@dalgoridim/headless-cms 0.3.0 → 0.3.1

package/dist/auth/google/client/index.cjs

@@ -66,6 +66,7 @@ function GoogleAuthProvider({
   const [isAdmin, setIsAdmin] = (0, import_react.useState)(false);
   const [isEditing, setIsEditing] = (0, import_react.useState)(false);
   const [ready, setReady] = (0, import_react.useState)(false);
+  const [failed, setFailed] = (0, import_react.useState)(false);
   const allowed = (0, import_react.useRef)(
     (adminEmails != null ? adminEmails : []).map((e) => e.trim().toLowerCase())
   );
@@ -96,8 +97,10 @@ function GoogleAuthProvider({
     if (existing) applyToken(existing);
   }, [cookieName, applyToken]);
   (0, import_react.useEffect)(() => {
-    function init() {
-      if (!window.google) return;
+    let cancelled = false;
+    function tryInit() {
+      var _a, _b;
+      if (cancelled || !((_b = (_a = window.google) == null ? void 0 : _a.accounts) == null ? void 0 : _b.id)) return false;
       window.google.accounts.id.initialize({
         client_id: clientId,
         callback: (res) => applyToken(res.credential),
@@ -105,24 +108,29 @@ function GoogleAuthProvider({
         cancel_on_tap_outside: true
       });
       setReady(true);
+      return true;
     }
-    if (window.google) {
-      init();
-      return;
+    if (tryInit()) return;
+    if (!document.querySelector(`script[src="${GSI_SRC}"]`)) {
+      const script = document.createElement("script");
+      script.src = GSI_SRC;
+      script.async = true;
+      script.defer = true;
+      document.head.appendChild(script);
     }
-    const existing = document.querySelector(
-      `script[src="${GSI_SRC}"]`
-    );
-    if (existing) {
-      existing.addEventListener("load", init);
-      return () => existing.removeEventListener("load", init);
-    }
-    const script = document.createElement("script");
-    script.src = GSI_SRC;
-    script.async = true;
-    script.defer = true;
-    script.onload = init;
-    document.head.appendChild(script);
+    const startedAt = Date.now();
+    const timer = setInterval(() => {
+      if (tryInit()) {
+        clearInterval(timer);
+      } else if (Date.now() - startedAt > 1e4) {
+        clearInterval(timer);
+        if (!cancelled) setFailed(true);
+      }
+    }, 120);
+    return () => {
+      cancelled = true;
+      clearInterval(timer);
+    };
   }, [clientId, applyToken]);
   (0, import_react.useEffect)(() => {
     const originalFetch = window.fetch;
@@ -173,6 +181,7 @@ function GoogleAuthProvider({
         isEditing,
         toggleEdit,
         ready,
+        failed,
         promptSignIn,
         renderButton,
         logout: doLogout

package/dist/auth/google/client/index.cjs.map

@@ -1 +1 @@
-{"version":3,"sources":["../../../../src/auth/google/client/index.tsx"],"sourcesContent":["\"use client\";\n\nimport {\n  createContext,\n  useCallback,\n  useContext,\n  useEffect,\n  useRef,\n  useState,\n  type ReactNode,\n} from \"react\";\n// Imported via the public specifier so we share the SAME context instance as\n// the consumer's edit primitives at runtime (see tsup `external` + tsconfig paths).\nimport { CmsAuthProvider } from \"@dalgoridim/headless-cms/client\";\n\n/**\n * Client provider for **Google Identity Services** sign-in — the Firebase-free\n * counterpart to `FirebaseAuthProvider`. It loads the GSI script, lets the user\n * sign in with Google, stashes the resulting ID token in a cookie for the\n * server `googleAuth` adapter to verify, and feeds the shared CMS auth context\n * so the edit primitives light up. Admin status is optimistic on the client\n * (via `adminEmails`); the server gate remains authoritative.\n */\n\nconst GSI_SRC = \"https://accounts.google.com/gsi/client\";\n\n/** Minimal slice of the Google Identity Services API we use. */\ninterface GsiCredentialResponse {\n  credential: string;\n}\ninterface GsiButtonOptions {\n  type?: \"standard\" | \"icon\";\n  theme?: \"outline\" | \"filled_blue\" | \"filled_black\";\n  size?: \"small\" | \"medium\" | \"large\";\n  text?: \"signin_with\" | \"signup_with\" | \"continue_with\" | \"signin\";\n  shape?: \"rectangular\" | \"pill\" | \"circle\" | \"square\";\n  width?: number;\n}\ninterface GsiClient {\n  accounts: {\n    id: {\n      initialize: (config: {\n        client_id: string;\n        callback: (res: GsiCredentialResponse) => void;\n        auto_select?: boolean;\n        cancel_on_tap_outside?: boolean;\n      }) => void;\n      prompt: () => void;\n      renderButton: (el: HTMLElement, options?: GsiButtonOptions) => void;\n      disableAutoSelect: () => void;\n    };\n  };\n}\n\ndeclare global {\n  interface Window {\n    google?: GsiClient;\n  }\n}\n\nexport interface GoogleUser {\n  sub: string;\n  email?: string;\n  name?: string;\n  picture?: string;\n}\n\nexport interface GoogleAuthProviderProps {\n  children: ReactNode;\n  /** OAuth 2.0 Web client ID (from Google Cloud Console → Credentials). */\n  clientId: string;\n  /**\n   * Optional admin allowlist for *optimistic* client-side `isAdmin`. The server\n   * `googleAuth` adapter still enforces the real gate. Omit to treat any\n   * successful sign-in as optimistically admin (server will correct via 401).\n   */\n  adminEmails?: string[];\n  /** Cookie name for the ID token. Default `adminToken`. */\n  cookieName?: string;\n  /** Called when a 401 `{ logout: true }` response is intercepted. */\n  onLogout?: () => void;\n}\n\nexport interface GoogleAuthContextValue {\n  user: GoogleUser | null;\n  isAdmin: boolean;\n  isEditing: boolean;\n  toggleEdit: () => void;\n  /** True once the GSI script has loaded and the client is initialized. */\n  ready: boolean;\n  /** Trigger Google One Tap / sign-in prompt. */\n  promptSignIn: () => void;\n  /** Render the official Google button into `el` (most reliable trigger). */\n  renderButton: (el: HTMLElement, options?: GsiButtonOptions) => void;\n  logout: () => void;\n}\n\nconst GoogleAuthContext = createContext<GoogleAuthContextValue | undefined>(\n  undefined,\n);\n\nfunction setCookie(name: string, value: string) {\n  document.cookie = `${name}=${encodeURIComponent(value)}; path=/; samesite=lax`;\n}\nfunction deleteCookie(name: string) {\n  document.cookie = `${name}=; path=/; expires=Thu, 01 Jan 1970 00:00:00 GMT`;\n}\nfunction readCookie(name: string): string | null {\n  for (const part of document.cookie.split(\";\")) {\n    const [k, ...v] = part.trim().split(\"=\");\n    if (k === name) return decodeURIComponent(v.join(\"=\"));\n  }\n  return null;\n}\n\n/** Decode a JWT payload client-side (no verification — the server does that). */\nfunction decodeJwt(token: string): (GoogleUser & { exp?: number }) | null {\n  try {\n    const payload = token.split(\".