@inkindcards/semantic-layer 0.2.2 → 2.0.1

package/dist/index.d.ts

@@ -1,57 +1,48 @@
-import * as _supabase_auth_js from '@supabase/auth-js';
-import { SupabaseClient, Session } from '@supabase/supabase-js';
-import { e as SemanticLayerConfig, M as MetadataResponse, S as SemanticField, P as PivotConfig, Q as QueryResult, b as SimpleQueryInput, C as CuratedField, A as AccessRole, U as UserRoleAssignment, c as UserFieldOverride } from './types-Dc8Zdacw.js';
-export { f as AggregationType, d as AuthState, D as DataType, a as FieldCategory, F as FieldType, g as PivotField, h as QueryColumn, T as TimeGrain } from './types-Dc8Zdacw.js';
+import { e as SemanticLayerConfig, M as MetadataResponse, S as SemanticField, P as PivotConfig, Q as QueryResult, a as SimpleQueryInput, C as CuratedField, A as AccessRole, U as UserRoleAssignment, b as UserFieldOverride } from './types-c5qj4BKB.js';
+export { f as AggregationType, c as AuthState, D as DataType, F as FieldCategory, d as FieldType, g as PivotField, h as QueryColumn, T as TimeGrain } from './types-c5qj4BKB.js';
 
 declare class SemanticLayerClient {
-    private supabase;
+    readonly gatewayUrl: string;
+    private accessToken;
+    private tokenExpiry;
+    private userEmail;
     private metadataCache;
     private metadataCacheTime;
     private readonly CACHE_TTL_MS;
-    readonly gatewayUrl: string;
+    private authListeners;
     constructor(config: SemanticLayerConfig);
-    /** Access the underlying Supabase client (for auth operations). */
-    getSupabaseClient(): SupabaseClient;
-    signInWithGoogle(redirectTo?: string): Promise<_supabase_auth_js.OAuthResponse>;
-    /** Get the Google sign-in URL without triggering a redirect (for popup flows). */
-    getSignInUrl(redirectTo?: string): Promise<string | null>;
-    /** Send a one-time code to the given email (for iframe/editor sign-in). */
-    sendOtp(email: string): Promise<_supabase_auth_js.AuthOtpResponse>;
-    /** Verify a one-time code received via email. */
-    verifyOtp(email: string, token: string): Promise<_supabase_auth_js.AuthResponse>;
+    /**
+     * Returns the URL to redirect the browser to for Google sign-in.
+     * After the user authenticates, the gateway redirects back to returnUrl
+     * with the access token in the URL hash fragment.
+     */
+    getSignInUrl(returnUrl?: string): string;
+    /**
+     * Check the current URL hash for auth tokens (set by the gateway callback redirect).
+     * If found, extracts them, stores the session, clears the hash, and returns true.
+     */
+    handleAuthCallback(): boolean;
+    /**
+     * Set the Google access token (called after OAuth redirect callback).
+     */
+    setAccessToken(token: string, email: string, expiresIn: number): void;
+    getSession(): Promise<SessionLike | null>;
     signOut(): Promise<{
-        error: _supabase_auth_js.AuthError | null;
+        error: null;
     }>;
-    getSession(): Promise<Session | null>;
-    onAuthStateChange(callback: (event: string, session: Session | null) => void): {
+    onAuthStateChange(callback: (event: string, session: SessionLike | null) => void): {
         data: {
-            subscription: _supabase_auth_js.Subscription;
+            subscription: {
+                unsubscribe: () => void;
+            };
         };
     };
-    /** Set an existing session (used by the popup OAuth callback). */
-    setSession(accessToken: string, refreshToken: string): Promise<_supabase_auth_js.AuthResponse>;
-    /**
-     * Open Google OAuth in a popup window and wait for the callback.
-     * Uses the auth-callback edge function to relay tokens via postMessage.
-     */
-    signInWithPopup(): Promise<void>;
-    /**
-     * Fetch the curated catalog of metrics and dimensions from the gateway.
-     * Results are cached for 5 minutes.
-     */
+    private apiCall;
     getMetadata(forceRefresh?: boolean): Promise<MetadataResponse>;
-    /** Get only metrics from the catalog. */
     getMetrics(): Promise<SemanticField[]>;
-    /** Get only dimensions (including time dimensions) from the catalog. */
     getDimensions(): Promise<SemanticField[]>;
-    /** Find a field by name or id. */
     getField(nameOrId: string): Promise<SemanticField | undefined>;
-    /** Execute a query using the full PivotConfig format. */
     query(config: PivotConfig): Promise<QueryResult>;
-    /**
-     * Execute a query using the simplified input format.
-     * Automatically resolves metric/dimension names to full field objects.
-     */
     simpleQuery(input: SimpleQueryInput): Promise<QueryResult>;
     private adminCall;
     readonly admin: {
@@ -137,9 +128,15 @@ declare class SemanticLayerClient {
         }>;
     };
 }
+interface SessionLike {
+    user: {
+        id: string;
+        email: string;
+    };
+}
 declare class SemanticLayerError extends Error {
     code: string;
     constructor(message: string, code: string);
 }
 
-export { AccessRole, CuratedField, MetadataResponse, PivotConfig, QueryResult, SemanticField, SemanticLayerClient, SemanticLayerConfig, SemanticLayerError, SimpleQueryInput, UserFieldOverride, UserRoleAssignment };
+export { AccessRole, CuratedField, MetadataResponse, PivotConfig, QueryResult, SemanticField, SemanticLayerClient, SemanticLayerConfig, SemanticLayerError, type SessionLike, SimpleQueryInput, UserFieldOverride, UserRoleAssignment };

package/dist/index.js

@@ -1,3 +1,3 @@
-export { SemanticLayerClient, SemanticLayerError } from './chunk-WPK37LJ6.js';
+export { SemanticLayerClient, SemanticLayerError } from './chunk-WR4D3UI6.js';
 //# sourceMappingURL=index.js.map
 //# sourceMappingURL=index.js.map

package/dist/react.cjs

@@ -1,21 +1,20 @@
 'use strict';
 
-var chunkB23E3XFB_cjs = require('./chunk-B23E3XFB.cjs');
-var chunkSHHZ37FE_cjs = require('./chunk-SHHZ37FE.cjs');
+var chunkW64RGDXH_cjs = require('./chunk-W64RGDXH.cjs');
+var chunkT2C43AAL_cjs = require('./chunk-T2C43AAL.cjs');
 var react = require('react');
 var jsxRuntime = require('react/jsx-runtime');
 
