAS;GACb,UAAU;GACV,QAAQ,MAAM;EAChB;EAEA,IAAI;GACF,OAAO,OAAO,SAAS,GAAG,WAAW;IACnC,SAAS;IACT,SAAS;IACT;IACA;IACA;IACA;IACA;IACA,WAAW,eAAe,OAAO;KAAE,YAAY;KAAM;IAAW,CAAC;IACjE,kBAAkB,eAAe,OAAO;KAAE,YAAY;KAAM;IAAW,CAAC;GAC1E,CAAC;GAED,OAAO,OAAO,SAAS,GAAG,QAAQ,iBAAiB;IACjD,IAAI,SAAS;IAEb,MAAM,UAAU,aAAa,gBAAgB;IAC7C,MAAM,YAAY,aAAa,kBAAkB;IACjD,MAAM,kBAAkB,aAAa,mBAAmB;IAExD,IAAI,WAAY,aAAa,oBAAoB,uBAC/C,OAAO;KACL,YAAY;KACZ,QAAQ;MAAE;MAAS;MAAW;KAAgB;IAChD,CAAC;GAEL,CAAC;EACH,QAAQ;GACN,OAAO;IAAE,YAAY;IAAO,aAAa;IAAM,QAAQ;GAAe,CAAC;EACzE;CACF,CAAC;AACH;;;;;;;;;;AA+BA,eAAsB,YAAY,EAChC,WACA,QAAQ,wBACR,UAAU,SACV,cACA,OACA,YACA,MACiC;CACjC,MAAM,WAAW;CAEjB,OAAO,IAAI,SAAqB,YAAY;EAC1C,IAAI,UAAU;EACd,MAAM,UAAU,WAAuB;GACrC,IAAI,SAAS;GACb,UAAU;GACV,QAAQ,MAAM;EAChB;EAeA,OAbsB,OAAO,SAAS,OAAO,eAAe;GAC1D;GACA;GACA;GACA;GACA;GACA;GACA;GACA,WAAW,aACT,OAAO,SAAS,OAAO;IAAE,IAAI;IAAM;GAAS,IAAI;IAAE,IAAI;IAAO,OAAO;GAAS,CAAC;GAChF,iBAAiB,UAAU,OAAO;IAAE,IAAI;IAAO;GAAM,CAAC;EACxD,CAEK,CAAC,CAAC,YAAY;CACrB,CAAC;AACH"}