\")[1];\n    const json = atob(payload.replace(/-/g, \"+\").replace(/_/g, \"/\"));\n    const data = JSON.parse(json) as {\n      sub: string;\n      email?: string;\n      name?: string;\n      picture?: string;\n      exp?: number;\n    };\n    return data;\n  } catch {\n    return null;\n  }\n}\n\nexport function GoogleAuthProvider({\n  children,\n  clientId,\n  adminEmails,\n  cookieName = \"adminToken\",\n  onLogout,\n}: GoogleAuthProviderProps) {\n  const [user, setUser] = useState<GoogleUser | null>(null);\n  const [isAdmin, setIsAdmin] = useState(false);\n  const [isEditing, setIsEditing] = useState(false);\n  const [ready, setReady] = useState(false);\n  const allowed = useRef(\n    (adminEmails ?? []).map((e) => e.trim().toLowerCase()),\n  );\n\n  const applyToken = useCallback(\n    (token: string) => {\n      const claims = decodeJwt(token);\n      if (!claims) return;\n      if (claims.exp && claims.exp * 1000 <= Date.now()) {\n        deleteCookie(cookieName);\n        return;\n      }\n      const email = claims.email?.toLowerCase();\n      // Optimistic: if no allowlist supplied, trust the sign-in and let the\n      // server correct a non-admin via the 401 interceptor below.\n      const admin =\n        allowed.current.length === 0\n          ? true\n          : !!email && allowed.current.includes(email);\n      setCookie(cookieName, token);\n      setUser({\n        sub: claims.sub,\n        email: claims.email,\n        name: claims.name,\n        picture: claims.picture,\n      });\n      setIsAdmin(admin);\n    },\n    [cookieName],\n  );\n\n  // Restore an existing session from the cookie on mount.\n  useEffect(() => {\n    const existing = readCookie(cookieName);\n    if (existing) applyToken(existing);\n  }, [cookieName, applyToken]);\n\n  // Load the GSI script and initialize the One Tap / button client.\n  useEffect(() => {\n    function init() {\n      if (!window.google) return;\n      window.google.accounts.id.initialize({\n        client_id: clientId,\n        callback: (res) => applyToken(res.credential),\n        auto_select: false,\n        cancel_on_tap_outside: true,\n      });\n      setReady(true);\n    }\n\n    if (window.google) {\n      init();\n      return;\n    }\n    const existing = document.querySelector<HTMLScriptElement>(\n      `script[src=\"${GSI_SRC}\"]`,\n    );\n    if (existing) {\n      existing.addEventListener(\"load\", init);\n      return () => existing.removeEventListener(\"load\", init);\n    }\n    const script = document.createElement(\"script\");\n    script.src = GSI_SRC;\n    script.async = true;\n    script.defer = true;\n    script.onload = init;\n    document.head.appendChild(script);\n  }, [clientId, applyToken]);\n\n  // Intercept admin 401s so an expired/forbidden session forces sign-out.\n  useEffect(() => {\n    const originalFetch = window.fetch;\n    window.fetch = async (...args: Parameters<typeof fetch>) => {\n      const response = await originalFetch(...args);\n      if (response.status === 401) {\n        try {\n          const data = await response.clone().json();\n          if (data?.logout) doLogout();\n        } catch {\n          /* not a JSON body — ignore */\n        }\n      }\n      return response;\n    };\n    return () => {\n      window.fetch = originalFetch;\n    };\n    // eslint-disable-next-line react-hooks/exhaustive-deps\n  }, []);\n\n  function doLogout() {\n    window.google?.accounts.id.disableAutoSelect();\n    deleteCookie(cookieName);\n    setUser(null);\n    setIsAdmin(false);\n    setIsEditing(false);\n    onLogout?.();\n  }\n\n  const promptSignIn = useCallback(() => {\n    if (!ready) return;\n    window.google?.accounts.id.prompt();\n  }, [ready]);\n\n  const renderButton = useCallback(\n    (el: HTMLElement, options?: GsiButtonOptions) => {\n      if (!ready) return;\n      window.google?.accounts.id.renderButton(el, options);\n    },\n    [ready],\n  );\n\n  const toggleEdit = useCallback(() => setIsEditing((p) => !p), []);\n\n  return (\n    <GoogleAuthContext.Provider\n      value={{\n        user,\n        isAdmin,\n        isEditing,\n        toggleEdit,\n        ready,\n        promptSignIn,\n        renderButton,\n        logout: doLogout,\n      }}\n    >\n      <CmsAuthProvider value={{ isAdmin, isEditing, toggleEdit }}>\n        {children}\n      </CmsAuthProvider>\n    </GoogleAuthContext.Provider>\n  );\n}\n\n/** Google auth API (user/login/logout) for login pages and toolbars. */\nexport function useGoogleAuth(): GoogleAuthContextValue {\n  const ctx = useContext(GoogleAuthContext);\n  if (!ctx) {\n    throw new Error(\"useGoogleAuth must be used within a GoogleAuthProvider\");\n  }\n  return ctx;\n}\n"],"mappings":";;;;;;;;;;;;;;;;;;;;;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAEA,mBAQO;AAGP,oBAAgC;AAkQ1B;AAvPN,IAAM,UAAU;AAyEhB,IAAM,wBAAoB;AAAA,EACxB;AACF;AAEA,SAAS,UAAU,MAAc,OAAe;AAC9C,WAAS,SAAS,GAAG,IAAI,IAAI,mBAAmB,KAAK,CAAC;AACxD;AACA,SAAS,aAAa,MAAc;AAClC,WAAS,SAAS,GAAG,IAAI;AAC3B;AACA,SAAS,WAAW,MAA6B;AAC/C,aAAW,QAAQ,SAAS,OAAO,MAAM,GAAG,GAAG;AAC7C,UAAM,CAAC,GAAG,GAAG,CAAC,IAAI,KAAK,KAAK,EAAE,MAAM,GAAG;AACvC,QAAI,MAAM,KAAM,QAAO,mBAAmB,EAAE,KAAK,GAAG,CAAC;AAAA,EACvD;AACA,SAAO;AACT;AAGA,SAAS,UAAU,OAAuD;AACxE,MAAI;AACF,UAAM,UAAU,MAAM,MAAM,GAAG,EAAE,CAAC;AAClC,UAAM,OAAO,KAAK,QAAQ,QAAQ,MAAM,GAAG,EAAE,QAAQ,MAAM,GAAG,CAAC;AAC/D,UAAM,OAAO,KAAK,MAAM,IAAI;AAO5B,WAAO;AAAA,EACT,SAAQ;AACN,WAAO;AAAA,EACT;AACF;AAEO,SAAS,mBAAmB;AAAA,EACjC;AAAA,EACA;AAAA,EACA;AAAA,EACA,aAAa;AAAA,EACb;AACF,GAA4B;AAC1B,QAAM,CAAC,MAAM,OAAO,QAAI,uBAA4B,IAAI;AACxD,QAAM,CAAC,SAAS,UAAU,QAAI,uBAAS,KAAK;AAC5C,QAAM,CAAC,WAAW,YAAY,QAAI,uBAAS,KAAK;AAChD,QAAM,CAAC,OAAO,QAAQ,QAAI,uBAAS,KAAK;AACxC,QAAM,cAAU;AAAA,KACb,oCAAe,CAAC,GAAG,IAAI,CAAC,MAAM,EAAE,KAAK,EAAE,YAAY,CAAC;AAAA,EACvD;AAEA,QAAM,iBAAa;AAAA,IACjB,CAAC,UAAkB;AArJvB;AAsJM,YAAM,SAAS,UAAU,KAAK;AAC9B,UAAI,CAAC,OAAQ;AACb,UAAI,OAAO,OAAO,OAAO,MAAM,OAAQ,KAAK,IAAI,GAAG;AACjD,qBAAa,UAAU;AACvB;AAAA,MACF;AACA,YAAM,SAAQ,YAAO,UAAP,mBAAc;AAG5B,YAAM,QACJ,QAAQ,QAAQ,WAAW,IACvB,OACA,CAAC,CAAC,SAAS,QAAQ,QAAQ,SAAS,KAAK;AAC/C,gBAAU,YAAY,KAAK;AAC3B,cAAQ;AAAA,QACN,KAAK,OAAO;AAAA,QACZ,OAAO,OAAO;AAAA,QACd,MAAM,OAAO;AAAA,QACb,SAAS,OAAO;AAAA,MAClB,CAAC;AACD,iBAAW,KAAK;AAAA,IAClB;AAAA,IACA,CAAC,UAAU;AAAA,EACb;AAGA,8BAAU,MAAM;AACd,UAAM,WAAW,WAAW,UAAU;AACtC,QAAI,SAAU,YAAW,QAAQ;AAAA,EACnC,GAAG,CAAC,YAAY,UAAU,CAAC;AAG3B,8BAAU,MAAM;AACd,aAAS,OAAO;AACd,UAAI,CAAC,OAAO,OAAQ;AACpB,aAAO,OAAO,SAAS,GAAG,WAAW;AAAA,QACnC,WAAW;AAAA,QACX,UAAU,CAAC,QAAQ,WAAW,IAAI,UAAU;AAAA,QAC5C,aAAa;AAAA,QACb,uBAAuB;AAAA,MACzB,CAAC;AACD,eAAS,IAAI;AAAA,IACf;AAEA,QAAI,OAAO,QAAQ;AACjB,WAAK;AACL;AAAA,IACF;AACA,UAAM,WAAW,SAAS;AAAA,MACxB,eAAe,OAAO;AAAA,IACxB;AACA,QAAI,UAAU;AACZ,eAAS,iBAAiB,QAAQ,IAAI;AACtC,aAAO,MAAM,SAAS,oBAAoB,QAAQ,IAAI;AAAA,IACxD;AACA,UAAM,SAAS,SAAS,cAAc,QAAQ;AAC9C,WAAO,MAAM;AACb,WAAO,QAAQ;AACf,WAAO,QAAQ;AACf,WAAO,SAAS;AAChB,aAAS,KAAK,YAAY,MAAM;AAAA,EAClC,GAAG,CAAC,UAAU,UAAU,CAAC;AAGzB,8BAAU,MAAM;AACd,UAAM,gBAAgB,OAAO;AAC7B,WAAO,QAAQ,UAAU,SAAmC;AAC1D,YAAM,WAAW,MAAM,cAAc,GAAG,IAAI;AAC5C,UAAI,SAAS,WAAW,KAAK;AAC3B,YAAI;AACF,gBAAM,OAAO,MAAM,SAAS,MAAM,EAAE,KAAK;AACzC,cAAI,6BAAM,OAAQ,UAAS;AAAA,QAC7B,SAAQ;AAAA,QAER;AAAA,MACF;AACA,aAAO;AAAA,IACT;AACA,WAAO,MAAM;AACX,aAAO,QAAQ;AAAA,IACjB;AAAA,EAEF,GAAG,CAAC,CAAC;AAEL,WAAS,WAAW;AA1OtB;AA2OI,iBAAO,WAAP,mBAAe,SAAS,GAAG;AAC3B,iBAAa,UAAU;AACvB,YAAQ,IAAI;AACZ,eAAW,KAAK;AAChB,iBAAa,KAAK;AAClB;AAAA,EACF;AAEA,QAAM,mBAAe,0BAAY,MAAM;AAnPzC;AAoPI,QAAI,CAAC,MAAO;AACZ,iBAAO,WAAP,mBAAe,SAAS,GAAG;AAAA,EAC7B,GAAG,CAAC,KAAK,CAAC;AAEV,QAAM,mBAAe;AAAA,IACnB,CAAC,IAAiB,YAA+B;AAzPrD;AA0PM,UAAI,CAAC,MAAO;AACZ,mBAAO,WAAP,mBAAe,SAAS,GAAG,aAAa,IAAI;AAAA,IAC9C;AAAA,IACA,CAAC,KAAK;AAAA,EACR;AAEA,QAAM,iBAAa,0BAAY,MAAM,aAAa,CAAC,MAAM,CAAC,CAAC,GAAG,CAAC,CAAC;AAEhE,SACE;AAAA,IAAC,kBAAkB;AAAA,IAAlB;AAAA,MACC,OAAO;AAAA,QACL;AAAA,QACA;AAAA,QACA;AAAA,QACA;AAAA,QACA;AAAA,QACA;AAAA,QACA;AAAA,QACA,QAAQ;AAAA,MACV;AAAA,MAEA,sDAAC,iCAAgB,OAAO,EAAE,SAAS,WAAW,WAAW,GACtD,UACH;AAAA;AAAA,EACF;AAEJ;AAGO,SAAS,gBAAwC;AACtD,QAAM,UAAM,yBAAW,iBAAiB;AACxC,MAAI,CAAC,KAAK;AACR,UAAM,IAAI,MAAM,wDAAwD;AAAA,EAC1E;AACA,SAAO;AACT;","names":[]}
