@guard-rail/core 0.2.0 → 0.3.0

package/dist/server/loader.js

@@ -1,5 +1,5 @@
 import { cache } from "react";
-import { getDB, resolveSiteId } from "../core/config";
+import { getDB, getPrefetch, resolveSiteId } from "../core/config";
 import { rethrowIfBailout } from "../core/bailout";
 const getLoader = cache(() => {
   let pending = [];
@@ -26,17 +26,52 @@ const getLoader = cache(() => {
       for (const p of batch) p.reject(e);
     }
   };
-  return {
-    load(key) {
-      return new Promise((resolve, reject) => {
-        pending.push({ key, resolve, reject });
-        if (!scheduled) {
-          scheduled = true;
-          queueMicrotask(flush);
-        }
-      });
+  const enqueue = (key) => new Promise((resolve, reject) => {
+    pending.push({ key, resolve, reject });
+    if (!scheduled) {
+      scheduled = true;
+      queueMicrotask(flush);
+    }
+  });
+  let preload;
+  const runPreload = async () => {
+    try {
+      const prefetch = getPrefetch();
+      const db = getDB();
+      if (!prefetch || !db.listOverrides) return null;
+      const siteId = await resolveSiteId();
+      const started = Date.now();
+      const { rows, truncated } = await db.listOverrides(siteId, prefetch);
+      if (process.env.GUARDRAIL_DEBUG) {
+        console.log(
+          `[guardrail] preload: ${rows.length} row(s) in 1 query (${Date.now() - started}ms) site=${siteId}${prefetch.prefix ? ` prefix=${prefetch.prefix.join("|")}` : ""}${truncated ? " TRUNCATED" : ""}`
+        );
+      }
+      return {
+        byKey: new Map(rows.map((r) => [r.pathKey, r])),
+        // Scoping by prefix or hitting the ceiling both mean "not every row."
+        complete: !prefetch.prefix && !truncated,
+        truncated
+      };
+    } catch (e) {
+      rethrowIfBailout(e);
+      console.error("Guardrail: content preload failed", e);
+      return null;
     }
   };
+  const getPreload = () => preload ??= runPreload();
+  return {
+    async load(key) {
+      const pre = await getPreload();
+      if (pre) {
+        const hit = pre.byKey.get(key);
+        if (hit) return hit;
+        if (pre.complete) return null;
+      }
+      return enqueue(key);
+    },
+    getPreload
+  };
 });
 async function loadOverride(pathKey) {
   try {
@@ -47,7 +82,35 @@ async function loadOverride(pathKey) {
     return null;
   }
 }
+let warnedTruncated = false;
+let warnedSize = false;
+const SIZE_WARN_CHARS = 1e5;
+async function loadPreloadedContent() {
+  const pre = await getLoader().getPreload();
+  if (!pre) return void 0;
+  const values = {};
+  for (const [key, row] of pre.byKey) values[key] = row.value;
+  if (process.env.NODE_ENV !== "production") {
+    if (pre.truncated && !warnedTruncated) {
+      warnedTruncated = true;
+      console.warn(
+        `Guardrail: this site has more content rows than the preload ceiling (${pre.byKey.size}). <GRail>s inside Client Components beyond it fall back to their JSX. Scope it with withGuardrail(..., { prefetch: { prefix: ["home.", "header."] } }) or raise prefetch.limit.`
+      );
+    }
+    if (!warnedSize) {
+      const size = JSON.stringify(values).length;
+      if (size > SIZE_WARN_CHARS) {
+        warnedSize = true;
+        console.warn(
+          `Guardrail: preloaded content for Client Components is ~${Math.round(size / 1e3)}KB and ships in every page. Consider scoping it with prefetch.prefix.`
