@guard-rail/core 0.1.0

package/dist/core/config.js

@@ -0,0 +1,46 @@
+let _config = null;
+function configureGuardrail(config) {
+  _config = config;
+}
+function required(key) {
+  const value = _config?.[key];
+  if (!value) {
+    throw new Error(
+      `Guardrail: no ${String(key)} adapter configured. Pass one to withGuardrail(Layout, { db, auth, members }).`
+    );
+  }
+  return value;
+}
+function getDB() {
+  return required("db");
+}
+function getAuth() {
+  return required("auth");
+}
+function getMembers() {
+  return required("members");
+}
+function getStorage() {
+  return _config?.storage;
+}
+function getRepeaters() {
+  return required("repeaters");
+}
+function getInviteHandler() {
+  return _config?.onInvite;
+}
+async function resolveSiteId() {
+  const sid = _config?.siteId ?? "default";
+  return typeof sid === "function" ? await sid() : sid || "default";
+}
+export {
+  configureGuardrail,
+  getAuth,
+  getDB,
+  getInviteHandler,
+  getMembers,
+  getRepeaters,
+  getStorage,
+  resolveSiteId
+};
+//# sourceMappingURL=config.js.map

package/dist/core/config.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../../src/core/config.ts"],"sourcesContent":["import type {\n  GRConfig,\n  GRAuthAdapter,\n  GRDBAdapter,\n  GRMembershipAdapter,\n  GRRepeaterAdapter,\n  GRStorageAdapter,\n} from \"./adapter-types\";\n\nlet _config: GRConfig | null = null;\n\n/**\n * Registers the adapters Guardrail should use.\n *\n * Idempotent, and re-applied on every render by withGuardrail: Next.js does not\n * guarantee one shared module instance across the SSR graph, the server-action\n * graph, and the workers used for static generation, so config registered once\n * at startup is simply absent in some of them.\n *\n * Core has no knowledge of any particular backend — there is no default and no\n * fallback. An app names its adapters explicitly or Guardrail refuses to run.\n */\nexport function configureGuardrail(config: GRConfig): void {\n  _config = config;\n}\n\nfunction required<K extends keyof GRConfig>(key: K): GRConfig[K] {\n  const value = _config?.[key];\n  if (!value) {\n    throw new Error(\n      `Guardrail: no ${String(key)} adapter configured. Pass one to ` +\n        `withGuardrail(Layout, { db, auth, members }).`,\n    );\n  }\n  return value;\n}\n\nexport function getDB(): GRDBAdapter {\n  return required(\"db\") as GRDBAdapter;\n}\n\nexport function getAuth(): GRAuthAdapter {\n  return required(\"auth\") as GRAuthAdapter;\n}\n\nexport function getMembers(): GRMembershipAdapter {\n  return required(\"members\") as GRMembershipAdapter;\n}\n\n/** Optional — sites without editable images need no storage. */\nexport function getStorage(): GRStorageAdapter | undefined {\n  return _config?.storage;\n}\n\n/** Throws with a clear message if no page on this site uses <GRepeater>. */\nexport function getRepeaters(): GRRepeaterAdapter {\n  return required(\"repeaters\") as GRRepeaterAdapter;\n}\n\nexport function getInviteHandler(): GRConfig[\"onInvite\"] {\n  return _config?.onInvite;\n}\n\nexport async function resolveSiteId(): Promise<string> {\n  const sid = _config?.siteId ?? \"default\";\n  return typeof sid === \"function\" ? await sid() : sid || \"default\";\n}\n"],"mappings":"AASA,IAAI,UAA2B;AAaxB,SAAS,mBAAmB,QAAwB;AACzD,YAAU;AACZ;AAEA,SAAS,SAAmC,KAAqB;AAC/D,QAAM,QAAQ,UAAU,GAAG;AAC3B,MAAI,CAAC,OAAO;AACV,UAAM,IAAI;AAAA,MACR,iBAAiB,OAAO,GAAG,CAAC;AAAA,IAE9B;AAAA,EACF;AACA,SAAO;AACT;AAEO,SAAS,QAAqB;AACnC,SAAO,SAAS,IAAI;AACtB;AAEO,SAAS,UAAyB;AACvC,SAAO,SAAS,MAAM;AACxB;AAEO,SAAS,aAAkC;AAChD,SAAO,SAAS,SAAS;AAC3B;AAGO,SAAS,aAA2C;AACzD,SAAO,SAAS;AAClB;AAGO,SAAS,eAAkC;AAChD,SAAO,SAAS,WAAW;AAC7B;AAEO,SAAS,mBAAyC;AACvD,SAAO,SAAS;AAClB;AAEA,eAAsB,gBAAiC;AACrD,QAAM,MAAM,SAAS,UAAU;AAC/B,SAAO,OAAO,QAAQ,aAAa,MAAM,IAAI,IAAI,OAAO;AAC1D;","names":[]}