 function SemanticLayerProvider({
   gatewayUrl,
-  anonKey,
   emailDomain,
   client: externalClient,
   children
 }) {
-  const client = react.useMemo(() => {
-    if (externalClient) return externalClient;
-    return new chunkB23E3XFB_cjs.SemanticLayerClient({ gatewayUrl, anonKey });
-  }, [gatewayUrl, anonKey, externalClient]);
+  const client = react.useMemo(
+    () => externalClient ?? new chunkW64RGDXH_cjs.SemanticLayerClient({ gatewayUrl }),
+    [gatewayUrl, externalClient]
+  );
   const [auth, setAuth] = react.useState({
     isAuthenticated: false,
     isLoading: true,
@@ -25,6 +24,31 @@ function SemanticLayerProvider({
   react.useEffect(() => {
     let mounted = true;
     async function initAuth() {
+      try {
+        const handledCallback = client.handleAuthCallback();
+        if (handledCallback) {
+          const session = await client.getSession();
+          if (!mounted) return;
+          if (session?.user) {
+            setAuth({
+              isAuthenticated: true,
+              isLoading: false,
+              user: { id: session.user.id, email: session.user.email },
+              error: null
+            });
+            return;
+          }
+        }
+      } catch (err) {
+        if (!mounted) return;
+        setAuth({
+          isAuthenticated: false,
+          isLoading: false,
+          user: null,
+          error: err instanceof Error ? err.message : "Auth callback failed"
+        });
+        return;
+      }
       try {
         const session = await client.getSession();
         if (!mounted) return;
@@ -32,7 +56,7 @@ function SemanticLayerProvider({
           setAuth({
             isAuthenticated: true,
             isLoading: false,
-            user: { id: session.user.id, email: session.user.email || "" },
+            user: { id: session.user.id, email: session.user.email },
             error: null
           });
         } else {
@@ -54,13 +78,15 @@ function SemanticLayerProvider({
       }
     }
     initAuth();
-    const { data: { subscription } } = client.onAuthStateChange((_event, session) => {
+    const {
+      data: { subscription }
+    } = client.onAuthStateChange((_event, session) => {
       if (!mounted) return;
       if (session?.user) {
         setAuth({
           isAuthenticated: true,
           isLoading: false,
-          user: { id: session.user.id, email: session.user.email || "" },
+          user: { id: session.user.id, email: session.user.email },
           error: null
         });
       } else {
@@ -77,8 +103,14 @@ function SemanticLayerProvider({
       subscription.unsubscribe();
     };
   }, [client]);
-  const value = react.useMemo(() => ({ client, auth, emailDomain }), [client, auth, emailDomain]);
-  return /* @__PURE__ */ jsxRuntime.jsx(chunkSHHZ37FE_cjs.SemanticLayerContext.Provider, { value, children });
+  const signIn = react.useCallback(() => {
+    window.location.href = client.getSignInUrl();
+  }, [client]);
+  const value = react.useMemo(
+    () => ({ client, auth, emailDomain, signIn }),
+    [client, auth, emailDomain, signIn]
+  );
+  return /* @__PURE__ */ jsxRuntime.jsx(chunkT2C43AAL_cjs.SemanticLayerContext.Provider, { value, children });
 }
 var containerStyle = {
   display: "flex",
@@ -110,188 +142,30 @@ var buttonStyle = {
   alignItems: "center",
   gap: "8px"
 };
-var inputStyle = {
-  padding: "10px 14px",
-  fontSize: "16px",
-  border: "1px solid #d1d5db",
-  borderRadius: "8px",
-  width: "280px",
-  fontFamily: "system-ui, -apple-system, sans-serif"
-};
 var errorStyle = {
   margin: 0,
   color: "#ef4444",
   fontSize: "14px"
 };
-var linkStyle = {
-  background: "none",
-  border: "none",
-  color: "#4285f4",
-  cursor: "pointer",
-  fontSize: "14px",
-  padding: 0,
-  textDecoration: "underline"
-};
-function isInIframe() {
-  try {
-    return typeof window !== "undefined" && window.self !== window.top;
-  } catch {
-    return true;
-  }
-}
-function OtpSignIn() {
-  const { sendOtp, verifyOtp, emailDomain } = chunkSHHZ37FE_cjs.useAuth();
-  const [email, setEmail] = react.useState("");
-  const [code, setCode] = react.useState("");
-  const [step, setStep] = react.useState("email");
-  const [sending, setSending] = react.useState(false);
-  const [error, setError] = react.useState(null);
-  const handleSendCode = react.useCallback(async () => {
-    setError(null);
-    const trimmed = email.trim().toLowerCase();
-    if (!trimmed) {
-      setError("Please enter your email.");
-      return;
-    }
-    if (emailDomain && !trimmed.endsWith(`@${emailDomain}`)) {
-      setError(`Please use your @${emailDomain} email.`);
-      return;
-    }
-    setSending(true);
-    try {
-      const { error: otpError } = await sendOtp(trimmed);
-      if (otpError) {
-        setError(otpError.message);
-      } else {
-        setStep("code");
-      }
-    } catch (err) {
-      setError(err instanceof Error ? err.message : "Failed to send code");
-    } finally {
-      setSending(false);
-    }
-  }, [email, emailDomain, sendOtp]);
-  const handleVerifyCode = react.useCallback(async () => {
-    setError(null);
-    const trimmedCode = code.trim();
-    if (!trimmedCode) {
-      setError("Please enter the code from your email.");
-      return;
-    }
-    setSending(true);
-    try {
-      const { error: verifyError } = await verifyOtp(email.trim().toLowerCase(), trimmedCode);
-      if (verifyError) {
-        setError(verifyError.message);
-      }
-    } catch (err) {
-      setError(err instanceof Error ? err.message : "Verification failed");
-    } finally {
-      setSending(false);
-    }
-  }, [email, code, verifyOtp]);
-  if (step === "code") {
-    return /* @__PURE__ */ jsxRuntime.jsxs("div", { style: containerStyle, children: [
-      /* @__PURE__ */ jsxRuntime.jsx("h2", { style: { margin: 0, fontSize: "24px", color: "#111827" }, children: "Check your email" }),
-      /* @__PURE__ */ jsxRuntime.jsxs("p", { style: { margin: 0, color: "#6b7280", textAlign: "center", maxWidth: "320px" }, children: [
-        "We sent a sign-in code to ",
-        /* @__PURE__ */ jsxRuntime.jsx("strong", { children: email.trim() })
-      ] }),
-      /* @__PURE__ */ jsxRuntime.jsx(
-        "input",
-        {
-          style: inputStyle,
-          type: "text",
-          inputMode: "numeric",
-          autoComplete: "one-time-code",
-          placeholder: "Enter 6-digit code",
-          value: code,
-          onChange: (e) => setCode(e.target.value),
-          onKeyDown: (e) => e.key === "Enter" && handleVerifyCode()
-        }
-      ),
-      error && /* @__PURE__ */ jsxRuntime.jsx("p", { style: errorStyle, children: error }),
-      /* @__PURE__ */ jsxRuntime.jsx("button", { style: buttonStyle, onClick: handleVerifyCode, disabled: sending, children: sending ? "Verifying..." : "Verify code" }),
-      /* @__PURE__ */ jsxRuntime.jsx("button", { style: linkStyle, onClick: () => {
-        setStep("email");
-        setCode("");
-        setError(null);
-      }, children: "Use a different email" })
-    ] });
-  }
-  return /* @__PURE__ */ jsxRuntime.jsxs("div", { style: containerStyle, children: [
-    /* @__PURE__ */ jsxRuntime.jsx("h2", { style: { margin: 0, fontSize: "24px", color: "#111827" }, children: "Sign in to continue" }),
-    /* @__PURE__ */ jsxRuntime.jsxs("p", { style: { margin: 0, color: "#6b7280" }, children: [
-      "Enter your ",
-      emailDomain ? `@${emailDomain} ` : "",
-      "email to receive a sign-in code."
-    ] }),
-    /* @__PURE__ */ jsxRuntime.jsx(
-      "input",
-      {
-        style: inputStyle,
-        type: "email",
-        placeholder: emailDomain ? `you@${emailDomain}` : "you@company.com",
-        value: email,
-        onChange: (e) => setEmail(e.target.value),
-        onKeyDown: (e) => e.key === "Enter" && handleSendCode()
-      }
-    ),
-    error && /* @__PURE__ */ jsxRuntime.jsx("p", { style: errorStyle, children: error }),
-    /* @__PURE__ */ jsxRuntime.jsx("button", { style: buttonStyle, onClick: handleSendCode, disabled: sending, children: sending ? "Sending..." : "Send sign-in code" })
-  ] });
-}
-function PopupSignIn() {
-  const { signInPopup, error: authError } = chunkSHHZ37FE_cjs.useAuth();
+function AuthGate({ children, loading, signInComponent }) {
+  const { isAuthenticated, isLoading, error, signIn } = chunkT2C43AAL_cjs.useAuth();
   const [signingIn, setSigningIn] = react.useState(false);
-  const [error, setError] = react.useState(null);
-  const [showOtpFallback, setShowOtpFallback] = react.useState(false);
-  const handlePopupSignIn = react.useCallback(async () => {
-    setError(null);
+  const handleSignIn = react.useCallback(() => {
     setSigningIn(true);
-    try {
-      await signInPopup();
-    } catch (err) {
-      setError(err instanceof Error ? err.message : "Sign-in failed");
-    } finally {
-      setSigningIn(false);
-    }
-  }, [signInPopup]);
-  if (showOtpFallback) {
-    return /* @__PURE__ */ jsxRuntime.jsxs(jsxRuntime.Fragment, { children: [
-      /* @__PURE__ */ jsxRuntime.jsx(OtpSignIn, {}),
-      /* @__PURE__ */ jsxRuntime.jsx("div", { style: { position: "fixed", bottom: "24px", left: 0, right: 0, textAlign: "center" }, children: /* @__PURE__ */ jsxRuntime.jsx("button", { style: linkStyle, onClick: () => setShowOtpFallback(false), children: "Sign in with Google instead" }) })
-    ] });
-  }
-  return /* @__PURE__ */ jsxRuntime.jsxs("div", { style: containerStyle, children: [
-    /* @__PURE__ */ jsxRuntime.jsx("h2", { style: { margin: 0, fontSize: "24px", color: "#111827" }, children: "Sign in to continue" }),
-    /* @__PURE__ */ jsxRuntime.jsx("p", { style: { margin: 0, color: "#6b7280" }, children: "Use your Google account to access data." }),
-    (error || authError) && /* @__PURE__ */ jsxRuntime.jsx("p", { style: errorStyle, children: error || authError }),
-    /* @__PURE__ */ jsxRuntime.jsx("button", { style: buttonStyle, onClick: handlePopupSignIn, disabled: signingIn, children: signingIn ? "Signing in..." : "Sign in with Google" }),
-    /* @__PURE__ */ jsxRuntime.jsx("button", { style: linkStyle, onClick: () => setShowOtpFallback(true), children: "Use email code instead" })
-  ] });
-}
-function AuthGate({ children, loading, signInComponent, useEmailOtp }) {
-  const { isAuthenticated, isLoading, error, signIn } = chunkSHHZ37FE_cjs.useAuth();
-  const inIframe = isInIframe();
+    signIn();
+  }, [signIn]);
   if (isLoading) {
     return /* @__PURE__ */ jsxRuntime.jsx(jsxRuntime.Fragment, { children: loading || /* @__PURE__ */ jsxRuntime.jsx("div", { style: loadingStyle, children: "Loading..." }) });
   }
   if (!isAuthenticated) {
-    if (useEmailOtp) {
-      return /* @__PURE__ */ jsxRuntime.jsx(OtpSignIn, {});
-    }
-    if (inIframe) {
-      return /* @__PURE__ */ jsxRuntime.jsx(PopupSignIn, {});
-    }
     if (signInComponent) {
-      return /* @__PURE__ */ jsxRuntime.jsx(jsxRuntime.Fragment, { children: signInComponent({ signIn: () => signIn(window.location.origin) }) });
+      return /* @__PURE__ */ jsxRuntime.jsx(jsxRuntime.Fragment, { children: signInComponent({ signIn: handleSignIn }) });
     }
     return /* @__PURE__ */ jsxRuntime.jsxs("div", { style: containerStyle, children: [
       /* @__PURE__ */ jsxRuntime.jsx("h2", { style: { margin: 0, fontSize: "24px", color: "#111827" }, children: "Sign in to continue" }),
       /* @__PURE__ */ jsxRuntime.jsx("p", { style: { margin: 0, color: "#6b7280" }, children: "Use your Google account to access data." }),
       error && /* @__PURE__ */ jsxRuntime.jsx("p", { style: errorStyle, children: error }),
-      /* @__PURE__ */ jsxRuntime.jsx("button", { style: buttonStyle, onClick: () => signIn(window.location.origin), children: "Sign in with Google" })
+      /* @__PURE__ */ jsxRuntime.jsx("button", { style: buttonStyle, onClick: handleSignIn, disabled: signingIn, children: signingIn ? "Signing in..." : "Sign in with Google" })
     ] });
   }
   return /* @__PURE__ */ jsxRuntime.jsx(jsxRuntime.Fragment, { children });
@@ -299,35 +173,35 @@ function AuthGate({ children, loading, signInComponent, useEmailOtp }) {
 
 Object.defineProperty(exports, "SemanticLayerContext", {
   enumerable: true,
-  get: function () { return chunkSHHZ37FE_cjs.SemanticLayerContext; }
+  get: function () { return chunkT2C43AAL_cjs.SemanticLayerContext; }
 });
 Object.defineProperty(exports, "useAdminFields", {
   enumerable: true,
-  get: function () { return chunkSHHZ37FE_cjs.useAdminFields; }
+  get: function () { return chunkT2C43AAL_cjs.useAdminFields; }
 });
 Object.defineProperty(exports, "useAdminRoles", {
   enumerable: true,
-  get: function () { return chunkSHHZ37FE_cjs.useAdminRoles; }
+  get: function () { return chunkT2C43AAL_cjs.useAdminRoles; }
 });
 Object.defineProperty(exports, "useAdminUsers", {
   enumerable: true,
-  get: function () { return chunkSHHZ37FE_cjs.useAdminUsers; }
+  get: function () { return chunkT2C43AAL_cjs.useAdminUsers; }
 });
 Object.defineProperty(exports, "useAuth", {
   enumerable: true,
-  get: function () { return chunkSHHZ37FE_cjs.useAuth; }
+  get: function () { return chunkT2C43AAL_cjs.useAuth; }
 });
 Object.defineProperty(exports, "useMetrics", {
   enumerable: true,
-  get: function () { return chunkSHHZ37FE_cjs.useMetrics; }
+  get: function () { return chunkT2C43AAL_cjs.useMetrics; }
 });
 Object.defineProperty(exports, "usePivotQuery", {
   enumerable: true,
-  get: function () { return chunkSHHZ37FE_cjs.usePivotQuery; }
+  get: function () { return chunkT2C43AAL_cjs.usePivotQuery; }
 });
 Object.defineProperty(exports, "useSemanticQuery", {
   enumerable: true,
-  get: function () { return chunkSHHZ37FE_cjs.useSemanticQuery; }
+  get: function () { return chunkT2C43AAL_cjs.useSemanticQuery; }
 });
 exports.AuthGate = AuthGate;
 exports.SemanticLayerProvider = SemanticLayerProvider;