+        );
+      }
+    }
+  }
+  return { values, complete: pre.complete };
+}
 export {
-  loadOverride
+  loadOverride,
+  loadPreloadedContent
 };
 //# sourceMappingURL=loader.js.map

package/dist/server/loader.js.map

@@ -1 +1 @@
-{"version":3,"sources":["../../src/server/loader.ts"],"sourcesContent":["import { cache } from \"react\";\nimport { getDB, resolveSiteId } from \"../core/config\";\nimport { rethrowIfBailout } from \"../core/bailout\";\nimport type { OverrideRow } from \"../core/types\";\n\ninterface Pending {\n  key: string;\n  resolve: (row: OverrideRow | null) => void;\n  reject: (error: unknown) => void;\n}\n\n/**\n * Request-scoped batching loader.\n *\n * Every <GRail> resolves its own field, so a naive implementation issues one\n * query per field. This collects the keys requested within a microtask and\n * flushes them as a single query. React renders siblings concurrently, so a\n * page's fields land in the same batch; a field nested behind another await\n * simply falls into a later batch rather than degrading to one query each.\n *\n * cache() scopes the queue to a single request so keys never leak between\n * concurrent renders.\n */\nconst getLoader = cache(() => {\n  let pending: Pending[] = [];\n  let scheduled = false;\n\n  const flush = async () => {\n    const batch = pending;\n    pending = [];\n    scheduled = false;\n    if (batch.length === 0) return;\n\n    // One lookup per distinct key, even if several fields share it.\n    const keys = [...new Set(batch.map((p) => p.key))];\n\n    try {\n      const db = getDB();\n      const siteId = await resolveSiteId();\n      const started = Date.now();\n      const rows = await db.getOverrides(keys, siteId);\n\n      if (process.env.GUARDRAIL_DEBUG) {\n        console.log(\n          `[guardrail] batch: ${keys.length} key(s) -> ${rows.length} row(s) ` +\n            `in 1 query (${Date.now() - started}ms) ` +\n            `site=${siteId} keys=${keys.join(\", \")}`,\n        );\n      }\n      const byKey = new Map(rows.map((r) => [r.pathKey, r]));\n      for (const p of batch) p.resolve(byKey.get(p.key) ?? null);\n    } catch (e) {\n      for (const p of batch) p.reject(e);\n    }\n  };\n\n  return {\n    load(key: string): Promise<OverrideRow | null> {\n      return new Promise<OverrideRow | null>((resolve, reject) => {\n        pending.push({ key, resolve, reject });\n        if (!scheduled) {\n          scheduled = true;\n          queueMicrotask(flush);\n        }\n      });\n    },\n  };\n});\n\nexport async function loadOverride(\n  pathKey: string,\n): Promise<OverrideRow | null> {\n  try {\n    return await getLoader().load(pathKey);\n  } catch (e) {\n    rethrowIfBailout(e);\n    console.error(\"Guardrail: failed to load override\", e);\n    return null;\n  }\n}\n"],"mappings":"AAAA,SAAS,aAAa;AACtB,SAAS,OAAO,qBAAqB;AACrC,SAAS,wBAAwB;AAqBjC,MAAM,YAAY,MAAM,MAAM;AAC5B,MAAI,UAAqB,CAAC;AAC1B,MAAI,YAAY;AAEhB,QAAM,QAAQ,YAAY;AACxB,UAAM,QAAQ;AACd,cAAU,CAAC;AACX,gBAAY;AACZ,QAAI,MAAM,WAAW,EAAG;AAGxB,UAAM,OAAO,CAAC,GAAG,IAAI,IAAI,MAAM,IAAI,CAAC,MAAM,EAAE,GAAG,CAAC,CAAC;AAEjD,QAAI;AACF,YAAM,KAAK,MAAM;AACjB,YAAM,SAAS,MAAM,cAAc;AACnC,YAAM,UAAU,KAAK,IAAI;AACzB,YAAM,OAAO,MAAM,GAAG,aAAa,MAAM,MAAM;AAE/C,UAAI,QAAQ,IAAI,iBAAiB;AAC/B,gBAAQ;AAAA,UACN,sBAAsB,KAAK,MAAM,cAAc,KAAK,MAAM,uBACzC,KAAK,IAAI,IAAI,OAAO,YAC3B,MAAM,SAAS,KAAK,KAAK,IAAI,CAAC;AAAA,QAC1C;AAAA,MACF;AACA,YAAM