package/dist/core/defs.d.ts

@@ -0,0 +1,22 @@
+declare const GR_COOKIES: {
+    /** Signals intent to edit. Not a credential — carries no authority on its own. */
+    readonly EDIT_MODE: "gr_edit_mode";
+};
+/**
+ * Dedicated Postgres schema, not `public`. A name prefix alone only guards
+ * against accidental collisions; it does nothing against a `supabase db
+ * reset`, a broad `DROP ... CASCADE`, or a migration tool that diffs and
+ * "reconciles" everything in `public` as if it owns that namespace. A
+ * separate schema keeps Guardrail's tables outside that blast radius —
+ * the same reason auth.* and storage.* are their own schemas, not public.*.
+ *
+ * Requires "guardrail" to be added under Settings > API > Exposed schemas in
+ * the Supabase dashboard — PostgREST only serves schemas on that list, and no
+ * migration can add itself to it.
+ */
+declare const GR_SCHEMA = "guardrail";
+declare const GR_TABLE = "gr_content";
+declare const GR_MEMBERS_TABLE = "gr_members";
+declare const GR_REPEATER_TABLE = "gr_repeater_items";
+
+export { GR_COOKIES, GR_MEMBERS_TABLE, GR_REPEATER_TABLE, GR_SCHEMA, GR_TABLE };

package/dist/core/defs.js

@@ -0,0 +1,16 @@
+const GR_COOKIES = {
+  /** Signals intent to edit. Not a credential — carries no authority on its own. */
+  EDIT_MODE: "gr_edit_mode"
+};
+const GR_SCHEMA = "guardrail";
+const GR_TABLE = "gr_content";
+const GR_MEMBERS_TABLE = "gr_members";
+const GR_REPEATER_TABLE = "gr_repeater_items";
+export {
+  GR_COOKIES,
+  GR_MEMBERS_TABLE,
+  GR_REPEATER_TABLE,
+  GR_SCHEMA,
+  GR_TABLE
+};
+//# sourceMappingURL=defs.js.map

package/dist/core/defs.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../../src/core/defs.ts"],"sourcesContent":["export const GR_COOKIES = {\n  /** Signals intent to edit. Not a credential — carries no authority on its own. */\n  EDIT_MODE: \"gr_edit_mode\",\n} as const;\n\n/**\n * Dedicated Postgres schema, not `public`. A name prefix alone only guards\n * against accidental collisions; it does nothing against a `supabase db\n * reset`, a broad `DROP ... CASCADE`, or a migration tool that diffs and\n * \"reconciles\" everything in `public` as if it owns that namespace. A\n * separate schema keeps Guardrail's tables outside that blast radius —\n * the same reason auth.* and storage.* are their own schemas, not public.*.\n *\n * Requires \"guardrail\" to be added under Settings > API > Exposed schemas in\n * the Supabase dashboard — PostgREST only serves schemas on that list, and no\n * migration can add itself to it.\n */\nexport const GR_SCHEMA = \"guardrail\";\n\nexport const GR_TABLE = \"gr_content\";\nexport const GR_MEMBERS_TABLE = \"gr_members\";\nexport const GR_REPEATER_TABLE = \"gr_repeater_items\";\n"],"mappings":"AAAO,MAAM,aAAa;AAAA;AAAA,EAExB,WAAW;AACb;AAcO,MAAM,YAAY;AAElB,MAAM,WAAW;AACjB,MAAM,mBAAmB;AACzB,MAAM,oBAAoB;","names":[]}

