@cedros/login-react 0.0.45 → 0.0.47

package/dist/GoogleLoginButton-DEwtBp56.cjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"GoogleLoginButton-DEwtBp56.cjs","sources":["../src/hooks/useGoogleAuth.ts","../src/components/google/GoogleLoginButton.tsx"],"sourcesContent":["import { useState, useCallback, useEffect, useRef, useMemo } from 'react';\nimport { useCedrosLogin } from '../context/useCedrosLogin';\nimport { ApiClient, handleApiError } from '../utils/apiClient';\nimport type { AuthResponse, AuthError } from '../types';\n\n/**\n * Module-level singleton for Google script loading (P-01)\n *\n * Prevents race conditions when multiple components mount simultaneously.\n * Uses a promise queue pattern to ensure the script is only loaded once.\n *\n * ## SSR Limitations (F-08)\n *\n * This singleton persists across the module lifecycle. In SSR environments:\n * - Module state persists between requests (potential cross-request leakage)\n * - Google Sign-In requires browser APIs (document, window)\n * - The hook guards against SSR with `googleClientId` checks\n *\n * For SSR frameworks (Next.js, Remix), ensure this hook is only used\n * in client-side components.\n *\n * ## Test Isolation\n *\n * For test isolation, call `scriptLoader._reset()` in test setup/teardown.\n *\n * @internal\n */\nconst scriptLoader = {\n  loading: false,\n  loaded: false,\n  error: null as Error | null,\n  callbacks: [] as Array<{ resolve: () => void; reject: (err: Error) => void }>,\n\n  load(): Promise<void> {\n    // SSR guard: avoid touching browser globals when running in Node/SSR.\n    if (typeof window === 'undefined' || typeof document === 'undefined') {\n      return Promise.reject(new Error('Google Sign-In script loader cannot run in SSR'));\n    }\n\n    // Already loaded\n    if (this.loaded) {\n      return Promise.resolve();\n    }\n\n    // Loading in progress - queue callback\n    if (this.loading) {\n      return new Promise((resolve, reject) => {\n        this.callbacks.push({ resolve, reject });\n      });\n    }\n\n    // Start loading\n    this.loading = true;\n    return new Promise((resolve, reject) => {\n      this.callbacks.push({ resolve, reject });\n\n      // Check if script already exists (from previous session or SSR)\n      const existingScript = document.getElementById('google-gsi-script');\n      if (existingScript) {\n        if (window.google?.accounts?.id) {\n          this.loaded = true;\n          this.loading = false;\n          this.callbacks.forEach((cb) => cb.resolve());\n          this.callbacks = [];\n        } else {\n          existingScript.addEventListener('load', () => {\n            this.loaded = true;\n            this.loading = false;\n            this.callbacks.forEach((cb) => cb.resolve());\n            this.callbacks = [];\n          });\n        }\n        return;\n      }\n\n      const script = document.createElement('script');\n      script.src = 'https://accounts.google.com/gsi/client';\n      script.async = true;\n      script.defer = true;\n      script.id = 'google-gsi-script';\n\n      script.onload = () => {\n        this.loaded = true;\n        this.loading = false;\n        this.callbacks.forEach((cb) => cb.resolve());\n        this.callbacks = [];\n      };\n\n      script.onerror = () => {\n        this.loading = false;\n        // M-02: Remove failed script from DOM to allow retry on next load() call.\n        // Without removal, retry finds existingScript and waits for a load event\n        // that will never fire on an already-failed script.\n        script.remove();\n        const error = new Error('Failed to load Google Sign-In script');\n        this.callbacks.forEach((cb) => cb.reject(error));\n        this.callbacks = [];\n      };\n\n      document.head.appendChild(script);\n    });\n  },\n\n  /**\n   * Reset singleton state for test isolation (F-08)\n   * @internal - Only use in test setup/teardown\n   */\n  _reset(): void {\n    this.loading = false;\n    this.loaded = false;\n    this.error = null;\n    this.callbacks = [];\n  },\n};\n\n/** @internal */\nexport const _internalGoogleScriptLoader = scriptLoader;\n\nexport interface UseGoogleAuthReturn {\n  /** @param accessCode Optional signup access code, forwarded to the server on new registrations. */\n  signIn: (accessCode?: string) => Promise<AuthResponse>;\n  isLoading: boolean;\n  isInitialized: boolean;\n  error: AuthError | null;\n  clearError: () => void;\n  /** Access token saved when ACCOUNT_LINK_REQUIRED is returned. Pass to POST /auth/link-oauth with the user's password. */\n  pendingLinkToken: string | null;\n  /** Clear the pending link state */\n  clearPendingLink: () => void;\n}\n\ninterface PromiseCallbacks {\n  resolve: (value: AuthResponse) => void;\n  reject: (error: AuthError) => void;\n}\n\n/**\n * Hook for Google OAuth authentication.\n *\n * @example\n * ```tsx\n * function GoogleButton() {\n *   const { signIn, isLoading, isInitialized, error } = useGoogleAuth();\n *\n *   return (\n *     <button onClick={signIn} disabled={!isInitialized || isLoading}>\n *       {isLoading ? 'Signing in...' : 'Sign in with Google'}\n *     </button>\n *   );\n * }\n * ```\n */\nexport function useGoogleAuth(): UseGoogleAuthReturn {\n  const { config, _internal } = useCedrosLogin();\n  const [isLoading, setIsLoading] = useState(false);\n  const [isInitialized, setIsInitialized] = useState(false);\n  const [error, setError] = useState<AuthError | null>(null);\n\n  const [pendingLinkToken, setPendingLinkToken] = useState<string | null>(null);\n\n  const promiseCallbacksRef = useRef<PromiseCallbacks | null>(null);\n  const configRef = useRef(config);\n  const tokenClientRef = useRef<GoogleTokenClient | null>(null);\n  const pendingAccessCodeRef = useRef<string | undefined>(undefined);\n\n  const apiClient = useMemo(\n    () =>\n      new ApiClient({\n        baseUrl: config.serverUrl,\n        timeoutMs: config.requestTimeout,\n        retryAttempts: config.retryAttempts,\n      }),\n    [config.serverUrl, config.requestTimeout, config.retryAttempts]\n  );\n\n  // Keep config ref in sync\n  useEffect(() => {\n    configRef.current = config;\n  }, [config]);\n\n  // Handle access token from OAuth popup (initTokenClient flow)\n  const handleTokenResponse = useCallback(\n    async (response: GoogleTokenResponse) => {\n      const callbacks = promiseCallbacksRef.current;\n      if (!callbacks) return;\n\n      if (response.error) {\n        const err: AuthError = {\n          code: 'SERVER_ERROR',\n          message: response.error === 'access_denied'\n            ? 'Google sign-in was cancelled.'