,QAAQ,IAAI,IAAI,KAAK,IAAI,CAAC,MAAM,CAAC,EAAE,SAAS,CAAC,CAAC,CAAC;AACrD,iBAAW,KAAK,MAAO,GAAE,QAAQ,MAAM,IAAI,EAAE,GAAG,KAAK,IAAI;AAAA,IAC3D,SAAS,GAAG;AACV,iBAAW,KAAK,MAAO,GAAE,OAAO,CAAC;AAAA,IACnC;AAAA,EACF;AAEA,SAAO;AAAA,IACL,KAAK,KAA0C;AAC7C,aAAO,IAAI,QAA4B,CAAC,SAAS,WAAW;AAC1D,gBAAQ,KAAK,EAAE,KAAK,SAAS,OAAO,CAAC;AACrC,YAAI,CAAC,WAAW;AACd,sBAAY;AACZ,yBAAe,KAAK;AAAA,QACtB;AAAA,MACF,CAAC;AAAA,IACH;AAAA,EACF;AACF,CAAC;AAED,eAAsB,aACpB,SAC6B;AAC7B,MAAI;AACF,WAAO,MAAM,UAAU,EAAE,KAAK,OAAO;AAAA,EACvC,SAAS,GAAG;AACV,qBAAiB,CAAC;AAClB,YAAQ,MAAM,sCAAsC,CAAC;AACrD,WAAO;AAAA,EACT;AACF;","names":[]}
+{"version":3,"sources":["../../src/server/loader.ts"],"sourcesContent":["import { cache } from \"react\";\nimport { getDB, getPrefetch, resolveSiteId } from \"../core/config\";\nimport { rethrowIfBailout } from \"../core/bailout\";\nimport type { GRContent, OverrideRow } from \"../core/types\";\n\ninterface Pending {\n  key: string;\n  resolve: (row: OverrideRow | null) => void;\n  reject: (error: unknown) => void;\n}\n\ninterface Preloaded {\n  byKey: Map<string, OverrideRow>;\n  /** Every row the site has — an absent key is known to be unedited. */\n  complete: boolean;\n  truncated: boolean;\n}\n\n/**\n * Request-scoped content loader.\n *\n * Two jobs, one source of truth:\n *\n * 1. Batching. Every <GRail> resolves its own field, so a naive implementation\n *    issues one query per field. Keys requested within a microtask are flushed\n *    as a single query. React renders siblings concurrently, so a page's fields\n *    land in the same batch; a field nested behind another await simply falls\n *    into a later batch rather than degrading to one query each.\n *\n * 2. Preloading. <GRail>s inside Client Components cannot await anything, so\n *    their content has to be handed to them up front. That preload lives *here*,\n *    as one lazily-created promise per request, rather than as a separate fetch\n *    in the layout — Next renders layouts and pages in parallel, so a page's\n *    server fields could otherwise ask for content before the layout had\n *    loaded any. Server fields read from the same preload: when it is complete,\n *    every key resolves from it and no per-field query runs at all.\n *\n * cache() scopes all of it to a single request so nothing leaks between\n * concurrent renders.\n */\nconst getLoader = cache(() => {\n  let pending: Pending[] = [];\n  let scheduled = false;\n\n  const flush = async () => {\n    const batch = pending;\n    pending = [];\n    scheduled = false;\n    if (batch.length === 0) return;\n\n    // One lookup per distinct key, even if several fields share it.\n    const keys = [...new Set(batch.map((p) => p.key))];\n\n    try {\n      const db = getDB();\n      const siteId = await resolveSiteId();\n      const started = Date.now();\n      const rows = await db.getOverrides(keys, siteId);\n\n      if (process.env.GUARDRAIL_DEBUG) {\n        console.log(\n          `[guardrail] batch: ${keys.length} key(s) -> ${rows.length} row(s) ` +\n            `in 1 query (${Date.now() - started}ms) ` +\n            `site=${siteId} keys=${keys.join(\", \")}`,\n        );\n      }\n      const byKey = new Map(rows.map((r) => [r.pathKey, r]));\n      for (const p of batch) p.resolve(byKey.get(p.key) ?? null);\n    } catch (e) {\n      for (const p of batch) p.reject(e);\n    }\n  };\n\n  const enqueue = (key: string) =>\n    new Promise<OverrideRow | null>((resolve, reject) => {\n      pending.push({ key, resolve, reject });\n      if (!scheduled) {\n        scheduled = true;\n        queueMicrotask(flush);\n      }\n    });\n\n  let preload: Promise<Preloaded | null> | undefined;\n\n  const runPreload = async (): Promise<Preloaded | null> => {\n    try {\n      const prefetch = getPrefetch();\n      const db = getDB();\n      // Off, or an adapter that can't list: behave exactly as before.