+{"version":3,"sources":["../../../../src/auth/google/client/index.tsx"],"sourcesContent":["\"use client\";\n\nimport {\n  createContext,\n  useCallback,\n  useContext,\n  useEffect,\n  useRef,\n  useState,\n  type ReactNode,\n} from \"react\";\n// Imported via the public specifier so we share the SAME context instance as\n// the consumer's edit primitives at runtime (see tsup `external` + tsconfig paths).\nimport { CmsAuthProvider } from \"@dalgoridim/headless-cms/client\";\n\n/**\n * Client provider for **Google Identity Services** sign-in — the Firebase-free\n * counterpart to `FirebaseAuthProvider`. It loads the GSI script, lets the user\n * sign in with Google, stashes the resulting ID token in a cookie for the\n * server `googleAuth` adapter to verify, and feeds the shared CMS auth context\n * so the edit primitives light up. Admin status is optimistic on the client\n * (via `adminEmails`); the server gate remains authoritative.\n */\n\nconst GSI_SRC = \"https://accounts.google.com/gsi/client\";\n\n/** Minimal slice of the Google Identity Services API we use. */\ninterface GsiCredentialResponse {\n  credential: string;\n}\ninterface GsiButtonOptions {\n  type?: \"standard\" | \"icon\";\n  theme?: \"outline\" | \"filled_blue\" | \"filled_black\";\n  size?: \"small\" | \"medium\" | \"large\";\n  text?: \"signin_with\" | \"signup_with\" | \"continue_with\" | \"signin\";\n  shape?: \"rectangular\" | \"pill\" | \"circle\" | \"square\";\n  width?: number;\n}\ninterface GsiClient {\n  accounts: {\n    id: {\n      initialize: (config: {\n        client_id: string;\n        callback: (res: GsiCredentialResponse) => void;\n        auto_select?: boolean;\n        cancel_on_tap_outside?: boolean;\n      }) => void;\n      prompt: () => void;\n      renderButton: (el: HTMLElement, options?: GsiButtonOptions) => void;\n      disableAutoSelect: () => void;\n    };\n  };\n}\n\ndeclare global {\n  interface Window {\n    google?: GsiClient;\n  }\n}\n\nexport interface GoogleUser {\n  sub: string;\n  email?: string;\n  name?: string;\n  picture?: string;\n}\n\nexport interface GoogleAuthProviderProps {\n  children: ReactNode;\n  /** OAuth 2.0 Web client ID (from Google Cloud Console → Credentials). */\n  clientId: string;\n  /**\n   * Optional admin allowlist for *optimistic* client-side `isAdmin`. The server\n   * `googleAuth` adapter still enforces the real gate. Omit to treat any\n   * successful sign-in as optimistically admin (server will correct via 401).\n   */\n  adminEmails?: string[];\n  /** Cookie name for the ID token. Default `adminToken`. */\n  cookieName?: string;\n  /** Called when a 401 `{ logout: true }` response is intercepted. */\n  onLogout?: () => void;\n}\n\nexport interface GoogleAuthContextValue {\n  user: GoogleUser | null;\n  isAdmin: boolean;\n  isEditing: boolean;\n  toggleEdit: () => void;\n  /** True once the GSI script has loaded and the client is initialized. */\n  ready: boolean;\n  /** True if GSI failed to load within the timeout (blocked/offline). */\n  failed: boolean;\n  /** Trigger Google One Tap / sign-in prompt. */\n  promptSignIn: () => void;\n  /** Render the official Google button into `el` (most reliable trigger). */\n  renderButton: (el: HTMLElement, options?: GsiButtonOptions) => void;\n  logout: () => void;\n}\n\nconst GoogleAuthContext = createContext<GoogleAuthContextValue | undefined>(\n  undefined,\n);\n\nfunction setCookie(name: string, value: string) {\n  document.cookie = `${name}=${encodeURIComponent(value)}; path=/; samesite=lax`;\n}\nfunction deleteCookie(name: string) {\n  document.cookie = `${name}=; path=/; expires=Thu, 01 Jan 1970 00:00:00 GMT`;\n}\nfunction readCookie(name: string): string | null {\n  for (const part of document.cookie.split(\";\")) {\n    const [k, ...v] = part.trim().split(\"=\");\n    if (k === name) return decodeURIComponent(v.join(\"=\"));\n  }\n  return null;\n}\n\n/** Decode a JWT payload client-side (no verification — the server does that). */\nfunction decodeJwt(token: string): (GoogleUser & { exp?: number }) | null {\n  try {\n    const payload = token.split(\".\")[1];\n    const json = atob(payload.replace(/-/g, \"+\").replace(/_/g, \"/\"));\n    const data = JSON.parse(json) as {\n      sub: string;\n      email?: string;\n      name?: string;\n      picture?: string;\n      exp?: number;\n    };\n    return data;\n  } catch {\n    return null;\n  }\n}\n\nexport function GoogleAuthProvider({\n  children,\n  clientId,\n  adminEmails,\n  cookieName = \"adminToken\",\n  onLogout,\n}: GoogleAuthProviderProps) {\n  const [user, setUser] = useState<GoogleUser | null>(null);\n  const [isAdmin, setIsAdmin] = useState(false);\n  const [isEditing, setIsEditing] = useState(false);\n  const [ready, setReady] = useState(false);\n  const [failed, setFailed] = useState(false);\n  const allowed = useRef(\n    (adminEmails ?? []).map((e) => e.trim().toLowerCase()),\n  );\n\n  const applyToken = useCallback(\n    (token: string) => {\n      const claims = decodeJwt(token);\n      if (!claims) return;\n      if (claims.exp && claims.exp * 1000 <= Date.now()) {\n        deleteCookie(cookieName);\n        return;\n      }\n      const email = claims.email?.toLowerCase();\n      // Optimistic: if no allowlist supplied, trust the sign-in and let the\n      // server correct a non-admin via the 401 interceptor below.\n      const admin =\n        allowed.current.length === 0\n          ? true\n          : !!email && allowed.current.includes(email);\n      setCookie(cookieName, token);\n      setUser({\n        sub: claims.sub,\n        email: claims.email,\n        name: claims.name,\n        picture: claims.picture,\n      });\n      setIsAdmin(admin);\n    },\n    [cookieName],\n  );\n\n  // Restore an existing session from the cookie on mount.\n  useEffect(() => {\n    const existing = readCookie(cookieName);\n    if (existing) applyToken(existing);\n  }, [cookieName, applyToken]);\n\n  // Load the GSI script and initialize the client. Polling (rather than relying\n  // on a `load` event) makes this robust against React's dev double-mount, a\n  // cached/already-loaded script, and missed load events — any of which could\n  // otherwise leave `ready` stuck false and the UI spinning forever.\n  useEffect(() => {\n    let cancelled = false;\n\n    function tryInit(): boolean {\n      if (cancelled || !window.google?.accounts?.id) return false;\n      window.google.accounts.id.initialize({\n        client_id: clientId,\n        callback: (res) => applyToken(res.credential),\n        auto_select: false,\n        cancel_on_tap_outside: true,\n      });\n      setReady(true);\n      return true;\n    }\n\n    if (tryInit()) return;\n\n    // Ensure the script tag exists exactly once across mounts.