package/dist/core/types.d.ts

@@ -0,0 +1,136 @@
+import { JSX, ReactNode, ComponentPropsWithoutRef } from 'react';
+
+type HTMLKeys = keyof JSX.IntrinsicElements;
+type OverrideType = "text" | "link" | "image" | "button";
+interface OverrideValue {
+    type: OverrideType;
+    text?: string;
+    href?: string;
+    src?: string;
+    /** Lives on the content row, not the asset: one image, different pages, different alt. */
+    alt?: string;
+    /**
+     * Natural size of the chosen image, measured in the browser when it is picked.
+     * Stored with the usage so rendering needs no lookup and storage adapters need
+     * no metadata table.
+     */
+    width?: number;
+    height?: number;
+}
+/** A stored file as a storage adapter describes it. */
+interface GRAsset {
+    /** Provider-side identifier — for Supabase, the object path. */
+    id: string;
+    /** Public URL, ready to render. */
+    url: string;
+    name: string;
+    size?: number;
+    contentType?: string;
+    createdAt?: string;
+}
+interface OverrideRow {
+    id: string;
+    pathKey: string;
+    value: OverrideValue;
+}
+/**
+ * next/image props that have no intrinsic-element equivalent. A field rendered
+ * with type="image" goes through next/image, so these have to be accepted even
+ * when `as` is "img".
+ */
+interface NextImageExtras {
+    priority?: boolean;
+    fill?: boolean;
+    sizes?: string;
+    quality?: number;
+    placeholder?: "blur" | "empty";
+    blurDataURL?: string;
+    unoptimized?: boolean;
+}
+type PolymorphicProps<T extends HTMLKeys> = {
+    as?: T;
+    id: string;
+    type?: OverrideType;
+    children?: ReactNode;
+    /**
+     * Set false to always render plain markup, even for a signed-in editor —
+     * the same output an anonymous visitor gets, with no click-to-edit
+     * affordance at all. For a field inside a link to that content's own page
+     * (a product card, say), this keeps the card purely a link and pushes
+     * editing to the canonical route instead of fighting the link for clicks.
+     */
+    editable?: boolean;
+} & NextImageExtras & Omit<ComponentPropsWithoutRef<T>, "id" | "type" | "children" | "editable" | keyof NextImageExtras>;
+/**
+ * Both roles may edit content; only admin manages the team. There is no
+ * read-only "viewer" — anyone who can't edit sees exactly what an anonymous
+ * visitor sees, which is already the site's own frontend.
+ */
+type GRRole = "admin" | "editor";
+interface GRMember {
+    /** Null until a pending invite is claimed by a sign-in. */
+    userId: string | null;
+    email: string;
+    role: GRRole;
+    status: "active" | "pending";
+    invitedAt?: string;
+}
+/**
+ * A signed-in person as seen by one site: identity plus the role they hold
+ * there. Identity comes from the auth provider, the role from Guardrail's own
+ * membership store, so the two are never conflated.
+ */
+interface GRViewer {
+    userId: string;
+    email?: string;
+    /** Null when signed in but not a member of this site. */
+    role: GRRole | null;
+}
+/**
+ * What the configured auth adapter can actually do, resolved on the server and
+ * passed down. Client components cannot inspect a server-side adapter, so the
+ * capabilities have to travel with the state.
+ */
+interface GRAuthCapabilities {
+    /** The adapter accepts email/password, so the built-in form is usable. */
+    password: boolean;
+    /** Where to send people when it does not. */
+    signInUrl?: string;
+}
+interface GRState {
+    isAuth: boolean;
+    isEditMode: boolean;
+    siteId: string;
+    /** Null when the signed-in user holds no role on this site. */
+    role: GRRole | null;
+    email?: string;
+    auth: GRAuthCapabilities;
+    /** A storage adapter is configured, so images can be uploaded and picked. */
+    storage: boolean;
+}
+/**
+ * One instance inside a repeater — a service card, a blog post, a product.
+ * Its content fields are ordinary OverrideRows, namespaced under
+ * `${repeaterId}.${item.id}.${fieldId}` by convention. There is no schema
+ * beyond that: the shape of an item is whatever JSX the developer's template
+ * component renders, identical to any other Guardrail field.
+ */
+interface GRRepeaterItem {
+    /** Stable, internal, never shown — only used to namespace this item's fields. */
+    id: string;
+    /**
+     * Present only when the repeater is routed: the URL segment for this item's
+     * own page, e.g. "wool-throw" for /products/wool-throw. A repeater with no
+     * routing (a row of cards on one page) leaves every item's slug undefined.
+     */
+    slug?: string;
+    order: number;
+}
+type ActionState = {
+    success?: boolean;
+    error?: string;
+    email?: string;
+    password?: string;
+};
+
+export type { ActionState, GRAsset, GRAuthCapabilities, GRMember, GRRepeaterItem, GRRole, GRState, GRViewer, HTMLKeys, NextImageExtras, OverrideRow, OverrideType, OverrideValue, PolymorphicProps };