\n            : 'Unable to sign in with Google. Please try again.',\n        };\n        setError(err);\n        setIsLoading(false);\n        promiseCallbacksRef.current = null;\n        callbacks.reject(err);\n        return;\n      }\n\n      try {\n        const data = await apiClient.post<AuthResponse>('/google', {\n          accessToken: response.access_token,\n          referral: _internal?.getReferralCode?.() ?? undefined,\n          access_code: pendingAccessCodeRef.current || undefined,\n        });\n        configRef.current.callbacks?.onLoginSuccess?.(data.user, 'google');\n        _internal?.handleLoginSuccess(data.user, data.tokens);\n        setIsLoading(false);\n        callbacks.resolve(data);\n      } catch (err) {\n        const authError = handleApiError(err, 'Unable to sign in with Google. Please try again.');\n        if (authError.code === 'ACCOUNT_LINK_REQUIRED') {\n          setPendingLinkToken(response.access_token ?? null);\n        }\n        setError(authError);\n        setIsLoading(false);\n        callbacks.reject(authError);\n      } finally {\n        promiseCallbacksRef.current = null;\n        pendingAccessCodeRef.current = undefined;\n      }\n    },\n    [apiClient, _internal]\n  );\n\n  // Handle popup closed / blocked without completing auth.\n  // Google calls error_callback (not callback) when the user closes the popup.\n  const handleTokenError = useCallback(\n    (err: GoogleTokenErrorResponse) => {\n      const callbacks = promiseCallbacksRef.current;\n      if (!callbacks) return;\n\n      const authError: AuthError = {\n        code: 'SERVER_ERROR',\n        message: err.type === 'popup_failed_to_open'\n          ? 'Google sign-in popup was blocked. Please allow popups for this site.'\n          : 'Google sign-in was cancelled.',\n      };\n      setError(authError);\n      setIsLoading(false);\n      promiseCallbacksRef.current = null;\n      callbacks.reject(authError);\n    },\n    []\n  );\n\n  // P-01: Initialize Google OAuth token client using singleton loader.\n  // Uses initTokenClient (OAuth popup) instead of One Tap prompt() which\n  // has exponential cooldown after dismissal and is blocked by Brave.\n  useEffect(() => {\n    if (!config.googleClientId) {\n      return;\n    }\n\n    let isMounted = true;\n\n    scriptLoader\n      .load()\n      .then(() => {\n        if (!isMounted) return;\n\n        const client = window.google?.accounts?.oauth2?.initTokenClient({\n          client_id: config.googleClientId!,\n          scope: 'openid email profile',\n          callback: handleTokenResponse,\n          error_callback: handleTokenError,\n        });\n\n        if (client) {\n          tokenClientRef.current = client;\n          setIsInitialized(true);\n        }\n      })\n      .catch(() => {\n        if (isMounted) {\n          setError({\n            code: 'SERVER_ERROR',\n            message: 'Unable to load Google sign-in. Please refresh and try again.',\n          });\n        }\n      });\n\n    return () => {\n      isMounted = false;\n      tokenClientRef.current = null;\n    };\n  }, [config.googleClientId, handleTokenResponse, handleTokenError]);\n\n  const signIn = useCallback(async (accessCode?: string): Promise<AuthResponse> => {\n    pendingAccessCodeRef.current = accessCode;\n    if (!config.googleClientId) {\n      const err: AuthError = {\n        code: 'VALIDATION_ERROR',\n        message: 'Google Client ID not configured',\n      };\n      setError(err);\n      throw err;\n    }\n\n    if (!isInitialized) {\n      const err: AuthError = {\n        code: 'VALIDATION_ERROR',\n        message: 'Google sign-in is not ready yet. Please wait a moment and try again.',\n      };\n      setError(err);\n      throw err;\n    }\n\n    if (promiseCallbacksRef.current) {\n      const err: AuthError = {\n        code: 'VALIDATION_ERROR',\n        message: 'Google sign-in is already in progress.',\n      };\n      setError(err);\n      throw err;\n    }\n\n    setIsLoading(true);\n    setError(null);\n\n    return new Promise<AuthResponse>((resolve, reject) => {\n      promiseCallbacksRef.current = { resolve, reject };\n\n      // Open the Google OAuth popup via initTokenClient.\n      // This avoids One Tap's exponential cooldown after dismissal and works\n      // in browsers that block One Tap (e.g., Brave).\n      tokenClientRef.current?.requestAccessToken();\n    });\n  }, [config.googleClientId, isInitialized]);\n\n  const clearError = useCallback(() => setError(null), []);\n  const clearPendingLink = useCallback(() => setPendingLinkToken(null), []);\n\n  return {\n    signIn,\n    isLoading,\n    isInitialized,\n    error,\n    clearError,\n    pendingLinkToken,\n    clearPendingLink,\n  };\n}\n\n/** Response from Google's initTokenClient callback */\ninterface GoogleTokenResponse {\n  access_token?: string;\n  error?: string;\n  error_description?: string;\n}\n\n/** Error from initTokenClient error_callback (popup closed/blocked) */\ninterface GoogleTokenErrorResponse {\n  type: 'popup_failed_to_open' | 'popup_closed' | 'unknown';\n}\n\n/** Token client returned by google.accounts.oauth2.initTokenClient */\ninterface GoogleTokenClient {\n  requestAccessToken: () => void;\n}\n\n// Type declaration for Google Identity Services\ndeclare global {\n  interface Window {\n    google?: {\n      accounts?: {\n        /** Used only to detect if the GIS script has loaded */\n        id?: object;\n        oauth2?: {\n          initTokenClient: (config: {\n            client_id: string;\n            scope: string;\n            callback: (response: GoogleTokenResponse) => void;\n            error_callback?: (error: GoogleTokenErrorResponse) => void;\n          }) => GoogleTokenClient;\n        };\n      };\n    };\n  }\n}\n","import { useGoogleAuth } from '../../hooks/useGoogleAuth';\nimport { LoadingSpinner } from '../shared/LoadingSpinner';\n\nexport interface GoogleLoginButtonProps {\n  onSuccess?: () => void;\n  onError?: (error: Error) => void;\n  className?: string;\n  variant?: 'default' | 'outline';\n  size?: 'sm' | 'md' | 'lg';\n  disabled?: boolean;\n  /** Access code forwarded to the server when this flow creates a new account. */\n  accessCode?: string;\n}\n\n/**\n * Google OAuth login button\n */\nexport function GoogleLoginButton({\n  onSuccess,\n  onError,\n  className = '',\n  variant = 'default',\n  size = 'md',\n  disabled = false,\n  accessCode,\n}: GoogleLoginButtonProps) {\n  const { signIn, isLoading, isInitialized } = useGoogleAuth();\n\n  const handleClick = async () => {\n    try {\n      await signIn(accessCode);\n      onSuccess?.