@inkindcards/semantic-layer 2.1.0 → 2.2.0

package/dist/{chunk-W64RGDXH.cjs → chunk-JLZMOWJ2.cjs}

@@ -31,7 +31,7 @@ var SemanticLayerClient = class {
     this.gatewayUrl = config.gatewayUrl;
     if (typeof window !== "undefined") {
       try {
-        const stored = sessionStorage.getItem(TOKEN_STORAGE_KEY);
+        const stored = localStorage.getItem(TOKEN_STORAGE_KEY);
         if (stored) {
           const parsed = JSON.parse(stored);
           if (parsed.expiresAt > Date.now()) {
@@ -39,7 +39,7 @@ var SemanticLayerClient = class {
             this.tokenExpiry = parsed.expiresAt;
             this.userEmail = parsed.email || null;
           } else {
-            sessionStorage.removeItem(TOKEN_STORAGE_KEY);
+            localStorage.removeItem(TOKEN_STORAGE_KEY);
           }
         }
       } catch {
@@ -56,6 +56,65 @@ var SemanticLayerClient = class {
     const target = returnUrl || (typeof window !== "undefined" ? window.location.href.split("#")[0] : "");
     return `${this.gatewayUrl}/auth/google?returnUrl=${encodeURIComponent(target)}`;
   }
+  /**
+   * Returns true if the current page is running inside an iframe.
+   */
+  isInIframe() {
+    if (typeof window === "undefined") return false;
+    try {
+      return window.self !== window.top;
+    } catch {
+      return true;
+    }
+  }
+  /**
+   * Opens a popup window for Google sign-in. Used when the app is in an iframe
+   * (e.g., Lovable preview) where redirects to Google are blocked.
+   * Returns a promise that resolves when auth completes.
+   */
+  signInWithPopup(returnUrl) {
+    return new Promise((resolve, reject) => {
+      const callbackUrl = `${this.gatewayUrl}/auth/popup-callback`;
+      const signInUrl = `${this.gatewayUrl}/auth/google?returnUrl=${encodeURIComponent(callbackUrl)}`;
+      const width = 500;
+      const height = 600;
+      const left = window.screenX + (window.outerWidth - width) / 2;
+      const top = window.screenY + (window.outerHeight - height) / 2;
+      const popup = window.open(
+        signInUrl,
+        "semantic-layer-signin",
+        `width=${width},height=${height},left=${left},top=${top},popup=true`
+      );
+      if (!popup) {
+        reject(new SemanticLayerError("Popup blocked by browser", "AUTH_ERROR"));
+        return;
+      }
+      const handleMessage = (event) => {
+        if (event.origin !== this.gatewayUrl) return;
+        const { access_token, email, expires_in, auth_error } = event.data || {};
+        window.removeEventListener("message", handleMessage);
+        clearInterval(pollTimer);
+        if (auth_error) {
+          reject(new SemanticLayerError(auth_error, "AUTH_ERROR"));
+          return;
+        }
+        if (access_token && email) {
+          this.setAccessToken(access_token, email, parseInt(expires_in || "3600", 10));
+          resolve(true);
+        } else {
+          resolve(false);
+        }
+      };
+      window.addEventListener("message", handleMessage);
+      const pollTimer = setInterval(() => {
+        if (popup.closed) {
+          clearInterval(pollTimer);
+          window.removeEventListener("message", handleMessage);
+          resolve(false);
+        }
+      }, 500);
+    });
+  }
   /**
    * Check the current URL hash for auth tokens (set by the gateway callback redirect).
    * If found, extracts them, stores the session, clears the hash, and returns true.
@@ -87,7 +146,7 @@ var SemanticLayerClient = class {
     this.tokenExpiry = Date.now() + expiresIn * 1e3;
     if (typeof window !== "undefined") {
       try {
-        sessionStorage.setItem(
+        localStorage.setItem(
           TOKEN_STORAGE_KEY,
           JSON.stringify({ token, email, expiresAt: this.tokenExpiry })
         );
@@ -112,7 +171,7 @@ var SemanticLayerClient = class {
     this.metadataCache = null;
     if (typeof window !== "undefined") {
       try {
-        sessionStorage.removeItem(TOKEN_STORAGE_KEY);
+        localStorage.removeItem(TOKEN_STORAGE_KEY);
       } catch {
       }
     }
@@ -221,5 +280,5 @@ var SemanticLayerError = class extends Error {
 
 exports.SemanticLayerClient = SemanticLayerClient;
 exports.SemanticLayerError = SemanticLayerError;
-//# sourceMappingURL=chunk-W64RGDXH.cjs.map
-//# sourceMappingURL=chunk-W64RGDXH.cjs.map
+//# sourceMappingURL=chunk-JLZMOWJ2.cjs.map
+//# sourceMappingURL=chunk-JLZMOWJ2.cjs.map