\n    if (!document.querySelector(`script[src=\"${GSI_SRC}\"]`)) {\n      const script = document.createElement(\"script\");\n      script.src = GSI_SRC;\n      script.async = true;\n      script.defer = true;\n      document.head.appendChild(script);\n    }\n\n    const startedAt = Date.now();\n    const timer = setInterval(() => {\n      if (tryInit()) {\n        clearInterval(timer);\n      } else if (Date.now() - startedAt > 10_000) {\n        // Blocked (ad/privacy extension) or offline — surface a failure so the\n        // UI can show a fallback instead of an endless spinner.\n        clearInterval(timer);\n        if (!cancelled) setFailed(true);\n      }\n    }, 120);\n\n    return () => {\n      cancelled = true;\n      clearInterval(timer);\n    };\n  }, [clientId, applyToken]);\n\n  // Intercept admin 401s so an expired/forbidden session forces sign-out.\n  useEffect(() => {\n    const originalFetch = window.fetch;\n    window.fetch = async (...args: Parameters<typeof fetch>) => {\n      const response = await originalFetch(...args);\n      if (response.status === 401) {\n        try {\n          const data = await response.clone().json();\n          if (data?.logout) doLogout();\n        } catch {\n          /* not a JSON body — ignore */\n        }\n      }\n      return response;\n    };\n    return () => {\n      window.fetch = originalFetch;\n    };\n    // eslint-disable-next-line react-hooks/exhaustive-deps\n  }, []);\n\n  function doLogout() {\n    window.google?.accounts.id.disableAutoSelect();\n    deleteCookie(cookieName);\n    setUser(null);\n    setIsAdmin(false);\n    setIsEditing(false);\n    onLogout?.();\n  }\n\n  const promptSignIn = useCallback(() => {\n    if (!ready) return;\n    window.google?.accounts.id.prompt();\n  }, [ready]);\n\n  const renderButton = useCallback(\n    (el: HTMLElement, options?: GsiButtonOptions) => {\n      if (!ready) return;\n      window.google?.accounts.id.renderButton(el, options);\n    },\n    [ready],\n  );\n\n  const toggleEdit = useCallback(() => setIsEditing((p) => !p), []);\n\n  return (\n    <GoogleAuthContext.Provider\n      value={{\n        user,\n        isAdmin,\n        isEditing,\n        toggleEdit,\n        ready,\n        failed,\n        promptSignIn,\n        renderButton,\n        logout: doLogout,\n      }}\n    >\n      <CmsAuthProvider value={{ isAdmin, isEditing, toggleEdit }}>\n        {children}\n      </CmsAuthProvider>\n    </GoogleAuthContext.Provider>\n  );\n}\n\n/** Google auth API (user/login/logout) for login pages and toolbars. */\nexport function useGoogleAuth(): GoogleAuthContextValue {\n  const ctx = useContext(GoogleAuthContext);\n  if (!ctx) {\n    throw new Error(\"useGoogleAuth must be used within a GoogleAuthProvider\");\n  }\n  return ctx;\n}\n"],"mappings":";;;;;;;;;;;;;;;;;;;;;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAEA,mBAQO;AAGP,oBAAgC;AAsR1B;AA3QN,IAAM,UAAU;AA2EhB,IAAM,wBAAoB;AAAA,EACxB;AACF;AAEA,SAAS,UAAU,MAAc,OAAe;AAC9C,WAAS,SAAS,GAAG,IAAI,IAAI,mBAAmB,KAAK,CAAC;AACxD;AACA,SAAS,aAAa,MAAc;AAClC,WAAS,SAAS,GAAG,IAAI;AAC3B;AACA,SAAS,WAAW,MAA6B;AAC/C,aAAW,QAAQ,SAAS,OAAO,MAAM,GAAG,GAAG;AAC7C,UAAM,CAAC,GAAG,GAAG,CAAC,IAAI,KAAK,KAAK,EAAE,MAAM,GAAG;AACvC,QAAI,MAAM,KAAM,QAAO,mBAAmB,EAAE,KAAK,GAAG,CAAC;AAAA,EACvD;AACA,SAAO;AACT;AAGA,SAAS,UAAU,OAAuD;AACxE,MAAI;AACF,UAAM,UAAU,MAAM,MAAM,GAAG,EAAE,CAAC;AAClC,UAAM,OAAO,KAAK,QAAQ,QAAQ,MAAM,GAAG,EAAE,QAAQ,MAAM,GAAG,CAAC;AAC/D,UAAM,OAAO,KAAK,MAAM,IAAI;AAO5B,WAAO;AAAA,EACT,SAAQ;AACN,WAAO;AAAA,EACT;AACF;AAEO,SAAS,mBAAmB;AAAA,EACjC;AAAA,EACA;AAAA,EACA;AAAA,EACA,aAAa;AAAA,EACb;AACF,GAA4B;AAC1B,QAAM,CAAC,MAAM,OAAO,QAAI,uBAA4B,IAAI;AACxD,QAAM,CAAC,SAAS,UAAU,QAAI,uBAAS,KAAK;AAC5C,QAAM,CAAC,WAAW,YAAY,QAAI,uBAAS,KAAK;AAChD,QAAM,CAAC,OAAO,QAAQ,QAAI,uBAAS,KAAK;AACxC,QAAM,CAAC,QAAQ,SAAS,QAAI,uBAAS,KAAK;AAC1C,QAAM,cAAU;AAAA,KACb,oCAAe,CAAC,GAAG,IAAI,CAAC,MAAM,EAAE,KAAK,EAAE,YAAY,CAAC;AAAA,EACvD;AAEA,QAAM,iBAAa;AAAA,IACjB,CAAC,UAAkB;AAxJvB;AAyJM,YAAM,SAAS,UAAU,KAAK;AAC9B,UAAI,CAAC,OAAQ;AACb,UAAI,OAAO,OAAO,OAAO,MAAM,OAAQ,KAAK,IAAI,GAAG;AACjD,qBAAa,UAAU;AACvB;AAAA,MACF;AACA,YAAM,SAAQ,YAAO,UAAP,mBAAc;AAG5B,YAAM,QACJ,QAAQ,QAAQ,WAAW,IACvB,OACA,CAAC,CAAC,SAAS,QAAQ,QAAQ,SAAS,KAAK;AAC/C,gBAAU,YAAY,KAAK;AAC3B,cAAQ;AAAA,QACN,KAAK,OAAO;AAAA,QACZ,OAAO,OAAO;AAAA,QACd,MAAM,OAAO;AAAA,QACb,SAAS,OAAO;AAAA,MAClB,CAAC;AACD,iBAAW,KAAK;AAAA,IAClB;AAAA,IACA,CAAC,UAAU;AAAA,EACb;AAGA,8BAAU,MAAM;AACd,UAAM,WAAW,WAAW,UAAU;AACtC,QAAI,SAAU,YAAW,QAAQ;AAAA,EACnC,GAAG,CAAC,YAAY,UAAU,CAAC;AAM3B,8BAAU,MAAM;AACd,QAAI,YAAY;AAEhB,aAAS,UAAmB;AA/LhC;AAgMM,UAAI,aAAa,GAAC,kBAAO,WAAP,mBAAe,aAAf,mBAAyB,IAAI,QAAO;AACtD,aAAO,OAAO,SAAS,GAAG,WAAW;AAAA,QACnC,WAAW;AAAA,QACX,UAAU,CAAC,QAAQ,WAAW,IAAI,UAAU;AAAA,QAC5C,aAAa;AAAA,QACb,uBAAuB;AAAA,MACzB,CAAC;AACD,eAAS,IAAI;AACb,aAAO;AAAA,IACT;AAEA,QAAI,QAAQ,EAAG;AAGf,QAAI,CAAC,SAAS,cAAc,eAAe,OAAO,IAAI,GAAG;AACvD,YAAM,SAAS,SAAS,cAAc,QAAQ;AAC9C,aAAO,MAAM;AACb,aAAO,QAAQ;AACf,aAAO,QAAQ;AACf,eAAS,KAAK,YAAY,MAAM;AAAA,IAClC;AAEA,UAAM,YAAY,KAAK,IAAI;AAC3B,UAAM,QAAQ,YAAY,MAAM;AAC9B,UAAI,QAAQ,GAAG;AACb,sBAAc,KAAK;AAAA,MACrB,WAAW,KAAK,IAAI,IAAI,YAAY,KAAQ;AAG1C,sBAAc,KAAK;AACnB,YAAI,CAAC,UAAW,WAAU,IAAI;AAAA,MAChC;AAAA,IACF,GAAG,GAAG;AAEN,WAAO,MAAM;AACX,kBAAY;AACZ,oBAAc,KAAK;AAAA,IACrB;AAAA,EACF,GAAG,CAAC,UAAU,UAAU,CAAC;AAGzB,8BAAU,MAAM;AACd,UAAM,gBAAgB,OAAO;AAC7B,WAAO,QAAQ,UAAU,SAAmC;AAC1D,YAAM,WAAW,MAAM,cAAc,GAAG,IAAI;AAC5C,UAAI,SAAS,WAAW,KAAK;AAC3B,YAAI;AACF,gBAAM,OAAO,MAAM,SAAS,MAAM,EAAE,KAAK;AACzC,cAAI,6BAAM,OAAQ,UAAS;AAAA,QAC7B,SAAQ;AAAA,QAER;AAAA,MACF;AACA,aAAO;AAAA,IACT;AACA,WAAO,MAAM;AACX,aAAO,QAAQ;AAAA,IACjB;AAAA,EAEF,GAAG,CAAC,CAAC;AAEL,WAAS,WAAW;AA7PtB;AA8PI,iBAAO,WAAP,mBAAe,SAAS,GAAG;AAC3B,iBAAa,UAAU;AACvB,YAAQ,IAAI;AACZ,eAAW,KAAK;AAChB,iBAAa,KAAK;AAClB;AAAA,EACF;AAEA,QAAM,mBAAe,0BAAY,MAAM;AAtQzC;AAuQI,QAAI,CAAC,MAAO;AACZ,iBAAO,WAAP,mBAAe,SAAS,GAAG;AAAA,EAC7B,GAAG,CAAC,KAAK,CAAC;AAEV,QAAM,mBAAe;AAAA,IACnB,CAAC,IAAiB,YAA+B;AA5QrD;AA6QM,UAAI,CAAC,MAAO;AACZ,mBAAO,WAAP,mBAAe,SAAS,GAAG,aAAa,IAAI;AAAA,IAC9C;AAAA,IACA,CAAC,KAAK;AAAA,EACR;AAEA,QAAM,iBAAa,0BAAY,MAAM,aAAa,CAAC,MAAM,CAAC,CAAC,GAAG,CAAC,CAAC;AAEhE,SACE;AAAA,IAAC,kBAAkB;AAAA,IAAlB;AAAA,MACC,OAAO;AAAA,QACL;AAAA,QACA;AAAA,QACA;AAAA,QACA;AAAA,QACA;AAAA,QACA;AAAA,QACA;AAAA,QACA;AAAA,QACA,QAAQ;AAAA,MACV;AAAA,MAEA,sDAAC,iCAAgB,OAAO,EAAE,SAAS,WAAW,WAAW,GACtD,UACH;AAAA;AAAA,EACF;AAEJ;AAGO,SAAS,gBAAwC;AACtD,QAAM,UAAM,yBAAW,iBAAiB;AACxC,MAAI,CAAC,KAAK;AACR,UAAM,IAAI,MAAM,wDAAwD;AAAA,EAC1E;AACA,SAAO;AACT;","names":[]}

package/dist/auth/google/client/index.d.cts

@@ -61,6 +61,8 @@ interface GoogleAuthContextValue {
     toggleEdit: () => void;
     /** True once the GSI script has loaded and the client is initialized. */
     ready: boolean;
+    /** True if GSI failed to load within the timeout (blocked/offline). */
+    failed: boolean;
     /** Trigger Google One Tap / sign-in prompt. */
     promptSignIn: () => void;
     /** Render the official Google button into `el` (most reliable trigger). */

package/dist/auth/google/client/index.d.ts