();\n    } catch (err) {\n      const error = err instanceof Error ? err : new Error(String(err));\n      onError?.(error);\n    }\n  };\n\n  const sizeClasses = {\n    sm: 'cedros-button-sm',\n    md: 'cedros-button-md',\n    lg: 'cedros-button-lg',\n  };\n\n  const variantClasses = {\n    default: 'cedros-button-social',\n    outline: 'cedros-button-social-outline',\n  };\n\n  return (\n    <button\n      type=\"button\"\n      className={`cedros-button ${variantClasses[variant]} ${sizeClasses[size]} ${className}`}\n      onClick={handleClick}\n      disabled={disabled || !isInitialized || isLoading}\n      aria-label=\"Sign in with Google\"\n    >\n      {isLoading ? (\n        <LoadingSpinner size=\"sm\" />\n      ) : (\n        <svg\n          className=\"cedros-button-icon\"\n          width=\"18\"\n          height=\"18\"\n          viewBox=\"0 0 18 18\"\n          fill=\"none\"\n          aria-hidden=\"true\"\n        >\n          <path\n            d=\"M17.64 9.2c0-.637-.057-1.251-.164-1.84H9v3.481h4.844c-.209 1.125-.843 2.078-1.796 2.717v2.258h2.908c1.702-1.567 2.684-3.874 2.684-6.615z\"\n            fill=\"#4285F4\"\n          />\n          <path\n            d=\"M9.003 18c2.43 0 4.467-.806 5.956-2.18l-2.909-2.26c-.806.54-1.836.86-3.047.86-2.344 0-4.328-1.584-5.036-3.711H.96v2.332A8.997 8.997 0 0 0 9.003 18z\"\n            fill=\"#34A853\"\n          />\n          <path\n            d=\"M3.964 10.712A5.41 5.41 0 0 1 3.682 9c0-.593.102-1.17.282-1.71V4.958H.96A8.996 8.996 0 0 0 0 9c0 1.452.348 2.827.96 4.042l3.004-2.33z\"\n            fill=\"#FBBC05\"\n          />\n          <path\n            d=\"M9.003 3.58c1.321 0 2.508.454 3.44 1.345l2.582-2.58C13.464.891 11.428 0 9.002 0A8.997 8.997 0 0 0 .96 4.958l3.005 2.332c.708-2.127 2.692-3.71 5.036-3.71z\"\n            fill=\"#EA4335\"\n          />\n        </svg>\n      )}\n      <span>Continue with Google</span>\n    </button>\n  );\n}\n"],"names":["scriptLoader","resolve","reject","existingScript","cb","script","error","useGoogleAuth","config","_internal","useCedrosLogin","isLoading","setIsLoading","useState","isInitialized","setIsInitialized","setError","pendingLinkToken","setPendingLinkToken","promiseCallbacksRef","useRef","configRef","tokenClientRef","pendingAccessCodeRef","apiClient","useMemo","ApiClient","useEffect","handleTokenResponse","useCallback","response","callbacks","err","data","authError","handleApiError","handleTokenError","isMounted","client","signIn","accessCode","clearError","clearPendingLink","GoogleLoginButton","onSuccess","onError","className","variant","size","disabled","handleClick","sizeClasses","variantClasses","jsxs","jsx","LoadingSpinner"],"mappings":"2JA2BMA,EAAe,CACnB,QAAS,GACT,OAAQ,GACR,MAAO,KACP,UAAW,CAAA,EAEX,MAAsB,CAEpB,OAAI,OAAO,OAAW,KAAe,OAAO,SAAa,IAChD,QAAQ,OAAO,IAAI,MAAM,gDAAgD,CAAC,EAI/E,KAAK,OACA,QAAQ,QAAA,EAIb,KAAK,QACA,IAAI,QAAQ,CAACC,EAASC,IAAW,CACtC,KAAK,UAAU,KAAK,CAAE,QAAAD,EAAS,OAAAC,EAAQ,CACzC,CAAC,GAIH,KAAK,QAAU,GACR,IAAI,QAAQ,CAACD,EAASC,IAAW,CACtC,KAAK,UAAU,KAAK,CAAE,QAAAD,EAAS,OAAAC,EAAQ,EAGvC,MAAMC,EAAiB,SAAS,eAAe,mBAAmB,EAClE,GAAIA,EAAgB,CACd,OAAO,QAAQ,UAAU,IAC3B,KAAK,OAAS,GACd,KAAK,QAAU,GACf,KAAK,UAAU,QAASC,GAAOA,EAAG,SAAS,EAC3C,KAAK,UAAY,CAAA,GAEjBD,EAAe,iBAAiB,OAAQ,IAAM,CAC5C,KAAK,OAAS,GACd,KAAK,QAAU,GACf,KAAK,UAAU,QAASC,GAAOA,EAAG,SAAS,EAC3C,KAAK,UAAY,CAAA,CACnB,CAAC,EAEH,MACF,CAEA,MAAMC,EAAS,SAAS,cAAc,QAAQ,EAC9CA,EAAO,IAAM,yCACbA,EAAO,MAAQ,GACfA,EAAO,MAAQ,GACfA,EAAO,GAAK,oBAEZA,EAAO,OAAS,IAAM,CACpB,KAAK,OAAS,GACd,KAAK,QAAU,GACf,KAAK,UAAU,QAASD,GAAOA,EAAG,SAAS,EAC3C,KAAK,UAAY,CAAA,CACnB,EAEAC,EAAO,QAAU,IAAM,CACrB,KAAK,QAAU,GAIfA,EAAO,OAAA,EACP,MAAMC,EAAQ,IAAI,MAAM,sCAAsC,EAC9D,KAAK,UAAU,QAASF,GAAOA,EAAG,OAAOE,CAAK,CAAC,EAC/C,KAAK,UAAY,CAAA,CACnB,EAEA,SAAS,KAAK,YAAYD,CAAM,CAClC,CAAC,EACH,EAMA,QAAe,CACb,KAAK,QAAU,GACf,KAAK,OAAS,GACd,KAAK,MAAQ,KACb,KAAK,UAAY,CAAA,CACnB,CACF,EAuCO,SAASE,GAAqC,CACnD,KAAM,CAAE,OAAAC,EAAQ,UAAAC,CAAA,EAAcC,iBAAA,EACxB,CAACC,EAAWC,CAAY,EAAIC,EAAAA,SAAS,EAAK,EAC1C,CAACC,EAAeC,CAAgB,EAAIF,EAAAA,SAAS,EAAK,EAClD,CAACP,EAAOU,CAAQ,EAAIH,EAAAA,SAA2B,IAAI,EAEnD,CAACI,EAAkBC,CAAmB,EAAIL,EAAAA,SAAwB,IAAI,EAEtEM,EAAsBC,EAAAA,OAAgC,IAAI,EAC1DC,EAAYD,EAAAA,OAAOZ,CAAM,EACzBc,EAAiBF,EAAAA,OAAiC,IAAI,EACtDG,EAAuBH,EAAAA,OAA2B,MAAS,EAE3DI,EAAYC,EAAAA,QAChB,IACE,IAAIC,EAAAA,UAAU,CACZ,QAASlB,EAAO,UAChB,UAAWA,EAAO,eAClB,cAAeA,EAAO,aAAA,CACvB,EACH,CAACA,EAAO,UAAWA,EAAO,eAAgBA,EAAO,aAAa,CAAA,EAIhEmB,EAAAA,UAAU,IAAM,CACdN,EAAU,QAAUb,CACtB,EAAG,CAACA,CAAM,CAAC,EAGX,MAAMoB,EAAsBC,EAAAA,YAC1B,MAAOC,GAAkC,CACvC,MAAMC,EAAYZ,EAAoB,QACtC,GAAKY,EAEL,IAAID,EAAS,MAAO,CAClB,MAAME,EAAiB,CACrB,KAAM,eACN,QAASF,EAAS,QAAU,gBACxB,gCACA,kDAAA,EAENd,EAASgB,CAAG,EACZpB,EAAa,EAAK,EAClBO,EAAoB,QAAU,KAC9BY,EAAU,OAAOC,CAAG,EACpB,MACF,CAEA,GAAI,CACF,MAAMC,EAAO,MAAMT,EAAU,KAAmB,UAAW,CACzD,YAAaM,EAAS,aACtB,SAAUrB,GAAW,kBAAA,GAAuB,OAC5C,YAAac,EAAqB,SAAW,MAAA,CAC9C,EACDF,EAAU,QAAQ,WAAW,iBAAiBY,EAAK,KAAM,QAAQ,EACjExB,GAAW,mBAAmBwB,EAAK,KAAMA,EAAK,MAAM,EACpDrB,EAAa,EAAK,EAClBmB,EAAU,QAAQE,CAAI,CACxB,OAASD,EAAK,CACZ,MAAME,EAAYC,EAAAA,eAAeH,EAAK,kDAAkD,EACpFE,EAAU,OAAS,yBACrBhB,EAAoBY,EAAS,cAAgB,IAAI,EAEnDd,EAASkB,CAAS,EAClBtB,EAAa,EAAK,EAClBmB,EAAU,OAAOG,CAAS,CAC5B,QAAA,CACEf,EAAoB,QAAU,KAC9BI,EAAqB,QAAU,MACjC,EACF,EACA,CAACC,EAAWf,CAAS,CAAA,EAKjB2B,EAAmBP,EAAAA,YACtBG,GAAkC,CACjC,MAAMD,EAAYZ,EAAoB,QACtC,GAAI,CAACY,EAAW,OAEhB,MAAMG,EAAuB,CAC3B,KAAM,eACN,QAASF,EAAI,OAAS,uBAClB,uEACA,+BAAA,EAENhB,EAASkB,CAAS,EAClBtB,EAAa,EAAK,EAClBO,EAAoB,QAAU,KAC9BY,EAAU,OAAOG,CAAS,CAC5B,EACA,CAAA,CAAC,EAMHP,EAAAA,UAAU,IAAM,CACd,GAAI,CAACnB,EAAO,eACV,OAGF,IAAI6B,EAAY,GAEhB,OAAArC,EACG,OACA,KAAK,IAAM,CACV,GAAI,CAACqC,EAAW,OAEhB,MAAMC,EAAS,OAAO,QAAQ,UAAU,QAAQ,gBAAgB,CAC9D,UAAW9B,EAAO,eAClB,MAAO,uBACP,SAAUoB,EACV,eAAgBQ,CAAA,CACjB,EAEGE,IACFhB,EAAe,QAAUgB,EACzBvB,EAAiB,EAAI,EAEzB,CAAC,EACA,MAAM,IAAM,CACPsB,GACFrB,EAAS,CACP,KAAM,eACN,QAAS,8DAAA,CACV,CAEL,CAAC,EAEI,IAAM,CACXqB,EAAY,GACZf,EAAe,QAAU,IAC3B,CACF,EAAG,CAACd,EAAO,eAAgBoB,EAAqBQ,CAAgB,CAAC,EAEjE,MAAMG,EAASV,cAAY,MAAOW,GAA+C,CAE/E,GADAjB,EAAqB,QAAUiB,EAC3B,CAAChC,EAAO,eAAgB,CAC1B,MAAMwB,EAAiB,CACrB,KAAM,mBACN,QAAS,iCAAA,EAEX,MAAAhB,EAASgB,CAAG,EACNA,CACR,CAEA,GAAI,CAAClB,EAAe,CAClB,MAAMkB,EAAiB,CACrB,KAAM,mBACN,QAAS,sEAAA,EAEX,MAAAhB,EAASgB,CAAG,EACNA,CACR,CAEA,GAAIb,EAAoB,QAAS,CAC/B,MAAMa,EAAiB,CACrB,KAAM,mBACN,QAAS,wCAAA,EAEX,MAAAhB,EAASgB,CAAG,EACNA,CACR,CAEA,OAAApB,EAAa,EAAI,EACjBI,EAAS,IAAI,EAEN,IAAI,QAAsB,CAACf,EAASC,IAAW,CACpDiB,EAAoB,QAAU,CAAE,QAAAlB,EAAS,OAAAC,CAAA,EAKzCoB,EAAe,SAAS,mBAAA,CAC1B,CAAC,CACH,EAAG,CAACd,EAAO,eAAgBM,CAAa,CAAC,EAEnC2B,EAAaZ,EAAAA,YAAY,IAAMb,EAAS,IAAI,EAAG,CAAA,CAAE,EACjD0B,EAAmBb,EAAAA,YAAY,IAAMX,EAAoB,IAAI,EAAG,CAAA,CAAE,EAExE,MAAO,CACL,OAAAqB,EACA,UAAA5B,EACA,cAAAG,EACA,MAAAR,EACA,WAAAmC,EACA,iBAAAxB,EACA,iBAAAyB,CAAA,CAEJ,CCtUO,SAASC,EAAkB,CAChC,UAAAC,EACA,QAAAC,EACA,UAAAC,EAAY,GACZ,QAAAC,EAAU,UACV,KAAAC,EAAO,KACP,SAAAC,EAAW,GACX,WAAAT,CACF,EAA2B,CACzB,KAAM,CAAE,OAAAD,EAAQ,UAAA5B,EAAW,cAAAG,CAAA,EAAkBP,EAAA,EAEvC2C,EAAc,SAAY,CAC9B,GAAI,CACF,MAAMX,EAAOC,CAAU,EACvBI,IAAA,CACF,OAASZ,EAAK,CACZ,MAAM1B,EAAQ0B,aAAe,MAAQA,EAAM,IAAI,MAAM,OAAOA,CAAG,CAAC,EAChEa,IAAUvC,CAAK,CACjB,CACF,EAEM6C,EAAc,CAClB,GAAI,mBACJ,GAAI,mBACJ,GAAI,kBAAA,EAGAC,EAAiB,CACrB,QAAS,uBACT,QAAS,8BAAA,EAGX,OACEC,EAAAA,KAAC,SAAA,CACC,KAAK,SACL,UAAW,iBAAiBD,EAAeL,CAAO,CAAC,IAAII,EAAYH,CAAI,CAAC,IAAIF,CAAS,GACrF,QAASI,EACT,SAAUD,GAAY,CAACnC,GAAiBH,EACxC,aAAW,sBAEV,SAAA,CAAAA,EACC2C,EAAAA,IAACC,EAAAA,eAAA,CAAe,KAAK,IAAA,CAAK,EAE1BF,EAAAA,KAAC,MAAA,CACC,UAAU,qBACV,MAAM,KACN,OAAO,KACP,QAAQ,YACR,KAAK,OACL,cAAY,OAEZ,SAAA,CAAAC,EAAAA,IAAC,OAAA,CACC,EAAE,2IACF,KAAK,SAAA,CAAA,EAEPA,EAAAA,IAAC,OAAA,CACC,EAAE,sJACF,KAAK,SAAA,CAAA,EAEPA,EAAAA,IAAC,OAAA,CACC,EAAE,wIACF,KAAK,SAAA,CAAA,EAEPA,EAAAA,IAAC,OAAA,CACC,EAAE,4JACF,KAAK,SAAA,CAAA,CACP,CAAA,CAAA,EAGJA,EAAAA,IAAC,QAAK,SAAA,sBAAA,CAAoB,CAAA,CAAA,CAAA,CAGhC"}

package/dist/{GoogleLoginButton-C1WNu7W3.js → GoogleLoginButton-DwyxvhnL.js}

@@ -1,8 +1,8 @@
-import { jsxs as y, jsx as u } from "react/jsx-runtime";
-import { useState as m, useRef as w, useMemo as G, useEffect as A, useCallback as f } from "react";
-import { u as S, A as T, h as P } from "./useCedrosLogin-CFfID-0i.js";
-import { L as O } from "./LoadingSpinner-6vml-zwr.js";
-const z = {
+import { jsxs as A, jsx as u } from "react/jsx-runtime";
+import { useState as R, useRef as E, useMemo as S, useEffect as v, useCallback as f } from "react";
+import { u as T, A as P, h as O } from "./useCedrosLogin-CFfID-0i.js";
+import { L as z } from "./LoadingSpinner-6vml-zwr.js";
+const U = {
   loading: !1,
   loaded: !1,
   error: null,
@@ -14,18 +14,18 @@ const z = {
       this.callbacks.push({ resolve: o, reject: i });
       const d = document.getElementById("google-gsi-script");
       if (d) {
-        window.google?.accounts?.id ? (this.loaded = !0, this.loading = !1, this.callbacks.forEach((n) => n.resolve()), this.callbacks = []) : d.addEventListener("load", () => {
-          this.loaded = !0, this.loading = !1, this.callbacks.forEach((n) => n.resolve()), this.callbacks = [];
+        window.google?.accounts?.id ? (this.loaded = !0, this.loading = !1, this.callbacks.forEach((s) => s.resolve()), this.callbacks = []) : d.addEventListener("load", () => {
+          this.loaded = !0, this.loading = !1, this.callbacks.forEach((s) => s.resolve()), this.callbacks = [];
         });
         return;
       }
       const t = document.createElement("script");
       t.src = "https://accounts.google.com/gsi/client", t.async = !0, t.defer = !0, t.id = "google-gsi-script", t.onload = () => {
-        this.loaded = !0, this.loading = !1, this.callbacks.forEach((n) => n.resolve()), this.callbacks = [];
+        this.loaded = !0, this.loading = !1, this.callbacks.forEach((s) => s.resolve()), this.callbacks = [];
       }, t.onerror = () => {
         this.loading = !1, t.remove();
-        const n = new Error("Failed to load Google Sign-In script");
-        this.callbacks.forEach((g) => g.reject(n)), this.callbacks = [];
+        const s = new Error("Failed to load Google Sign-In script");
+        this.callbacks.forEach((g) => g.reject(s)), this.callbacks = [];
       }, document.head.appendChild(t);
     }));
   },
@@ -37,148 +37,150 @@ const z = {
     this.loading = !1, this.loaded = !1, this.error = null, this.callbacks = [];
   }
 };
-function U() {
-  const { config: o, _internal: i } = S(), [d, t] = m(!1), [n, g] = m(!1), [k, s] = m(null), [b, h] = m(null), a = w(null), E = w(o), c = w(null), p = G(
-    () => new T({
+function j() {
+  const { config: o, _internal: i } = T(), [d, t] = R(!1), [s, g] = R(!1), [w, l] = R(null), [h, p] = R(null), a = E(null), m = E(o), k = E(null), c = E(void 0), b = S(
+    () => new P({
       baseUrl: o.serverUrl,
       timeoutMs: o.requestTimeout,
       retryAttempts: o.retryAttempts
     }),
     [o.serverUrl, o.requestTimeout, o.retryAttempts]
   );
-  A(() => {
-    E.current = o;
+  v(() => {
+    m.current = o;
   }, [o]);
-  const C = f(
-    async (e) => {
-      const r = a.current;
-      if (r) {
-        if (e.error) {
-          const l = {
+  const I = f(
+    async (r) => {
+      const e = a.current;
+      if (e) {
+        if (r.error) {
+          const n = {
             code: "SERVER_ERROR",
-            message: e.error === "access_denied" ? "Google sign-in was cancelled." : "Unable to sign in with Google. Please try again."
+            message: r.error === "access_denied" ? "Google sign-in was cancelled." : "Unable to sign in with Google. Please try again."
           };
-          s(l), t(!1), a.current = null, r.reject(l);
+          l(n), t(!1), a.current = null, e.reject(n);
           return;
         }
         try {
-          const l = await p.post("/google", {
-            accessToken: e.access_token,
-            referral: i?.getReferralCode?.() ?? void 0
+          const n = await b.post("/google", {
+            accessToken: r.access_token,
+            referral: i?.getReferralCode?.() ?? void 0,
+            access_code: c.current || void 0
           });
-          E.current.callbacks?.onLoginSuccess?.(l.user, "google"), i?.handleLoginSuccess(l.user, l.tokens), t(!1), r.resolve(l);
-        } catch (l) {
-          const R = P(l, "Unable to sign in with Google. Please try again.");
-          R.code === "ACCOUNT_LINK_REQUIRED" && h(e.access_token ?? null), s(R), t(!1), r.reject(R);
+          m.current.callbacks?.onLoginSuccess?.(n.user, "google"), i?.handleLoginSuccess(n.user, n.tokens), t(!1), e.resolve(n);
+        } catch (n) {
+          const C = O(n, "Unable to sign in with Google. Please try again.");
+          C.code === "ACCOUNT_LINK_REQUIRED" && p(r.access_token ?? null), l(C), t(!1), e.reject(C);
         } finally {
-          a.current = null;
+          a.current = null, c.current = void 0;
         }
       }
     },
-    [p, i]
-  ), I = f(
-    (e) => {
-      const r = a.current;
-      if (!r) return;
-      const l = {
+    [b, i]
+  ), y = f(
+    (r) => {
+      const e = a.current;
+      if (!e) return;
+      const n = {
         code: "SERVER_ERROR",
-        message: e.type === "popup_failed_to_open" ? "Google sign-in popup was blocked. Please allow popups for this site." : "Google sign-in was cancelled."
+        message: r.type === "popup_failed_to_open" ? "Google sign-in popup was blocked. Please allow popups for this site." : "Google sign-in was cancelled."