package/dist/react.cjs.map

@@ -1 +1 @@
-{"version":3,"sources":["../src/react/provider.tsx","../src/react/auth-gate.tsx"],"names":["useMemo","SemanticLayerClient","useState","useEffect","jsx","SemanticLayerContext","useAuth","useCallback","jsxs","Fragment"],"mappings":";;;;;;;AAuBO,SAAS,qBAAA,CAAsB;AAAA,EACpC,UAAA;AAAA,EACA,OAAA;AAAA,EACA,WAAA;AAAA,EACA,MAAA,EAAQ,cAAA;AAAA,EACR;AACF,CAAA,EAA+B;AAC7B,EAAA,MAAM,MAAA,GAASA,cAAQ,MAAM;AAC3B,IAAA,IAAI,gBAAgB,OAAO,cAAA;AAC3B,IAAA,OAAO,IAAIC,qCAAA,CAAoB,EAAE,UAAA,EAAY,SAAS,CAAA;AAAA,EACxD,CAAA,EAAG,CAAC,UAAA,EAAY,OAAA,EAAS,cAAc,CAAC,CAAA;AAExC,EAAA,MAAM,CAAC,IAAA,EAAM,OAAO,CAAA,GAAIC,cAAA,CAAoB;AAAA,IAC1C,eAAA,EAAiB,KAAA;AAAA,IACjB,SAAA,EAAW,IAAA;AAAA,IACX,IAAA,EAAM,IAAA;AAAA,IACN,KAAA,EAAO;AAAA,GACR,CAAA;AAED,EAAAC,eAAA,CAAU,MAAM;AACd,IAAA,IAAI,OAAA,GAAU,IAAA;AAEd,IAAA,eAAe,QAAA,GAAW;AACxB,MAAA,IAAI;AACF,QAAA,MAAM,OAAA,GAAU,MAAM,MAAA,CAAO,UAAA,EAAW;AACxC,QAAA,IAAI,CAAC,OAAA,EAAS;AAEd,QAAA,IAAI,SAAS,IAAA,EAAM;AACjB,UAAA,OAAA,CAAQ;AAAA,YACN,eAAA,EAAiB,IAAA;AAAA,YACjB,SAAA,EAAW,KAAA;AAAA,YACX,IAAA,EAAM,EAAE,EAAA,EAAI,OAAA,CAAQ,IAAA,CAAK,IAAI,KAAA,EAAO,OAAA,CAAQ,IAAA,CAAK,KAAA,IAAS,EAAA,EAAG;AAAA,YAC7D,KAAA,EAAO;AAAA,WACR,CAAA;AAAA,QACH,CAAA,MAAO;AACL,UAAA,OAAA,CAAQ;AAAA,YACN,eAAA,EAAiB,KAAA;AAAA,YACjB,SAAA,EAAW,KAAA;AAAA,YACX,IAAA,EAAM,IAAA;AAAA,YACN,KAAA,EAAO;AAAA,WACR,CAAA;AAAA,QACH;AAAA,MACF,SAAS,GAAA,EAAK;AACZ,QAAA,IAAI,CAAC,OAAA,EAAS;AACd,QAAA,OAAA,CAAQ;AAAA,UACN,eAAA,EAAiB,KAAA;AAAA,UACjB,SAAA,EAAW,KAAA;AAAA,UACX,IAAA,EAAM,IAAA;AAAA,UACN,KAAA,EAAO,GAAA,YAAe,KAAA,GAAQ,GAAA,CAAI,OAAA,GAAU;AAAA,SAC7C,CAAA;AAAA,MACH;AAAA,IACF;AAEA,IAAA,QAAA,EAAS;AAET,IAAA,MAAM,EAAE,IAAA,EAAM,EAAE,YAAA,EAAa,KAAM,MAAA,CAAO,iBAAA,CAAkB,CAAC,MAAA,EAAQ,OAAA,KAAY;AAC/E,MAAA,IAAI,CAAC,OAAA,EAAS;AACd,MAAA,IAAI,SAAS,IAAA,EAAM;AACjB,QAAA,OAAA,CAAQ;AAAA,UACN,eAAA,EAAiB,IAAA;AAAA,UACjB,SAAA,EAAW,KAAA;AAAA,UACX,IAAA,EAAM,EAAE,EAAA,EAAI,OAAA,CAAQ,IAAA,CAAK,IAAI,KAAA,EAAO,OAAA,CAAQ,IAAA,CAAK,KAAA,IAAS,EAAA,EAAG;AAAA,UAC7D,KAAA,EAAO;AAAA,SACR,CAAA;AAAA,MACH,CAAA,MAAO;AACL,QAAA,OAAA,CAAQ;AAAA,UACN,eAAA,EAAiB,KAAA;AAAA,UACjB,SAAA,EAAW,KAAA;AAAA,UACX,IAAA,EAAM,IAAA;AAAA,UACN,KAAA,EAAO;AAAA,SACR,CAAA;AAAA,MACH;AAAA,IACF,CAAC,CAAA;AAED,IAAA,OAAO,MAAM;AACX,MAAA,OAAA,GAAU,KAAA;AACV,MAAA,YAAA,CAAa,WAAA,EAAY;AAAA,IAC3B,CAAA;AAAA,EACF,CAAA,EAAG,CAAC,MAAM,CAAC,CAAA;AAEX,EAAA,MAAM,KAAA,GAAQH,aAAA,CAAQ,OAAO,EAAE,MAAA,EAAQ,IAAA,EAAM,WAAA,EAAY,CAAA,EAAI,CAAC,MAAA,EAAQ,IAAA,EAAM,WAAW,CAAC,CAAA;AAExF,EAAA,uBACEI,cAAA,CAACC,sCAAA,CAAqB,QAAA,EAArB,EAA8B,OAC5B,QAAA,EACH,CAAA;AAEJ;ACjGA,IAAM,cAAA,GAAsC;AAAA,EAC1C,OAAA,EAAS,MAAA;AAAA,EACT,aAAA,EAAe,QAAA;AAAA,EACf,UAAA,EAAY,QAAA;AAAA,EACZ,cAAA,EAAgB,QAAA;AAAA,EAChB,SAAA,EAAW,OAAA;AAAA,EACX,UAAA,EAAY,sCAAA;AAAA,EACZ,GAAA,EAAK;AACP,CAAA;AAEA,IAAM,YAAA,GAAoC;AAAA,EACxC,OAAA,EAAS,MAAA;AAAA,EACT,UAAA,EAAY,QAAA;AAAA,EACZ,cAAA,EAAgB,QAAA;AAAA,EAChB,SAAA,EAAW,OAAA;AAAA,EACX,UAAA,EAAY,sCAAA;AAAA,EACZ,KAAA,EAAO;AACT,CAAA;AAEA,IAAM,WAAA,GAAmC;AAAA,EACvC,OAAA,EAAS,WAAA;AAAA,EACT,QAAA,EAAU,MAAA;AAAA,EACV,UAAA,EAAY,GAAA;AAAA,EACZ,KAAA,EAAO,SAAA;AAAA,EACP,eAAA,EAAiB,SAAA;AAAA,EACjB,MAAA,EAAQ,MAAA;AAAA,EACR,YAAA,EAAc,KAAA;AAAA,EACd,MAAA,EAAQ,SAAA;AAAA,EACR,OAAA,EAAS,MAAA;AAAA,EACT,UAAA,EAAY,QAAA;AAAA,EACZ,GAAA,EAAK;AACP,CAAA;AAEA,IAAM,UAAA,GAAkC;AAAA,EACtC,OAAA,EAAS,WAAA;AAAA,EACT,QAAA,EAAU,MAAA;AAAA,EACV,MAAA,EAAQ,mBAAA;AAAA,EACR,YAAA,EAAc,KAAA;AAAA,EACd,KAAA,EAAO,OAAA;AAAA,EACP,UAAA,EAAY;AACd,CAAA;AAEA,IAAM,UAAA,GAAkC;AAAA,EACtC,MAAA,EAAQ,CAAA;AAAA,EACR,KAAA,EAAO,SAAA;AAAA,EACP,QAAA,EAAU;AACZ,CAAA;AAEA,IAAM,SAAA,GAAiC;AAAA,EACrC,UAAA,EAAY,MAAA;AAAA,EACZ,MAAA,EAAQ,MAAA;AAAA,EACR,KAAA,EAAO,SAAA;AAAA,EACP,MAAA,EAAQ,SAAA;AAAA,EACR,QAAA,EAAU,MAAA;AAAA,EACV,OAAA,EAAS,CAAA;AAAA,EACT,cAAA,EAAgB;AAClB,CAAA;AAEA,SAAS,UAAA,GAAsB;AAC7B,EAAA,IAAI;AACF,IAAA,OAAO,OAAO,MAAA,KAAW,WAAA,IAAe,MAAA,CAAO,SAAS,MAAA,CAAO,GAAA;AAAA,EACjE,CAAA,CAAA,MAAQ;AACN,IAAA,OAAO,IAAA;AAAA,EACT;AACF;AAMA,SAAS,SAAA,GAAY;AACnB,EAAA,MAAM,EAAE,OAAA,EAAS,SAAA,EAAW,WAAA,KAAgBC,yBAAA,EAAQ;AACpD,EAAA,MAAM,CAAC,KAAA,EAAO,QAAQ,CAAA,GAAIJ,eAAS,EAAE,CAAA;AACrC,EAAA,MAAM,CAAC,IAAA,EAAM,OAAO,CAAA,GAAIA,eAAS,EAAE,CAAA;AACnC,EAAA,MAAM,CAAC,IAAA,EAAM,OAAO,CAAA,GAAIA,eAA2B,OAAO,CAAA;AAC1D,EAAA,MAAM,CAAC,OAAA,EAAS,UAAU,CAAA,GAAIA,eAAS,KAAK,CAAA;AAC5C,EAAA,MAAM,CAAC,KAAA,EAAO,QAAQ,CAAA,GAAIA,eAAwB,IAAI,CAAA;AAEtD,EAAA,MAAM,cAAA,GAAiBK,kBAAY,YAAY;AAC7C,IAAA,QAAA,CAAS,IAAI,CAAA;AACb,IAAA,MAAM,OAAA,GAAU,KAAA,CAAM,IAAA,EAAK,CAAE,WAAA,EAAY;AACzC,IAAA,IAAI,CAAC,OAAA,EAAS;AACZ,MAAA,QAAA,CAAS,0BAA0B,CAAA;AACnC,MAAA;AAAA,IACF;AACA,IAAA,IAAI,eAAe,CAAC,OAAA,CAAQ,SAAS,CAAA,CAAA,EAAI,WAAW,EAAE,CAAA,EAAG;AACvD,MAAA,QAAA,CAAS,CAAA,iBAAA,EAAoB,WAAW,CAAA,OAAA,CAAS,CAAA;AACjD,MAAA;AAAA,IACF;AACA,IAAA,UAAA,CAAW,IAAI,CAAA;AACf,IAAA,IAAI;AACF,MAAA,MAAM,EAAE,KAAA,EAAO,QAAA,EAAS,GAAI,MAAM,QAAQ,OAAO,CAAA;AACjD,MAAA,IAAI,QAAA,EAAU;AACZ,QAAA,QAAA,CAAS,SAAS,OAAO,CAAA;AAAA,MAC3B,CAAA,MAAO;AACL,QAAA,OAAA,CAAQ,MAAM,CAAA;AAAA,MAChB;AAAA,IACF,SAAS,GAAA,EAAK;AACZ,MAAA,QAAA,CAAS,GAAA,YAAe,KAAA,GAAQ,GAAA,CAAI,OAAA,GAAU,qBAAqB,CAAA;AAAA,IACrE,CAAA,SAAE;AACA,MAAA,UAAA,CAAW,KAAK,CAAA;AAAA,IAClB;AAAA,EACF,CAAA,EAAG,CAAC,KAAA,EAAO,WAAA,EAAa,OAAO,CAAC,CAAA;AAEhC,EAAA,MAAM,gBAAA,GAAmBA,kBAAY,YAAY;AAC/C,IAAA,QAAA,CAAS,IAAI,CAAA;AACb,IAAA,MAAM,WAAA,GAAc,KAAK,IAAA,EAAK;AAC9B,IAAA,IAAI,CAAC,WAAA,EAAa;AAChB,MAAA,QAAA,CAAS,wCAAwC,CAAA;AACjD,MAAA;AAAA,IACF;AACA,IAAA,UAAA,CAAW,IAAI,CAAA;AACf,IAAA,IAAI;AACF,MAAA,MAAM,EAAE,KAAA,EAAO,WAAA,EAAY,GAAI,MAAM,SAAA,CAAU,KAAA,CAAM,IAAA,EAAK,CAAE,WAAA,EAAY,EAAG,WAAW,CAAA;AACtF,MAAA,IAAI,WAAA,EAAa;AACf,QAAA,QAAA,CAAS,YAAY,OAAO,CAAA;AAAA,MAC9B;AAAA,IACF,SAAS,GAAA,EAAK;AACZ,MAAA,QAAA,CAAS,GAAA,YAAe,KAAA,GAAQ,GAAA,CAAI,OAAA,GAAU,qBAAqB,CAAA;AAAA,IACrE,CAAA,SAAE;AACA,MAAA,UAAA,CAAW,KAAK,CAAA;AAAA,IAClB;AAAA,EACF,CAAA,EAAG,CAAC,KAAA,EAAO,IAAA,EAAM,SAAS,CAAC,CAAA;AAE3B,EAAA,IAAI,SAAS,MAAA,EAAQ;AACnB,IAAA,uBACEC,eAAA,CAAC,KAAA,EAAA,EAAI,KAAA,EAAO,cAAA,EACV,QAAA,EAAA;AAAA,sBAAAJ,cAAAA,CAAC,IAAA,EAAA,EAAG,KAAA,EAAO,EAAE,MAAA,EAAQ,CAAA,EAAG,QAAA,EAAU,MAAA,EAAQ,KAAA,EAAO,SAAA,EAAU,EAAG,QAAA,EAAA,kBAAA,EAAgB,CAAA;AAAA,sBAC9EI,eAAA,CAAC,GAAA,EAAA,EAAE,KAAA,EAAO,EAAE,MAAA,EAAQ,CAAA,EAAG,KAAA,EAAO,SAAA,EAAW,SAAA,EAAW,QAAA,EAAU,QAAA,EAAU,OAAA,EAAQ,EAAG,QAAA,EAAA;AAAA,QAAA,4BAAA;AAAA,wBACvDJ,cAAAA,CAAC,QAAA,EAAA,EAAQ,QAAA,EAAA,KAAA,CAAM,MAAK,EAAE;AAAA,OAAA,EAClD,CAAA;AAAA,sBACAA,cAAAA;AAAA,QAAC,OAAA;AAAA,QAAA;AAAA,UACC,KAAA,EAAO,UAAA;AAAA,UACP,IAAA,EAAK,MAAA;AAAA,UACL,SAAA,EAAU,SAAA;AAAA,UACV,YAAA,EAAa,eAAA;AAAA,UACb,WAAA,EAAY,oBAAA;AAAA,UACZ,KAAA,EAAO,IAAA;AAAA,UACP,UAAU,CAAC,CAAA,KAAM,OAAA,CAAQ,CAAA,CAAE,OAAO,KAAK,CAAA;AAAA,UACvC,WAAW,CAAC,CAAA,KAAM,CAAA,CAAE,GAAA,KAAQ,WAAW,gBAAA;AAAiB;AAAA,OAC1D;AAAA,MACC,yBAASA,cAAAA,CAAC,GAAA,EAAA,EAAE,KAAA,EAAO,YAAa,QAAA,EAAA,KAAA,EAAM,CAAA;AAAA,sBACvCA,cAAAA,CAAC,QAAA,EAAA,EAAO,KAAA,EAAO,WAAA,EAAa,OAAA,EAAS,gBAAA,EAAkB,QAAA,EAAU,OAAA,EAC9D,QAAA,EAAA,OAAA,GAAU,cAAA,GAAiB,aAAA,EAC9B,CAAA;AAAA,sBACAA,cAAAA,CAAC,QAAA,EAAA,EAAO,KAAA,EAAO,SAAA,EAAW,SAAS,MAAM;AAAE,QAAA,OAAA,CAAQ,OAAO,CAAA;AAAG,QAAA,OAAA,CAAQ,EAAE,CAAA;AAAG,QAAA,QAAA,CAAS,IAAI,CAAA;AAAA,MAAG,GAAG,QAAA,EAAA,uBAAA,EAE7F;AAAA,KAAA,EACF,CAAA;AAAA,EAEJ;AAEA,EAAA,uBACEI,eAAA,CAAC,KAAA,EAAA,EAAI,KAAA,EAAO,cAAA,EACV,QAAA,EAAA;AAAA,oBAAAJ,cAAAA,CAAC,IAAA,EAAA,EAAG,KAAA,EAAO,EAAE,MAAA,EAAQ,CAAA,EAAG,QAAA,EAAU,MAAA,EAAQ,KAAA,EAAO,SAAA,EAAU,EAAG,QAAA,EAAA,qBAAA,EAAmB,CAAA;AAAA,oBACjFI,eAAA,CAAC,OAAE,KAAA,EAAO,EAAE,QAAQ,CAAA,EAAG,KAAA,EAAO,WAAU,EAAG,QAAA,EAAA;AAAA,MAAA,aAAA;AAAA,MAC7B,WAAA,GAAc,CAAA,CAAA,EAAI,WAAW,CAAA,CAAA,CAAA,GAAM,EAAA;AAAA,MAAG;AAAA,KAAA,EACpD,CAAA;AAAA,oBACAJ,cAAAA;AAAA,MAAC,OAAA;AAAA,MAAA;AAAA,QACC,KAAA,EAAO,UAAA;AAAA,QACP,IAAA,EAAK,OAAA;AAAA,QACL,WAAA,EAAa,WAAA,GAAc,CAAA,IAAA,EAAO,WAAW,CAAA,CAAA,GAAK,iBAAA;AAAA,QAClD,KAAA,EAAO,KAAA;AAAA,QACP,UAAU,CAAC,CAAA,KAAM,QAAA,CAAS,CAAA,CAAE,OAAO,KAAK,CAAA;AAAA,QACxC,WAAW,CAAC,CAAA,KAAM,CAAA,CAAE,GAAA,KAAQ,WAAW,cAAA;AAAe;AAAA,KACxD;AAAA,IACC,yBAASA,cAAAA,CAAC,GAAA,EAAA,EAAE,KAAA,EAAO,YAAa,QAAA,EAAA,KAAA,EAAM,CAAA;AAAA,oBACvCA,cAAAA,CAAC,QAAA,EAAA,EAAO,KAAA,EAAO,WAAA,EAAa,OAAA,EAAS,cAAA,EAAgB,QAAA,EAAU,OAAA,EAC5D,QAAA,EAAA,OAAA,GAAU,YAAA,GAAe,mBAAA,EAC5B;AAAA,GAAA,EACF,CAAA;AAEJ;AAMA,SAAS,WAAA,GAAc;AACrB,EAAA,MAAM,EAAE,WAAA,EAAa,KAAA,EAAO,SAAA,KAAcE,yBAAA,EAAQ;AAClD,EAAA,MAAM,CAAC,SAAA,EAAW,YAAY,CAAA,GAAIJ,eAAS,KAAK,CAAA;AAChD,EAAA,MAAM,CAAC,KAAA,EAAO,QAAQ,CAAA,GAAIA,eAAwB,IAAI,CAAA;AACtD,EAAA,MAAM,CAAC,eAAA,EAAiB,kBAAkB,CAAA,GAAIA,eAAS,KAAK,CAAA;AAE5D,EAAA,MAAM,iBAAA,GAAoBK,kBAAY,YAAY;AAChD,IAAA,QAAA,CAAS,IAAI,CAAA;AACb,IAAA,YAAA,CAAa,IAAI,CAAA;AACjB,IAAA,IAAI;AACF,MAAA,MAAM,WAAA,EAAY;AAAA,IACpB,SAAS,GAAA,EAAK;AACZ,MAAA,QAAA,CAAS,GAAA,YAAe,KAAA,GAAQ,GAAA,CAAI,OAAA,GAAU,gBAAgB,CAAA;AAAA,IAChE,CAAA,SAAE;AACA,MAAA,YAAA,CAAa,KAAK,CAAA;AAAA,IACpB;AAAA,EACF,CAAA,EAAG,CAAC,WAAW,CAAC,CAAA;AAEhB,EAAA,IAAI,eAAA,EAAiB;AACnB,IAAA,uBACEC,eAAA,CAAAC,mBAAA,EAAA,EACE,QAAA,EAAA;AAAA,sBAAAL,eAAC,SAAA,EAAA,EAAU,CAAA;AAAA,sBACXA,cAAAA,CAAC,KAAA,EAAA,EAAI,KAAA,EAAO,EAAE,QAAA,EAAU,OAAA,EAAS,MAAA,EAAQ,MAAA,EAAQ,IAAA,EAAM,CAAA,EAAG,KAAA,EAAO,CAAA,EAAG,SAAA,EAAW,QAAA,EAAS,EACtF,QAAA,kBAAAA,cAAAA,CAAC,QAAA,EAAA,EAAO,KAAA,EAAO,SAAA,EAAW,OAAA,EAAS,MAAM,kBAAA,CAAmB,KAAK,CAAA,EAAG,QAAA,EAAA,6BAAA,EAEpE,CAAA,EACF;AAAA,KAAA,EACF,CAAA;AAAA,EAEJ;AAEA,EAAA,uBACEI,eAAA,CAAC,KAAA,EAAA,EAAI,KAAA,EAAO,cAAA,EACV,QAAA,EAAA;AAAA,oBAAAJ,cAAAA,CAAC,IAAA,EAAA,EAAG,KAAA,EAAO,EAAE,MAAA,EAAQ,CAAA,EAAG,QAAA,EAAU,MAAA,EAAQ,KAAA,EAAO,SAAA,EAAU,EAAG,QAAA,EAAA,qBAAA,EAAmB,CAAA;AAAA,oBACjFA,cAAAA,CAAC,GAAA,EAAA,EAAE,KAAA,EAAO,EAAE,QAAQ,CAAA,EAAG,KAAA,EAAO,SAAA,EAAU,EAAG,QAAA,EAAA,yCAAA,EAE3C,CAAA;AAAA,IAAA,CACE,KAAA,IAAS,8BAAcA,cAAAA,CAAC,OAAE,KAAA,EAAO,UAAA,EAAa,mBAAS,SAAA,EAAU,CAAA;AAAA,oBACnEA,cAAAA,CAAC,QAAA,EAAA,EAAO,KAAA,EAAO,WAAA,EAAa,OAAA,EAAS,iBAAA,EAAmB,QAAA,EAAU,SAAA,EAC/D,QAAA,EAAA,SAAA,GAAY,eAAA,GAAkB,qBAAA,EACjC,CAAA;AAAA,oBACAA,cAAAA,CAAC,QAAA,EAAA,EAAO,KAAA,EAAO,SAAA,EAAW,SAAS,MAAM,kBAAA,CAAmB,IAAI,CAAA,EAAG,QAAA,EAAA,wBAAA,EAEnE;AAAA,GAAA,EACF,CAAA;AAEJ;AAOO,SAAS,SAAS,EAAE,QAAA,EAAU,OAAA,EAAS,eAAA,EAAiB,aAAY,EAAkB;AAC3F,EAAA,MAAM,EAAE,eAAA,EAAiB,SAAA,EAAW,KAAA,EAAO,MAAA,KAAWE,yBAAA,EAAQ;AAC9D,EAAA,MAAM,WAAW,UAAA,EAAW;AAE5B,EAAA,IAAI,SAAA,EAAW;AACb,IAAA,uBAAOF,cAAAA,CAAAK,mBAAA,EAAA,EAAG,QAAA,EAAA,OAAA,oBAAWL,eAAC,KAAA,EAAA,EAAI,KAAA,EAAO,YAAA,EAAc,QAAA,EAAA,YAAA,EAAU,CAAA,EAAO,CAAA;AAAA,EAClE;AAEA,EAAA,IAAI,CAAC,eAAA,EAAiB;AACpB,IAAA,IAAI,WAAA,EAAa;AACf,MAAA,uBAAOA,eAAC,SAAA,EAAA,EAAU,CAAA;AAAA,IACpB;AAEA,IAAA,IAAI,QAAA,EAAU;AACZ,MAAA,uBAAOA,eAAC,WAAA,EAAA,EAAY,CAAA;AAAA,IACtB;AAEA,IAAA,IAAI,eAAA,EAAiB;AACnB,MAAA,uBAAOA,cAAAA,CAAAK,mBAAA,EAAA,EAAG,QAAA,EAAA,eAAA,CAAgB,EAAE,MAAA,EAAQ,MAAM,MAAA,CAAO,MAAA,CAAO,QAAA,CAAS,MAAM,CAAA,EAAG,CAAA,EAAE,CAAA;AAAA,IAC9E;AAEA,IAAA,uBACED,eAAA,CAAC,KAAA,EAAA,EAAI,KAAA,EAAO,cAAA,EACV,QAAA,EAAA;AAAA,sBAAAJ,cAAAA,CAAC,IAAA,EAAA,EAAG,KAAA,EAAO,EAAE,MAAA,EAAQ,CAAA,EAAG,QAAA,EAAU,MAAA,EAAQ,KAAA,EAAO,SAAA,EAAU,EAAG,QAAA,EAAA,qBAAA,EAAmB,CAAA;AAAA,sBACjFA,cAAAA,CAAC,GAAA,EAAA,EAAE,KAAA,EAAO,EAAE,QAAQ,CAAA,EAAG,KAAA,EAAO,SAAA,EAAU,EAAG,QAAA,EAAA,yCAAA,EAE3C,CAAA;AAAA,MACC,yBAASA,cAAAA,CAAC,GAAA,EAAA,EAAE,KAAA,EAAO,YAAa,QAAA,EAAA,KAAA,EAAM,CAAA;AAAA,sBACvCA,cAAAA,CAAC,QAAA,EAAA,EAAO,KAAA,EAAO,WAAA,EAAa,OAAA,EAAS,MAAM,MAAA,CAAO,MAAA,CAAO,QAAA,CAAS,MAAM,CAAA,EAAG,QAAA,EAAA,qBAAA,EAE3E;AAAA,KAAA,EACF,CAAA;AAAA,EAEJ;AAEA,EAAA,uBAAOA,cAAAA,CAAAK,mBAAA,EAAA,EAAG,QAAA,EAAS,CAAA;AACrB","file":"react.cjs","sourcesContent":["import React, { useEffect, useMemo, useState } from \"react\";\nimport { SemanticLayerClient } from \"../client\";\nimport type { SemanticLayerConfig, AuthState } from \"../types\";\nimport { SemanticLayerContext } from \"./context\";\n\nexport interface SemanticLayerProviderProps {\n  /** The Supabase URL of the gateway project. */\n  gatewayUrl: string;\n  /** The Supabase anon/publishable key of the gateway project. */\n  anonKey: string;\n  /**\n   * Optional: restrict sign-in to emails matching this domain (e.g. \"inkind.com\").\n   * Used for client-side validation in the OTP sign-in form.\n   */\n  emailDomain?: string;\n  /**\n   * Optional: a pre-constructed client instance.\n   * If provided, gatewayUrl and anonKey are ignored.\n   */\n  client?: SemanticLayerClient;\n  children: React.ReactNode;\n}\n\nexport function SemanticLayerProvider({\n  gatewayUrl,\n  anonKey,\n  emailDomain,\n  client: externalClient,\n  children,\n}: SemanticLayerProviderProps) {\n  const client = useMemo(() => {\n    if (externalClient) return externalClient;\n    return new SemanticLayerClient({ gatewayUrl, anonKey });\n  }, [gatewayUrl, anonKey, externalClient]);\n\n  const [auth, setAuth] = useState<AuthState>({\n    isAuthenticated: false,\n    isLoading: true,\n    user: null,\n    error: null,\n  });\n\n  useEffect(() => {\n    let mounted = true;\n\n    async function initAuth() {\n      try {\n        const session = await client.getSession();\n        if (!mounted) return;\n\n        if (session?.user) {\n          setAuth({\n            isAuthenticated: true,\n            isLoading: false,\n            user: { id: session.user.id, email: session.user.email || \"\" },\n            error: null,\n          });\n        } else {\n          setAuth({\n            isAuthenticated: false,\n            isLoading: false,\n            user: null,\n            error: null,\n          });\n        }\n      } catch (err) {\n        if (!mounted) return;\n        setAuth({\n          isAuthenticated: false,\n          isLoading: false,\n          user: null,\n          error: err instanceof Error ? err.message : \"Auth initialization failed\",\n        });\n      }\n    }\n\n    initAuth();\n\n    const { data: { subscription } } = client.onAuthStateChange((_event, session) => {\n      if (!mounted) return;\n      if (session?.user) {\n        setAuth({\n          isAuthenticated: true,\n          isLoading: false,\n          user: { id: session.user.id, email: session.user.email || \"\" },\n          error: null,\n        });\n      } else {\n        setAuth({\n          isAuthenticated: false,\n          isLoading: false,\n          user: null,\n          error: null,\n        });\n      }\n    });\n\n    return () => {\n      mounted = false;\n      subscription.unsubscribe();\n    };\n  }, [client]);\n\n  const value = useMemo(() => ({ client, auth, emailDomain }), [client, auth, emailDomain]);\n\n  return (\n    <SemanticLayerContext.Provider value={value}>\n      {children}\n    </SemanticLayerContext.Provider>\n  );\n}\n","import React, { useCallback, useState } from \"react\";\nimport { useAuth } from \"./hooks\";\n\nexport interface AuthGateProps {\n  children: React.ReactNode;\n  /** Custom loading component. */\n  loading?: React.ReactNode;\n  /** Custom sign-in component. Receives a signIn callback. */\n  signInComponent?: (props: { signIn: () => void }) => React.ReactNode;\n  /** Force email OTP sign-in instead of Google OAuth. */\n  useEmailOtp?: boolean;\n}\n\nconst containerStyle: React.CSSProperties = {\n  display: \"flex\",\n  flexDirection: \"column\",\n  alignItems: \"center\",\n  justifyContent: \"center\",\n  minHeight: \"100vh\",\n  fontFamily: \"system-ui, -apple-system, sans-serif\",\n  gap: \"16px\",\n};\n\nconst loadingStyle: React.CSSProperties = {\n  display: \"flex\",\n  alignItems: \"center\",\n  justifyContent: \"center\",\n  minHeight: \"100vh\",\n  fontFamily: \"system-ui, -apple-system, sans-serif\",\n  color: \"#6b7280\",\n};\n\nconst buttonStyle: React.CSSProperties = {\n  padding: \"12px 24px\",\n  fontSize: \"16px\",\n  fontWeight: 500,\n  color: \"#ffffff\",\n  backgroundColor: \"#4285f4\",\n  border: \"none\",\n  borderRadius: \"8px\",\n  cursor: \"pointer\",\n  display: \"flex\",\n  alignItems: \"center\",\n  gap: \"8px\",\n};\n\nconst inputStyle: React.CSSProperties = {\n  padding: \"10px 14px\",\n  fontSize: \"16px\",\n  border: \"1px solid #d1d5db\",\n  borderRadius: \"8px\",\n  width: \"280px\",\n  fontFamily: \"system-ui, -apple-system, sans-serif\",\n};\n\nconst errorStyle: React.CSSProperties = {\n  margin: 0,\n  color: \"#ef4444\",\n  fontSize: \"14px\",\n};\n\nconst linkStyle: React.CSSProperties = {\n  background: \"none\",\n  border: \"none\",\n  color: \"#4285f4\",\n  cursor: \"pointer\",\n  fontSize: \"14px\",\n  padding: 0,\n  textDecoration: \"underline\",\n};\n\nfunction isInIframe(): boolean {\n  try {\n    return typeof window !== \"undefined\" && window.self !== window.top;\n  } catch {\n    return true;\n  }\n}\n\n/**\n * Email OTP sign-in form for use inside iframes (Lovable editor preview).\n * Two-step: enter email → enter code from inbox.\n */\nfunction OtpSignIn() {\n  const { sendOtp, verifyOtp, emailDomain } = useAuth();\n  const [email, setEmail] = useState(\"\");\n  const [code, setCode] = useState(\"\");\n  const [step, setStep] = useState<\"email\" | \"code\">(\"email\");\n  const [sending, setSending] = useState(false);\n  const [error, setError] = useState<string | null>(null);\n\n  const handleSendCode = useCallback(async () => {\n    setError(null);\n    const trimmed = email.trim().toLowerCase();\n    if (!trimmed) {\n      setError(\"Please enter your email.\");\n      return;\n    }\n    if (emailDomain && !trimmed.endsWith(`@${emailDomain}`)) {\n      setError(`Please use your @${emailDomain} email.`);\n      return;\n    }\n    setSending(true);\n    try {\n      const { error: otpError } = await sendOtp(trimmed);\n      if (otpError) {\n        setError(otpError.message);\n      } else {\n        setStep(\"code\");\n      }\n    } catch (err) {\n      setError(err instanceof Error ? err.message : \"Failed to send code\");\n    } finally {\n      setSending(false);\n    }\n  }, [email, emailDomain, sendOtp]);\n\n  const handleVerifyCode = useCallback(async () => {\n    setError(null);\n    const trimmedCode = code.trim();\n    if (!trimmedCode) {\n      setError(\"Please enter the code from your email.\");\n      return;\n    }\n    setSending(true);\n    try {\n      const { error: verifyError } = await verifyOtp(email.trim().toLowerCase(), trimmedCode);\n      if (verifyError) {\n        setError(verifyError.message);\n      }\n    } catch (err) {\n      setError(err instanceof Error ? err.message : \"Verification failed\");\n    } finally {\n      setSending(false);\n    }\n  }, [email, code, verifyOtp]);\n\n  if (step === \"code\") {\n    return (\n      <div style={containerStyle}>\n        <h2 style={{ margin: 0, fontSize: \"24px\", color: \"#111827\" }}>Check your email</h2>\n        <p style={{ margin: 0, color: \"#6b7280\", textAlign: \"center\", maxWidth: \"320px\" }}>\n          We sent a sign-in code to <strong>{email.trim()}</strong>\n        </p>\n        <input\n          style={inputStyle}\n          type=\"text\"\n          inputMode=\"numeric\"\n          autoComplete=\"one-time-code\"\n          placeholder=\"Enter 6-digit code\"\n          value={code}\n          onChange={(e) => setCode(e.target.value)}\n          onKeyDown={(e) => e.key === \"Enter\" && handleVerifyCode()}\n        />\n        {error && <p style={errorStyle}>{error}</p>}\n        <button style={buttonStyle} onClick={handleVerifyCode} disabled={sending}>\n          {sending ? \"Verifying...\" : \"Verify code\"}\n        </button>\n        <button style={linkStyle} onClick={() => { setStep(\"email\"); setCode(\"\"); setError(null); }}>\n          Use a different email\n        </button>\n      </div>\n    );\n  }\n\n  return (\n    <div style={containerStyle}>\n      <h2 style={{ margin: 0, fontSize: \"24px\", color: \"#111827\" }}>Sign in to continue</h2>\n      <p style={{ margin: 0, color: \"#6b7280\" }}>\n        Enter your {emailDomain ? `@${emailDomain} ` : \"\"}email to receive a sign-in code.\n      </p>\n      <input\n        style={inputStyle}\n        type=\"email\"\n        placeholder={emailDomain ? `you@${emailDomain}` : \"you@company.com\"}\n        value={email}\n        onChange={(e) => setEmail(e.target.value)}\n        onKeyDown={(e) => e.key === \"Enter\" && handleSendCode()}\n      />\n      {error && <p style={errorStyle}>{error}</p>}\n      <button style={buttonStyle} onClick={handleSendCode} disabled={sending}>\n        {sending ? \"Sending...\" : \"Send sign-in code\"}\n      </button>\n    </div>\n  );\n}\n\n/**\n * Google OAuth sign-in for iframe contexts (opens a popup window).\n * Falls back to OTP if the user prefers or if the popup is blocked.\n */\nfunction PopupSignIn() {\n  const { signInPopup, error: authError } = useAuth();\n  const [signingIn, setSigningIn] = useState(false);\n  const [error, setError] = useState<string | null>(null);\n  const [showOtpFallback, setShowOtpFallback] = useState(false);\n\n  const handlePopupSignIn = useCallback(async () => {\n    setError(null);\n    setSigningIn(true);\n    try {\n      await signInPopup();\n    } catch (err) {\n      setError(err instanceof Error ? err.message : \"Sign-in failed\");\n    } finally {\n      setSigningIn(false);\n    }\n  }, [signInPopup]);\n\n  if (showOtpFallback) {\n    return (\n      <>\n        <OtpSignIn />\n        <div style={{ position: \"fixed\", bottom: \"24px\", left: 0, right: 0, textAlign: \"center\" }}>\n          <button style={linkStyle} onClick={() => setShowOtpFallback(false)}>\n            Sign in with Google instead\n          </button>\n        </div>\n      </>\n    );\n  }\n\n  return (\n    <div style={containerStyle}>\n      <h2 style={{ margin: 0, fontSize: \"24px\", color: \"#111827\" }}>Sign in to continue</h2>\n      <p style={{ margin: 0, color: \"#6b7280\" }}>\n        Use your Google account to access data.