@@ -61,6 +61,8 @@ interface GoogleAuthContextValue {
     toggleEdit: () => void;
     /** True once the GSI script has loaded and the client is initialized. */
     ready: boolean;
+    /** True if GSI failed to load within the timeout (blocked/offline). */
+    failed: boolean;
     /** Trigger Google One Tap / sign-in prompt. */
     promptSignIn: () => void;
     /** Render the official Google button into `el` (most reliable trigger). */

package/dist/auth/google/client/index.js

@@ -49,6 +49,7 @@ function GoogleAuthProvider({
   const [isAdmin, setIsAdmin] = useState(false);
   const [isEditing, setIsEditing] = useState(false);
   const [ready, setReady] = useState(false);
+  const [failed, setFailed] = useState(false);
   const allowed = useRef(
     (adminEmails != null ? adminEmails : []).map((e) => e.trim().toLowerCase())
   );
@@ -79,8 +80,10 @@ function GoogleAuthProvider({
     if (existing) applyToken(existing);
   }, [cookieName, applyToken]);
   useEffect(() => {
-    function init() {
-      if (!window.google) return;
+    let cancelled = false;
+    function tryInit() {
+      var _a, _b;
+      if (cancelled || !((_b = (_a = window.google) == null ? void 0 : _a.accounts) == null ? void 0 : _b.id)) return false;
       window.google.accounts.id.initialize({
         client_id: clientId,
         callback: (res) => applyToken(res.credential),
@@ -88,24 +91,29 @@ function GoogleAuthProvider({
         cancel_on_tap_outside: true
       });
       setReady(true);
+      return true;
     }
-    if (window.google) {
-      init();
-      return;
+    if (tryInit()) return;
+    if (!document.querySelector(`script[src="${GSI_SRC}"]`)) {
+      const script = document.createElement("script");
+      script.src = GSI_SRC;
+      script.async = true;
+      script.defer = true;
+      document.head.appendChild(script);
     }
-    const existing = document.querySelector(
-      `script[src="${GSI_SRC}"]`
-    );
-    if (existing) {
-      existing.addEventListener("load", init);
-      return () => existing.removeEventListener("load", init);
-    }
-    const script = document.createElement("script");
-    script.src = GSI_SRC;
-    script.async = true;
-    script.defer = true;
-    script.onload = init;
-    document.head.appendChild(script);
+    const startedAt = Date.now();
+    const timer = setInterval(() => {
+      if (tryInit()) {
+        clearInterval(timer);
+      } else if (Date.now() - startedAt > 1e4) {
+        clearInterval(timer);
+        if (!cancelled) setFailed(true);
+      }
+    }, 120);
+    return () => {
+      cancelled = true;
+      clearInterval(timer);
+    };
   }, [clientId, applyToken]);
   useEffect(() => {
     const originalFetch = window.fetch;
@@ -156,6 +164,7 @@ function GoogleAuthProvider({
         isEditing,
         toggleEdit,
         ready,
+        failed,
         promptSignIn,
         renderButton,
         logout: doLogout

package/dist/auth/google/client/index.js.map

@@ -1 +1 @@
-{"version":3,"sources":["../../../../src/auth/google/client/index.tsx"],"sourcesContent":["\"use client\";\n\nimport {\n  createContext,\n  useCallback,\n  useContext,\n  useEffect,\n  useRef,\n  useState,\n  type ReactNode,\n} from \"react\";\n// Imported via the public specifier so we share the SAME context instance as\n// the consumer's edit primitives at runtime (see tsup `external` + tsconfig paths).\nimport { CmsAuthProvider } from \"@dalgoridim/headless-cms/client\";\n\n/**\n * Client provider for **Google Identity Services** sign-in — the Firebase-free\n * counterpart to `FirebaseAuthProvider`. It loads the GSI script, lets the user\n * sign in with Google, stashes the resulting ID token in a cookie for the\n * server `googleAuth` adapter to verify, and feeds the shared CMS auth context\n * so the edit primitives light up. Admin status is optimistic on the client\n * (via `adminEmails`); the server gate remains authoritative.\n */\n\nconst GSI_SRC = \"https://accounts.google.com/gsi/client\";\n\n/** Minimal slice of the Google Identity Services API we use. */\ninterface GsiCredentialResponse {\n  credential: string;\n}\ninterface GsiButtonOptions {\n  type?: \"standard\" | \"icon\";\n  theme?: \"outline\" | \"filled_blue\" | \"filled_black\";\n  size?: \"small\" | \"medium\" | \"large\";\n  text?: \"signin_with\" | \"signup_with\" | \"continue_with\" | \"signin\";\n  shape?: \"rectangular\" | \"pill\" | \"circle\" | \"square\";\n  width?: number;\n}\ninterface GsiClient {\n  accounts: {\n    id: {\n      initialize: (config: {\n        client_id: string;\n        callback: (res: GsiCredentialResponse) => void;\n        auto_select?: boolean;\n        cancel_on_tap_outside?: boolean;\n      }) => void;\n      prompt: () => void;\n      renderButton: (el: HTMLElement, options?: GsiButtonOptions) => void;\n      disableAutoSelect: () => void;\n    };\n  };\n}\n\ndeclare global {\n  interface Window {\n    google?: GsiClient;\n  }\n}\n\nexport interface GoogleUser {\n  sub: string;\n  email?: string;\n  name?: string;\n  picture?: string;\n}\n\nexport interface GoogleAuthProviderProps {\n  children: ReactNode;\n  /** OAuth 2.0 Web client ID (from Google Cloud Console → Credentials). */\n  clientId: string;\n  /**\n   * Optional admin allowlist for *optimistic* client-side `isAdmin`. The server\n   * `googleAuth` adapter still enforces the real gate. Omit to treat any\n   * successful sign-in as optimistically admin (server will correct via 401).\n   */\n  adminEmails?: string[];\n  /** Cookie name for the ID token. Default `adminToken`. */\n  cookieName?: string;\n  /** Called when a 401 `{ logout: true }` response is intercepted. */\n  onLogout?: () => void;\n}\n\nexport interface GoogleAuthContextValue {\n  user: GoogleUser | null;\n  isAdmin: boolean;\n  isEditing: boolean;\n  toggleEdit: () => void;\n  /** True once the GSI script has loaded and the client is initialized. */\n  ready: boolean;\n  /** Trigger Google One Tap / sign-in prompt. */\n  promptSignIn: () => void;\n  /** Render the official Google button into `el` (most reliable trigger). */\n  renderButton: (el: HTMLElement, options?: GsiButtonOptions) => void;\n  logout: () => void;\n}\n\nconst GoogleAuthContext = createContext<GoogleAuthContextValue | undefined>(\n  undefined,\n);\n\nfunction setCookie(name: string, value: string) {\n  document.cookie = `${name}=${encodeURIComponent(value)}; path=/; samesite=lax`;\n}\nfunction deleteCookie(name: string) {\n  document.cookie = `${name}=; path=/; expires=Thu, 01 Jan 1970 00:00:00 GMT`;\n}\nfunction readCookie(name: string): string | null {\n  for (const part of document.cookie.split(\";\")) {\n    const [k, ...v] = part.trim().split(\"=\");\n    if (k === name) return decodeURIComponent(v.join(\"=\"));\n  }\n  return null;\n}\n\n/** Decode a JWT payload client-side (no verification — the server does that). */\nfunction decodeJwt(token: string): (GoogleUser & { exp?: number }) | null {\n  try {\n    const payload = token.split(\".