       };
-      s(l), t(!1), a.current = null, r.reject(l);
+      l(n), t(!1), a.current = null, e.reject(n);
     },
     []
   );
-  A(() => {
+  v(() => {
     if (!o.googleClientId)
       return;
-    let e = !0;
-    return z.load().then(() => {
-      if (!e) return;
-      const r = window.google?.accounts?.oauth2?.initTokenClient({
+    let r = !0;
+    return U.load().then(() => {
+      if (!r) return;
+      const e = window.google?.accounts?.oauth2?.initTokenClient({
         client_id: o.googleClientId,
         scope: "openid email profile",
-        callback: C,
-        error_callback: I
+        callback: I,
+        error_callback: y
       });
-      r && (c.current = r, g(!0));
+      e && (k.current = e, g(!0));
     }).catch(() => {
-      e && s({
+      r && l({
         code: "SERVER_ERROR",
         message: "Unable to load Google sign-in. Please refresh and try again."
       });
     }), () => {
-      e = !1, c.current = null;
+      r = !1, k.current = null;
     };
-  }, [o.googleClientId, C, I]);
-  const L = f(async () => {
-    if (!o.googleClientId) {
+  }, [o.googleClientId, I, y]);
+  const _ = f(async (r) => {
+    if (c.current = r, !o.googleClientId) {
       const e = {
         code: "VALIDATION_ERROR",
         message: "Google Client ID not configured"
       };
-      throw s(e), e;
+      throw l(e), e;
     }
-    if (!n) {
+    if (!s) {
       const e = {
         code: "VALIDATION_ERROR",
         message: "Google sign-in is not ready yet. Please wait a moment and try again."
       };
-      throw s(e), e;
+      throw l(e), e;
     }
     if (a.current) {
       const e = {
         code: "VALIDATION_ERROR",
         message: "Google sign-in is already in progress."
       };
-      throw s(e), e;
+      throw l(e), e;
     }
-    return t(!0), s(null), new Promise((e, r) => {
-      a.current = { resolve: e, reject: r }, c.current?.requestAccessToken();
+    return t(!0), l(null), new Promise((e, n) => {
+      a.current = { resolve: e, reject: n }, k.current?.requestAccessToken();
     });
-  }, [o.googleClientId, n]), _ = f(() => s(null), []), v = f(() => h(null), []);
+  }, [o.googleClientId, s]), L = f(() => l(null), []), G = f(() => p(null), []);
   return {
-    signIn: L,
+    signIn: _,
     isLoading: d,
-    isInitialized: n,
-    error: k,
-    clearError: _,
-    pendingLinkToken: b,
-    clearPendingLink: v
+    isInitialized: s,
+    error: w,
+    clearError: L,
+    pendingLinkToken: h,
+    clearPendingLink: G
   };
 }
-function x({
+function B({
   onSuccess: o,
   onError: i,
   className: d = "",
   variant: t = "default",
-  size: n = "md",
-  disabled: g = !1
+  size: s = "md",
+  disabled: g = !1,
+  accessCode: w
 }) {
-  const { signIn: k, isLoading: s, isInitialized: b } = U(), h = async () => {
+  const { signIn: l, isLoading: h, isInitialized: p } = j(), a = async () => {
     try {
-      await k(), o?.();
+      await l(w), o?.();
     } catch (c) {
-      const p = c instanceof Error ? c : new Error(String(c));
-      i?.(p);
+      const b = c instanceof Error ? c : new Error(String(c));
+      i?.(b);
     }
-  }, a = {
+  }, m = {
     sm: "cedros-button-sm",
     md: "cedros-button-md",
     lg: "cedros-button-lg"
   };
-  return /* @__PURE__ */ y(
+  return /* @__PURE__ */ A(
     "button",
     {
       type: "button",
       className: `cedros-button ${{
         default: "cedros-button-social",
         outline: "cedros-button-social-outline"
-      }[t]} ${a[n]} ${d}`,
-      onClick: h,
-      disabled: g || !b || s,
+      }[t]} ${m[s]} ${d}`,
+      onClick: a,
+      disabled: g || !p || h,
       "aria-label": "Sign in with Google",
       children: [
-        s ? /* @__PURE__ */ u(O, { size: "sm" }) : /* @__PURE__ */ y(
+        h ? /* @__PURE__ */ u(z, { size: "sm" }) : /* @__PURE__ */ A(
           "svg",
           {
             className: "cedros-button-icon",
@@ -225,6 +227,6 @@ function x({
   );
 }
 export {
-  x as G,
-  U as u
+  B as G,
+  j as u
 };

package/dist/GoogleLoginButton-DwyxvhnL.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"GoogleLoginButton-DwyxvhnL.js","sources":["../src/hooks/useGoogleAuth.ts","../src/components/google/GoogleLoginButton.tsx"],"sourcesContent":["import { useState, useCallback, useEffect, useRef, useMemo } from 'react';\nimport { useCedrosLogin } from '../context/useCedrosLogin';\nimport { ApiClient, handleApiError } from '../utils/apiClient';\nimport type { AuthResponse, AuthError } from '../types';\n\n/**\n * Module-level singleton for Google script loading (P-01)\n *\n * Prevents race conditions when multiple components mount simultaneously.\n * Uses a promise queue pattern to ensure the script is only loaded once.\n *\n * ## SSR Limitations (F-08)\n *\n * This singleton persists across the module lifecycle. In SSR environments:\n * - Module state persists between requests (potential cross-request leakage)\n * - Google Sign-In requires browser APIs (document, window)\n * - The hook guards against SSR with `googleClientId` checks\n *\n * For SSR frameworks (Next.js, Remix), ensure this hook is only used\n * in client-side components.\n *\n * ## Test Isolation\n *\n * For test isolation, call `scriptLoader._reset()` in test setup/teardown.\n *\n * @internal\n */\nconst scriptLoader = {\n  loading: false,\n  loaded: false,\n  error: null as Error | null,\n  callbacks: [] as Array<{ resolve: () => void; reject: (err: Error) => void }>,\n\n  load(): Promise<void> {\n    // SSR guard: avoid touching browser globals when running in Node/SSR.