package/dist/core/types.js

@@ -0,0 +1 @@
+//# sourceMappingURL=types.js.map

package/dist/core/types.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":[],"sourcesContent":[],"mappings":"","names":[]}

package/dist/index.d.ts

@@ -0,0 +1,13 @@
+export { withGuardrail } from './server/wrapper.js';
+export { createAssetUpload, inviteMember, listAssets, listTeam, removeMember, updateMemberRole } from './server/actions.js';
+export { GRail } from './react/GRail/index.js';
+export { GRepeater, GRepeaterProps, RepeaterItemProps } from './react/Repeater/index.js';
+export { configureGuardrail } from './core/config.js';
+export { getRepeaterItemBySlug, listRepeaterItems } from './server/repeaterData.js';
+export { getFieldValue } from './server/fieldData.js';
+export { addRepeaterItem, removeRepeaterItem, reorderRepeaterItems } from './server/repeaterActions.js';
+export { useGRail } from './react/Provider.js';
+export { GRAsset, GRMember, GRRepeaterItem, GRRole, GRState, GRViewer, HTMLKeys, OverrideRow, OverrideType, OverrideValue, PolymorphicProps } from './core/types.js';
+export { AuthResult, GRAuthAdapter, GRConfig, GRDBAdapter, GRInviteEvent, GRMembershipAdapter, GRRepeaterAdapter, GRSession, GRStorageAdapter, GRStorageRow, GRUploadTarget } from './core/adapter-types.js';
+import 'react/jsx-runtime';
+import 'react';

package/dist/index.js

@@ -0,0 +1,43 @@
+import { withGuardrail } from "./server/wrapper";
+import {
+  listTeam,
+  inviteMember,
+  updateMemberRole,
+  removeMember,
+  createAssetUpload,
+  listAssets
+} from "./server/actions";
+import { GRail } from "./react/GRail";
+import { GRepeater } from "./react/Repeater";
+import { configureGuardrail } from "./core/config";
+import {
+  listRepeaterItems,
+  getRepeaterItemBySlug
+} from "./server/repeaterData";
+import { getFieldValue } from "./server/fieldData";
+import {
+  addRepeaterItem,
+  removeRepeaterItem,
+  reorderRepeaterItems
+} from "./server/repeaterActions";
+import { useGRail } from "./react/Provider";
+export {
+  GRail,
+  GRepeater,
+  addRepeaterItem,
+  configureGuardrail,
+  createAssetUpload,
+  getFieldValue,
+  getRepeaterItemBySlug,
+  inviteMember,
+  listAssets,
+  listRepeaterItems,
+  listTeam,
+  removeMember,
+  removeRepeaterItem,
+  reorderRepeaterItems,
+  updateMemberRole,
+  useGRail,
+  withGuardrail
+};
+//# sourceMappingURL=index.js.map

package/dist/index.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../src/index.ts"],"sourcesContent":["// Server-safe entry. Client components are reached through the files that\n// carry their own \"use client\" directive, so importing this from a Server\n// Component does not pull the editor into the client bundle.\nexport { withGuardrail } from \"./server/wrapper\";\n\n// Team management, exported so an app can build its own UI instead of using\n// the bundled drawer.\nexport {\n  listTeam,\n  inviteMember,\n  updateMemberRole,\n  removeMember,\n  createAssetUpload,\n  listAssets,\n} from \"./server/actions\";\nexport { GRail } from \"./react/GRail\";\nexport { GRepeater } from \"./react/Repeater\";\nexport type { GRepeaterProps, RepeaterItemProps } from \"./react/Repeater\";\nexport { configureGuardrail } from \"./core/config\";\nexport {\n  listRepeaterItems,\n  getRepeaterItemBySlug,\n} from \"./server/repeaterData\";\nexport { getFieldValue } from \"./server/fieldData\";\n// Mutations, exported so an app can build its own add/remove/reorder UI\n// instead of the bundled chrome — same rationale as the team actions above.\nexport {\n  addRepeaterItem,\n  removeRepeaterItem,\n  reorderRepeaterItems,\n} from \"./server/repeaterActions\";\nexport { useGRail } from \"./react/Provider\";\n\nexport type {\n  GRState,\n  GRRole,\n  GRMember,\n  GRViewer,\n  GRAsset,\n  GRRepeaterItem,\n  OverrideRow,\n  OverrideValue,\n  OverrideType,\n  PolymorphicProps,\n  HTMLKeys,\n} from \"./core/types\";\nexport type {\n  GRConfig,\n  GRMembershipAdapter,\n  GRInviteEvent,\n  GRStorageAdapter,\n  GRUploadTarget,\n  GRRepeaterAdapter,\n  GRDBAdapter,\n  GRAuthAdapter,\n  GRSession,\n  GRStorageRow,\n  AuthResult,\n} from \"./core/adapter-types\";\n"],"mappings":"AAGA,SAAS,qBAAqB;AAI9B;AAAA,EACE;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,OACK;AACP,SAAS,aAAa;AACtB,SAAS,iBAAiB;AAE1B,SAAS,0BAA0B;AACnC;AAAA,EACE;AAAA,EACA;AAAA,OACK;AACP,SAAS,qBAAqB;AAG9B;AAAA,EACE;AAAA,EACA;AAAA,EACA;AAAA,OACK;AACP,SAAS,gBAAgB;","names":[]}