\n      </p>\n      {(error || authError) && <p style={errorStyle}>{error || authError}</p>}\n      <button style={buttonStyle} onClick={handlePopupSignIn} disabled={signingIn}>\n        {signingIn ? \"Signing in...\" : \"Sign in with Google\"}\n      </button>\n      <button style={linkStyle} onClick={() => setShowOtpFallback(true)}>\n        Use email code instead\n      </button>\n    </div>\n  );\n}\n\n/**\n * Wraps children and only renders them when the user is authenticated.\n * In iframes (e.g. Lovable editor preview), uses popup-based Google OAuth\n * with an email OTP fallback. In standalone tabs, uses redirect-based OAuth.\n */\nexport function AuthGate({ children, loading, signInComponent, useEmailOtp }: AuthGateProps) {\n  const { isAuthenticated, isLoading, error, signIn } = useAuth();\n  const inIframe = isInIframe();\n\n  if (isLoading) {\n    return <>{loading || <div style={loadingStyle}>Loading...</div>}</>;\n  }\n\n  if (!isAuthenticated) {\n    if (useEmailOtp) {\n      return <OtpSignIn />;\n    }\n\n    if (inIframe) {\n      return <PopupSignIn />;\n    }\n\n    if (signInComponent) {\n      return <>{signInComponent({ signIn: () => signIn(window.location.origin) })}</>;\n    }\n\n    return (\n      <div style={containerStyle}>\n        <h2 style={{ margin: 0, fontSize: \"24px\", color: \"#111827\" }}>Sign in to continue</h2>\n        <p style={{ margin: 0, color: \"#6b7280\" }}>\n          Use your Google account to access data.\n        </p>\n        {error && <p style={errorStyle}>{error}</p>}\n        <button style={buttonStyle} onClick={() => signIn(window.location.origin)}>\n          Sign in with Google\n        </button>\n      </div>\n    );\n  }\n\n  return <>{children}</>;\n}\n"]}
+{"version":3,"sources":["../src/react/provider.tsx","../src/react/auth-gate.tsx"],"names":["useMemo","SemanticLayerClient","useState","useEffect","useCallback","jsx","SemanticLayerContext","useAuth","Fragment","jsxs"],"mappings":";;;;;;;AAqBO,SAAS,qBAAA,CAAsB;AAAA,EACpC,UAAA;AAAA,EACA,WAAA;AAAA,EACA,MAAA,EAAQ,cAAA;AAAA,EACR;AACF,CAAA,EAA+B;AAC7B,EAAA,MAAM,MAAA,GAASA,aAAA;AAAA,IACb,MAAM,cAAA,IAAkB,IAAIC,qCAAA,CAAoB,EAAE,YAAY,CAAA;AAAA,IAC9D,CAAC,YAAY,cAAc;AAAA,GAC7B;AAEA,EAAA,MAAM,CAAC,IAAA,EAAM,OAAO,CAAA,GAAIC,cAAA,CAAoB;AAAA,IAC1C,eAAA,EAAiB,KAAA;AAAA,IACjB,SAAA,EAAW,IAAA;AAAA,IACX,IAAA,EAAM,IAAA;AAAA,IACN,KAAA,EAAO;AAAA,GACR,CAAA;AAID,EAAAC,eAAA,CAAU,MAAM;AACd,IAAA,IAAI,OAAA,GAAU,IAAA;AAEd,IAAA,eAAe,QAAA,GAAW;AACxB,MAAA,IAAI;AACF,QAAA,MAAM,eAAA,GAAkB,OAAO,kBAAA,EAAmB;AAElD,QAAA,IAAI,eAAA,EAAiB;AACnB,UAAA,MAAM,OAAA,GAAU,MAAM,MAAA,CAAO,UAAA,EAAW;AACxC,UAAA,IAAI,CAAC,OAAA,EAAS;AACd,UAAA,IAAI,SAAS,IAAA,EAAM;AACjB,YAAA,OAAA,CAAQ;AAAA,cACN,eAAA,EAAiB,IAAA;AAAA,cACjB,SAAA,EAAW,KAAA;AAAA,cACX,IAAA,EAAM,EAAE,EAAA,EAAI,OAAA,CAAQ,KAAK,EAAA,EAAI,KAAA,EAAO,OAAA,CAAQ,IAAA,CAAK,KAAA,EAAM;AAAA,cACvD,KAAA,EAAO;AAAA,aACR,CAAA;AACD,YAAA;AAAA,UACF;AAAA,QACF;AAAA,MACF,SAAS,GAAA,EAAK;AACZ,QAAA,IAAI,CAAC,OAAA,EAAS;AACd,QAAA,OAAA,CAAQ;AAAA,UACN,eAAA,EAAiB,KAAA;AAAA,UACjB,SAAA,EAAW,KAAA;AAAA,UACX,IAAA,EAAM,IAAA;AAAA,UACN,KAAA,EAAO,GAAA,YAAe,KAAA,GAAQ,GAAA,CAAI,OAAA,GAAU;AAAA,SAC7C,CAAA;AACD,QAAA;AAAA,MACF;AAEA,MAAA,IAAI;AACF,QAAA,MAAM,OAAA,GAAU,MAAM,MAAA,CAAO,UAAA,EAAW;AACxC,QAAA,IAAI,CAAC,OAAA,EAAS;AACd,QAAA,IAAI,SAAS,IAAA,EAAM;AACjB,UAAA,OAAA,CAAQ;AAAA,YACN,eAAA,EAAiB,IAAA;AAAA,YACjB,SAAA,EAAW,KAAA;AAAA,YACX,IAAA,EAAM,EAAE,EAAA,EAAI,OAAA,CAAQ,KAAK,EAAA,EAAI,KAAA,EAAO,OAAA,CAAQ,IAAA,CAAK,KAAA,EAAM;AAAA,YACvD,KAAA,EAAO;AAAA,WACR,CAAA;AAAA,QACH,CAAA,MAAO;AACL,UAAA,OAAA,CAAQ;AAAA,YACN,eAAA,EAAiB,KAAA;AAAA,YACjB,SAAA,EAAW,KAAA;AAAA,YACX,IAAA,EAAM,IAAA;AAAA,YACN,KAAA,EAAO;AAAA,WACR,CAAA;AAAA,QACH;AAAA,MACF,SAAS,GAAA,EAAK;AACZ,QAAA,IAAI,CAAC,OAAA,EAAS;AACd,QAAA,OAAA,CAAQ;AAAA,UACN,eAAA,EAAiB,KAAA;AAAA,UACjB,SAAA,EAAW,KAAA;AAAA,UACX,IAAA,EAAM,IAAA;AAAA,UACN,KAAA,EAAO,GAAA,YAAe,KAAA,GAAQ,GAAA,CAAI,OAAA,GAAU;AAAA,SAC7C,CAAA;AAAA,MACH;AAAA,IACF;AAEA,IAAA,QAAA,EAAS;AAET,IAAA,MAAM;AAAA,MACJ,IAAA,EAAM,EAAE,YAAA;AAAa,KACvB,GAAI,MAAA,CAAO,iBAAA,CAAkB,CAAC,QAAQ,OAAA,KAAY;AAChD,MAAA,IAAI,CAAC,OAAA,EAAS;AACd,MAAA,IAAI,SAAS,IAAA,EAAM;AACjB,QAAA,OAAA,CAAQ;AAAA,UACN,eAAA,EAAiB,IAAA;AAAA,UACjB,SAAA,EAAW,KAAA;AAAA,UACX,IAAA,EAAM,EAAE,EAAA,EAAI,OAAA,CAAQ,KAAK,EAAA,EAAI,KAAA,EAAO,OAAA,CAAQ,IAAA,CAAK,KAAA,EAAM;AAAA,UACvD,KAAA,EAAO;AAAA,SACR,CAAA;AAAA,MACH,CAAA,MAAO;AACL,QAAA,OAAA,CAAQ;AAAA,UACN,eAAA,EAAiB,KAAA;AAAA,UACjB,SAAA,EAAW,KAAA;AAAA,UACX,IAAA,EAAM,IAAA;AAAA,UACN,KAAA,EAAO;AAAA,SACR,CAAA;AAAA,MACH;AAAA,IACF,CAAC,CAAA;AAED,IAAA,OAAO,MAAM;AACX,MAAA,OAAA,GAAU,KAAA;AACV,MAAA,YAAA,CAAa,WAAA,EAAY;AAAA,IAC3B,CAAA;AAAA,EACF,CAAA,EAAG,CAAC,MAAM,CAAC,CAAA;AAEX,EAAA,MAAM,MAAA,GAASC,kBAAY,MAAM;AAC/B,IAAA,MAAA,CAAO,QAAA,CAAS,IAAA,GAAO,MAAA,CAAO,YAAA,EAAa;AAAA,EAC7C,CAAA,EAAG,CAAC,MAAM,CAAC,CAAA;AAEX,EAAA,MAAM,KAAA,GAAQJ,aAAA;AAAA,IACZ,OAAO,EAAE,MAAA,EAAQ,IAAA,EAAM,aAAa,MAAA,EAAO,CAAA;AAAA,IAC3C,CAAC,MAAA,EAAQ,IAAA,EAAM,WAAA,EAAa,MAAM;AAAA,GACpC;AAEA,EAAA,uBACEK,cAAA,CAACC,sCAAA,CAAqB,QAAA,EAArB,EAA8B,OAC5B,QAAA,EACH,CAAA;AAEJ;ACrIA,IAAM,cAAA,GAAsC;AAAA,EAC1C,OAAA,EAAS,MAAA;AAAA,EACT,aAAA,EAAe,QAAA;AAAA,EACf,UAAA,EAAY,QAAA;AAAA,EACZ,cAAA,EAAgB,QAAA;AAAA,EAChB,SAAA,EAAW,OAAA;AAAA,EACX,UAAA,EAAY,sCAAA;AAAA,EACZ,GAAA,EAAK;AACP,CAAA;AAEA,IAAM,YAAA,GAAoC;AAAA,EACxC,OAAA,EAAS,MAAA;AAAA,EACT,UAAA,EAAY,QAAA;AAAA,EACZ,cAAA,EAAgB,QAAA;AAAA,EAChB,SAAA,EAAW,OAAA;AAAA,EACX,UAAA,EAAY,sCAAA;AAAA,EACZ,KAAA,EAAO;AACT,CAAA;AAEA,IAAM,WAAA,GAAmC;AAAA,EACvC,OAAA,EAAS,WAAA;AAAA,EACT,QAAA,EAAU,MAAA;AAAA,EACV,UAAA,EAAY,GAAA;AAAA,EACZ,KAAA,EAAO,SAAA;AAAA,EACP,eAAA,EAAiB,SAAA;AAAA,EACjB,MAAA,EAAQ,MAAA;AAAA,EACR,YAAA,EAAc,KAAA;AAAA,EACd,MAAA,EAAQ,SAAA;AAAA,EACR,OAAA,EAAS,MAAA;AAAA,EACT,UAAA,EAAY,QAAA;AAAA,EACZ,GAAA,EAAK;AACP,CAAA;AAEA,IAAM,UAAA,GAAkC;AAAA,EACtC,MAAA,EAAQ,CAAA;AAAA,EACR,KAAA,EAAO,SAAA;AAAA,EACP,QAAA,EAAU;AACZ,CAAA;AAMO,SAAS,QAAA,CAAS,EAAE,QAAA,EAAU,OAAA,EAAS,iBAAgB,EAAkB;AAC9E,EAAA,MAAM,EAAE,eAAA,EAAiB,SAAA,EAAW,KAAA,EAAO,MAAA,KAAWC,yBAAA,EAAQ;AAC9D,EAAA,MAAM,CAAC,SAAA,EAAW,YAAY,CAAA,GAAIL,eAAS,KAAK,CAAA;AAEhD,EAAA,MAAM,YAAA,GAAeE,kBAAY,MAAM;AACrC,IAAA,YAAA,CAAa,IAAI,CAAA;AACjB,IAAA,MAAA,EAAO;AAAA,EACT,CAAA,EAAG,CAAC,MAAM,CAAC,CAAA;AAEX,EAAA,IAAI,SAAA,EAAW;AACb,IAAA,uBAAOC,cAAAA,CAAAG,mBAAA,EAAA,EAAG,QAAA,EAAA,OAAA,oBAAWH,eAAC,KAAA,EAAA,EAAI,KAAA,EAAO,YAAA,EAAc,QAAA,EAAA,YAAA,EAAU,CAAA,EAAO,CAAA;AAAA,EAClE;AAEA,EAAA,IAAI,CAAC,eAAA,EAAiB;AACpB,IAAA,IAAI,eAAA,EAAiB;AACnB,MAAA,uBAAOA,eAAAG,mBAAA,EAAA,EAAG,QAAA,EAAA,eAAA,CAAgB,EAAE,MAAA,EAAQ,YAAA,EAAc,CAAA,EAAE,CAAA;AAAA,IACtD;AAEA,IAAA,uBACEC,eAAA,CAAC,KAAA,EAAA,EAAI,KAAA,EAAO,cAAA,EACV,QAAA,EAAA;AAAA,sBAAAJ,cAAAA,CAAC,IAAA,EAAA,EAAG,KAAA,EAAO,EAAE,MAAA,EAAQ,CAAA,EAAG,QAAA,EAAU,MAAA,EAAQ,KAAA,EAAO,SAAA,EAAU,EAAG,QAAA,EAAA,qBAAA,EAAmB,CAAA;AAAA,sBACjFA,cAAAA,CAAC,GAAA,EAAA,EAAE,KAAA,EAAO,EAAE,QAAQ,CAAA,EAAG,KAAA,EAAO,SAAA,EAAU,EAAG,QAAA,EAAA,yCAAA,EAE3C,CAAA;AAAA,MACC,yBAASA,cAAAA,CAAC,GAAA,EAAA,EAAE,KAAA,EAAO,YAAa,QAAA,EAAA,KAAA,EAAM,CAAA;AAAA,sBACvCA,cAAAA,CAAC,QAAA,EAAA,EAAO,KAAA,EAAO,WAAA,EAAa,OAAA,EAAS,YAAA,EAAc,QAAA,EAAU,SAAA,EAC1D,QAAA,EAAA,SAAA,GAAY,eAAA,GAAkB,qBAAA,EACjC;AAAA,KAAA,EACF,CAAA;AAAA,EAEJ;AAEA,EAAA,uBAAOA,cAAAA,CAAAG,mBAAA,EAAA,EAAG,QAAA,EAAS,CAAA;AACrB","file":"react.cjs","sourcesContent":["import React, { useEffect, useMemo, useState, useCallback } from \"react\";\nimport { SemanticLayerClient } from \"../client\";\nimport type { AuthState } from \"../types\";\nimport { SemanticLayerContext } from \"./context\";\n\nexport interface SemanticLayerProviderProps {\n  /** The gateway API URL (e.g. https://semantic-layer-gateway.inkind-dev.com). */\n  gatewayUrl: string;\n  /**\n   * Optional: restrict sign-in to emails matching this domain (e.g. \"inkind.com\").