package/dist/google-one-tap/index.d.cts

@@ -1,28 +1,28 @@
-import { GoogleAccounts, CodeResponse, ClientConfigError, PromptMomentNotification, CredentialResponse } from './types.cjs';
-
+import { ClientConfigError, CodeResponse, CredentialResponse, GoogleAccounts, PromptMomentNotification } from "./types.cjs";
+//#region src/google-one-tap/index.d.ts
 declare global {
-    interface Window {
-        google: {
-            accounts: GoogleAccounts;
-        };
-    }
+  interface Window {
+    google: {
+      accounts: GoogleAccounts;
+    };
+  }
 }
 type Props = {
-    /**
-     * Opaque nonce string forwarded as-is to Google. Google echoes it back in
-     * the ID Token's `nonce` claim per the OIDC spec; the caller is responsible
-     * for any hashing/encoding required by its verifier.
-     */
-    nonce?: string;
-    client_id: string;
-    auto_select?: boolean;
-    cancel_on_tap_outside?: boolean;
-    use_fedcm_for_prompt?: boolean;
+  /**
+   * Opaque nonce string forwarded as-is to Google. Google echoes it back in
+   * the ID Token's `nonce` claim per the OIDC spec; the caller is responsible
+   * for any hashing/encoding required by its verifier.
+   */
+  nonce?: string;
+  client_id: string;
+  auto_select?: boolean;
+  cancel_on_tap_outside?: boolean;
+  use_fedcm_for_prompt?: boolean;
 };
 type PromptMoment = {
-    skipped: boolean;
-    dismissed: boolean;
-    dismissedReason: ReturnType<PromptMomentNotification['getDismissedReason']>;
+  skipped: boolean;
+  dismissed: boolean;
+  dismissedReason: ReturnType<PromptMomentNotification['getDismissedReason']>;
 };
 /**
  * Why prompt() could not run One Tap, so the caller can decide to fall back
@@ -33,39 +33,39 @@ type PromptMoment = {
  */
 type UnsupportedReason = 'fedcm_unsupported' | 'script_load_failed' | 'prompt_error';
 type PromptResult = {
-    authorized: true;
-    credential: CredentialResponse;
+  authorized: true;
+  credential: CredentialResponse;
 } | {
-    authorized: false;
-    moment: PromptMoment;
+  authorized: false;
+  moment: PromptMoment;
 } | {
-    authorized: false;
-    unsupported: true;
-    reason: UnsupportedReason;
+  authorized: false;
+  unsupported: true;
+  reason: UnsupportedReason;
 };
 /** debug: chrome://settings/content/federatedIdentityApi */
-declare function prompt({ nonce, client_id, auto_select, use_fedcm_for_prompt, cancel_on_tap_outside, }: Props): Promise<PromptResult>;
+declare function prompt({ nonce, client_id, auto_select, use_fedcm_for_prompt, cancel_on_tap_outside }: Props): Promise<PromptResult>;
 type CodeProps = {
-    client_id: string;
-    /**
-     * Space-delimited OAuth scopes. Defaults to OpenID Connect scopes so the
-     * backend can exchange the code for an ID token, mirroring One Tap's intent.
-     */
-    scope?: string;
-    /** 'popup' resolves the returned promise; 'redirect' navigates away and never resolves. */
-    ux_mode?: 'popup' | 'redirect';
-    /** Required when ux_mode is 'redirect'; for 'popup' Google uses postMessage. */
-    redirect_uri?: string;
-    state?: string;
-    login_hint?: string;
-    hd?: string;
+  client_id: string;
+  /**
+   * Space-delimited OAuth scopes. Defaults to OpenID Connect scopes so the
+   * backend can exchange the code for an ID token, mirroring One Tap's intent.
+   */
+  scope?: string;
+  /** 'popup' resolves the returned promise; 'redirect' navigates away and never resolves. */
+  ux_mode?: 'popup' | 'redirect';
+  /** Required when ux_mode is 'redirect'; for 'popup' Google uses postMessage. */
+  redirect_uri?: string;
+  state?: string;
+  login_hint?: string;
+  hd?: string;
 };
 type CodeResult = {
-    ok: true;
-    response: CodeResponse;
+  ok: true;
+  response: CodeResponse;
 } | {
-    ok: false;
-    error: ClientConfigError | CodeResponse;
+  ok: false;
+  error: ClientConfigError | CodeResponse;
 };
 /**
  * OAuth 2.0 authorization-code fallback for environments where One Tap / FedCM
@@ -76,6 +76,7 @@ type CodeResult = {
  * exchange, not an ID token, and it must be triggered by a user gesture or the
  * popup may be blocked.
  */
-declare function requestCode({ client_id, scope, ux_mode, redirect_uri, state, login_hint, hd, }: CodeProps): Promise<CodeResult>;
-
-export { type CodeProps, type CodeResult, type PromptMoment, type PromptResult, type Props, type UnsupportedReason, prompt, requestCode };
+declare function requestCode({ client_id, scope, ux_mode, redirect_uri, state, login_hint, hd }: CodeProps): Promise<CodeResult>;
+//#endregion
+export { CodeProps, CodeResult, PromptMoment, PromptResult, Props, UnsupportedReason, prompt, requestCode };
+//# sourceMappingURL=index.d.cts.map

package/dist/google-one-tap/index.d.cts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.cts","names":[],"sources":["../../src/google-one-tap/index.ts"],"mappings":";;QAQQ;YACI;IACR;MACE,UAAU;;;;KAKJ;;;;;;EAMV;EACA;EACA;EACA;EACA;;KAGU;EACV;EACA;EACA,iBAAiB,WAAW;;;;;;;;;KAUlB;KAEA;EACN;EAAkB,YAAY;;EAC9B;EAAmB,QAAQ;;EAC3B;EAAmB;EAAmB,QAAQ;;;iBAwC9B,SACpB,OACA,WACA,aACA,sBACA,yBACC,QAAQ,QAAQ;KAyDP;EACV;;;;;EAKA;;EAEA;;EAEA;EACA;EACA;EACA;;KAGU;EACN;EAAU,UAAU;;EACpB;EAAW,OAAO,oBAAoB;;;;;;;;;;;iBAWtB,cACpB,WACA,OACA,SACA,cACA,OACA,YACA,MACC,YAAY,QAAQ"}