package/dist/react/Admin.d.ts

@@ -0,0 +1,8 @@
+import * as react_jsx_runtime from 'react/jsx-runtime';
+import React from 'react';
+
+declare function GRailAdmin({ toolbarExtra }: {
+    toolbarExtra?: React.ReactNode;
+}): react_jsx_runtime.JSX.Element | null;
+
+export { GRailAdmin };

package/dist/react/Admin.js

@@ -0,0 +1,116 @@
+"use client";
+import { Fragment, jsx, jsxs } from "react/jsx-runtime";
+import React, { useActionState, useEffect, useState } from "react";
+import { usePathname, useRouter } from "next/navigation";
+import { loginAction, logoutAction } from "../server/actions";
+import { useGRail } from "./Provider";
+import { TeamDrawer } from "./Team";
+import { LogOutIcon, PeopleIcon } from "./Icons";
+import { S } from "./styles";
+const initialState = { email: "", password: "" };
+function GRailAdmin({ toolbarExtra }) {
+  const { isAuth, isEditMode, role, auth } = useGRail();
+  const [teamOpen, setTeamOpen] = useState(false);
+  const [formState, formAction, isPending] = useActionState(
+    loginAction,
+    initialState
+  );
+  const router = useRouter();
+  const pathname = usePathname();
+  useEffect(() => {
+    if (formState.success) router.refresh();
+  }, [formState.success, router]);
+  const signOut = async () => {
+    await logoutAction();
+    document.cookie = "gr_edit_mode=; path=/; expires=Thu, 01 Jan 1970 00:00:00 GMT";
+    window.location.href = pathname;
+  };
+  if (!isEditMode) return null;
+  if (!isAuth) {
+    if (!auth.password) {
+      return /* @__PURE__ */ jsx("div", { "data-guardrail": true, style: S.banner, children: /* @__PURE__ */ jsxs("div", { style: S.bannerForm, children: [
+        /* @__PURE__ */ jsx("span", { style: S.brand, children: "Guardrail" }),
+        auth.signInUrl ? /* @__PURE__ */ jsx("a", { href: auth.signInUrl, style: { ...S.primaryBtn, textDecoration: "none" }, children: "Sign in" }) : /* @__PURE__ */ jsx("span", { style: { fontSize: 12, color: "#6b7280" }, children: "No sign-in method is configured for this site." })
+      ] }) });
+    }
+    return /* @__PURE__ */ jsx("div", { "data-guardrail": true, style: S.banner, children: /* @__PURE__ */ jsxs("form", { action: formAction, style: S.bannerForm, children: [
+      /* @__PURE__ */ jsx("span", { style: S.brand, children: "Guardrail" }),
+      formState.error && /* @__PURE__ */ jsx("span", { style: S.error, children: formState.error }),
+      /* @__PURE__ */ jsx(
+        "input",
+        {
+          name: "email",
+          type: "email",
+          placeholder: "Email",
+          defaultValue: formState.email,
+          required: true,
+          style: S.input
+        }
+      ),
+      /* @__PURE__ */ jsx(
+        "input",
+        {
+          name: "password",
+          type: "password",
+          placeholder: "Password",
+          required: true,
+          style: S.input
+        }
+      ),
+      /* @__PURE__ */ jsx("button", { type: "submit", disabled: isPending, style: S.primaryBtn, children: isPending ? "Authenticating\u2026" : "Sign In" })
+    ] }) });
+  }
+  if (!role) {
+    return /* @__PURE__ */ jsxs("div", { "data-guardrail": true, style: S.toolbar, children: [
+      /* @__PURE__ */ jsx("span", { style: S.toolbarLabel, children: "No access to this site" }),
+      /* @__PURE__ */ jsx("span", { style: S.divider }),
+      /* @__PURE__ */ jsx(
+        "button",
+        {
+          style: { ...S.iconBtn, color: "#9ca3af" },
+          onClick: signOut,
+          title: "Log out",
+          "aria-label": "Log out",
+          children: /* @__PURE__ */ jsx(LogOutIcon, {})
+        }
+      )
+    ] });
+  }
+  return /* @__PURE__ */ jsxs(Fragment, { children: [
+    teamOpen && /* @__PURE__ */ jsx(TeamDrawer, { onClose: () => setTeamOpen(false) }),
+    /* @__PURE__ */ jsxs("div", { "data-guardrail": true, style: S.toolbar, children: [
+      /* @__PURE__ */ jsx("span", { style: S.dot }),
+      /* @__PURE__ */ jsx("span", { style: S.toolbarLabel, children: "Edit Mode" }),
+      /* @__PURE__ */ jsx("span", { style: S.divider }),
+      /* @__PURE__ */ jsx(
+        "button",
+        {
+          style: { ...S.iconBtn, color: "#9ca3af", width: 24, height: 24 },
+          onClick: () => setTeamOpen(true),
+          title: "Team",
+          "aria-label": "Team",
+          children: /* @__PURE__ */ jsx(PeopleIcon, {})
+        }
+      ),
+      toolbarExtra && /* @__PURE__ */ jsxs(Fragment, { children: [
+        /* @__PURE__ */ jsx("span", { style: S.divider }),
+        toolbarExtra
+      ] }),
+      /* @__PURE__ */ jsx("span", { style: S.divider }),
+      /* @__PURE__ */ jsx(
+        "button",
+        {
+          style: { ...S.iconBtn, color: "#9ca3af" },
+          onClick: signOut,
+          title: "Log out",
+          "aria-label": "Log out",
+          children: /* @__PURE__ */ jsx(LogOutIcon, {})
+        }
+      )
+    ] })
+  ] });
+}
+export {
+  GRailAdmin
+};
+//# sourceMappingURL=Admin.js.map