\n   * This is a client-side hint only; the gateway enforces domain restrictions server-side.\n   */\n  emailDomain?: string;\n  /**\n   * Optional: a pre-constructed client instance.\n   * If provided, gatewayUrl is ignored.\n   */\n  client?: SemanticLayerClient;\n  children: React.ReactNode;\n}\n\nexport function SemanticLayerProvider({\n  gatewayUrl,\n  emailDomain,\n  client: externalClient,\n  children,\n}: SemanticLayerProviderProps) {\n  const client = useMemo(\n    () => externalClient ?? new SemanticLayerClient({ gatewayUrl }),\n    [gatewayUrl, externalClient],\n  );\n\n  const [auth, setAuth] = useState<AuthState>({\n    isAuthenticated: false,\n    isLoading: true,\n    user: null,\n    error: null,\n  });\n\n  // On mount, check for auth tokens in the URL hash (from gateway redirect)\n  // and check for an existing session in sessionStorage.\n  useEffect(() => {\n    let mounted = true;\n\n    async function initAuth() {\n      try {\n        const handledCallback = client.handleAuthCallback();\n\n        if (handledCallback) {\n          const session = await client.getSession();\n          if (!mounted) return;\n          if (session?.user) {\n            setAuth({\n              isAuthenticated: true,\n              isLoading: false,\n              user: { id: session.user.id, email: session.user.email },\n              error: null,\n            });\n            return;\n          }\n        }\n      } catch (err) {\n        if (!mounted) return;\n        setAuth({\n          isAuthenticated: false,\n          isLoading: false,\n          user: null,\n          error: err instanceof Error ? err.message : \"Auth callback failed\",\n        });\n        return;\n      }\n\n      try {\n        const session = await client.getSession();\n        if (!mounted) return;\n        if (session?.user) {\n          setAuth({\n            isAuthenticated: true,\n            isLoading: false,\n            user: { id: session.user.id, email: session.user.email },\n            error: null,\n          });\n        } else {\n          setAuth({\n            isAuthenticated: false,\n            isLoading: false,\n            user: null,\n            error: null,\n          });\n        }\n      } catch (err) {\n        if (!mounted) return;\n        setAuth({\n          isAuthenticated: false,\n          isLoading: false,\n          user: null,\n          error: err instanceof Error ? err.message : \"Auth initialization failed\",\n        });\n      }\n    }\n\n    initAuth();\n\n    const {\n      data: { subscription },\n    } = client.onAuthStateChange((_event, session) => {\n      if (!mounted) return;\n      if (session?.user) {\n        setAuth({\n          isAuthenticated: true,\n          isLoading: false,\n          user: { id: session.user.id, email: session.user.email },\n          error: null,\n        });\n      } else {\n        setAuth({\n          isAuthenticated: false,\n          isLoading: false,\n          user: null,\n          error: null,\n        });\n      }\n    });\n\n    return () => {\n      mounted = false;\n      subscription.unsubscribe();\n    };\n  }, [client]);\n\n  const signIn = useCallback(() => {\n    window.location.href = client.getSignInUrl();\n  }, [client]);\n\n  const value = useMemo(\n    () => ({ client, auth, emailDomain, signIn }),\n    [client, auth, emailDomain, signIn],\n  );\n\n  return (\n    <SemanticLayerContext.Provider value={value}>\n      {children}\n    </SemanticLayerContext.Provider>\n  );\n}\n","import React, { useCallback, useState } from \"react\";\nimport { useAuth } from \"./hooks\";\n\nexport interface AuthGateProps {\n  children: React.ReactNode;\n  /** Custom loading component. */\n  loading?: React.ReactNode;\n  /** Custom sign-in component. Receives a signIn callback. */\n  signInComponent?: (props: { signIn: () => void }) => React.ReactNode;\n}\n\nconst containerStyle: React.CSSProperties = {\n  display: \"flex\",\n  flexDirection: \"column\",\n  alignItems: \"center\",\n  justifyContent: \"center\",\n  minHeight: \"100vh\",\n  fontFamily: \"system-ui, -apple-system, sans-serif\",\n  gap: \"16px\",\n};\n\nconst loadingStyle: React.CSSProperties = {\n  display: \"flex\",\n  alignItems: \"center\",\n  justifyContent: \"center\",\n  minHeight: \"100vh\",\n  fontFamily: \"system-ui, -apple-system, sans-serif\",\n  color: \"#6b7280\",\n};\n\nconst buttonStyle: React.CSSProperties = {\n  padding: \"12px 24px\",\n  fontSize: \"16px\",\n  fontWeight: 500,\n  color: \"#ffffff\",\n  backgroundColor: \"#4285f4\",\n  border: \"none\",\n  borderRadius: \"8px\",\n  cursor: \"pointer\",\n  display: \"flex\",\n  alignItems: \"center\",\n  gap: \"8px\",\n};\n\nconst errorStyle: React.CSSProperties = {\n  margin: 0,\n  color: \"#ef4444\",\n  fontSize: \"14px\",\n};\n\n/**\n * Wraps children and only renders them when the user is authenticated.\n * Shows a Google sign-in button when unauthenticated.\n */\nexport function AuthGate({ children, loading, signInComponent }: AuthGateProps) {\n  const { isAuthenticated, isLoading, error, signIn } = useAuth();\n  const [signingIn, setSigningIn] = useState(false);\n\n  const handleSignIn = useCallback(() => {\n    setSigningIn(true);\n    signIn();\n  }, [signIn]);\n\n  if (isLoading) {\n    return <>{loading || <div style={loadingStyle}>Loading...</div>}</>;\n  }\n\n  if (!isAuthenticated) {\n    if (signInComponent) {\n      return <>{signInComponent({ signIn: handleSignIn })}</>;\n    }\n\n    return (\n      <div style={containerStyle}>\n        <h2 style={{ margin: 0, fontSize: \"24px\", color: \"#111827\" }}>Sign in to continue</h2>\n        <p style={{ margin: 0, color: \"#6b7280\" }}>\n          Use your Google account to access data.\n        </p>\n        {error && <p style={errorStyle}>{error}</p>}\n        <button style={buttonStyle} onClick={handleSignIn} disabled={signingIn}>\n          {signingIn ? \"Signing in...\" : \"Sign in with Google\"}\n        </button>\n      </div>\n    );\n  }\n\n  return <>{children}</>;\n}\n"]}