\n    if (typeof window === 'undefined' || typeof document === 'undefined') {\n      return Promise.reject(new Error('Google Sign-In script loader cannot run in SSR'));\n    }\n\n    // Already loaded\n    if (this.loaded) {\n      return Promise.resolve();\n    }\n\n    // Loading in progress - queue callback\n    if (this.loading) {\n      return new Promise((resolve, reject) => {\n        this.callbacks.push({ resolve, reject });\n      });\n    }\n\n    // Start loading\n    this.loading = true;\n    return new Promise((resolve, reject) => {\n      this.callbacks.push({ resolve, reject });\n\n      // Check if script already exists (from previous session or SSR)\n      const existingScript = document.getElementById('google-gsi-script');\n      if (existingScript) {\n        if (window.google?.accounts?.id) {\n          this.loaded = true;\n          this.loading = false;\n          this.callbacks.forEach((cb) => cb.resolve());\n          this.callbacks = [];\n        } else {\n          existingScript.addEventListener('load', () => {\n            this.loaded = true;\n            this.loading = false;\n            this.callbacks.forEach((cb) => cb.resolve());\n            this.callbacks = [];\n          });\n        }\n        return;\n      }\n\n      const script = document.createElement('script');\n      script.src = 'https://accounts.google.com/gsi/client';\n      script.async = true;\n      script.defer = true;\n      script.id = 'google-gsi-script';\n\n      script.onload = () => {\n        this.loaded = true;\n        this.loading = false;\n        this.callbacks.forEach((cb) => cb.resolve());\n        this.callbacks = [];\n      };\n\n      script.onerror = () => {\n        this.loading = false;\n        // M-02: Remove failed script from DOM to allow retry on next load() call.\n        // Without removal, retry finds existingScript and waits for a load event\n        // that will never fire on an already-failed script.\n        script.remove();\n        const error = new Error('Failed to load Google Sign-In script');\n        this.callbacks.forEach((cb) => cb.reject(error));\n        this.callbacks = [];\n      };\n\n      document.head.appendChild(script);\n    });\n  },\n\n  /**\n   * Reset singleton state for test isolation (F-08)\n   * @internal - Only use in test setup/teardown\n   */\n  _reset(): void {\n    this.loading = false;\n    this.loaded = false;\n    this.error = null;\n    this.callbacks = [];\n  },\n};\n\n/** @internal */\nexport const _internalGoogleScriptLoader = scriptLoader;\n\nexport interface UseGoogleAuthReturn {\n  /** @param accessCode Optional signup access code, forwarded to the server on new registrations. */\n  signIn: (accessCode?: string) => Promise<AuthResponse>;\n  isLoading: boolean;\n  isInitialized: boolean;\n  error: AuthError | null;\n  clearError: () => void;\n  /** Access token saved when ACCOUNT_LINK_REQUIRED is returned. Pass to POST /auth/link-oauth with the user's password. */\n  pendingLinkToken: string | null;\n  /** Clear the pending link state */\n  clearPendingLink: () => void;\n}\n\ninterface PromiseCallbacks {\n  resolve: (value: AuthResponse) => void;\n  reject: (error: AuthError) => void;\n}\n\n/**\n * Hook for Google OAuth authentication.\n *\n * @example\n * ```tsx\n * function GoogleButton() {\n *   const { signIn, isLoading, isInitialized, error } = useGoogleAuth();\n *\n *   return (\n *     <button onClick={signIn} disabled={!isInitialized || isLoading}>\n *       {isLoading ? 'Signing in...' : 'Sign in with Google'}\n *     </button>\n *   );\n * }\n * ```\n */\nexport function useGoogleAuth(): UseGoogleAuthReturn {\n  const { config, _internal } = useCedrosLogin();\n  const [isLoading, setIsLoading] = useState(false);\n  const [isInitialized, setIsInitialized] = useState(false);\n  const [error, setError] = useState<AuthError | null>(null);\n\n  const [pendingLinkToken, setPendingLinkToken] = useState<string | null>(null);\n\n  const promiseCallbacksRef = useRef<PromiseCallbacks | null>(null);\n  const configRef = useRef(config);\n  const tokenClientRef = useRef<GoogleTokenClient | null>(null);\n  const pendingAccessCodeRef = useRef<string | undefined>(undefined);\n\n  const apiClient = useMemo(\n    () =>\n      new ApiClient({\n        baseUrl: config.serverUrl,\n        timeoutMs: config.requestTimeout,\n        retryAttempts: config.retryAttempts,\n      }),\n    [config.serverUrl, config.requestTimeout, config.retryAttempts]\n  );\n\n  // Keep config ref in sync\n  useEffect(() => {\n    configRef.current = config;\n  }, [config]);\n\n  // Handle access token from OAuth popup (initTokenClient flow)\n  const handleTokenResponse = useCallback(\n    async (response: GoogleTokenResponse) => {\n      const callbacks = promiseCallbacksRef.current;\n      if (!callbacks) return;\n\n      if (response.error) {\n        const err: AuthError = {\n          code: 'SERVER_ERROR',\n          message: response.error === 'access_denied'\n            ? 'Google sign-in was cancelled.'\n            : 'Unable to sign in with Google. Please try again.',\n        };\n        setError(err);\n        setIsLoading(false);\n        promiseCallbacksRef.current = null;\n        callbacks.reject(err);\n        return;\n      }\n\n      try {\n        const data = await apiClient.post<AuthResponse>('/google', {\n          accessToken: response.access_token,\n          referral: _internal?.getReferralCode?.() ?? undefined,\n          access_code: pendingAccessCodeRef.current || undefined,\n        });\n        configRef.current.callbacks?.onLoginSuccess?.(data.user, 'google');\n        _internal?.handleLoginSuccess(data.user, data.tokens);\n        setIsLoading(false);\n        callbacks.resolve(data);\n      } catch (err) {\n        const authError = handleApiError(err, 'Unable to sign in with Google. Please try again.');\n        if (authError.code === 'ACCOUNT_LINK_REQUIRED') {\n          setPendingLinkToken(response.access_token ?? null);\n        }\n        setError(authError);\n        setIsLoading(false);\n        callbacks.reject(authError);\n      } finally {\n        promiseCallbacksRef.current = null;\n        pendingAccessCodeRef.current = undefined;\n      }\n    },\n    [apiClient, _internal]\n  );\n\n  // Handle popup closed / blocked without completing auth.\n  // Google calls error_callback (not callback) when the user closes the popup.\n  const handleTokenError = useCallback(\n    (err: GoogleTokenErrorResponse) => {\n      const callbacks = promiseCallbacksRef.current;\n      if (!callbacks) return;\n\n      const authError: AuthError = {\n        code: 'SERVER_ERROR',\n        message: err.type === 'popup_failed_to_open'\n          ? 'Google sign-in popup was blocked. Please allow popups for this site.'\n          : 'Google sign-in was cancelled.',\n      };\n      setError(authError);\n      setIsLoading(false);\n      promiseCallbacksRef.current = null;\n      callbacks.reject(authError);\n    },\n    []\n  );\n\n  // P-01: Initialize Google OAuth token client using singleton loader.\n  // Uses initTokenClient (OAuth popup) instead of One Tap prompt() which\n  // has exponential cooldown after dismissal and is blocked by Brave.