Two-phase loading system for Google Sign-In + proxy game support

[Copilot]

Google Sign-In fails through the proxy with origin_mismatch because OAuth validates window.location.origin client-side before any requests. Proxying cannot bypass this.

Solution

Two-phase loading system:

• Direct Mode (default): Loads https://web.cloudmoonapp.com/ directly → Google Sign-In works
• Proxy Mode (toggle): Loads through worker proxy → game interception works, session persists

Changes

• Added "Enable Proxy" toggle button with visual state (green/purple)
• createShadowFrame() accepts useProxy parameter to switch URL sources
• Simplified injection script to game interception only (no Google button hiding needed)
• Updated README with two-phase workflow instructions

Usage Flow

1. User opens page → Direct Mode loads
2. User signs in with Google
3. User clicks "Enable Proxy" → Proxy Mode loads
4. User plays games (window.open intercepted, games load in iframe)

Existing UI preserved: tab cloak, about:blank, fullscreen, reload, back button.

Original prompt

I need a huge update. currentley this cloudflare worker dose not work with google sign in and you get the error accounts.google.com is blocked
accounts.google.com refused to connect.
ERR_BLOCKED_BY_RESPONSE and the errors button?theme=outline&size=large&type=standard&is_fedcm_supported=true&client_id=196443591263-k5447s…:1 Failed to load resource: the server responded with a status of 403 ()Understand this error
m=credential_button_library:79 [GSI_LOGGER]: The given origin is not allowed for the given client ID. i waqnt youn to make google sign in pass through the proxy, showing as the cloudmoon sign in, and then forward the auth to the proxy, alowing you to sign in with google. keep all of the current ui, styling, and window interseption system for games, but change how google sign in is handled

---

✨ Let Copilot coding agent set things up for you — coding agent works faster and does higher quality work when set up for your repo.