package/dist/chunk-JLZMOWJ2.cjs.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../src/client.ts"],"names":[],"mappings":";;;AAaA,IAAM,iBAAA,GAAoB,sBAAA;AAEnB,IAAM,sBAAN,MAA0B;AAAA,EAU/B,YAAY,MAAA,EAA6B;AARzC,IAAA,IAAA,CAAQ,WAAA,GAA6B,IAAA;AACrC,IAAA,IAAA,CAAQ,WAAA,GAAc,CAAA;AACtB,IAAA,IAAA,CAAQ,SAAA,GAA2B,IAAA;AACnC,IAAA,IAAA,CAAQ,aAAA,GAAyC,IAAA;AACjD,IAAA,IAAA,CAAQ,iBAAA,GAAoB,CAAA;AAC5B,IAAA,IAAA,CAAiB,YAAA,GAAe,IAAI,EAAA,GAAK,GAAA;AACzC,IAAA,IAAA,CAAQ,aAAA,uBAAoB,GAAA,EAA0D;AA0StF,IAAA,IAAA,CAAS,KAAA,GAAQ;AAAA,MACf,UAAA,EAAY,MAAM,IAAA,CAAK,SAAA,CAAsC,aAAa,CAAA;AAAA,MAC1E,aAAa,CAAC,KAAA,KACZ,IAAA,CAAK,SAAA,CAAmC,iBAAiB,KAAK,CAAA;AAAA,MAChE,aAAa,CAAC,KAAA,KACZ,IAAA,CAAK,SAAA,CAAmC,iBAAiB,KAAK,CAAA;AAAA,MAChE,WAAA,EAAa,CAAC,EAAA,KACZ,IAAA,CAAK,UAAgC,eAAA,EAAiB,EAAE,IAAI,CAAA;AAAA,MAE9D,SAAA,EAAW,MAAM,IAAA,CAAK,SAAA,CAAmC,YAAY,CAAA;AAAA,MACrE,YAAY,CAAC,KAAA,KACX,IAAA,CAAK,SAAA,CAAgC,gBAAgB,KAAK,CAAA;AAAA,MAC5D,YAAY,CAAC,KAAA,KACX,IAAA,CAAK,SAAA,CAAgC,gBAAgB,KAAK,CAAA;AAAA,MAC5D,UAAA,EAAY,CAAC,EAAA,KACX,IAAA,CAAK,UAAgC,cAAA,EAAgB,EAAE,IAAI,CAAA;AAAA,MAC7D,aAAA,EAAe,CAAC,OAAA,EAAiB,iBAAA,KAC/B,IAAA,CAAK,UAAoD,iBAAA,EAAmB,EAAE,OAAA,EAAS,iBAAA,EAAmB,CAAA;AAAA,MAE5G,SAAA,EAAW,MAAM,IAAA,CAAK,SAAA,CAA2C,YAAY,CAAA;AAAA,MAC7E,gBAAgB,CAAC,KAAA,KACf,IAAA,CAAK,SAAA,CAA8C,oBAAoB,KAAK,CAAA;AAAA,MAC9E,gBAAgB,CAAC,KAAA,KACf,IAAA,CAAK,SAAA,CAAgC,oBAAoB,KAAK,CAAA;AAAA,MAEhE,iBAAA,EAAmB,CAAC,OAAA,KAClB,IAAA,CAAK,UAA8C,qBAAA,EAAuB,EAAE,SAAS,CAAA;AAAA,MACvF,iBAAiB,CAAC,KAAA,KAChB,IAAA,CAAK,SAAA,CAA2C,qBAAqB,KAAK,CAAA;AAAA,MAC5E,oBAAoB,CAAC,KAAA,KACnB,IAAA,CAAK,SAAA,CAAgC,wBAAwB,KAAK;AAAA,KACtE;AAtUE,IAAA,IAAA,CAAK,aAAa,MAAA,CAAO,UAAA;AAEzB,IAAA,IAAI,OAAO,WAAW,WAAA,EAAa;AACjC,MAAA,IAAI;AACF,QAAA,MAAM,MAAA,GAAS,YAAA,CAAa,OAAA,CAAQ,iBAAiB,CAAA;AACrD,QAAA,IAAI,MAAA,EAAQ;AACV,UAAA,MAAM,MAAA,GAAS,IAAA,CAAK,KAAA,CAAM,MAAM,CAAA;AAChC,UAAA,IAAI,MAAA,CAAO,SAAA,GAAY,IAAA,CAAK,GAAA,EAAI,EAAG;AACjC,YAAA,IAAA,CAAK,cAAc,MAAA,CAAO,KAAA;AAC1B,YAAA,IAAA,CAAK,cAAc,MAAA,CAAO,SAAA;AAC1B,YAAA,IAAA,CAAK,SAAA,GAAY,OAAO,KAAA,IAAS,IAAA;AAAA,UACnC,CAAA,MAAO;AACL,YAAA,YAAA,CAAa,WAAW,iBAAiB,CAAA;AAAA,UAC3C;AAAA,QACF;AAAA,MACF,CAAA,CAAA,MAAQ;AAAA,MAER;AAAA,IACF;AAAA,EACF;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EASA,aAAa,SAAA,EAA4B;AACvC,IAAA,MAAM,MAAA,GAAS,SAAA,KAAc,OAAO,MAAA,KAAW,WAAA,GAAc,MAAA,CAAO,QAAA,CAAS,IAAA,CAAK,KAAA,CAAM,GAAG,CAAA,CAAE,CAAC,CAAA,GAAI,EAAA,CAAA;AAClG,IAAA,OAAO,GAAG,IAAA,CAAK,UAAU,CAAA,uBAAA,EAA0B,kBAAA,CAAmB,MAAM,CAAC,CAAA,CAAA;AAAA,EAC/E;AAAA;AAAA;AAAA;AAAA,EAKA,UAAA,GAAsB;AACpB,IAAA,IAAI,OAAO,MAAA,KAAW,WAAA,EAAa,OAAO,KAAA;AAC1C,IAAA,IAAI;AACF,MAAA,OAAO,MAAA,CAAO,SAAS,MAAA,CAAO,GAAA;AAAA,IAChC,CAAA,CAAA,MAAQ;AACN,MAAA,OAAO,IAAA;AAAA,IACT;AAAA,EACF;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAOA,gBAAgB,SAAA,EAAsC;AACpD,IAAA,OAAO,IAAI,OAAA,CAAQ,CAAC,OAAA,EAAS,MAAA,KAAW;AACtC,MAAA,MAAM,WAAA,GAAc,CAAA,EAAG,IAAA,CAAK,UAAU,CAAA,oBAAA,CAAA;AACtC,MAAA,MAAM,YAAY,CAAA,EAAG,IAAA,CAAK,UAAU,CAAA,uBAAA,EAA0B,kBAAA,CAAmB,WAAW,CAAC,CAAA,CAAA;AAE7F,MAAA,MAAM,KAAA,GAAQ,GAAA;AACd,MAAA,MAAM,MAAA,GAAS,GAAA;AACf,MAAA,MAAM,IAAA,GAAO,MAAA,CAAO,OAAA,GAAA,CAAW,MAAA,CAAO,aAAa,KAAA,IAAS,CAAA;AAC5D,MAAA,MAAM,GAAA,GAAM,MAAA,CAAO,OAAA,GAAA,CAAW,MAAA,CAAO,cAAc,MAAA,IAAU,CAAA;AAC7D,MAAA,MAAM,QAAQ,MAAA,CAAO,IAAA;AAAA,QACnB,SAAA;AAAA,QACA,uBAAA;AAAA,QACA,SAAS,KAAK,CAAA,QAAA,EAAW,MAAM,CAAA,MAAA,EAAS,IAAI,QAAQ,GAAG,CAAA,WAAA;AAAA,OACzD;AAEA,MAAA,IAAI,CAAC,KAAA,EAAO;AACV,QAAA,MAAA,CAAO,IAAI,kBAAA,CAAmB,0BAAA,EAA4B,YAAY,CAAC,CAAA;AACvE,QAAA;AAAA,MACF;AAEA,MAAA,MAAM,aAAA,GAAgB,CAAC,KAAA,KAAwB;AAC7C,QAAA,IAAI,KAAA,CAAM,MAAA,KAAW,IAAA,CAAK,UAAA,EAAY;AACtC,QAAA,MAAM,EAAE,cAAc,KAAA,EAAO,UAAA,EAAY,YAAW,GAAI,KAAA,CAAM,QAAQ,EAAC;AAEvE,QAAA,MAAA,CAAO,mBAAA,CAAoB,WAAW,aAAa,CAAA;AACnD,QAAA,aAAA,CAAc,SAAS,CAAA;AAEvB,QAAA,IAAI,UAAA,EAAY;AACd,UAAA,MAAA,CAAO,IAAI,kBAAA,CAAmB,UAAA,EAAY,YAAY,CAAC,CAAA;AACvD,UAAA;AAAA,QACF;AAEA,QAAA,IAAI,gBAAgB,KAAA,EAAO;AACzB,UAAA,IAAA,CAAK,eAAe,YAAA,EAAc,KAAA,EAAO,SAAS,UAAA,IAAc,MAAA,EAAQ,EAAE,CAAC,CAAA;AAC3E,UAAA,OAAA,CAAQ,IAAI,CAAA;AAAA,QACd,CAAA,MAAO;AACL,UAAA,OAAA,CAAQ,KAAK,CAAA;AAAA,QACf;AAAA,MACF,CAAA;AAEA,MAAA,MAAA,CAAO,gBAAA,CAAiB,WAAW,aAAa,CAAA;AAEhD,MAAA,MAAM,SAAA,GAAY,YAAY,MAAM;AAClC,QAAA,IAAI,MAAM,MAAA,EAAQ;AAChB,UAAA,aAAA,CAAc,SAAS,CAAA;AACvB,UAAA,MAAA,CAAO,mBAAA,CAAoB,WAAW,aAAa,CAAA;AACnD,UAAA,OAAA,CAAQ,KAAK,CAAA;AAAA,QACf;AAAA,MACF,GAAG,GAAG,CAAA;AAAA,IACR,CAAC,CAAA;AAAA,EACH;AAAA;AAAA;AAAA;AAAA;AAAA,EAMA,kBAAA,GAA8B;AAC5B,IAAA,IAAI,OAAO,MAAA,KAAW,WAAA,EAAa,OAAO,KAAA;AAE1C,IAAA,MAAM,IAAA,GAAO,MAAA,CAAO,QAAA,CAAS,IAAA,CAAK,MAAM,CAAC,CAAA;AACzC,IAAA,IAAI,CAAC,MAAM,OAAO,KAAA;AAElB,IAAA,MAAM,MAAA,GAAS,IAAI,eAAA,CAAgB,IAAI,CAAA;AAEvC,IAAA,MAAM,SAAA,GAAY,MAAA,CAAO,GAAA,CAAI,YAAY,CAAA;AACzC,IAAA,IAAI,SAAA,EAAW;AACb,MAAA,MAAA,CAAO,OAAA,CAAQ,aAAa,IAAA,EAAM,EAAA,EAAI,OAAO,QAAA,CAAS,QAAA,GAAW,MAAA,CAAO,QAAA,CAAS,MAAM,CAAA;AACvF,MAAA,MAAM,IAAI,kBAAA,CAAmB,SAAA,EAAW,YAAY,CAAA;AAAA,IACtD;AAEA,IAAA,MAAM,WAAA,GAAc,MAAA,CAAO,GAAA,CAAI,cAAc,CAAA;AAC7C,IAAA,MAAM,KAAA,GAAQ,MAAA,CAAO,GAAA,CAAI,OAAO,CAAA;AAChC,IAAA,MAAM,YAAY,QAAA,CAAS,MAAA,CAAO,IAAI,YAAY,CAAA,IAAK,KAAK,EAAE,CAAA;AAE9D,IAAA,IAAI,CAAC,WAAA,IAAe,CAAC,KAAA,EAAO,OAAO,KAAA;AAEnC,IAAA,MAAA,CAAO,OAAA,CAAQ,aAAa,IAAA,EAAM,EAAA,EAAI,OAAO,QAAA,CAAS,QAAA,GAAW,MAAA,CAAO,QAAA,CAAS,MAAM,CAAA;AACvF,IAAA,IAAA,CAAK,cAAA,CAAe,WAAA,EAAa,KAAA,EAAO,SAAS,CAAA;AACjD,IAAA,OAAO,IAAA;AAAA,EACT;AAAA;AAAA;AAAA;AAAA,EAKA,cAAA,CAAe,KAAA,EAAe,KAAA,EAAe,SAAA,EAAmB;AAC9D,IAAA,IAAA,CAAK,WAAA,GAAc,KAAA;AACnB,IAAA,IAAA,CAAK,SAAA,GAAY,KAAA;AACjB,IAAA,IAAA,CAAK,WAAA,GAAc,IAAA,CAAK,GAAA,EAAI,GAAI,SAAA,GAAY,GAAA;AAE5C,IAAA,IAAI,OAAO,WAAW,WAAA,EAAa;AACjC,MAAA,IAAI;AACF,QAAA,YAAA,CAAa,OAAA;AAAA,UACX,iBAAA;AAAA,UACA,IAAA,CAAK,UAAU,EAAE,KAAA,EAAO,OAAO,SAAA,EAAW,IAAA,CAAK,aAAa;AAAA,SAC9D;AAAA,MACF,CAAA,CAAA,MAAQ;AAAA,MAER;AAAA,IACF;AAEA,IAAA,MAAM,UAAuB,EAAE,IAAA,EAAM,EAAE,EAAA,EAAI,KAAA,EAAO,OAAM,EAAE;AAC1D,IAAA,KAAA,MAAW,QAAA,IAAY,KAAK,aAAA,EAAe;AACzC,MAAA,QAAA,CAAS,aAAa,OAAO,CAAA;AAAA,IAC/B;AAAA,EACF;AAAA,EAEA,MAAM,UAAA,GAA0C;AAC9C,IAAA,IAAI,KAAK,WAAA,IAAe,IAAA,CAAK,GAAA,EAAI,GAAI,KAAK,WAAA,EAAa;AACrD,MAAA,OAAO,EAAE,IAAA,EAAM,EAAE,EAAA,EAAI,IAAA,CAAK,SAAA,IAAa,EAAA,EAAI,KAAA,EAAO,IAAA,CAAK,SAAA,IAAa,EAAA,EAAG,EAAE;AAAA,IAC3E;AACA,IAAA,OAAO,IAAA;AAAA,EACT;AAAA,EAEA,MAAM,OAAA,GAAU;AACd,IAAA,IAAA,CAAK,WAAA,GAAc,IAAA;AACnB,IAAA,IAAA,CAAK,WAAA,GAAc,CAAA;AACnB,IAAA,IAAA,CAAK,SAAA,GAAY,IAAA;AACjB,IAAA,IAAA,CAAK,aAAA,GAAgB,IAAA;AAErB,IAAA,IAAI,OAAO,WAAW,WAAA,EAAa;AACjC,MAAA,IAAI;AACF,QAAA,YAAA,CAAa,WAAW,iBAAiB,CAAA;AAAA,MAC3C,CAAA,CAAA,MAAQ;AAAA,MAER;AAAA,IACF;AAEA,IAAA,KAAA,MAAW,QAAA,IAAY,KAAK,aAAA,EAAe;AACzC,MAAA,QAAA,CAAS,cAAc,IAAI,CAAA;AAAA,IAC7B;AAEA,IAAA,OAAO,EAAE,OAAO,IAAA,EAAK;AAAA,EACvB;AAAA,EAEA,kBAAkB,QAAA,EAAgE;AAChF,IAAA,IAAA,CAAK,aAAA,CAAc,IAAI,QAAQ,CAAA;AAC/B,IAAA,OAAO;AAAA,MACL,IAAA,EAAM;AAAA,QACJ,YAAA,EAAc;AAAA,UACZ,aAAa,MAAM;AACjB,YAAA,IAAA,CAAK,aAAA,CAAc,OAAO,QAAQ,CAAA;AAAA,UACpC;AAAA;AACF;AACF,KACF;AAAA,EACF;AAAA;AAAA,EAIA,MAAc,OAAA,CAAW,IAAA,EAAc,IAAA,EAA4B;AACjE,IAAA,IAAI,CAAC,KAAK,WAAA,EAAa;AACrB,MAAA,MAAM,IAAI,kBAAA,CAAmB,mBAAA,EAAqB,YAAY,CAAA;AAAA,IAChE;AAEA,IAAA,MAAM,IAAA,GAAO,MAAM,KAAA,CAAM,CAAA,EAAG,KAAK,UAAU,CAAA,EAAG,IAAI,CAAA,CAAA,EAAI;AAAA,MACpD,MAAA,EAAQ,MAAA;AAAA,MACR,OAAA,EAAS;AAAA,QACP,aAAA,EAAe,CAAA,OAAA,EAAU,IAAA,CAAK,WAAW,CAAA,CAAA;AAAA,QACzC,cAAA,EAAgB;AAAA,OAClB;AAAA,MACA,MAAM,IAAA,KAAS,MAAA,GAAY,IAAA,CAAK,SAAA,CAAU,IAAI,CAAA,GAAI;AAAA,KACnD,CAAA;AAED,IAAA,MAAM,IAAA,GAAO,MAAM,IAAA,CAAK,IAAA,EAAK;AAE7B,IAAA,IAAI,CAAC,IAAA,CAAK,EAAA,IAAM,IAAA,EAAM,KAAA,EAAO;AAC3B,MAAA,MAAM,IAAI,kBAAA;AAAA,QACR,IAAA,EAAM,KAAA,IAAS,CAAA,gBAAA,EAAmB,IAAA,CAAK,MAAM,CAAA,CAAA;AAAA,QAC7C,IAAA,CAAK,MAAA,KAAW,GAAA,GAAM,YAAA,GAAe;AAAA,OACvC;AAAA,IACF;AAEA,IAAA,OAAO,IAAA;AAAA,EACT;AAAA;AAAA,EAIA,MAAM,WAAA,CAAY,YAAA,GAAe,KAAA,EAAkC;AACjE,IAAA,MAAM,GAAA,GAAM,KAAK,GAAA,EAAI;AACrB,IAAA,IAAI,CAAC,gBAAgB,IAAA,CAAK,aAAA,IAAiB,MAAM,IAAA,CAAK,iBAAA,GAAoB,KAAK,YAAA,EAAc;AAC3F,MAAA,OAAO,IAAA,CAAK,aAAA;AAAA,IACd;AAEA,IAAA,MAAM,IAAA,GAAO,MAAM,IAAA,CAAK,OAAA,CAA0B,cAAc,CAAA;AAChE,IAAA,IAAA,CAAK,aAAA,GAAgB,IAAA;AACrB,IAAA,IAAA,CAAK,iBAAA,GAAoB,GAAA;AACzB,IAAA,OAAO,IAAA;AAAA,EACT;AAAA,EAEA,MAAM,UAAA,GAAuC;AAC3C,IAAA,MAAM,EAAE,MAAA,EAAO,GAAI,MAAM,KAAK,WAAA,EAAY;AAC1C,IAAA,OAAO,OAAO,MAAA,CAAO,CAAC,CAAA,KAAM,CAAA,CAAE,SAAS,QAAQ,CAAA;AAAA,EACjD;AAAA,EAEA,MAAM,aAAA,GAA0C;AAC9C,IAAA,MAAM,EAAE,MAAA,EAAO,GAAI,MAAM,KAAK,WAAA,EAAY;AAC1C,IAAA,OAAO,MAAA,CAAO,OAAO,CAAC,CAAA,KAAM,EAAE,IAAA,KAAS,WAAA,IAAe,CAAA,CAAE,IAAA,KAAS,gBAAgB,CAAA;AAAA,EACnF;AAAA,EAEA,MAAM,SAAS,QAAA,EAAsD;AACnE,IAAA,MAAM,EAAE,MAAA,EAAO,GAAI,MAAM,KAAK,WAAA,EAAY;AAC1C,IAAA,OAAO,MAAA,CAAO,KAAK,CAAC,CAAA,KAAM,EAAE,IAAA,KAAS,QAAA,IAAY,CAAA,CAAE,EAAA,KAAO,QAAQ,CAAA;AAAA,EACpE;AAAA;AAAA,EAIA,MAAM,MAAM,MAAA,EAA2C;AACrD,IAAA,IAAI,MAAA,CAAO,MAAA,CAAO,MAAA,KAAW,CAAA,EAAG;AAC9B,MAAA,OAAO,EAAE,OAAA,EAAS,EAAC,EAAG,IAAA,EAAM,EAAC,EAAG,SAAA,EAAW,CAAA,EAAG,eAAA,EAAiB,CAAA,EAAE;AAAA,IACnE;AACA,IAAA,OAAO,IAAA,CAAK,OAAA,CAAqB,WAAA,EAAa,EAAE,QAAQ,CAAA;AAAA,EAC1D;AAAA,EAEA,MAAM,YAAY,KAAA,EAA+C;AAC/D,IAAA,MAAM,EAAE,MAAA,EAAO,GAAI,MAAM,KAAK,WAAA,EAAY;AAC1C,IAAA,MAAM,QAAA,GAAW,IAAI,GAAA,CAAI,MAAA,CAAO,GAAA,CAAI,CAAC,CAAA,KAAM,CAAC,CAAA,CAAE,IAAA,EAAM,CAAC,CAAC,CAAC,CAAA;AAEvD,IAAA,MAAM,MAAA,GAAS,KAAA,CAAM,OAAA,CAAQ,GAAA,CAAI,CAAC,IAAA,KAAS;AACzC,MAAA,MAAM,KAAA,GAAQ,QAAA,CAAS,GAAA,CAAI,IAAI,CAAA;AAC/B,MAAA,IAAI,CAAC,OAAO,MAAM,IAAI,mBAAmB,CAAA,iBAAA,EAAoB,IAAI,KAAK,eAAe,CAAA;AACrF,MAAA,OAAO,EAAE,OAAA,EAAS,KAAA,CAAM,EAAA,EAAI,KAAA,EAAM;AAAA,IACpC,CAAC,CAAA;AAED,IAAA,MAAM,QAAQ,KAAA,CAAM,OAAA,IAAW,EAAC,EAAG,GAAA,CAAI,CAAC,IAAA,KAAS;AAC/C,MAAA,MAAM,KAAA,GAAQ,QAAA,CAAS,GAAA,CAAI,IAAI,CAAA;AAC/B,MAAA,IAAI,CAAC,OAAO,MAAM,IAAI,mBAAmB,CAAA,oBAAA,EAAuB,IAAI,KAAK,eAAe,CAAA;AACxF,MAAA,MAAM,KAAA,GAAQ,KAAA,CAAM,IAAA,KAAS,gBAAA,GAAmB,MAAM,KAAA,GAAQ,MAAA;AAC9D,MAAA,OAAO,EAAE,OAAA,EAAS,KAAA,CAAM,EAAA,EAAI,OAAO,KAAA,EAAM;AAAA,IAC3C,CAAC,CAAA;AAED,IAAA,MAAM,OAAA,GAAU,MAAA,CAAO,OAAA,CAAQ,KAAA,CAAM,OAAA,IAAW,EAAE,CAAA,CAAE,GAAA,CAAI,CAAC,CAAC,IAAA,EAAM,YAAY,CAAA,KAAM;AAChF,MAAA,MAAM,KAAA,GAAQ,QAAA,CAAS,GAAA,CAAI,IAAI,CAAA;AAC/B,MAAA,IAAI,CAAC,OAAO,MAAM,IAAI,mBAAmB,CAAA,uBAAA,EAA0B,IAAI,KAAK,eAAe,CAAA;AAC3F,MAAA,OAAO,EAAE,OAAA,EAAS,KAAA,CAAM,EAAA,EAAI,OAAO,YAAA,EAAa;AAAA,IAClD,CAAC,CAAA;AAED,IAAA,OAAO,IAAA,CAAK,MAAM,EAAE,MAAA,EAAQ,MAAM,OAAA,EAAS,EAAC,EAAG,OAAA,EAAS,CAAA;AAAA,EAC1D;AAAA;AAAA,EAIA,MAAc,SAAA,CAAa,MAAA,EAAgB,IAAA,GAAgC,EAAC,EAAe;AACzF,IAAA,OAAO,KAAK,OAAA,CAAW,WAAA,EAAa,EAAE,MAAA,EAAQ,GAAG,MAAM,CAAA;AAAA,EACzD;AAkCF;AAMO,IAAM,kBAAA,GAAN,cAAiC,KAAA,CAAM;AAAA,EAE5C,WAAA,CAAY,SAAiB,IAAA,EAAc;AACzC,IAAA,KAAA,CAAM,OAAO,CAAA;AACb,IAAA,IAAA,CAAK,IAAA,GAAO,oBAAA;AACZ,IAAA,IAAA,CAAK,IAAA,GAAO,IAAA;AAAA,EACd;AACF","file":"chunk-JLZMOWJ2.cjs","sourcesContent":["import