\n      if (!prefetch || !db.listOverrides) return null;\n\n      const siteId = await resolveSiteId();\n      const started = Date.now();\n      const { rows, truncated } = await db.listOverrides(siteId, prefetch);\n\n      if (process.env.GUARDRAIL_DEBUG) {\n        console.log(\n          `[guardrail] preload: ${rows.length} row(s) in 1 query ` +\n            `(${Date.now() - started}ms) site=${siteId}` +\n            `${prefetch.prefix ? ` prefix=${prefetch.prefix.join(\"|\")}` : \"\"}` +\n            `${truncated ? \" TRUNCATED\" : \"\"}`,\n        );\n      }\n      return {\n        byKey: new Map(rows.map((r) => [r.pathKey, r])),\n        // Scoping by prefix or hitting the ceiling both mean \"not every row.\"\n        complete: !prefetch.prefix && !truncated,\n        truncated,\n      };\n    } catch (e) {\n      rethrowIfBailout(e);\n      console.error(\"Guardrail: content preload failed\", e);\n      return null;\n    }\n  };\n\n  const getPreload = () => (preload ??= runPreload());\n\n  return {\n    async load(key: string): Promise<OverrideRow | null> {\n      const pre = await getPreload();\n      if (pre) {\n        const hit = pre.byKey.get(key);\n        if (hit) return hit;\n        if (pre.complete) return null;\n      }\n      return enqueue(key);\n    },\n    getPreload,\n  };\n});\n\nexport async function loadOverride(\n  pathKey: string,\n): Promise<OverrideRow | null> {\n  try {\n    return await getLoader().load(pathKey);\n  } catch (e) {\n    rethrowIfBailout(e);\n    console.error(\"Guardrail: failed to load override\", e);\n    return null;\n  }\n}\n\nlet warnedTruncated = false;\nlet warnedSize = false;\nconst SIZE_WARN_CHARS = 100_000;\n\n/**\n * The preload in the shape handed to Client Components, or undefined when\n * preloading is off or unavailable (client fields then render their JSX\n * fallback). Also where the two dev-mode nudges live, since this is the one\n * place that knows the size of what is about to be serialized into the page.\n */\nexport async function loadPreloadedContent(): Promise<GRContent | undefined> {\n  const pre = await getLoader().getPreload();\n  if (!pre) return undefined;\n\n  const values: GRContent[\"values\"] = {};\n  for (const [key, row] of pre.byKey) values[key] = row.value;\n\n  if (process.env.NODE_ENV !== \"production\") {\n    if (pre.truncated && !warnedTruncated) {\n      warnedTruncated = true;\n      console.warn(\n        `Guardrail: this site has more content rows than the preload ceiling ` +\n          `(${pre.byKey.size}). <GRail>s inside Client Components beyond it fall ` +\n          `back to their JSX. Scope it with withGuardrail(..., { prefetch: { prefix: [\"home.\", \"header.\"] } }) ` +\n          `or raise prefetch.limit.