package/dist/react.d.cts

@@ -2,28 +2,24 @@ import * as react_jsx_runtime from 'react/jsx-runtime';
 import * as React from 'react';
 import React__default from 'react';
 import { SemanticLayerClient } from './index.cjs';
-import * as _supabase_auth_js from '@supabase/auth-js';
-import { S as SemanticField, a as FieldCategory, P as PivotConfig, Q as QueryResult, b as SimpleQueryInput, C as CuratedField, A as AccessRole, U as UserRoleAssignment, c as UserFieldOverride, d as AuthState } from './types-Dc8Zdacw.cjs';
-import '@supabase/supabase-js';
+import { S as SemanticField, F as FieldCategory, P as PivotConfig, Q as QueryResult, a as SimpleQueryInput, C as CuratedField, A as AccessRole, U as UserRoleAssignment, b as UserFieldOverride, c as AuthState } from './types-c5qj4BKB.cjs';
 
 interface SemanticLayerProviderProps {
-    /** The Supabase URL of the gateway project. */
+    /** The gateway API URL (e.g. https://semantic-layer-gateway.inkind-dev.com). */
     gatewayUrl: string;
-    /** The Supabase anon/publishable key of the gateway project. */
-    anonKey: string;
     /**
      * Optional: restrict sign-in to emails matching this domain (e.g. "inkind.com").
-     * Used for client-side validation in the OTP sign-in form.
+     * This is a client-side hint only; the gateway enforces domain restrictions server-side.
      */
     emailDomain?: string;
     /**
      * Optional: a pre-constructed client instance.
-     * If provided, gatewayUrl and anonKey are ignored.
+     * If provided, gatewayUrl is ignored.
      */
     client?: SemanticLayerClient;
     children: React__default.ReactNode;
 }
-declare function SemanticLayerProvider({ gatewayUrl, anonKey, emailDomain, client: externalClient, children, }: SemanticLayerProviderProps): react_jsx_runtime.JSX.Element;
+declare function SemanticLayerProvider({ gatewayUrl, emailDomain, client: externalClient, children, }: SemanticLayerProviderProps): react_jsx_runtime.JSX.Element;
 
 interface AuthGateProps {
     children: React__default.ReactNode;
@@ -33,24 +29,18 @@ interface AuthGateProps {
     signInComponent?: (props: {
         signIn: () => void;
     }) => React__default.ReactNode;
-    /** Force email OTP sign-in instead of Google OAuth. */
-    useEmailOtp?: boolean;
 }
 /**
  * Wraps children and only renders them when the user is authenticated.
- * In iframes (e.g. Lovable editor preview), uses popup-based Google OAuth
- * with an email OTP fallback. In standalone tabs, uses redirect-based OAuth.
+ * Shows a Google sign-in button when unauthenticated.
  */
-declare function AuthGate({ children, loading, signInComponent, useEmailOtp }: AuthGateProps): react_jsx_runtime.JSX.Element;
+declare function AuthGate({ children, loading, signInComponent }: AuthGateProps): react_jsx_runtime.JSX.Element;
 
 /** Returns the current auth state and sign-in/sign-out methods. */
 declare function useAuth(): {
-    signIn: (redirectTo?: string) => Promise<_supabase_auth_js.OAuthResponse>;
-    signInPopup: () => Promise<void>;
-    sendOtp: (email: string) => Promise<_supabase_auth_js.AuthOtpResponse>;
-    verifyOtp: (email: string, token: string) => Promise<_supabase_auth_js.AuthResponse>;
+    signIn: () => void;
     signOut: () => Promise<{
-        error: _supabase_auth_js.AuthError | null;
+        error: null;
     }>;
     emailDomain: string | undefined;
     isAuthenticated: boolean;
@@ -73,7 +63,6 @@ interface UseMetricsResult {
 /** Fetch the full curated catalog of metrics and dimensions. */
 declare function useMetrics(): UseMetricsResult;
 interface UseSemanticQueryOptions {
-    /** Set to false to prevent the query from running automatically. */
     enabled?: boolean;
 }
 interface UseSemanticQueryResult {
@@ -89,7 +78,6 @@ interface UseSemanticQueryResult {
 declare function useSemanticQuery(input: SimpleQueryInput | null, options?: UseSemanticQueryOptions): UseSemanticQueryResult;
 /**
  * Execute a query using the full PivotConfig format.
- * Use this for advanced use cases (column pivoting, custom aggregations).
  */
 declare function usePivotQuery(config: PivotConfig | null, options?: UseSemanticQueryOptions): UseSemanticQueryResult;
 
@@ -163,6 +151,7 @@ interface SemanticLayerContextValue {
     client: SemanticLayerClient;
     auth: AuthState;
     emailDomain?: string;
+    signIn: () => void;
 }
 declare const SemanticLayerContext: React.Context<SemanticLayerContextValue | null>;