type {\n  SemanticLayerConfig,\n  MetadataResponse,\n  PivotConfig,\n  QueryResult,\n  SimpleQueryInput,\n  SemanticField,\n  CuratedField,\n  AccessRole,\n  UserRoleAssignment,\n  UserFieldOverride,\n} from \"./types\";\n\nconst TOKEN_STORAGE_KEY = \"semantic-layer-token\";\n\nexport class SemanticLayerClient {\n  readonly gatewayUrl: string;\n  private accessToken: string | null = null;\n  private tokenExpiry = 0;\n  private userEmail: string | null = null;\n  private metadataCache: MetadataResponse | null = null;\n  private metadataCacheTime = 0;\n  private readonly CACHE_TTL_MS = 5 * 60 * 1000;\n  private authListeners = new Set<(event: string, session: SessionLike | null) => void>();\n\n  constructor(config: SemanticLayerConfig) {\n    this.gatewayUrl = config.gatewayUrl;\n\n    if (typeof window !== \"undefined\") {\n      try {\n        const stored = localStorage.getItem(TOKEN_STORAGE_KEY);\n        if (stored) {\n          const parsed = JSON.parse(stored);\n          if (parsed.expiresAt > Date.now()) {\n            this.accessToken = parsed.token;\n            this.tokenExpiry = parsed.expiresAt;\n            this.userEmail = parsed.email || null;\n          } else {\n            localStorage.removeItem(TOKEN_STORAGE_KEY);\n          }\n        }\n      } catch {\n        // Ignore storage errors\n      }\n    }\n  }\n\n  // -- Auth ------------------------------------------------------------------\n\n  /**\n   * Returns the URL to redirect the browser to for Google sign-in.\n   * After the user authenticates, the gateway redirects back to returnUrl\n   * with the access token in the URL hash fragment.\n   */\n  getSignInUrl(returnUrl?: string): string {\n    const target = returnUrl || (typeof window !== \"undefined\" ? window.location.href.split(\"#\")[0] : \"\");\n    return `${this.gatewayUrl}/auth/google?returnUrl=${encodeURIComponent(target)}`;\n  }\n\n  /**\n   * Returns true if the current page is running inside an iframe.\n   */\n  isInIframe(): boolean {\n    if (typeof window === \"undefined\") return false;\n    try {\n      return window.self !== window.top;\n    } catch {\n      return true;\n    }\n  }\n\n  /**\n   * Opens a popup window for Google sign-in. Used when the app is in an iframe\n   * (e.g., Lovable preview) where redirects to Google are blocked.\n   * Returns a promise that resolves when auth completes.\n   */\n  signInWithPopup(returnUrl?: string): Promise<boolean> {\n    return new Promise((resolve, reject) => {\n      const callbackUrl = `${this.gatewayUrl}/auth/popup-callback`;\n      const signInUrl = `${this.gatewayUrl}/auth/google?returnUrl=${encodeURIComponent(callbackUrl)}`;\n\n      const width = 500;\n      const height = 600;\n      const left = window.screenX + (window.outerWidth - width) / 2;\n      const top = window.screenY + (window.outerHeight - height) / 2;\n      const popup = window.open(\n        signInUrl,\n        \"semantic-layer-signin\",\n        `width=${width},height=${height},left=${left},top=${top},popup=true`,\n      );\n\n      if (!popup) {\n        reject(new SemanticLayerError(\"Popup blocked by browser\", \"AUTH_ERROR\"));\n        return;\n      }\n\n      const handleMessage = (event: MessageEvent) => {\n        if (event.origin !== this.gatewayUrl) return;\n        const { access_token, email, expires_in, auth_error } = event.data || {};\n\n        window.removeEventListener(\"message\", handleMessage);\n        clearInterval(pollTimer);\n\n        if (auth_error) {\n          reject(new SemanticLayerError(auth_error, \"AUTH_ERROR\"));\n          return;\n        }\n\n        if (access_token && email) {\n          this.setAccessToken(access_token, email, parseInt(expires_in || \"3600\", 10));\n          resolve(true);\n        } else {\n          resolve(false);\n        }\n      };\n\n      window.addEventListener(\"message\", handleMessage);\n\n      const pollTimer = setInterval(() => {\n        if (popup.closed) {\n          clearInterval(pollTimer);\n          window.removeEventListener(\"message\", handleMessage);\n          resolve(false);\n        }\n      }, 500);\n    });\n  }\n\n  /**\n   * Check the current URL hash for auth tokens (set by the gateway callback redirect).\n   * If found, extracts them, stores the session, clears the hash, and returns true.