package/dist/react/Admin.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../../src/react/Admin.tsx"],"sourcesContent":["\"use client\";\n\nimport React, { useActionState, useEffect, useState } from \"react\";\nimport { usePathname, useRouter } from \"next/navigation\";\nimport { loginAction, logoutAction } from \"../server/actions\";\nimport { useGRail } from \"./Provider\";\nimport { TeamDrawer } from \"./Team\";\nimport { LogOutIcon, PeopleIcon } from \"./Icons\";\nimport { S } from \"./styles\";\nimport type { ActionState } from \"../core/types\";\n\nconst initialState: ActionState = { email: \"\", password: \"\" };\n\nexport function GRailAdmin({ toolbarExtra }: { toolbarExtra?: React.ReactNode }) {\n  const { isAuth, isEditMode, role, auth } = useGRail();\n  const [teamOpen, setTeamOpen] = useState(false);\n  const [formState, formAction, isPending] = useActionState(\n    loginAction,\n    initialState,\n  );\n  const router = useRouter();\n  const pathname = usePathname();\n\n  useEffect(() => {\n    if (formState.success) router.refresh();\n  }, [formState.success, router]);\n\n  const signOut = async () => {\n    await logoutAction();\n    document.cookie =\n      \"gr_edit_mode=; path=/; expires=Thu, 01 Jan 1970 00:00:00 GMT\";\n    window.location.href = pathname;\n  };\n\n  // No intent signalled — render nothing at all.\n  if (!isEditMode) return null;\n\n  if (!isAuth) {\n    // The adapter cannot take a password here, so hand sign-in off rather than\n    // showing a form that could never succeed.\n    if (!auth.password) {\n      return (\n        <div data-guardrail style={S.banner}>\n          <div style={S.bannerForm}>\n            <span style={S.brand}>Guardrail</span>\n            {auth.signInUrl ? (\n              <a href={auth.signInUrl} style={{ ...S.primaryBtn, textDecoration: \"none\" }}>\n                Sign in\n              </a>\n            ) : (\n              <span style={{ fontSize: 12, color: \"#6b7280\" }}>\n                No sign-in method is configured for this site.\n              </span>\n            )}\n          </div>\n        </div>\n      );\n    }\n\n    return (\n      <div data-guardrail style={S.banner}>\n        <form action={formAction} style={S.bannerForm}>\n          <span style={S.brand}>Guardrail</span>\n          {formState.error && <span style={S.error}>{formState.error}</span>}\n          <input\n            name=\"email\"\n            type=\"email\"\n            