@volter/twin-googlefonts 1.0.1 → 1.0.2

package/api/spec/sources.json

@@ -1,6 +1,16 @@
 {
   "https://developers.google.com/fonts/docs/developer_api": {
     "status": 200,
-    "checked": "2026-10-12"
+    "checked": "2026-11-11",
+    "quotes": {
+      "by including an API key with each request": true
+    }
+  },
+  "https://docs.cloud.google.com/docs/authentication/api-keys": {
+    "status": 200,
+    "checked": "2026-11-11",
+    "quotes": {
+      "Standard API keys provide a way to associate a request with a project for billing and quota purposes.": true
+    }
   }
 }

package/api/src/semantics/doors.ts

@@ -4,6 +4,10 @@ import { FONT, CATALOG, CSS, FILE, KEY, object, assetKey, cssKey, css2Key, css2Q
 
 // source: https://developers.google.com/fonts/docs/developer_api
 export async function appCredentials(ctx: HandlerContext): Promise<Response> {
+  // An app's key is a standard API key, made on a Google Cloud project's Credentials page and associating each request
+  // with that project for billing and quota; the Fonts Developer API takes it as `key=` and nothing else.
+  // source: https://docs.cloud.google.com/docs/authentication/api-keys "Standard API keys provide a way to associate a request with a project for billing and quota purposes."
+  // source: https://developers.google.com/fonts/docs/developer_api "by including an API key with each request"
   const project = await ctx.tenant('_project', async organization =>
     String((await ctx.create('_project', { name: organization.label, owner: organization.members[0] }, 'project.create')).id));
   const value = async (id: string): Promise<string> => 'AIza' + (await ctx.secret(`googlefonts:application-api-key:${id}`)).slice(0, 35);

package/css/spec/SOURCE.md

@@ -7,7 +7,9 @@ GET /css?family=<family>:<variant>&subset=<subsets> with the exact configured
 User-Agent and consumes each @font-face's font-family, style, weight and src URL.
 Dub's Open Graph routes call GET /css2?family=Inter:wght@<weight> and Rallly's
 calls GET /css2?family=Noto+Sans+SC:wght@<weight>&text=<text>, both from a server
-without a browser User-Agent, and read the truetype src URL.
+without a browser User-Agent, and read the truetype src URL. next/font/google's build (Rallly's and
+Cal.diy's `next build`) calls GET /css2?family=Inter:wght@100..900&display=swap with a Chrome User-Agent and
+reads each woff2 src URL of its unicode-range faces.
 The supplied representations retain actual vendor CSS. Requests without a
 published representation answer a refusal, never an invented font format.
 text/display/effect on /css are outside this client's demand.

package/dist/api/spec/sources.json

@@ -1,6 +1,16 @@
 {
   "https://developers.google.com/fonts/docs/developer_api": {
     "status": 200,
-    "checked": "2026-10-12"
+    "checked": "2026-11-11",
+    "quotes": {
+      "by including an API key with each request": true
+    }
+  },
+  "https://docs.cloud.google.com/docs/authentication/api-keys": {
+    "status": 200,
+    "checked": "2026-11-11",
+    "quotes": {
+      "Standard API keys provide a way to associate a request with a project for billing and quota purposes.": true
+    }
   }
 }

package/dist/api/src/semantics/doors.js

@@ -1,6 +1,10 @@
 import { FONT, CATALOG, CSS, FILE, KEY, object, assetKey, cssKey, css2Key, css2Query, googleError } from "./shared.js";
 // source: https://developers.google.com/fonts/docs/developer_api
 export async function appCredentials(ctx) {
+    // An app's key is a standard API key, made on a Google Cloud project's Credentials page and associating each request
+    // with that project for billing and quota; the Fonts Developer API takes it as `key=` and nothing else.
+    // source: https://docs.cloud.google.com/docs/authentication/api-keys "Standard API keys provide a way to associate a request with a project for billing and quota purposes."
+    // source: https://developers.google.com/fonts/docs/developer_api "by including an API key with each request"
     const project = await ctx.tenant('_project', async (organization) => String((await ctx.create('_project', { name: organization.label, owner: organization.members[0] }, 'project.create')).id));
     const value = async (id) => 'AIza' + (await ctx.secret(`googlefonts:application-api-key:${id}`)).slice(0, 35);
     const key = await ctx.accountKey('api-key', KEY, {

package/dist/css/spec/SOURCE.md

@@ -7,7 +7,9 @@ GET /css?family=<family>:<variant>&subset=<subsets> with the exact configured
 User-Agent and consumes each @font-face's font-family, style, weight and src URL.
 Dub's Open Graph routes call GET /css2?family=Inter:wght@<weight> and Rallly's
 calls GET /css2?family=Noto+Sans+SC:wght@<weight>&text=<text>, both from a server
-without a browser User-Agent, and read the truetype src URL.
+without a browser User-Agent, and read the truetype src URL. next/font/google's build (Rallly's and
+Cal.diy's `next build`) calls GET /css2?family=Inter:wght@100..900&display=swap with a Chrome User-Agent and
+reads each woff2 src URL of its unicode-range faces.
 The supplied representations retain actual vendor CSS. Requests without a
 published representation answer a refusal, never an invented font format.
 text/display/effect on /css are outside this client's demand.

package/dist/generated/pack-facts.json

@@ -0,0 +1,68 @@
+{
+  "//": "GENERATED by twin-standard facts from the pack descriptor; no prior-artifact entries are retained.",
+  "packs": {
+    "googlefonts": {
+      "adoption": {
+        "sdks": [],
+        "envStems": [
+          "GOOGLE_FONTS"
+        ],
+        "modules": [
+          "next/font/google"
+        ]
+      },
+      "hosts": [
+        {
+          "host": "www.googleapis.com",
+          "pathPattern": "^/webfonts/v1/webfonts$"
+        },
+        {
+          "host": "webfonts.googleapis.com",
+          "pathPattern": "^/v1/webfonts$"
+        },
+        {
+          "host": "fonts.googleapis.com",
+          "pathPattern": "^/css2?$"
+        },
+        {
+          "host": "fonts.gstatic.com",
+          "pathPattern": "^/(s/|l/font$)"
+        }
+      ],
+      "archetype": "crud",
+      "protocol": {
+        "declared": "3",
+        "major": 3,
+        "standing": "current"
+      },
+      "transport": "rest",
+      "resources": [
+        "webfont",
+        "_api_key",
+        "_font_catalog",
+        "_stylesheet",
+        "_font_file"
+      ],
+      "endpointEnvNone": "Pinned helper hardcodes the vendor API and CSS hosts, then downloads their returned gstatic URLs. Scoped host routing preserves these URLs.",
+      "credentialDoor": {
+        "path": "/_twin/app-credentials",
+        "body": {},
+        "account": {
+          "field": "account",
+          "tenancy": "Google Cloud project",
+          "source": "https://developers.google.com/fonts/docs/developer_api"
+        },
+        "deployment": {
+          "field": "deployment",
+          "object": "Project API key",
+          "source": "https://docs.cloud.google.com/docs/authentication/api-keys"
+        },
+        "fill": {
+          "GOOGLE_FONTS_API_KEY": "api_key"
+        }
+      },
+      "serveExport": "createGooglefontsTwinServer"
+    }
+  },
+  "undeclared": []
+}