\n   */\n  handleAuthCallback(): boolean {\n    if (typeof window === \"undefined\") return false;\n\n    const hash = window.location.hash.slice(1);\n    if (!hash) return false;\n\n    const params = new URLSearchParams(hash);\n\n    const authError = params.get(\"auth_error\");\n    if (authError) {\n      window.history.replaceState(null, \"\", window.location.pathname + window.location.search);\n      throw new SemanticLayerError(authError, \"AUTH_ERROR\");\n    }\n\n    const accessToken = params.get(\"access_token\");\n    const email = params.get(\"email\");\n    const expiresIn = parseInt(params.get(\"expires_in\") || \"0\", 10);\n\n    if (!accessToken || !email) return false;\n\n    window.history.replaceState(null, \"\", window.location.pathname + window.location.search);\n    this.setAccessToken(accessToken, email, expiresIn);\n    return true;\n  }\n\n  /**\n   * Set the Google access token (called after OAuth redirect callback).\n   */\n  setAccessToken(token: string, email: string, expiresIn: number) {\n    this.accessToken = token;\n    this.userEmail = email;\n    this.tokenExpiry = Date.now() + expiresIn * 1000;\n\n    if (typeof window !== \"undefined\") {\n      try {\n        localStorage.setItem(\n          TOKEN_STORAGE_KEY,\n          JSON.stringify({ token, email, expiresAt: this.tokenExpiry }),\n        );\n      } catch {\n        // Ignore storage errors\n      }\n    }\n\n    const session: SessionLike = { user: { id: email, email } };\n    for (const listener of this.authListeners) {\n      listener(\"SIGNED_IN\", session);\n    }\n  }\n\n  async getSession(): Promise<SessionLike | null> {\n    if (this.accessToken && Date.now() < this.tokenExpiry) {\n      return { user: { id: this.userEmail || \"\", email: this.userEmail || \"\" } };\n    }\n    return null;\n  }\n\n  async signOut() {\n    this.accessToken = null;\n    this.tokenExpiry = 0;\n    this.userEmail = null;\n    this.metadataCache = null;\n\n    if (typeof window !== \"undefined\") {\n      try {\n        localStorage.removeItem(TOKEN_STORAGE_KEY);\n      } catch {\n        // Ignore storage errors\n      }\n    }\n\n    for (const listener of this.authListeners) {\n      listener(\"SIGNED_OUT\", null);\n    }\n\n    return { error: null };\n  }\n\n  onAuthStateChange(callback: (event: string, session: SessionLike | null) => void) {\n    this.authListeners.add(callback);\n    return {\n      data: {\n        subscription: {\n          unsubscribe: () => {\n            this.authListeners.delete(callback);\n          },\n        },\n      },\n    };\n  }\n\n  // -- API calls -------------------------------------------------------------\n\n  private async apiCall<T>(path: string, body?: unknown): Promise<T> {\n    if (!this.accessToken) {\n      throw new SemanticLayerError(\"Not authenticated\", \"AUTH_ERROR\");\n    }\n\n    const resp = await fetch(`${this.gatewayUrl}${path}`, {\n      method: \"POST\",\n      headers: {\n        Authorization: `Bearer ${this.accessToken}`,\n        \"Content-Type\": \"application/json\",\n      },\n      body: body !== undefined ? JSON.stringify(body) : undefined,\n    });\n\n    const data = await resp.json();\n\n    if (!resp.ok || data?.error) {\n      throw new SemanticLayerError(\n        data?.error || `Request failed: ${resp.status}`,\n        resp.status === 401 ? \"AUTH_ERROR\" : \"API_ERROR\",\n      );\n    }\n\n    return data as T;\n  }\n\n  // -- Metadata --------------------------------------------------------------\n\n  async getMetadata(forceRefresh = false): Promise<MetadataResponse> {\n    const now = Date.now();\n    if (!forceRefresh && this.metadataCache && now - this.metadataCacheTime < this.CACHE_TTL_MS) {\n      return this.metadataCache;\n    }\n\n    const data = await this.apiCall<MetadataResponse>(\"/v1/metadata\");\n    this.metadataCache = data;\n    this.metadataCacheTime = now;\n    return data;\n  }\n\n  async getMetrics(): Promise<SemanticField[]> {\n    const { fields } = await this.getMetadata();\n    return fields.filter((f) => f.type === \"metric\");\n  }\n\n  async getDimensions(): Promise<SemanticField[]> {\n    const { fields } = await this.getMetadata();\n    return fields.filter((f) => f.type === \"dimension\" || f.type === \"time_dimension\");\n  }\n\n  async getField(nameOrId: string): Promise<SemanticField | undefined> {\n    const { fields } = await this.getMetadata();\n    return fields.find((f) => f.name === nameOrId || f.id === nameOrId);\n  }\n\n  // -- Query -----------------------------------------------------------------\n\n  async query(config: PivotConfig): Promise<QueryResult> {\n    if (config.values.length === 0) {\n      return { columns: [], rows: [], totalRows: 0, executionTimeMs: 0 };\n    }\n    return this.apiCall<QueryResult>(\"/v1/query\", { config });\n  }\n\n  async simpleQuery(input: SimpleQueryInput): Promise<QueryResult> {\n    const { fields } = await this.getMetadata();\n    const fieldMap = new Map(fields.map((f) => [f.name, f]));\n\n    