\")[1];\n    const json = atob(payload.replace(/-/g, \"+\").replace(/_/g, \"/\"));\n    const data = JSON.parse(json) as {\n      sub: string;\n      email?: string;\n      name?: string;\n      picture?: string;\n      exp?: number;\n    };\n    return data;\n  } catch {\n    return null;\n  }\n}\n\nexport function GoogleAuthProvider({\n  children,\n  clientId,\n  adminEmails,\n  cookieName = \"adminToken\",\n  onLogout,\n}: GoogleAuthProviderProps) {\n  const [user, setUser] = useState<GoogleUser | null>(null);\n  const [isAdmin, setIsAdmin] = useState(false);\n  const [isEditing, setIsEditing] = useState(false);\n  const [ready, setReady] = useState(false);\n  const allowed = useRef(\n    (adminEmails ?? []).map((e) => e.trim().toLowerCase()),\n  );\n\n  const applyToken = useCallback(\n    (token: string) => {\n      const claims = decodeJwt(token);\n      if (!claims) return;\n      if (claims.exp && claims.exp * 1000 <= Date.now()) {\n        deleteCookie(cookieName);\n        return;\n      }\n      const email = claims.email?.toLowerCase();\n      // Optimistic: if no allowlist supplied, trust the sign-in and let the\n      // server correct a non-admin via the 401 interceptor below.\n      const admin =\n        allowed.current.length === 0\n          ? true\n          : !!email && allowed.current.includes(email);\n      setCookie(cookieName, token);\n      setUser({\n        sub: claims.sub,\n        email: claims.email,\n        name: claims.name,\n        picture: claims.picture,\n      });\n      setIsAdmin(admin);\n    },\n    [cookieName],\n  );\n\n  // Restore an existing session from the cookie on mount.\n  useEffect(() => {\n    const existing = readCookie(cookieName);\n    if (existing) applyToken(existing);\n  }, [cookieName, applyToken]);\n\n  // Load the GSI script and initialize the One Tap / button client.\n  useEffect(() => {\n    function init() {\n      if (!window.google) return;\n      window.google.accounts.id.initialize({\n        client_id: clientId,\n        callback: (res) => applyToken(res.credential),\n        auto_select: false,\n        cancel_on_tap_outside: true,\n      });\n      setReady(true);\n    }\n\n    if (window.google) {\n      init();\n      return;\n    }\n    const existing = document.querySelector<HTMLScriptElement>(\n      `script[src=\"${GSI_SRC}\"]`,\n    );\n    if (existing) {\n      existing.addEventListener(\"load\", init);\n      return () => existing.removeEventListener(\"load\", init);\n    }\n    const script = document.createElement(\"script\");\n    script.src = GSI_SRC;\n    script.async = true;\n    script.defer = true;\n    script.onload = init;\n    document.head.appendChild(script);\n  }, [clientId, applyToken]);\n\n  // Intercept admin 401s so an expired/forbidden session forces sign-out.\n  useEffect(() => {\n    const originalFetch = window.fetch;\n    window.fetch = async (...args: Parameters<typeof fetch>) => {\n      const response = await originalFetch(...args);\n      if (response.status === 401) {\n        try {\n          const data = await response.clone().json();\n          if (data?.logout) doLogout();\n        } catch {\n          /* not a JSON body — ignore */\n        }\n      }\n      return response;\n    };\n    return () => {\n      window.fetch = originalFetch;\n    };\n    // eslint-disable-next-line react-hooks/exhaustive-deps\n  }, []);\n\n  function doLogout() {\n    window.google?.accounts.id.disableAutoSelect();\n    deleteCookie(cookieName);\n    setUser(null);\n    setIsAdmin(false);\n    setIsEditing(false);\n    onLogout?.();\n  }\n\n  const promptSignIn = useCallback(() => {\n    if (!ready) return;\n    window.google?.accounts.id.prompt();\n  }, [ready]);\n\n  const renderButton = useCallback(\n    (el: HTMLElement, options?: GsiButtonOptions) => {\n      if (!ready) return;\n      window.google?.accounts.id.renderButton(el, options);\n    },\n    [ready],\n  );\n\n  const toggleEdit = useCallback(() => setIsEditing((p) => !p), []);\n\n  return (\n    <GoogleAuthContext.Provider\n      value={{\n        user,\n        isAdmin,\n        isEditing,\n        toggleEdit,\n        ready,\n        promptSignIn,\n        renderButton,\n        logout: doLogout,\n      }}\n    >\n      <CmsAuthProvider value={{ isAdmin, isEditing, toggleEdit }}>\n        {children}\n      </CmsAuthProvider>\n    </GoogleAuthContext.Provider>\n  );\n}\n\n/** Google auth API (user/login/logout) for login pages and toolbars. */\nexport function useGoogleAuth(): GoogleAuthContextValue {\n  const ctx = useContext(GoogleAuthContext);\n  if (!ctx) {\n    throw new Error(\"useGoogleAuth must be used within a GoogleAuthProvider\");\n  }\n  return ctx;\n}\n"],"mappings":";;;AAEA;AAAA,EACE;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,OAEK;AAGP,SAAS,uBAAuB;AAkQ1B;AAvPN,IAAM,UAAU;AAyEhB,IAAM,oBAAoB;AAAA,EACxB;AACF;AAEA,SAAS,UAAU,MAAc,OAAe;AAC9C,WAAS,SAAS,GAAG,IAAI,IAAI,mBAAmB,KAAK,CAAC;AACxD;AACA,SAAS,aAAa,MAAc;AAClC,WAAS,SAAS,GAAG,IAAI;AAC3B;AACA,SAAS,WAAW,MAA6B;AAC/C,aAAW,QAAQ,SAAS,OAAO,MAAM,GAAG,GAAG;AAC7C,UAAM,CAAC,GAAG,GAAG,CAAC,IAAI,KAAK,KAAK,EAAE,MAAM,GAAG;AACvC,QAAI,MAAM,KAAM,QAAO,mBAAmB,EAAE,KAAK,GAAG,CAAC;AAAA,EACvD;AACA,SAAO;AACT;AAGA,SAAS,UAAU,OAAuD;AACxE,MAAI;AACF,UAAM,UAAU,MAAM,MAAM,GAAG,EAAE,CAAC;AAClC,UAAM,OAAO,KAAK,QAAQ,QAAQ,MAAM,GAAG,EAAE,QAAQ,MAAM,GAAG,CAAC;AAC/D,UAAM,OAAO,KAAK,MAAM,IAAI;AAO5B,WAAO;AAAA,EACT,SAAQ;AACN,WAAO;AAAA,EACT;AACF;AAEO,SAAS,mBAAmB;AAAA,EACjC;AAAA,EACA;AAAA,EACA;AAAA,EACA,aAAa;AAAA,EACb;AACF,GAA4B;AAC1B,QAAM,CAAC,MAAM,OAAO,IAAI,SAA4B,IAAI;AACxD,QAAM,CAAC,SAAS,UAAU,IAAI,SAAS,KAAK;AAC5C,QAAM,CAAC,WAAW,YAAY,IAAI,SAAS,KAAK;AAChD,QAAM,CAAC,OAAO,QAAQ,IAAI,SAAS,KAAK;AACxC,QAAM,UAAU;AAAA,KACb,oCAAe,CAAC,GAAG,IAAI,CAAC,MAAM,EAAE,KAAK,EAAE,YAAY,CAAC;AAAA,EACvD;AAEA,QAAM,aAAa;AAAA,IACjB,CAAC,UAAkB;AArJvB;AAsJM,YAAM,SAAS,UAAU,KAAK;AAC9B,UAAI,CAAC,OAAQ;AACb,UAAI,OAAO,OAAO,OAAO,MAAM,OAAQ,KAAK,IAAI,GAAG;AACjD,qBAAa,UAAU;AACvB;AAAA,MACF;AACA,YAAM,SAAQ,YAAO,UAAP,mBAAc;AAG5B,YAAM,QACJ,QAAQ,QAAQ,WAAW,IACvB,OACA,CAAC,CAAC,SAAS,QAAQ,QAAQ,SAAS,KAAK;AAC/C,gBAAU,YAAY,KAAK;AAC3B,cAAQ;AAAA,QACN,KAAK,OAAO;AAAA,QACZ,OAAO,OAAO;AAAA,QACd,MAAM,OAAO;AAAA,QACb,SAAS,OAAO;AAAA,MAClB,CAAC;AACD,iBAAW,KAAK;AAAA,IAClB;AAAA,IACA,CAAC,UAAU;AAAA,EACb;AAGA,YAAU,MAAM;AACd,UAAM,WAAW,WAAW,UAAU;AACtC,QAAI,SAAU,YAAW,QAAQ;AAAA,EACnC,GAAG,CAAC,YAAY,UAAU,CAAC;AAG3B,YAAU,MAAM;AACd,aAAS,OAAO;AACd,UAAI,CAAC,OAAO,OAAQ;AACpB,aAAO,OAAO,SAAS,GAAG,WAAW;AAAA,QACnC,WAAW;AAAA,QACX,UAAU,CAAC,QAAQ,WAAW,IAAI,UAAU;AAAA,QAC5C,aAAa;AAAA,QACb,uBAAuB;AAAA,MACzB,CAAC;AACD,eAAS,IAAI;AAAA,IACf;AAEA,QAAI,OAAO,QAAQ;AACjB,WAAK;AACL;AAAA,IACF;AACA,UAAM,WAAW,SAAS;AAAA,MACxB,eAAe,OAAO;AAAA,IACxB;AACA,QAAI,UAAU;AACZ,eAAS,iBAAiB,QAAQ,IAAI;AACtC,aAAO,MAAM,SAAS,oBAAoB,QAAQ,IAAI;AAAA,IACxD;AACA,UAAM,SAAS,SAAS,cAAc,QAAQ;AAC9C,WAAO,MAAM;AACb,WAAO,QAAQ;AACf,WAAO,QAAQ;AACf,WAAO,SAAS;AAChB,aAAS,KAAK,YAAY,MAAM;AAAA,EAClC,GAAG,CAAC,UAAU,UAAU,CAAC;AAGzB,YAAU,MAAM;AACd,UAAM,gBAAgB,OAAO;AAC7B,WAAO,QAAQ,UAAU,SAAmC;AAC1D,YAAM,WAAW,MAAM,cAAc,GAAG,IAAI;AAC5C,UAAI,SAAS,WAAW,KAAK;AAC3B,YAAI;AACF,gBAAM,OAAO,MAAM,SAAS,MAAM,EAAE,KAAK;AACzC,cAAI,6BAAM,OAAQ,UAAS;AAAA,QAC7B,SAAQ;AAAA,QAER;AAAA,MACF;AACA,aAAO;AAAA,IACT;AACA,WAAO,MAAM;AACX,aAAO,QAAQ;AAAA,IACjB;AAAA,EAEF,GAAG,CAAC,CAAC;AAEL,WAAS,WAAW;AA1OtB;AA2OI,iBAAO,WAAP,mBAAe,SAAS,GAAG;AAC3B,iBAAa,UAAU;AACvB,YAAQ,IAAI;AACZ,eAAW,KAAK;AAChB,iBAAa,KAAK;AAClB;AAAA,EACF;AAEA,QAAM,eAAe,YAAY,MAAM;AAnPzC;AAoPI,QAAI,CAAC,MAAO;AACZ,iBAAO,WAAP,mBAAe,SAAS,GAAG;AAAA,EAC7B,GAAG,CAAC,KAAK,CAAC;AAEV,QAAM,eAAe;AAAA,IACnB,CAAC,IAAiB,YAA+B;AAzPrD;AA0PM,UAAI,CAAC,MAAO;AACZ,mBAAO,WAAP,mBAAe,SAAS,GAAG,aAAa,IAAI;AAAA,IAC9C;AAAA,IACA,CAAC,KAAK;AAAA,EACR;AAEA,QAAM,aAAa,YAAY,MAAM,aAAa,CAAC,MAAM,CAAC,CAAC,GAAG,CAAC,CAAC;AAEhE,SACE;AAAA,IAAC,kBAAkB;AAAA,IAAlB;AAAA,MACC,OAAO;AAAA,QACL;AAAA,QACA;AAAA,QACA;AAAA,QACA;AAAA,QACA;AAAA,QACA;AAAA,QACA;AAAA,QACA,QAAQ;AAAA,MACV;AAAA,MAEA,8BAAC,mBAAgB,OAAO,EAAE,SAAS,WAAW,WAAW,GACtD,UACH;AAAA;AAAA,EACF;AAEJ;AAGO,SAAS,gBAAwC;AACtD,QAAM,MAAM,WAAW,iBAAiB;AACxC,MAAI,CAAC,KAAK;AACR,UAAM,IAAI,MAAM,wDAAwD;AAAA,EAC1E;AACA,SAAO;AACT;","names":[]}