`,\n      );\n    }\n    if (!warnedSize) {\n      const size = JSON.stringify(values).length;\n      if (size > SIZE_WARN_CHARS) {\n        warnedSize = true;\n        console.warn(\n          `Guardrail: preloaded content for Client Components is ~${Math.round(size / 1000)}KB ` +\n            `and ships in every page. Consider scoping it with prefetch.prefix.`,\n        );\n      }\n    }\n  }\n\n  return { values, complete: pre.complete };\n}\n"],"mappings":"AAAA,SAAS,aAAa;AACtB,SAAS,OAAO,aAAa,qBAAqB;AAClD,SAAS,wBAAwB;AAsCjC,MAAM,YAAY,MAAM,MAAM;AAC5B,MAAI,UAAqB,CAAC;AAC1B,MAAI,YAAY;AAEhB,QAAM,QAAQ,YAAY;AACxB,UAAM,QAAQ;AACd,cAAU,CAAC;AACX,gBAAY;AACZ,QAAI,MAAM,WAAW,EAAG;AAGxB,UAAM,OAAO,CAAC,GAAG,IAAI,IAAI,MAAM,IAAI,CAAC,MAAM,EAAE,GAAG,CAAC,CAAC;AAEjD,QAAI;AACF,YAAM,KAAK,MAAM;AACjB,YAAM,SAAS,MAAM,cAAc;AACnC,YAAM,UAAU,KAAK,IAAI;AACzB,YAAM,OAAO,MAAM,GAAG,aAAa,MAAM,MAAM;AAE/C,UAAI,QAAQ,IAAI,iBAAiB;AAC/B,gBAAQ;AAAA,UACN,sBAAsB,KAAK,MAAM,cAAc,KAAK,MAAM,uBACzC,KAAK,IAAI,IAAI,OAAO,YAC3B,MAAM,SAAS,KAAK,KAAK,IAAI,CAAC;AAAA,QAC1C;AAAA,MACF;AACA,YAAM,QAAQ,IAAI,IAAI,KAAK,IAAI,CAAC,MAAM,CAAC,EAAE,SAAS,CAAC,CAAC,CAAC;AACrD,iBAAW,KAAK,MAAO,GAAE,QAAQ,MAAM,IAAI,EAAE,GAAG,KAAK,IAAI;AAAA,IAC3D,SAAS,GAAG;AACV,iBAAW,KAAK,MAAO,GAAE,OAAO,CAAC;AAAA,IACnC;AAAA,EACF;AAEA,QAAM,UAAU,CAAC,QACf,IAAI,QAA4B,CAAC,SAAS,WAAW;AACnD,YAAQ,KAAK,EAAE,KAAK,SAAS,OAAO,CAAC;AACrC,QAAI,CAAC,WAAW;AACd,kBAAY;AACZ,qBAAe,KAAK;AAAA,IACtB;AAAA,EACF,CAAC;AAEH,MAAI;AAEJ,QAAM,aAAa,YAAuC;AACxD,QAAI;AACF,YAAM,WAAW,YAAY;AAC7B,YAAM,KAAK,MAAM;AAEjB,UAAI,CAAC,YAAY,CAAC,GAAG,cAAe,QAAO;AAE3C,YAAM,SAAS,MAAM,cAAc;AACnC,YAAM,UAAU,KAAK,IAAI;AACzB,YAAM,EAAE,MAAM,UAAU,IAAI,MAAM,GAAG,cAAc,QAAQ,QAAQ;AAEnE,UAAI,QAAQ,IAAI,iBAAiB;AAC/B,gBAAQ;AAAA,UACN,wBAAwB,KAAK,MAAM,uBAC7B,KAAK,IAAI,IAAI,OAAO,YAAY,MAAM,GACvC,SAAS,SAAS,WAAW,SAAS,OAAO,KAAK,GAAG,CAAC,KAAK,EAAE,GAC7D,YAAY,eAAe,EAAE;AAAA,QACpC;AAAA,MACF;AACA,aAAO;AAAA,QACL,OAAO,IAAI,IAAI,KAAK,IAAI,CAAC,MAAM,CAAC,EAAE,SAAS,CAAC,CAAC,CAAC;AAAA;AAAA,QAE9C,UAAU,CAAC,SAAS,UAAU,CAAC;AAAA,QAC/B;AAAA,MACF;AAAA,IACF,SAAS,GAAG;AACV,uBAAiB,CAAC;AAClB,cAAQ,MAAM,qCAAqC,CAAC;AACpD,aAAO;AAAA,IACT;AAAA,EACF;AAEA,QAAM,aAAa,MAAO,YAAY,WAAW;AAEjD,SAAO;AAAA,IACL,MAAM,KAAK,KAA0C;AACnD,YAAM,MAAM,MAAM,WAAW;AAC7B,UAAI,KAAK;AACP,cAAM,MAAM,IAAI,MAAM,IAAI,GAAG;AAC7B,YAAI,IAAK,QAAO;AAChB,YAAI,IAAI,SAAU,QAAO;AAAA,MAC3B;AACA,aAAO,QAAQ,GAAG;AAAA,IACpB;AAAA,IACA;AAAA,EACF;AACF,CAAC;AAED,eAAsB,aACpB,SAC6B;AAC7B,MAAI;AACF,WAAO,MAAM,UAAU,EAAE,KAAK,OAAO;AAAA,EACvC,SAAS,GAAG;AACV,qBAAiB,CAAC;AAClB,YAAQ,MAAM,sCAAsC,CAAC;AACrD,WAAO;AAAA,EACT;AACF;AAEA,IAAI,kBAAkB;AACtB,IAAI,aAAa;AACjB,MAAM,kBAAkB;AAQxB,eAAsB,uBAAuD;AAC3E,QAAM,MAAM,MAAM,UAAU,EAAE,WAAW;AACzC,MAAI,CAAC,IAAK,QAAO;AAEjB,QAAM,SAA8B,CAAC;AACrC,aAAW,CAAC,KAAK,GAAG,KAAK,IAAI,MAAO,QAAO,GAAG,IAAI,IAAI;AAEtD,MAAI,QAAQ,IAAI,aAAa,cAAc;AACzC,QAAI,IAAI,aAAa,CAAC,iBAAiB;AACrC,wBAAkB;AAClB,cAAQ;AAAA,QACN,wEACM,IAAI,MAAM,IAAI;AAAA,MAGtB;AAAA,IACF;AACA,QAAI,CAAC,YAAY;AACf,YAAM,OAAO,KAAK,UAAU,MAAM,EAAE;AACpC,UAAI,OAAO,iBAAiB;AAC1B,qBAAa;AACb,gBAAQ;AAAA,UACN,0DAA0D,KAAK,MAAM,OAAO,GAAI,CAAC;AAAA,QAEnF;AAAA,MACF;AAAA,IACF;AAAA,EACF;AAEA,SAAO,EAAE,QAAQ,UAAU,IAAI,SAAS;AAC1C;","names":[]}

package/dist/server/wrapper.d.ts

@@ -1,5 +1,5 @@
 import * as react_jsx_runtime from 'react/jsx-runtime';
-import React from 'react';
+import React__default from 'react';
 import { GRConfig } from '../core/adapter-types.js';
 import '../core/types.js';
 
@@ -7,6 +7,6 @@ import '../core/types.js';
  * Wraps a root layout so every route carries Guardrail's edit state and admin
  * chrome. Stays a Server Component: the provider below is the client boundary.