placeholder=\"Email\"\n            defaultValue={formState.email}\n            required\n            style={S.input}\n          />\n          <input\n            name=\"password\"\n            type=\"password\"\n            placeholder=\"Password\"\n            required\n            style={S.input}\n          />\n          <button type=\"submit\" disabled={isPending} style={S.primaryBtn}>\n            {isPending ? \"Authenticating…\" : \"Sign In\"}\n          </button>\n        </form>\n      </div>\n    );\n  }\n\n  // Signed in, but holds no role on this site.\n  if (!role) {\n    return (\n      <div data-guardrail style={S.toolbar}>\n        <span style={S.toolbarLabel}>No access to this site</span>\n        <span style={S.divider} />\n        <button\n          style={{ ...S.iconBtn, color: \"#9ca3af\" }}\n          onClick={signOut}\n          title=\"Log out\"\n          aria-label=\"Log out\"\n        >\n          <LogOutIcon />\n        </button>\n      </div>\n    );\n  }\n\n  return (\n    <>\n      {teamOpen && <TeamDrawer onClose={() => setTeamOpen(false)} />}\n      <div data-guardrail style={S.toolbar}>\n        <span style={S.dot} />\n        <span style={S.toolbarLabel}>Edit Mode</span>\n        <span style={S.divider} />\n        <button\n          style={{ ...S.iconBtn, color: \"#9ca3af\", width: 24, height: 24 }}\n          onClick={() => setTeamOpen(true)}\n          title=\"Team\"\n          aria-label=\"Team\"\n        >\n          <PeopleIcon />\n        </button>\n\n        {toolbarExtra && (\n          <>\n            <span style={S.divider} />\n            {toolbarExtra}\n          </>\n        )}\n\n        <span style={S.divider} />\n        <button\n          style={{ ...S.iconBtn, color: \"#9ca3af\" }}\n          onClick={signOut}\n          title=\"Log out\"\n          aria-label=\"Log out\"\n        >\n          <LogOutIcon />\n        </button>\n      </div>\n    </>\n  );\n}\n"],"mappings":";AA2CU,SA+EA,UA9EE,KADF;AAzCV,OAAO,SAAS,gBAAgB,WAAW,gBAAgB;AAC3D,SAAS,aAAa,iBAAiB;AACvC,SAAS,aAAa,oBAAoB;AAC1C,SAAS,gBAAgB;AACzB,SAAS,kBAAkB;AAC3B,SAAS,YAAY,kBAAkB;AACvC,SAAS,SAAS;AAGlB,MAAM,eAA4B,EAAE,OAAO,IAAI,UAAU,GAAG;AAErD,SAAS,WAAW,EAAE,aAAa,GAAuC;AAC/E,QAAM,EAAE,QAAQ,YAAY,MAAM,KAAK,IAAI,SAAS;AACpD,QAAM,CAAC,UAAU,WAAW,IAAI,SAAS,KAAK;AAC9C,QAAM,CAAC,WAAW,YAAY,SAAS,IAAI;AAAA,IACzC;AAAA,IACA;AAAA,EACF;AACA,QAAM,SAAS,UAAU;AACzB,QAAM,WAAW,YAAY;AAE7B,YAAU,MAAM;AACd,QAAI,UAAU,QAAS,QAAO,QAAQ;AAAA,EACxC,GAAG,CAAC,UAAU,SAAS,MAAM,CAAC;AAE9B,QAAM,UAAU,YAAY;AAC1B,UAAM,aAAa;AACnB,aAAS,SACP;AACF,WAAO,SAAS,OAAO;AAAA,EACzB;AAGA,MAAI,CAAC,WAAY,QAAO;AAExB,MAAI,CAAC,QAAQ;AAGX,QAAI,CAAC,KAAK,UAAU;AAClB,aACE,oBAAC,SAAI,kBAAc,MAAC,OAAO,EAAE,QAC3B,+BAAC,SAAI,OAAO,EAAE,YACZ;AAAA,4BAAC,UAAK,OAAO,EAAE,OAAO,uBAAS;AAAA,QAC9B,KAAK,YACJ,oBAAC,OAAE,MAAM,KAAK,WAAW,OAAO,EAAE,GAAG,EAAE,YAAY,gBAAgB,OAAO,GAAG,qBAE7E,IAEA,oBAAC,UAAK,OAAO,EAAE,UAAU,IAAI,OAAO,UAAU,GAAG,4DAEjD;AAAA,SAEJ,GACF;AAAA,IAEJ;AAEA,WACE,oBAAC,SAAI,kBAAc,MAAC,OAAO,EAAE,QAC3B,+BAAC,UAAK,QAAQ,YAAY,OAAO,EAAE,YACjC;AAAA,0BAAC,UAAK,OAAO,EAAE,OAAO,uBAAS;AAAA,MAC9B,UAAU,SAAS,oBAAC,UAAK,OAAO,EAAE,OAAQ,oBAAU,OAAM;AAAA,MAC3D;AAAA,QAAC;AAAA;AAAA,UACC,MAAK;AAAA,UACL,MAAK;AAAA,UACL,aAAY;AAAA,UACZ,cAAc,UAAU;AAAA,UACxB,UAAQ;AAAA,UACR,OAAO,EAAE;AAAA;AAAA,MACX;AAAA,MACA;AAAA,QAAC;AAAA;AAAA,UACC,MAAK;AAAA,UACL,MAAK;AAAA,UACL,aAAY;AAAA,UACZ,UAAQ;AAAA,UACR,OAAO,EAAE;AAAA;AAAA,MACX;AAAA,MACA,oBAAC,YAAO,MAAK,UAAS,UAAU,WAAW,OAAO,EAAE,YACjD,sBAAY,yBAAoB,WACnC;AAAA,OACF,GACF;AAAA,EAEJ;AAGA,MAAI,CAAC,MAAM;AACT,WACE,qBAAC,SAAI,kBAAc,MAAC,OAAO,EAAE,SAC3B;AAAA,0BAAC,UAAK,OAAO,EAAE,cAAc,oCAAsB;AAAA,MACnD,oBAAC,UAAK,OAAO,EAAE,SAAS;AAAA,MACxB;AAAA,QAAC;AAAA;AAAA,UACC,OAAO,EAAE,GAAG,EAAE,SAAS,OAAO,UAAU;AAAA,UACxC,SAAS;AAAA,UACT,OAAM;AAAA,UACN,cAAW;AAAA,UAEX,8BAAC,cAAW;AAAA;AAAA,MACd;AAAA,OACF;AAAA,EAEJ;AAEA,SACE,iCACG;AAAA,gBAAY,oBAAC,cAAW,SAAS,MAAM,YAAY,KAAK,GAAG;AAAA,IAC5D,qBAAC,SAAI,kBAAc,MAAC,OAAO,EAAE,SAC3B;AAAA,0BAAC,UAAK,OAAO,EAAE,KAAK;AAAA,MACpB,oBAAC,UAAK,OAAO,EAAE,cAAc,uBAAS;AAAA,MACtC,oBAAC,UAAK,OAAO,EAAE,SAAS;AAAA,MACxB;AAAA,QAAC;AAAA;AAAA,UACC,OAAO,EAAE,GAAG,EAAE,SAAS,OAAO,WAAW,OAAO,IAAI,QAAQ,GAAG;AAAA,UAC/D,SAAS,MAAM,YAAY,IAAI;AAAA,UAC/B,OAAM;AAAA,UACN,cAAW;AAAA,UAEX,8BAAC,cAAW;AAAA;AAAA,MACd;AAAA,MAEC,gBACC,iCACE;AAAA,4BAAC,UAAK,OAAO,EAAE,SAAS;AAAA,QACvB;AAAA,SACH;AAAA,MAGF,oBAAC,UAAK,OAAO,EAAE,SAAS;AAAA,MACxB;AAAA,QAAC;AAAA;AAAA,UACC,OAAO,EAAE,GAAG,EAAE,SAAS,OAAO,UAAU;AAAA,UACxC,SAAS;AAAA,UACT,OAAM;AAAA,UACN,cAAW;AAAA,UAEX,8BAAC,cAAW;AAAA;AAAA,MACd;AAAA,OACF;AAAA,KACF;AAEJ;","names":[]}

package/dist/react/GRail/client.d.ts

@@ -0,0 +1,11 @@
+import * as react_jsx_runtime from 'react/jsx-runtime';
+import { HTMLKeys, OverrideRow } from '../../core/types.js';
+import 'react';
+
+declare function GRailClient({ as, initialOverride, ...htmlProps }: {
+    as?: HTMLKeys;
+    initialOverride: OverrideRow;
+    [key: string]: unknown;
+}): react_jsx_runtime.JSX.Element;
+
+export { GRailClient };