const values = input.metrics.map((name) => {\n      const field = fieldMap.get(name);\n      if (!field) throw new SemanticLayerError(`Unknown metric: \"${name}\"`, \"UNKNOWN_FIELD\");\n      return { fieldId: field.id, field };\n    });\n\n    const rows = (input.groupBy || []).map((name) => {\n      const field = fieldMap.get(name);\n      if (!field) throw new SemanticLayerError(`Unknown dimension: \"${name}\"`, \"UNKNOWN_FIELD\");\n      const grain = field.type === \"time_dimension\" ? input.grain : undefined;\n      return { fieldId: field.id, field, grain };\n    });\n\n    const filters = Object.entries(input.filters || {}).map(([name, filterValues]) => {\n      const field = fieldMap.get(name);\n      if (!field) throw new SemanticLayerError(`Unknown filter field: \"${name}\"`, \"UNKNOWN_FIELD\");\n      return { fieldId: field.id, field, filterValues };\n    });\n\n    return this.query({ values, rows, columns: [], filters });\n  }\n\n  // -- Admin -----------------------------------------------------------------\n\n  private async adminCall<T>(action: string, body: Record<string, unknown> = {}): Promise<T> {\n    return this.apiCall<T>(\"/v1/admin\", { action, ...body });\n  }\n\n  readonly admin = {\n    listFields: () => this.adminCall<{ fields: CuratedField[] }>(\"fields.list\"),\n    createField: (input: { field_name: string; field_type: string; display_name?: string; description?: string }) =>\n      this.adminCall<{ field: CuratedField }>(\"fields.create\", input),\n    updateField: (input: { id: number; field_name?: string; display_name?: string; description?: string; is_active?: boolean }) =>\n      this.adminCall<{ field: CuratedField }>(\"fields.update\", input),\n    deleteField: (id: number) =>\n      this.adminCall<{ deleted: boolean }>(\"fields.delete\", { id }),\n\n    listRoles: () => this.adminCall<{ roles: AccessRole[] }>(\"roles.list\"),\n    createRole: (input: { name: string; description?: string; is_default?: boolean }) =>\n      this.adminCall<{ role: AccessRole }>(\"roles.create\", input),\n    updateRole: (input: { id: number; name?: string; description?: string; is_default?: boolean }) =>\n      this.adminCall<{ role: AccessRole }>(\"roles.update\", input),\n    deleteRole: (id: number) =>\n      this.adminCall<{ deleted: boolean }>(\"roles.delete\", { id }),\n    setRoleFields: (role_id: number, curated_field_ids: number[]) =>\n      this.adminCall<{ role_id: number; field_count: number }>(\"roles.setFields\", { role_id, curated_field_ids }),\n\n    listUsers: () => this.adminCall<{ users: UserRoleAssignment[] }>(\"users.list\"),\n    assignUserRole: (input: { email: string; role_id: number; is_admin?: boolean }) =>\n      this.adminCall<{ assignment: UserRoleAssignment }>(\"users.assignRole\", input),\n    removeUserRole: (input: { email: string; role_id: number }) =>\n      this.adminCall<{ deleted: boolean }>(\"users.removeRole\", input),\n\n    listUserOverrides: (user_id: string) =>\n      this.adminCall<{ overrides: UserFieldOverride[] }>(\"users.listOverrides\", { user_id }),\n    setUserOverride: (input: { user_id: string; curated_field_id: number; access: \"grant\" | \"deny\" }) =>\n      this.adminCall<{ override: UserFieldOverride }>(\"users.setOverride\", input),\n    removeUserOverride: (input: { user_id: string; curated_field_id: number }) =>\n      this.adminCall<{ deleted: boolean }>(\"users.removeOverride\", input),\n  };\n}\n\nexport interface SessionLike {\n  user: { id: string; email: string };\n}\n\nexport class SemanticLayerError extends Error {\n  code: string;\n  constructor(message: string, code: string) {\n    super(message);\n    this.name = \"SemanticLayerError\";\n    this.code = code;\n  }\n}\n"]}

package/dist/{chunk-WR4D3UI6.js → chunk-ZYY77QMO.js}

@@ -29,7 +29,7 @@ var SemanticLayerClient = class {
     this.gatewayUrl = config.gatewayUrl;
     if (typeof window !== "undefined") {
       try {
-        const stored = sessionStorage.getItem(TOKEN_STORAGE_KEY);
+        const stored = localStorage.getItem(TOKEN_STORAGE_KEY);
         if (stored) {
           const parsed = JSON.parse(stored);
           if (parsed.expiresAt > Date.now()) {
@@ -37,7 +37,7 @@ var SemanticLayerClient = class {
             this.tokenExpiry = parsed.expiresAt;
             this.userEmail = parsed.email || null;
           } else {
-            sessionStorage.removeItem(TOKEN_STORAGE_KEY);
+            localStorage.removeItem(TOKEN_STORAGE_KEY);
           }
         }
       } catch {
@@ -54,6 +54,65 @@ var SemanticLayerClient = class {
     const target = returnUrl || (typeof window !== "undefined" ? window.location.href.split("#")[0] : "");
     return `${this.gatewayUrl}/auth/google?returnUrl=${encodeURIComponent(target)}`;
   }
+  /**
+   * Returns true if the current page is running inside an iframe.