  */
-declare function withGuardrail<P extends object>(LayoutComponent: React.ComponentType<P>, config: GRConfig): (props: P) => Promise<react_jsx_runtime.JSX.Element>;
+declare function withGuardrail<P extends object>(LayoutComponent: React__default.ComponentType<P>, config: GRConfig): (props: P) => Promise<react_jsx_runtime.JSX.Element>;
 
 export { withGuardrail };

package/dist/server/wrapper.js

@@ -8,6 +8,7 @@ import {
   resolveSiteId
 } from "../core/config";
 import { getCachedViewer } from "./session";
+import { loadPreloadedContent } from "./loader";
 import { GR_COOKIES } from "../core/defs";
 import { GRailProvider } from "../react/Provider";
 import { GRailAdmin } from "../react/Admin";
@@ -16,7 +17,10 @@ function withGuardrail(LayoutComponent, config) {
   return async function GuardrailLayout(props) {
     configureGuardrail(config);
     const cookieStore = await cookies();
-    const viewer = await getCachedViewer();
+    const [viewer, content] = await Promise.all([
+      getCachedViewer(),
+      loadPreloadedContent()
+    ]);
     const auth = getAuth();
     const state = {
       storage: getStorage() !== void 0,
@@ -30,7 +34,7 @@ function withGuardrail(LayoutComponent, config) {
       role: viewer?.role ?? null,
       ...viewer?.email ? { email: viewer.email } : {}
     };
-    return /* @__PURE__ */ jsxs(GRailProvider, { state, children: [
+    return /* @__PURE__ */ jsxs(GRailProvider, { state, content, children: [
       /* @__PURE__ */ jsx(LayoutComponent, { ...props }),
       /* @__PURE__ */ jsx(Suspense, { fallback: null, children: /* @__PURE__ */ jsx(GRailAdmin, { toolbarExtra: config.toolbarExtra }) })
     ] });

package/dist/server/wrapper.js.map

@@ -1 +1 @@
-{"version":3,"sources":["../../src/server/wrapper.tsx"],"sourcesContent":["import React, { Suspense } from \"react\";\nimport { cookies } from \"next/headers\";\nimport {\n  configureGuardrail,\n  getAuth,\n  getStorage,\n  resolveSiteId,\n} from \"../core/config\";\nimport { getCachedViewer } from \"./session\";\nimport type { GRConfig } from \"../core/adapter-types\";\nimport { GR_COOKIES } from \"../core/defs\";\nimport { GRailProvider } from \"../react/Provider\";\nimport { GRailAdmin } from \"../react/Admin\";\nimport type { GRState } from \"../core/types\";\n\n/**\n * Wraps a root layout so every route carries Guardrail's edit state and admin\n * chrome. Stays a Server Component: the provider below is the client boundary.\n */\nexport function withGuardrail<P extends object>(\n  LayoutComponent: React.ComponentType<P>,\n  config: GRConfig,\n) {\n  // Applied at module evaluation so the config is present as soon as anything\n  // imports the layout, and again per render because Next.js does not\n  // guarantee one shared module instance across its server contexts.\n  configureGuardrail(config);\n\n  return async function GuardrailLayout(props: P) {\n    configureGuardrail(config);\n\n    const cookieStore = await cookies();\n\n    // Verified against the auth provider, not inferred from a cookie.