\n  useEffect(() => {\n    if (!config.googleClientId) {\n      return;\n    }\n\n    let isMounted = true;\n\n    scriptLoader\n      .load()\n      .then(() => {\n        if (!isMounted) return;\n\n        const client = window.google?.accounts?.oauth2?.initTokenClient({\n          client_id: config.googleClientId!,\n          scope: 'openid email profile',\n          callback: handleTokenResponse,\n          error_callback: handleTokenError,\n        });\n\n        if (client) {\n          tokenClientRef.current = client;\n          setIsInitialized(true);\n        }\n      })\n      .catch(() => {\n        if (isMounted) {\n          setError({\n            code: 'SERVER_ERROR',\n            message: 'Unable to load Google sign-in. Please refresh and try again.',\n          });\n        }\n      });\n\n    return () => {\n      isMounted = false;\n      tokenClientRef.current = null;\n    };\n  }, [config.googleClientId, handleTokenResponse, handleTokenError]);\n\n  const signIn = useCallback(async (accessCode?: string): Promise<AuthResponse> => {\n    pendingAccessCodeRef.current = accessCode;\n    if (!config.googleClientId) {\n      const err: AuthError = {\n        code: 'VALIDATION_ERROR',\n        message: 'Google Client ID not configured',\n      };\n      setError(err);\n      throw err;\n    }\n\n    if (!isInitialized) {\n      const err: AuthError = {\n        code: 'VALIDATION_ERROR',\n        message: 'Google sign-in is not ready yet. Please wait a moment and try again.',\n      };\n      setError(err);\n      throw err;\n    }\n\n    if (promiseCallbacksRef.current) {\n      const err: AuthError = {\n        code: 'VALIDATION_ERROR',\n        message: 'Google sign-in is already in progress.',\n      };\n      setError(err);\n      throw err;\n    }\n\n    setIsLoading(true);\n    setError(null);\n\n    return new Promise<AuthResponse>((resolve, reject) => {\n      promiseCallbacksRef.current = { resolve, reject };\n\n      // Open the Google OAuth popup via initTokenClient.\n      // This avoids One Tap's exponential cooldown after dismissal and works\n      // in browsers that block One Tap (e.g., Brave).\n      tokenClientRef.current?.requestAccessToken();\n    });\n  }, [config.googleClientId, isInitialized]);\n\n  const clearError = useCallback(() => setError(null), []);\n  const clearPendingLink = useCallback(() => setPendingLinkToken(null), []);\n\n  return {\n    signIn,\n    isLoading,\n    isInitialized,\n    error,\n    clearError,\n    pendingLinkToken,\n    clearPendingLink,\n  };\n}\n\n/** Response from Google's initTokenClient callback */\ninterface GoogleTokenResponse {\n  access_token?: string;\n  error?: string;\n  error_description?: string;\n}\n\n/** Error from initTokenClient error_callback (popup closed/blocked) */\ninterface GoogleTokenErrorResponse {\n  type: 'popup_failed_to_open' | 'popup_closed' | 'unknown';\n}\n\n/** Token client returned by google.accounts.oauth2.initTokenClient */\ninterface GoogleTokenClient {\n  requestAccessToken: () => void;\n}\n\n// Type declaration for Google Identity Services\ndeclare global {\n  interface Window {\n    google?: {\n      accounts?: {\n        /** Used only to detect if the GIS script has loaded */\n        id?: object;\n        oauth2?: {\n          initTokenClient: (config: {\n            client_id: string;\n            scope: string;\n            callback: (response: GoogleTokenResponse) => void;\n            error_callback?: (error: GoogleTokenErrorResponse) => void;\n          }) => GoogleTokenClient;\n        };\n      };\n    };\n  }\n}\n","import { useGoogleAuth } from '../../hooks/useGoogleAuth';\nimport { LoadingSpinner } from '../shared/LoadingSpinner';\n\nexport interface GoogleLoginButtonProps {\n  onSuccess?: () => void;\n  onError?: (error: Error) => void;\n  className?: string;\n  variant?: 'default' | 'outline';\n  size?: 'sm' | 'md' | 'lg';\n  disabled?: boolean;\n  /** Access code forwarded to the server when this flow creates a new account. */\n  accessCode?: string;\n}\n\n/**\n * Google OAuth login button\n */\nexport function GoogleLoginButton({\n  onSuccess,\n  onError,\n  className = '',\n  variant = 'default',\n  size = 'md',\n  disabled = false,\n  accessCode,\n}: GoogleLoginButtonProps) {\n  const { signIn, isLoading, isInitialized } = useGoogleAuth();\n\n  const handleClick = async () => {\n    try {\n      await signIn(accessCode);\n      onSuccess?.();\n    } catch (err) {\n      const error = err instanceof Error ? err : new Error(String(err));\n      onError?.(error);\n    }\n  };\n\n  const sizeClasses = {\n    sm: 'cedros-button-sm',\n    md: 'cedros-button-md',\n    lg: 'cedros-button-lg',\n  };\n\n  const variantClasses = {\n    default: 'cedros-button-social',\n    outline: 'cedros-button-social-outline',\n  };\n\n  return (\n    <button\n      type=\"button\"\n      className={`cedros-button ${variantClasses[variant]} ${sizeClasses[size]} ${className}`}\n      onClick={handleClick}\n      disabled={disabled || !isInitialized || isLoading}\n      aria-label=\"Sign in with Google\"\n    >\n      {isLoading ? (\n        <LoadingSpinner size=\"sm\" />\n      ) : (\n        <svg\n          className=\"cedros-button-icon\"\n          width=\"18\"\n          height=\"18\"\n          viewBox=\"0 0 18 18\"\n          fill=\"none\"\n          aria-hidden=\"true\"\n        >\n          <path\n            d=\"M17.64 9.2c0-.637-.057-1.251-.164-1.84H9v3.481h4.844c-.209 1.125-.843 2.078-1.796 2.717v2.258h2.908c1.702-1.567 2.684-3.874 2.684-6.615z\"\n            fill=\"#4285F4\"\n          />\n          <path\n            d=\"M9.003 18c2.43 0 4.467-.806 5.956-2.18l-2.909-2.26c-.806.54-1.836.86-3.047.86-2.344 0-4.328-1.584-5.036-3.711H.96v2.332A8.997 8.997 0 0 0 9.003 18z\"\n            fill=\"#34A853\"\n          />\n          <path\n            d=\"M3.964 10.712A5.41 5.41 0 0 1 3.682 9c0-.593.102-1.17.282-1.71V4.958H.96A8.996 8.996 0 0 0 0 9c0 1.452.348 2.827.96 4.042l3.004-2.33z\"\n            fill=\"#FBBC05\"\n          />\n          <path\n            d=\"M9.003 3.58c1.321 0 2.508.454 3.44 1.345l2.582-2.58C13.464.891 11.428 0 9.002 0A8.997 8.997 0 0 0 .96 4.958l3.005 2.332c.708-2.127 2.692-3.71 5.036-3.71z\"\n            fill=\"#EA4335\"\n          />\n        </svg>\n      )}\n      <span>Continue with Google</span>\n    </button>\n  );\n}\n"],"names":["scriptLoader","resolve","reject","existingScript","cb","script","error","useGoogleAuth","config","_internal","useCedrosLogin","isLoading","setIsLoading","useState","isInitialized","setIsInitialized","setError","pendingLinkToken","setPendingLinkToken","promiseCallbacksRef","useRef","configRef","tokenClientRef","pendingAccessCodeRef","apiClient","useMemo","ApiClient","useEffect","handleTokenResponse","useCallback","response","callbacks","err","data","authError","handleApiError","handleTokenError","isMounted","client","signIn","accessCode","clearError","clearPendingLink","GoogleLoginButton","onSuccess","onError","className","variant","size","disabled","handleClick","sizeClasses","jsxs","jsx","LoadingSpinner"],"mappings":";;;;AA2BA,MAAMA,IAAe;AAAA,EACnB,SAAS;AAAA,EACT,QAAQ;AAAA,EACR,OAAO;AAAA,EACP,WAAW,CAAA;AAAA,EAEX,OAAsB;AAEpB,WAAI,OAAO,SAAW,OAAe,OAAO,WAAa,MAChD,QAAQ,OAAO,IAAI,MAAM,gDAAgD,CAAC,IAI/E,KAAK,SACA,QAAQ,QAAA,IAIb,KAAK,UACA,IAAI,QAAQ,CAACC,GAASC,MAAW;AACtC,WAAK,UAAU,KAAK,EAAE,SAAAD,GAAS,QAAAC,GAAQ;AAAA,IACzC,CAAC,KAIH,KAAK,UAAU,IACR,IAAI,QAAQ,CAACD,GAASC,MAAW;AACtC,WAAK,UAAU,KAAK,EAAE,SAAAD,GAAS,QAAAC,GAAQ;AAGvC,YAAMC,IAAiB,SAAS,eAAe,mBAAmB;AAClE,UAAIA,GAAgB;AAClB,QAAI,OAAO,QAAQ,UAAU,MAC3B,KAAK,SAAS,IACd,KAAK,UAAU,IACf,KAAK,UAAU,QAAQ,CAACC,MAAOA,EAAG,SAAS,GAC3C,KAAK,YAAY,CAAA,KAEjBD,EAAe,iBAAiB,QAAQ,MAAM;AAC5C,eAAK,SAAS,IACd,KAAK,UAAU,IACf,KAAK,UAAU,QAAQ,CAACC,MAAOA,EAAG,SAAS,GAC3C,KAAK,YAAY,CAAA;AAAA,QACnB,CAAC;AAEH;AAAA,MACF;AAEA,YAAMC,IAAS,SAAS,cAAc,QAAQ;AAC9C,MAAAA,EAAO,MAAM,0CACbA,EAAO,QAAQ,IACfA,EAAO,QAAQ,IACfA,EAAO,KAAK,qBAEZA,EAAO,SAAS,MAAM;AACpB,aAAK,SAAS,IACd,KAAK,UAAU,IACf,KAAK,UAAU,QAAQ,CAACD,MAAOA,EAAG,SAAS,GAC3C,KAAK,YAAY,CAAA;AAAA,MACnB,GAEAC,EAAO,UAAU,MAAM;AACrB,aAAK,UAAU,IAIfA,EAAO,OAAA;AACP,cAAMC,IAAQ,IAAI,MAAM,sCAAsC;AAC9D,aAAK,UAAU,QAAQ,CAACF,MAAOA,EAAG,OAAOE,CAAK,CAAC,GAC/C,KAAK,YAAY,CAAA;AAAA,MACnB,GAEA,SAAS,KAAK,YAAYD,CAAM;AAAA,IAClC,CAAC;AAAA,EACH;AAAA;AAAA;AAAA;AAAA;AAAA,EAMA,SAAe;AACb,SAAK,UAAU,IACf,KAAK,SAAS,IACd,KAAK,QAAQ,MACb,KAAK,YAAY,CAAA;AAAA,EACnB;AACF;AAuCO,SAASE,IAAqC;AACnD,QAAM,EAAE,QAAAC,GAAQ,WAAAC,EAAA,IAAcC,EAAA,GACxB,CAACC,GAAWC,CAAY,IAAIC,EAAS,EAAK,GAC1C,CAACC,GAAeC,CAAgB,IAAIF,EAAS,EAAK,GAClD,CAACP,GAAOU,CAAQ,IAAIH,EAA2B,IAAI,GAEnD,CAACI,GAAkBC,CAAmB,IAAIL,EAAwB,IAAI,GAEtEM,IAAsBC,EAAgC,IAAI,GAC1DC,IAAYD,EAAOZ,CAAM,GACzBc,IAAiBF,EAAiC,IAAI,GACtDG,IAAuBH,EAA2B,MAAS,GAE3DI,IAAYC;AAAA,IAChB,MACE,IAAIC,EAAU;AAAA,MACZ,SAASlB,EAAO;AAAA,MAChB,WAAWA,EAAO;AAAA,MAClB,eAAeA,EAAO;AAAA,IAAA,CACvB;AAAA,IACH,CAACA,EAAO,WAAWA,EAAO,gBAAgBA,EAAO,aAAa;AAAA,EAAA;AAIhE,EAAAmB,EAAU,MAAM;AACd,IAAAN,EAAU,UAAUb;AAAA,EACtB,GAAG,CAACA,CAAM,CAAC;AAGX,QAAMoB,IAAsBC;AAAA,IAC1B,OAAOC,MAAkC;AACvC,YAAMC,IAAYZ,EAAoB;AACtC,UAAKY,GAEL;AAAA,YAAID,EAAS,OAAO;AAClB,gBAAME,IAAiB;AAAA,YACrB,MAAM;AAAA,YACN,SAASF,EAAS,UAAU,kBACxB,kCACA;AAAA,UAAA;AAEN,UAAAd,EAASgB,CAAG,GACZpB,EAAa,EAAK,GAClBO,EAAoB,UAAU,MAC9BY,EAAU,OAAOC,CAAG;AACpB;AAAA,QACF;AAEA,YAAI;AACF,gBAAMC,IAAO,MAAMT,EAAU,KAAmB,WAAW;AAAA,YACzD,aAAaM,EAAS;AAAA,YACtB,UAAUrB,GAAW,kBAAA,KAAuB;AAAA,YAC5C,aAAac,EAAqB,WAAW;AAAA,UAAA,CAC9C;AACD,UAAAF,EAAU,QAAQ,WAAW,iBAAiBY,EAAK,MAAM,QAAQ,GACjExB,GAAW,mBAAmBwB,EAAK,MAAMA,EAAK,MAAM,GACpDrB,EAAa,EAAK,GAClBmB,EAAU,QAAQE,CAAI;AAAA,QACxB,SAASD,GAAK;AACZ,gBAAME,IAAYC,EAAeH,GAAK,kDAAkD;AACxF,UAAIE,EAAU,SAAS,2BACrBhB,EAAoBY,EAAS,gBAAgB,IAAI,GAEnDd,EAASkB,CAAS,GAClBtB,EAAa,EAAK,GAClBmB,EAAU,OAAOG,CAAS;AAAA,QAC5B,UAAA;AACE,UAAAf,EAAoB,UAAU,MAC9BI,EAAqB,UAAU;AAAA,QACjC;AAAA;AAAA,IACF;AAAA,IACA,CAACC,GAAWf,CAAS;AAAA,EAAA,GAKjB2B,IAAmBP;AAAA,IACvB,CAACG,MAAkC;AACjC,YAAMD,IAAYZ,EAAoB;AACtC,UAAI,CAACY,EAAW;AAEhB,YAAMG,IAAuB;AAAA,QAC3B,MAAM;AAAA,QACN,SAASF,EAAI,SAAS,yBAClB,yEACA;AAAA,MAAA;AAEN,MAAAhB,EAASkB,CAAS,GAClBtB,EAAa,EAAK,GAClBO,EAAoB,UAAU,MAC9BY,EAAU,OAAOG,CAAS;AAAA,IAC5B;AAAA,IACA,CAAA;AAAA,EAAC;AAMH,EAAAP,EAAU,MAAM;AACd,QAAI,CAACnB,EAAO;AACV;AAGF,QAAI6B,IAAY;AAEhB,WAAArC,EACG,OACA,KAAK,MAAM;AACV,UAAI,CAACqC,EAAW;AAEhB,YAAMC,IAAS,OAAO,QAAQ,UAAU,QAAQ,gBAAgB;AAAA,QAC9D,WAAW9B,EAAO;AAAA,QAClB,OAAO;AAAA,QACP,UAAUoB;AAAA,QACV,gBAAgBQ;AAAA,MAAA,CACjB;AAED,MAAIE,MACFhB,EAAe,UAAUgB,GACzBvB,EAAiB,EAAI;AAAA,IAEzB,CAAC,EACA,MAAM,MAAM;AACX,MAAIsB,KACFrB,EAAS;AAAA,QACP,MAAM;AAAA,QACN,SAAS;AAAA,MAAA,CACV;AAAA,IAEL,CAAC,GAEI,MAAM;AACX,MAAAqB,IAAY,IACZf,EAAe,UAAU;AAAA,IAC3B;AAAA,EACF,GAAG,CAACd,EAAO,gBAAgBoB,GAAqBQ,CAAgB,CAAC;AAEjE,QAAMG,IAASV,EAAY,OAAOW,MAA+C;AAE/E,QADAjB,EAAqB,UAAUiB,GAC3B,CAAChC,EAAO,gBAAgB;AAC1B,YAAMwB,IAAiB;AAAA,QACrB,MAAM;AAAA,QACN,SAAS;AAAA,MAAA;AAEX,YAAAhB,EAASgB,CAAG,GACNA;AAAA,IACR;AAEA,QAAI,CAAClB,GAAe;AAClB,YAAMkB,IAAiB;AAAA,QACrB,MAAM;AAAA,QACN,SAAS;AAAA,MAAA;AAEX,YAAAhB,EAASgB,CAAG,GACNA;AAAA,IACR;AAEA,QAAIb,EAAoB,SAAS;AAC/B,YAAMa,IAAiB;AAAA,QACrB,MAAM;AAAA,QACN,SAAS;AAAA,MAAA;AAEX,YAAAhB,EAASgB,CAAG,GACNA;AAAA,IACR;AAEA,WAAApB,EAAa,EAAI,GACjBI,EAAS,IAAI,GAEN,IAAI,QAAsB,CAACf,GAASC,MAAW;AACpD,MAAAiB,EAAoB,UAAU,EAAE,SAAAlB,GAAS,QAAAC,EAAA,GAKzCoB,EAAe,SAAS,mBAAA;AAAA,IAC1B,CAAC;AAAA,EACH,GAAG,CAACd,EAAO,gBAAgBM,CAAa,CAAC,GAEnC2B,IAAaZ,EAAY,MAAMb,EAAS,IAAI,GAAG,CAAA,CAAE,GACjD0B,IAAmBb,EAAY,MAAMX,EAAoB,IAAI,GAAG,CAAA,CAAE;AAExE,SAAO;AAAA,IACL,QAAAqB;AAAA,IACA,WAAA5B;AAAA,IACA,eAAAG;AAAA,IACA,OAAAR;AAAA,IACA,YAAAmC;AAAA,IACA,kBAAAxB;AAAA,IACA,kBAAAyB;AAAA,EAAA;AAEJ;ACtUO,SAASC,EAAkB;AAAA,EAChC,WAAAC;AAAA,EACA,SAAAC;AAAA,EACA,WAAAC,IAAY;AAAA,EACZ,SAAAC,IAAU;AAAA,EACV,MAAAC,IAAO;AAAA,EACP,UAAAC,IAAW;AAAA,EACX,YAAAT;AACF,GAA2B;AACzB,QAAM,EAAE,QAAAD,GAAQ,WAAA5B,GAAW,eAAAG,EAAA,IAAkBP,EAAA,GAEvC2C,IAAc,YAAY;AAC9B,QAAI;AACF,YAAMX,EAAOC,CAAU,GACvBI,IAAA;AAAA,IACF,SAASZ,GAAK;AACZ,YAAM1B,IAAQ0B,aAAe,QAAQA,IAAM,IAAI,MAAM,OAAOA,CAAG,CAAC;AAChE,MAAAa,IAAUvC,CAAK;AAAA,IACjB;AAAA,EACF,GAEM6C,IAAc;AAAA,IAClB,IAAI;AAAA,IACJ,IAAI;AAAA,IACJ,IAAI;AAAA,EAAA;AAQN,SACE,gBAAAC;AAAA,IAAC;AAAA,IAAA;AAAA,MACC,MAAK;AAAA,MACL,WAAW,iBARQ;AAAA,QACrB,SAAS;AAAA,QACT,SAAS;AAAA,MAAA,EAMoCL,CAAO,CAAC,IAAII,EAAYH,CAAI,CAAC,IAAIF,CAAS;AAAA,MACrF,SAASI;AAAA,MACT,UAAUD,KAAY,CAACnC,KAAiBH;AAAA,MACxC,cAAW;AAAA,MAEV,UAAA;AAAA,QAAAA,IACC,gBAAA0C,EAACC,GAAA,EAAe,MAAK,KAAA,CAAK,IAE1B,gBAAAF;AAAA,UAAC;AAAA,UAAA;AAAA,YACC,WAAU;AAAA,YACV,OAAM;AAAA,YACN,QAAO;AAAA,YACP,SAAQ;AAAA,YACR,MAAK;AAAA,YACL,eAAY;AAAA,YAEZ,UAAA;AAAA,cAAA,gBAAAC;AAAA,gBAAC;AAAA,gBAAA;AAAA,kBACC,GAAE;AAAA,kBACF,MAAK;AAAA,gBAAA;AAAA,cAAA;AAAA,cAEP,gBAAAA;AAAA,gBAAC;AAAA,gBAAA;AAAA,kBACC,GAAE;AAAA,kBACF,MAAK;AAAA,gBAAA;AAAA,cAAA;AAAA,cAEP,gBAAAA;AAAA,gBAAC;AAAA,gBAAA;AAAA,kBACC,GAAE;AAAA,kBACF,MAAK;AAAA,gBAAA;AAAA,cAAA;AAAA,cAEP,gBAAAA;AAAA,gBAAC;AAAA,gBAAA;AAAA,kBACC,GAAE;AAAA,kBACF,MAAK;AAAA,gBAAA;AAAA,cAAA;AAAA,YACP;AAAA,UAAA;AAAA,QAAA;AAAA,QAGJ,gBAAAA,EAAC,UAAK,UAAA,uBAAA,CAAoB;AAAA,MAAA;AAAA,IAAA;AAAA,EAAA;AAGhC;"}