package/dist/google-one-tap/index.d.mts

@@ -0,0 +1,82 @@
+import { ClientConfigError, CodeResponse, CredentialResponse, GoogleAccounts, PromptMomentNotification } from "./types.mjs";
+//#region src/google-one-tap/index.d.ts
+declare global {
+  interface Window {
+    google: {
+      accounts: GoogleAccounts;
+    };
+  }
+}
+type Props = {
+  /**
+   * Opaque nonce string forwarded as-is to Google. Google echoes it back in
+   * the ID Token's `nonce` claim per the OIDC spec; the caller is responsible
+   * for any hashing/encoding required by its verifier.
+   */
+  nonce?: string;
+  client_id: string;
+  auto_select?: boolean;
+  cancel_on_tap_outside?: boolean;
+  use_fedcm_for_prompt?: boolean;
+};
+type PromptMoment = {
+  skipped: boolean;
+  dismissed: boolean;
+  dismissedReason: ReturnType<PromptMomentNotification['getDismissedReason']>;
+};
+/**
+ * Why prompt() could not run One Tap, so the caller can decide to fall back
+ * to requestCode().
+ * - `fedcm_unsupported`: browser has no FedCM (Safari/Firefox/pre-117 Chrome).
+ * - `script_load_failed`: the GSI script failed to load (network/CSP).
+ * - `prompt_error`: GIS threw synchronously while initializing/prompting.
+ */
+type UnsupportedReason = 'fedcm_unsupported' | 'script_load_failed' | 'prompt_error';
+type PromptResult = {
+  authorized: true;
+  credential: CredentialResponse;
+} | {
+  authorized: false;
+  moment: PromptMoment;
+} | {
+  authorized: false;
+  unsupported: true;
+  reason: UnsupportedReason;
+};
+/** debug: chrome://settings/content/federatedIdentityApi */
+declare function prompt({ nonce, client_id, auto_select, use_fedcm_for_prompt, cancel_on_tap_outside }: Props): Promise<PromptResult>;
+type CodeProps = {
+  client_id: string;
+  /**
+   * Space-delimited OAuth scopes. Defaults to OpenID Connect scopes so the
+   * backend can exchange the code for an ID token, mirroring One Tap's intent.
+   */
+  scope?: string;
+  /** 'popup' resolves the returned promise; 'redirect' navigates away and never resolves. */
+  ux_mode?: 'popup' | 'redirect';
+  /** Required when ux_mode is 'redirect'; for 'popup' Google uses postMessage. */
+  redirect_uri?: string;
+  state?: string;
+  login_hint?: string;
+  hd?: string;
+};
+type CodeResult = {
+  ok: true;
+  response: CodeResponse;
+} | {
+  ok: false;
+  error: ClientConfigError | CodeResponse;
+};
+/**
+ * OAuth 2.0 authorization-code fallback for environments where One Tap / FedCM
+ * is unavailable (i.e. prompt() resolved with `unsupported: true`). It reuses
+ * the same GSI script, so there is no extra dependency.
+ *
+ * Unlike One Tap it returns an authorization `code` for the backend to
+ * exchange, not an ID token, and it must be triggered by a user gesture or the
+ * popup may be blocked.
+ */
+declare function requestCode({ client_id, scope, ux_mode, redirect_uri, state, login_hint, hd }: CodeProps): Promise<CodeResult>;
+//#endregion
+export { CodeProps, CodeResult, PromptMoment, PromptResult, Props, UnsupportedReason, prompt, requestCode };
+//# sourceMappingURL=index.d.mts.map

package/dist/google-one-tap/index.d.mts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.mts","names":[],"sources":["../../src/google-one-tap/index.ts"],"mappings":";;QAQQ;YACI;IACR;MACE,UAAU;;;;KAKJ;;;;;;EAMV;EACA;EACA;EACA;EACA;;KAGU;EACV;EACA;EACA,iBAAiB,WAAW;;;;;;;;;KAUlB;KAEA;EACN;EAAkB,YAAY;;EAC9B;EAAmB,QAAQ;;EAC3B;EAAmB;EAAmB,QAAQ;;;iBAwC9B,SACpB,OACA,WACA,aACA,sBACA,yBACC,QAAQ,QAAQ;KAyDP;EACV;;;;;EAKA;;EAEA;;EAEA;EACA;EACA;EACA;;KAGU;EACN;EAAU,UAAU;;EACpB;EAAW,OAAO,oBAAoB;;;;;;;;;;;iBAWtB,cACpB,WACA,OACA,SACA,cACA,OACA,YACA,MACC,YAAY,QAAQ"}