\n    const viewer = await getCachedViewer();\n\n    const auth = getAuth();\n\n    const state: GRState = {\n      storage: getStorage() !== undefined,\n      auth: {\n        password: typeof auth.authenticate === \"function\",\n        ...(auth.signInUrl ? { signInUrl: auth.signInUrl } : {}),\n      },\n      isAuth: viewer !== null,\n      isEditMode: cookieStore.get(GR_COOKIES.EDIT_MODE)?.value === \"true\",\n      siteId: await resolveSiteId(),\n      role: viewer?.role ?? null,\n      ...(viewer?.email ? { email: viewer.email } : {}),\n    };\n\n    return (\n      <GRailProvider state={state}>\n        <LayoutComponent {...props} />\n        <Suspense fallback={null}>\n          <GRailAdmin toolbarExtra={config.toolbarExtra} />\n        </Suspense>\n      </GRailProvider>\n    );\n  };\n}\n"],"mappings":"AAoDM,SACE,KADF;AApDN,OAAO,SAAS,gBAAgB;AAChC,SAAS,eAAe;AACxB;AAAA,EACE;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,OACK;AACP,SAAS,uBAAuB;AAEhC,SAAS,kBAAkB;AAC3B,SAAS,qBAAqB;AAC9B,SAAS,kBAAkB;AAOpB,SAAS,cACd,iBACA,QACA;AAIA,qBAAmB,MAAM;AAEzB,SAAO,eAAe,gBAAgB,OAAU;AAC9C,uBAAmB,MAAM;AAEzB,UAAM,cAAc,MAAM,QAAQ;AAGlC,UAAM,SAAS,MAAM,gBAAgB;AAErC,UAAM,OAAO,QAAQ;AAErB,UAAM,QAAiB;AAAA,MACrB,SAAS,WAAW,MAAM;AAAA,MAC1B,MAAM;AAAA,QACJ,UAAU,OAAO,KAAK,iBAAiB;AAAA,QACvC,GAAI,KAAK,YAAY,EAAE,WAAW,KAAK,UAAU,IAAI,CAAC;AAAA,MACxD;AAAA,MACA,QAAQ,WAAW;AAAA,MACnB,YAAY,YAAY,IAAI,WAAW,SAAS,GAAG,UAAU;AAAA,MAC7D,QAAQ,MAAM,cAAc;AAAA,MAC5B,MAAM,QAAQ,QAAQ;AAAA,MACtB,GAAI,QAAQ,QAAQ,EAAE,OAAO,OAAO,MAAM,IAAI,CAAC;AAAA,IACjD;AAEA,WACE,qBAAC,iBAAc,OACb;AAAA,0BAAC,mBAAiB,GAAG,OAAO;AAAA,MAC5B,oBAAC,YAAS,UAAU,MAClB,8BAAC,cAAW,cAAc,OAAO,cAAc,GACjD;AAAA,OACF;AAAA,EAEJ;AACF;","names":[]}
+{"version":3,"sources":["../../src/server/wrapper.tsx"],"sourcesContent":["import React, { Suspense } from \"react\";\nimport { cookies } from \"next/headers\";\nimport {\n  configureGuardrail,\n  getAuth,\n  getStorage,\n  resolveSiteId,\n} from \"../core/config\";\nimport { getCachedViewer } from \"./session\";\nimport { loadPreloadedContent } from \"./loader\";\nimport type { GRConfig } from \"../core/adapter-types\";\nimport { GR_COOKIES } from \"../core/defs\";\nimport { GRailProvider } from \"../react/Provider\";\nimport { GRailAdmin } from \"../react/Admin\";\nimport type { GRState } from \"../core/types\";\n\n/**\n * Wraps a root layout so every route carries Guardrail's edit state and admin\n * chrome. Stays a Server Component: the provider below is the client boundary.\n */\nexport function withGuardrail<P extends object>(\n  LayoutComponent: React.ComponentType<P>,\n  config: GRConfig,\n) {\n  // Applied at module evaluation so the config is present as soon as anything\n  // imports the layout, and again per render because Next.js does not\n  // guarantee one shared module instance across its server contexts.\n  configureGuardrail(config);\n\n  return async function GuardrailLayout(props: P) {\n    configureGuardrail(config);\n\n    const cookieStore = await cookies();\n\n    // Verified against the auth provider, not inferred from a cookie. Loaded\n    // alongside the content preload: independent round trips, and the preload\n    // is shared with the page's own fields, so it costs them nothing extra.