+{"version":3,"sources":["../../../../src/auth/google/client/index.tsx"],"sourcesContent":["\"use client\";\n\nimport {\n  createContext,\n  useCallback,\n  useContext,\n  useEffect,\n  useRef,\n  useState,\n  type ReactNode,\n} from \"react\";\n// Imported via the public specifier so we share the SAME context instance as\n// the consumer's edit primitives at runtime (see tsup `external` + tsconfig paths).\nimport { CmsAuthProvider } from \"@dalgoridim/headless-cms/client\";\n\n/**\n * Client provider for **Google Identity Services** sign-in — the Firebase-free\n * counterpart to `FirebaseAuthProvider`. It loads the GSI script, lets the user\n * sign in with Google, stashes the resulting ID token in a cookie for the\n * server `googleAuth` adapter to verify, and feeds the shared CMS auth context\n * so the edit primitives light up. Admin status is optimistic on the client\n * (via `adminEmails`); the server gate remains authoritative.\n */\n\nconst GSI_SRC = \"https://accounts.google.com/gsi/client\";\n\n/** Minimal slice of the Google Identity Services API we use. */\ninterface GsiCredentialResponse {\n  credential: string;\n}\ninterface GsiButtonOptions {\n  type?: \"standard\" | \"icon\";\n  theme?: \"outline\" | \"filled_blue\" | \"filled_black\";\n  size?: \"small\" | \"medium\" | \"large\";\n  text?: \"signin_with\" | \"signup_with\" | \"continue_with\" | \"signin\";\n  shape?: \"rectangular\" | \"pill\" | \"circle\" | \"square\";\n  width?: number;\n}\ninterface GsiClient {\n  accounts: {\n    id: {\n      initialize: (config: {\n        client_id: string;\n        callback: (res: GsiCredentialResponse) => void;\n        auto_select?: boolean;\n        cancel_on_tap_outside?: boolean;\n      }) => void;\n      prompt: () => void;\n      renderButton: (el: HTMLElement, options?: GsiButtonOptions) => void;\n      disableAutoSelect: () => void;\n    };\n  };\n}\n\ndeclare global {\n  interface Window {\n    google?: GsiClient;\n  }\n}\n\nexport interface GoogleUser {\n  sub: string;\n  email?: string;\n  name?: string;\n  picture?: string;\n}\n\nexport interface GoogleAuthProviderProps {\n  children: ReactNode;\n  /** OAuth 2.0 Web client ID (from Google Cloud Console → Credentials). */\n  clientId: string;\n  /**\n   * Optional admin allowlist for *optimistic* client-side `isAdmin`. The server\n   * `googleAuth` adapter still enforces the real gate. Omit to treat any\n   * successful sign-in as optimistically admin (server will correct via 401).\n   */\n  adminEmails?: string[];\n  /** Cookie name for the ID token. Default `adminToken`. */\n  cookieName?: string;\n  /** Called when a 401 `{ logout: true }` response is intercepted. */\n  onLogout?: () => void;\n}\n\nexport interface GoogleAuthContextValue {\n  user: GoogleUser | null;\n  isAdmin: boolean;\n  isEditing: boolean;\n  toggleEdit: () => void;\n  /** True once the GSI script has loaded and the client is initialized. */\n  ready: boolean;\n  /** True if GSI failed to load within the timeout (blocked/offline). */\n  failed: boolean;\n  /** Trigger Google One Tap / sign-in prompt. */\n  promptSignIn: () => void;\n  /** Render the official Google button into `el` (most reliable trigger). */\n  renderButton: (el: HTMLElement, options?: GsiButtonOptions) => void;\n  logout: () => void;\n}\n\nconst GoogleAuthContext = createContext<GoogleAuthContextValue | undefined>(\n  undefined,\n);\n\nfunction setCookie(name: string, value: string) {\n  document.cookie = `${name}=${encodeURIComponent(value)}; path=/; samesite=lax`;\n}\nfunction deleteCookie(name: string) {\n  document.cookie = `${name}=; path=/; expires=Thu, 01 Jan 1970 00:00:00 GMT`;\n}\nfunction readCookie(name: string): string | null {\n  for (const part of document.cookie.split(\";\")) {\n    const [k, ...v] = part.trim().split(\"=\");\n    if (k === name) return decodeURIComponent(v.join(\"=\"));\n  }\n  return null;\n}\n\n/** Decode a JWT payload client-side (no verification — the server does that). */\nfunction decodeJwt(token: string): (GoogleUser & { exp?: number }) | null {\n  try {\n    const payload = token.split(\".\")[1];\n    const json = atob(payload.replace(/-/g, \"+\").replace(/_/g, \"/\"));\n    const data = JSON.parse(json) as {\n      sub: string;\n      email?: string;\n      name?: string;\n      picture?: string;\n      exp?: number;\n    };\n    return data;\n  } catch {\n    return null;\n  }\n}\n\nexport function GoogleAuthProvider({\n  children,\n  clientId,\n  adminEmails,\n  cookieName = \"adminToken\",\n  onLogout,\n}: GoogleAuthProviderProps) {\n  const [user, setUser] = useState<GoogleUser | null>(null);\n  const [isAdmin, setIsAdmin] = useState(false);\n  const [isEditing, setIsEditing] = useState(false);\n  const [ready, setReady] = useState(false);\n  const [failed, setFailed] = useState(false);\n  const allowed = useRef(\n    (adminEmails ?? []).map((e) => e.trim().toLowerCase()),\n  );\n\n  const applyToken = useCallback(\n    (token: string) => {\n      const claims = decodeJwt(token);\n      if (!claims) return;\n      if (claims.exp && claims.exp * 1000 <= Date.now()) {\n        deleteCookie(cookieName);\n        return;\n      }\n      const email = claims.email?.toLowerCase();\n      // Optimistic: if no allowlist supplied, trust the sign-in and let the\n      // server correct a non-admin via the 401 interceptor below.\n      const admin =\n        allowed.current.length === 0\n          ? true\n          : !!email && allowed.current.includes(email);\n      setCookie(cookieName, token);\n      setUser({\n        sub: claims.sub,\n        email: claims.email,\n        name: claims.name,\n        picture: claims.picture,\n      });\n      setIsAdmin(admin);\n    },\n    [cookieName],\n  );\n\n  // Restore an existing session from the cookie on mount.\n  useEffect(() => {\n    const existing = readCookie(cookieName);\n    if (existing) applyToken(existing);\n  }, [cookieName, applyToken]);\n\n  // Load the GSI script and initialize the client. Polling (rather than relying\n  // on a `load` event) makes this robust against React's dev double-mount, a\n  // cached/already-loaded script, and missed load events — any of which could\n  // otherwise leave `ready` stuck false and the UI spinning forever.\n  useEffect(() => {\n    let cancelled = false;\n\n    function tryInit(): boolean {\n      if (cancelled || !window.google?.accounts?.id) return false;\n      window.google.accounts.id.initialize({\n        client_id: clientId,\n        callback: (res) => applyToken(res.credential),\n        auto_select: false,\n        cancel_on_tap_outside: true,\n      });\n      setReady(true);\n      return true;\n    }\n\n    if (tryInit()) return;\n\n    // Ensure the script tag exists exactly once across mounts.\n    if (!document.querySelector(`script[src=\"${GSI_SRC}\"]`)) {\n      const script = document.createElement(\"script\");\n      script.src = GSI_SRC;\n      script.async = true;\n      script.defer = true;\n      document.head.appendChild(script);\n    }\n\n    const startedAt = Date.now();\n    const timer = setInterval(() => {\n      if (tryInit()) {\n        clearInterval(timer);\n      } else if (Date.now() - startedAt > 10_000) {\n        // Blocked (ad/privacy extension) or offline — surface a failure so the\n        // UI can show a fallback instead of an endless spinner.\n        clearInterval(timer);\n        if (!cancelled) setFailed(true);\n      }\n    }, 120);\n\n    return () => {\n      cancelled = true;\n      clearInterval(timer);\n    };\n  }, [clientId, applyToken]);\n\n  // Intercept admin 401s so an expired/forbidden session forces sign-out.\n  useEffect(() => {\n    const originalFetch = window.fetch;\n    window.fetch = async (...args: Parameters<typeof fetch>) => {\n      const response = await originalFetch(...args);\n      if (response.status === 401) {\n        try {\n          const data = await response.clone().json();\n          if (data?.logout) doLogout();\n        } catch {\n          /* not a JSON body — ignore */\n        }\n      }\n      return response;\n    };\n    return () => {\n      window.fetch = originalFetch;\n    };\n    // eslint-disable-next-line react-hooks/exhaustive-deps\n  }, []);\n\n  function doLogout() {\n    window.google?.accounts.id.disableAutoSelect();\n    deleteCookie(cookieName);\n    setUser(null);\n    setIsAdmin(false);\n    setIsEditing(false);\n    onLogout?.();\n  }\n\n  const promptSignIn = useCallback(() => {\n    if (!ready) return;\n    window.google?.accounts.id.prompt();\n  }, [ready]);\n\n  const renderButton = useCallback(\n    (el: HTMLElement, options?: GsiButtonOptions) => {\n      if (!ready) return;\n      window.google?.accounts.id.renderButton(el, options);\n    },\n    [ready],\n  );\n\n  const toggleEdit = useCallback(() => setIsEditing((p) => !p), []);\n\n  return (\n    <GoogleAuthContext.Provider\n      value={{\n        user,\n        isAdmin,\n        isEditing,\n        toggleEdit,\n        ready,\n        failed,\n        promptSignIn,\n        renderButton,\n        logout: doLogout,\n      }}\n    >\n      <CmsAuthProvider value={{ isAdmin, isEditing, toggleEdit }}>\n        {children}\n      </CmsAuthProvider>\n    </GoogleAuthContext.Provider>\n  );\n}\n\n/** Google auth API (user/login/logout) for login pages and toolbars. */\nexport function useGoogleAuth(): GoogleAuthContextValue {\n  const ctx = useContext(GoogleAuthContext);\n  if (!ctx) {\n    throw new Error(\"useGoogleAuth must be used within a GoogleAuthProvider\");\n  }\n  return ctx;\n}\n"],"mappings":";;;AAEA;AAAA,EACE;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,OAEK;AAGP,SAAS,uBAAuB;AAsR1B;AA3QN,IAAM,UAAU;AA2EhB,IAAM,oBAAoB;AAAA,EACxB;AACF;AAEA,SAAS,UAAU,MAAc,OAAe;AAC9C,WAAS,SAAS,GAAG,IAAI,IAAI,mBAAmB,KAAK,CAAC;AACxD;AACA,SAAS,aAAa,MAAc;AAClC,WAAS,SAAS,GAAG,IAAI;AAC3B;AACA,SAAS,WAAW,MAA6B;AAC/C,aAAW,QAAQ,SAAS,OAAO,MAAM,GAAG,GAAG;AAC7C,UAAM,CAAC,GAAG,GAAG,CAAC,IAAI,KAAK,KAAK,EAAE,MAAM,GAAG;AACvC,QAAI,MAAM,KAAM,QAAO,mBAAmB,EAAE,KAAK,GAAG,CAAC;AAAA,EACvD;AACA,SAAO;AACT;AAGA,SAAS,UAAU,OAAuD;AACxE,MAAI;AACF,UAAM,UAAU,MAAM,MAAM,GAAG,EAAE,CAAC;AAClC,UAAM,OAAO,KAAK,QAAQ,QAAQ,MAAM,GAAG,EAAE,QAAQ,MAAM,GAAG,CAAC;AAC/D,UAAM,OAAO,KAAK,MAAM,IAAI;AAO5B,WAAO;AAAA,EACT,SAAQ;AACN,WAAO;AAAA,EACT;AACF;AAEO,SAAS,mBAAmB;AAAA,EACjC;AAAA,EACA;AAAA,EACA;AAAA,EACA,aAAa;AAAA,EACb;AACF,GAA4B;AAC1B,QAAM,CAAC,MAAM,OAAO,IAAI,SAA4B,IAAI;AACxD,QAAM,CAAC,SAAS,UAAU,IAAI,SAAS,KAAK;AAC5C,QAAM,CAAC,WAAW,YAAY,IAAI,SAAS,KAAK;AAChD,QAAM,CAAC,OAAO,QAAQ,IAAI,SAAS,KAAK;AACxC,QAAM,CAAC,QAAQ,SAAS,IAAI,SAAS,KAAK;AAC1C,QAAM,UAAU;AAAA,KACb,oCAAe,CAAC,GAAG,IAAI,CAAC,MAAM,EAAE,KAAK,EAAE,YAAY,CAAC;AAAA,EACvD;AAEA,QAAM,aAAa;AAAA,IACjB,CAAC,UAAkB;AAxJvB;AAyJM,YAAM,SAAS,UAAU,KAAK;AAC9B,UAAI,CAAC,OAAQ;AACb,UAAI,OAAO,OAAO,OAAO,MAAM,OAAQ,KAAK,IAAI,GAAG;AACjD,qBAAa,UAAU;AACvB;AAAA,MACF;AACA,YAAM,SAAQ,YAAO,UAAP,mBAAc;AAG5B,YAAM,QACJ,QAAQ,QAAQ,WAAW,IACvB,OACA,CAAC,CAAC,SAAS,QAAQ,QAAQ,SAAS,KAAK;AAC/C,gBAAU,YAAY,KAAK;AAC3B,cAAQ;AAAA,QACN,KAAK,OAAO;AAAA,QACZ,OAAO,OAAO;AAAA,QACd,MAAM,OAAO;AAAA,QACb,SAAS,OAAO;AAAA,MAClB,CAAC;AACD,iBAAW,KAAK;AAAA,IAClB;AAAA,IACA,CAAC,UAAU;AAAA,EACb;AAGA,YAAU,MAAM;AACd,UAAM,WAAW,WAAW,UAAU;AACtC,QAAI,SAAU,YAAW,QAAQ;AAAA,EACnC,GAAG,CAAC,YAAY,UAAU,CAAC;AAM3B,YAAU,MAAM;AACd,QAAI,YAAY;AAEhB,aAAS,UAAmB;AA/LhC;AAgMM,UAAI,aAAa,GAAC,kBAAO,WAAP,mBAAe,aAAf,mBAAyB,IAAI,QAAO;AACtD,aAAO,OAAO,SAAS,GAAG,WAAW;AAAA,QACnC,WAAW;AAAA,QACX,UAAU,CAAC,QAAQ,WAAW,IAAI,UAAU;AAAA,QAC5C,aAAa;AAAA,QACb,uBAAuB;AAAA,MACzB,CAAC;AACD,eAAS,IAAI;AACb,aAAO;AAAA,IACT;AAEA,QAAI,QAAQ,EAAG;AAGf,QAAI,CAAC,SAAS,cAAc,eAAe,OAAO,IAAI,GAAG;AACvD,YAAM,SAAS,SAAS,cAAc,QAAQ;AAC9C,aAAO,MAAM;AACb,aAAO,QAAQ;AACf,aAAO,QAAQ;AACf,eAAS,KAAK,YAAY,MAAM;AAAA,IAClC;AAEA,UAAM,YAAY,KAAK,IAAI;AAC3B,UAAM,QAAQ,YAAY,MAAM;AAC9B,UAAI,QAAQ,GAAG;AACb,sBAAc,KAAK;AAAA,MACrB,WAAW,KAAK,IAAI,IAAI,YAAY,KAAQ;AAG1C,sBAAc,KAAK;AACnB,YAAI,CAAC,UAAW,WAAU,IAAI;AAAA,MAChC;AAAA,IACF,GAAG,GAAG;AAEN,WAAO,MAAM;AACX,kBAAY;AACZ,oBAAc,KAAK;AAAA,IACrB;AAAA,EACF,GAAG,CAAC,UAAU,UAAU,CAAC;AAGzB,YAAU,MAAM;AACd,UAAM,gBAAgB,OAAO;AAC7B,WAAO,QAAQ,UAAU,SAAmC;AAC1D,YAAM,WAAW,MAAM,cAAc,GAAG,IAAI;AAC5C,UAAI,SAAS,WAAW,KAAK;AAC3B,YAAI;AACF,gBAAM,OAAO,MAAM,SAAS,MAAM,EAAE,KAAK;AACzC,cAAI,6BAAM,OAAQ,UAAS;AAAA,QAC7B,SAAQ;AAAA,QAER;AAAA,MACF;AACA,aAAO;AAAA,IACT;AACA,WAAO,MAAM;AACX,aAAO,QAAQ;AAAA,IACjB;AAAA,EAEF,GAAG,CAAC,CAAC;AAEL,WAAS,WAAW;AA7PtB;AA8PI,iBAAO,WAAP,mBAAe,SAAS,GAAG;AAC3B,iBAAa,UAAU;AACvB,YAAQ,IAAI;AACZ,eAAW,KAAK;AAChB,iBAAa,KAAK;AAClB;AAAA,EACF;AAEA,QAAM,eAAe,YAAY,MAAM;AAtQzC;AAuQI,QAAI,CAAC,MAAO;AACZ,iBAAO,WAAP,mBAAe,SAAS,GAAG;AAAA,EAC7B,GAAG,CAAC,KAAK,CAAC;AAEV,QAAM,eAAe;AAAA,IACnB,CAAC,IAAiB,YAA+B;AA5QrD;AA6QM,UAAI,CAAC,MAAO;AACZ,mBAAO,WAAP,mBAAe,SAAS,GAAG,aAAa,IAAI;AAAA,IAC9C;AAAA,IACA,CAAC,KAAK;AAAA,EACR;AAEA,QAAM,aAAa,YAAY,MAAM,aAAa,CAAC,MAAM,CAAC,CAAC,GAAG,CAAC,CAAC;AAEhE,SACE;AAAA,IAAC,kBAAkB;AAAA,IAAlB;AAAA,MACC,OAAO;AAAA,QACL;AAAA,QACA;AAAA,QACA;AAAA,QACA;AAAA,QACA;AAAA,QACA;AAAA,QACA;AAAA,QACA;AAAA,QACA,QAAQ;AAAA,MACV;AAAA,MAEA,8BAAC,mBAAgB,OAAO,EAAE,SAAS,WAAW,WAAW,GACtD,UACH;AAAA;AAAA,EACF;AAEJ;AAGO,SAAS,gBAAwC;AACtD,QAAM,MAAM,WAAW,iBAAiB;AACxC,MAAI,CAAC,KAAK;AACR,UAAM,IAAI,MAAM,wDAAwD;AAAA,EAC1E;AACA,SAAO;AACT;","names":[]}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@dalgoridim/headless-cms",
-  "version": "0.3.0",
+  "version": "0.3.1",
   "description": "Database-agnostic, inline-edit headless CMS engine for React / Next.js apps",
   "license": "UNLICENSED",
   "author": "dalgoridim",