\n    const [viewer, content] = await Promise.all([\n      getCachedViewer(),\n      loadPreloadedContent(),\n    ]);\n\n    const auth = getAuth();\n\n    const state: GRState = {\n      storage: getStorage() !== undefined,\n      auth: {\n        password: typeof auth.authenticate === \"function\",\n        ...(auth.signInUrl ? { signInUrl: auth.signInUrl } : {}),\n      },\n      isAuth: viewer !== null,\n      isEditMode: cookieStore.get(GR_COOKIES.EDIT_MODE)?.value === \"true\",\n      siteId: await resolveSiteId(),\n      role: viewer?.role ?? null,\n      ...(viewer?.email ? { email: viewer.email } : {}),\n    };\n\n    return (\n      <GRailProvider state={state} content={content}>\n        <LayoutComponent {...props} />\n        <Suspense fallback={null}>\n          <GRailAdmin toolbarExtra={config.toolbarExtra} />\n        </Suspense>\n      </GRailProvider>\n    );\n  };\n}\n"],"mappings":"AA0DM,SACE,KADF;AA1DN,OAAO,SAAS,gBAAgB;AAChC,SAAS,eAAe;AACxB;AAAA,EACE;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,OACK;AACP,SAAS,uBAAuB;AAChC,SAAS,4BAA4B;AAErC,SAAS,kBAAkB;AAC3B,SAAS,qBAAqB;AAC9B,SAAS,kBAAkB;AAOpB,SAAS,cACd,iBACA,QACA;AAIA,qBAAmB,MAAM;AAEzB,SAAO,eAAe,gBAAgB,OAAU;AAC9C,uBAAmB,MAAM;AAEzB,UAAM,cAAc,MAAM,QAAQ;AAKlC,UAAM,CAAC,QAAQ,OAAO,IAAI,MAAM,QAAQ,IAAI;AAAA,MAC1C,gBAAgB;AAAA,MAChB,qBAAqB;AAAA,IACvB,CAAC;AAED,UAAM,OAAO,QAAQ;AAErB,UAAM,QAAiB;AAAA,MACrB,SAAS,WAAW,MAAM;AAAA,MAC1B,MAAM;AAAA,QACJ,UAAU,OAAO,KAAK,iBAAiB;AAAA,QACvC,GAAI,KAAK,YAAY,EAAE,WAAW,KAAK,UAAU,IAAI,CAAC;AAAA,MACxD;AAAA,MACA,QAAQ,WAAW;AAAA,MACnB,YAAY,YAAY,IAAI,WAAW,SAAS,GAAG,UAAU;AAAA,MAC7D,QAAQ,MAAM,cAAc;AAAA,MAC5B,MAAM,QAAQ,QAAQ;AAAA,MACtB,GAAI,QAAQ,QAAQ,EAAE,OAAO,OAAO,MAAM,IAAI,CAAC;AAAA,IACjD;AAEA,WACE,qBAAC,iBAAc,OAAc,SAC3B;AAAA,0BAAC,mBAAiB,GAAG,OAAO;AAAA,MAC5B,oBAAC,YAAS,UAAU,MAClB,8BAAC,cAAW,cAAc,OAAO,cAAc,GACjD;AAAA,OACF;AAAA,EAEJ;AACF;","names":[]}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@guard-rail/core",
-  "version": "0.2.0",
+  "version": "0.3.0",
   "description": "Lightweight inline content editing for developer-owned Next.js sites.",
   "license": "ISC",
   "type": "module",
@@ -8,9 +8,18 @@
   "types": "./dist/index.d.ts",
   "exports": {
     ".": {
+      "types": "./dist/index.d.ts",
+      "react-server": "./dist/index.js",
+      "default": "./dist/index.client.js"
+    },
+    "./server": {
       "types": "./dist/index.d.ts",
       "default": "./dist/index.js"
     },
+    "./client": {
+      "types": "./dist/index.client.d.ts",
+      "default": "./dist/index.client.js"
+    },
     "./adapters/supabase": {
       "types": "./dist/adapters/supabase/index.d.ts",
       "default": "./dist/adapters/supabase/index.js"
@@ -55,6 +64,7 @@
     "@supabase/supabase-js": "^2.93.3",
     "@types/node": "^25.1.0",
     "@types/react": "^19.2.10",
+    "@types/react-dom": "^19.3.0",
     "next": "16.1.6",
     "react": "^19.2.4",
     "tsup": "^8.5.1",