+   */
+  isInIframe() {
+    if (typeof window === "undefined") return false;
+    try {
+      return window.self !== window.top;
+    } catch {
+      return true;
+    }
+  }
+  /**
+   * Opens a popup window for Google sign-in. Used when the app is in an iframe
+   * (e.g., Lovable preview) where redirects to Google are blocked.
+   * Returns a promise that resolves when auth completes.
+   */
+  signInWithPopup(returnUrl) {
+    return new Promise((resolve, reject) => {
+      const callbackUrl = `${this.gatewayUrl}/auth/popup-callback`;
+      const signInUrl = `${this.gatewayUrl}/auth/google?returnUrl=${encodeURIComponent(callbackUrl)}`;
+      const width = 500;
+      const height = 600;
+      const left = window.screenX + (window.outerWidth - width) / 2;
+      const top = window.screenY + (window.outerHeight - height) / 2;
+      const popup = window.open(
+        signInUrl,
+        "semantic-layer-signin",
+        `width=${width},height=${height},left=${left},top=${top},popup=true`
+      );
+      if (!popup) {
+        reject(new SemanticLayerError("Popup blocked by browser", "AUTH_ERROR"));
+        return;
+      }
+      const handleMessage = (event) => {
+        if (event.origin !== this.gatewayUrl) return;
+        const { access_token, email, expires_in, auth_error } = event.data || {};
+        window.removeEventListener("message", handleMessage);
+        clearInterval(pollTimer);
+        if (auth_error) {
+          reject(new SemanticLayerError(auth_error, "AUTH_ERROR"));
+          return;
+        }
+        if (access_token && email) {
+          this.setAccessToken(access_token, email, parseInt(expires_in || "3600", 10));
+          resolve(true);
+        } else {
+          resolve(false);
+        }
+      };
+      window.addEventListener("message", handleMessage);
+      const pollTimer = setInterval(() => {
+        if (popup.closed) {
+          clearInterval(pollTimer);
+          window.removeEventListener("message", handleMessage);
+          resolve(false);
+        }
+      }, 500);
+    });
+  }
   /**
    * Check the current URL hash for auth tokens (set by the gateway callback redirect).
    * If found, extracts them, stores the session, clears the hash, and returns true.
@@ -85,7 +144,7 @@ var SemanticLayerClient = class {
     this.tokenExpiry = Date.now() + expiresIn * 1e3;
     if (typeof window !== "undefined") {
       try {
-        sessionStorage.setItem(
+        localStorage.setItem(
           TOKEN_STORAGE_KEY,
           JSON.stringify({ token, email, expiresAt: this.tokenExpiry })
         );
@@ -110,7 +169,7 @@ var SemanticLayerClient = class {
     this.metadataCache = null;
     if (typeof window !== "undefined") {
       try {
-        sessionStorage.removeItem(TOKEN_STORAGE_KEY);
+        localStorage.removeItem(TOKEN_STORAGE_KEY);
       } catch {
       }
     }
@@ -218,5 +277,5 @@ var SemanticLayerError = class extends Error {
 };
 
 export { SemanticLayerClient, SemanticLayerError };
-//# sourceMappingURL=chunk-WR4D3UI6.js.map
-//# sourceMappingURL=chunk-WR4D3UI6.js.map
+//# sourceMappingURL=chunk-ZYY77QMO.js.map
+//# sourceMappingURL=chunk-ZYY77QMO.js.map

package/dist/chunk-ZYY77QMO.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../src/client.ts"],"names":[],"mappings":";AAaA,IAAM,iBAAA,GAAoB,sBAAA;AAEnB,IAAM,sBAAN,MAA0B;AAAA,EAU/B,YAAY,MAAA,EAA6B;AARzC,IAAA,IAAA,CAAQ,WAAA,GAA6B,IAAA;AACrC,IAAA,IAAA,CAAQ,WAAA,GAAc,CAAA;AACtB,IAAA,IAAA,CAAQ,SAAA,GAA2B,IAAA;AACnC,IAAA,IAAA,CAAQ,aAAA,GAAyC,IAAA;AACjD,IAAA,IAAA,CAAQ,iBAAA,GAAoB,CAAA;AAC5B,IAAA,IAAA,CAAiB,YAAA,GAAe,IAAI,EAAA,GAAK,GAAA;AACzC,IAAA,IAAA,CAAQ,aAAA,uBAAoB,GAAA,EAA0D;AA0StF,IAAA,IAAA,CAAS,KAAA,GAAQ;AAAA,MACf,UAAA,EAAY,MAAM,IAAA,CAAK,SAAA,CAAsC,aAAa,CAAA;AAAA,MAC1E,aAAa,CAAC,KAAA,KACZ,IAAA,CAAK,SAAA,CAAmC,iBAAiB,KAAK,CAAA;AAAA,MAChE,aAAa,CAAC,KAAA,KACZ,IAAA,CAAK,SAAA,CAAmC,iBAAiB,KAAK,CAAA;AAAA,MAChE,WAAA,EAAa,CAAC,EAAA,KACZ,IAAA,CAAK,UAAgC,eAAA,EAAiB,EAAE,IAAI,CAAA;AAAA,MAE9D,SAAA,EAAW,MAAM,IAAA,CAAK,SAAA,CAAmC,YAAY,CAAA;AAAA,MACrE,YAAY,CAAC,KAAA,KACX,IAAA,CAAK,SAAA,CAAgC,gBAAgB,KAAK,CAAA;AAAA,MAC5D,YAAY,CAAC,KAAA,KACX,IAAA,CAAK,SAAA,CAAgC,gBAAgB,KAAK,CAAA;AAAA,MAC5D,UAAA,EAAY,CAAC,EAAA,KACX,IAAA,CAAK,UAAgC,cAAA,EAAgB,EAAE,IAAI,CAAA;AAAA,MAC7D,aAAA,EAAe,CAAC,OAAA,EAAiB,iBAAA,KAC/B,IAAA,CAAK,UAAoD,iBAAA,EAAmB,EAAE,OAAA,EAAS,iBAAA,EAAmB,CAAA;AAAA,MAE5G,SAAA,EAAW,MAAM,IAAA,CAAK,SAAA,CAA2C,YAAY,CAAA;AAAA,MAC7E,gBAAgB,CAAC,KAAA,KACf,IAAA,CAAK,SAAA,CAA8C,oBAAoB,KAAK,CAAA;AAAA,MAC9E,gBAAgB,CAAC,KAAA,KACf,IAAA,CAAK,SAAA,CAAgC,oBAAoB,KAAK,CAAA;AAAA,MAEhE,iBAAA,EAAmB,CAAC,OAAA,KAClB,IAAA,CAAK,UAA8C,qBAAA,EAAuB,EAAE,SAAS,CAAA;AAAA,MACvF,iBAAiB,CAAC,KAAA,KAChB,IAAA,CAAK,SAAA,CAA2C,qBAAqB,KAAK,CAAA;AAAA,MAC5E,oBAAoB,CAAC,KAAA,KACnB,IAAA,CAAK,SAAA,CAAgC,wBAAwB,KAAK;AAAA,KACtE;AAtUE,IAAA,IAAA,CAAK,aAAa,MAAA,CAAO,UAAA;AAEzB,IAAA,IAAI,OAAO,WAAW,WAAA,EAAa;AACjC,MAAA,IAAI;AACF,QAAA,MAAM,MAAA,GAAS,YAAA,CAAa,OAAA,CAAQ,iBAAiB,CAAA;AACrD,QAAA,IAAI,MAAA,EAAQ;AACV,UAAA,MAAM,MAAA,GAAS,IAAA,CAAK,KAAA,CAAM,MAAM,CAAA;AAChC,UAAA,IAAI,MAAA,CAAO,SAAA,GAAY,IAAA,CAAK,GAAA,EAAI,EAAG;AACjC,YAAA,IAAA,CAAK,cAAc,MAAA,CAAO,KAAA;AAC1B,YAAA,IAAA,CAAK,cAAc,MAAA,CAAO,SAAA;AAC1B,YAAA,IAAA,CAAK,SAAA,GAAY,OAAO,KAAA,IAAS,IAAA;AAAA,UACnC,CAAA,MAAO;AACL,YAAA,YAAA,CAAa,WAAW,iBAAiB,CAAA;AAAA,UAC3C;AAAA,QACF;AAAA,MACF,CAAA,CAAA,MAAQ;AAAA,MAER;AAAA,IACF;AAAA,EACF;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EASA,aAAa,SAAA,EAA4B;AACvC,IAAA,MAAM,MAAA,GAAS,SAAA,KAAc,OAAO,MAAA,KAAW,WAAA,GAAc,MAAA,CAAO,QAAA,CAAS,IAAA,CAAK,KAAA,CAAM,GAAG,CAAA,CAAE,CAAC,CAAA,GAAI,EAAA,CAAA;AAClG,IAAA,OAAO,GAAG,IAAA,CAAK,UAAU,CAAA,uBAAA,EAA0B,kBAAA,CAAmB,MAAM,CAAC,CAAA,CAAA;AAAA,EAC/E;AAAA;AAAA;AAAA;AAAA,EAKA,UAAA,GAAsB;AACpB,IAAA,IAAI,OAAO,MAAA,KAAW,WAAA,EAAa,OAAO,KAAA;AAC1C,IAAA,IAAI;AACF,MAAA,OAAO,MAAA,CAAO,SAAS,MAAA,CAAO,GAAA;AAAA,IAChC,CAAA,CAAA,MAAQ;AACN,MAAA,OAAO,IAAA;AAAA,IACT;AAAA,EACF;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAOA,gBAAgB,SAAA,EAAsC;AACpD,IAAA,OAAO,IAAI,OAAA,CAAQ,CAAC,OAAA,EAAS,MAAA,KAAW;AACtC,MAAA,MAAM,WAAA,GAAc,CAAA,EAAG,IAAA,CAAK,UAAU,CAAA,oBAAA,CAAA;AACtC,MAAA,MAAM,YAAY,CAAA,EAAG,IAAA,CAAK,UAAU,CAAA,uBAAA,EAA0B,kBAAA,CAAmB,WAAW,CAAC,CAAA,CAAA;AAE7F,MAAA,MAAM,KAAA,GAAQ,GAAA;AACd,MAAA,MAAM,MAAA,GAAS,GAAA;AACf,MAAA,MAAM,IAAA,GAAO,MAAA,CAAO,OAAA,GAAA,CAAW,MAAA,CAAO,aAAa,KAAA,IAAS,CAAA;AAC5D,MAAA,MAAM,GAAA,GAAM,MAAA,CAAO,OAAA,GAAA,CAAW,MAAA,CAAO,cAAc,MAAA,IAAU,CAAA;AAC7D,MAAA,MAAM,QAAQ,MAAA,CAAO,IAAA;AAAA,QACnB,SAAA;AAAA,QACA,uBAAA;AAAA,QACA,SAAS,KAAK,CAAA,QAAA,EAAW,MAAM,CAAA,MAAA,EAAS,IAAI,QAAQ,GAAG,CAAA,WAAA;AAAA,OACzD;AAEA,MAAA,IAAI,CAAC,KAAA,EAAO;AACV,QAAA,MAAA,CAAO,IAAI,kBAAA,CAAmB,0BAAA,EAA4B,YAAY,CAAC,CAAA;AACvE,QAAA;AAAA,MACF;AAEA,MAAA,MAAM,aAAA,GAAgB,CAAC,KAAA,KAAwB;AAC7C,QAAA,IAAI,KAAA,CAAM,MAAA,KAAW,IAAA,CAAK,UAAA,EAAY;AACtC,QAAA,MAAM,EAAE,cAAc,KAAA,EAAO,UAAA,EAAY,YAAW,GAAI,KAAA,CAAM,QAAQ,EAAC;AAEvE,QAAA,MAAA,CAAO,mBAAA,CAAoB,WAAW,aAAa,CAAA;AACnD,QAAA,aAAA,CAAc,SAAS,CAAA;AAEvB,QAAA,IAAI,UAAA,EAAY;AACd,UAAA,MAAA,CAAO,IAAI,kBAAA,CAAmB,UAAA,EAAY,YAAY,CAAC,CAAA;AACvD,UAAA;AAAA,QACF;AAEA,QAAA,IAAI,gBAAgB,KAAA,EAAO;AACzB,UAAA,IAAA,CAAK,eAAe,YAAA,EAAc,KAAA,EAAO,SAAS,UAAA,IAAc,MAAA,EAAQ,EAAE,CAAC,CAAA;AAC3E,UAAA,OAAA,CAAQ,IAAI,CAAA;AAAA,QACd,CAAA,MAAO;AACL,UAAA,OAAA,CAAQ,KAAK,CAAA;AAAA,QACf;AAAA,MACF,CAAA;AAEA,MAAA,MAAA,CAAO,gBAAA,CAAiB,WAAW,aAAa,CAAA;AAEhD,MAAA,MAAM,SAAA,GAAY,YAAY,MAAM;AAClC,QAAA,IAAI,MAAM,MAAA,EAAQ;AAChB,UAAA,aAAA,CAAc,SAAS,CAAA;AACvB,UAAA,MAAA,CAAO,mBAAA,CAAoB,WAAW,aAAa,CAAA;AACnD,UAAA,OAAA,CAAQ,KAAK,CAAA;AAAA,QACf;AAAA,MACF,GAAG,GAAG,CAAA;AAAA,IACR,CAAC,CAAA;AAAA,EACH;AAAA;AAAA;AAAA;AAAA;AAAA,EAMA,kBAAA,GAA8B;AAC5B,IAAA,IAAI,OAAO,MAAA,KAAW,WAAA,EAAa,OAAO,KAAA;AAE1C,IAAA,MAAM,IAAA,GAAO,MAAA,CAAO,QAAA,CAAS,IAAA,CAAK,MAAM,CAAC,CAAA;AACzC,IAAA,IAAI,CAAC,MAAM,OAAO,KAAA;AAElB,IAAA,MAAM,MAAA,GAAS,IAAI,eAAA,CAAgB,IAAI,CAAA;AAEvC,IAAA,MAAM,SAAA,GAAY,MAAA,CAAO,GAAA,CAAI,YAAY,CAAA;AACzC,IAAA,IAAI,SAAA,EAAW;AACb,MAAA,MAAA,CAAO,OAAA,CAAQ,aAAa,IAAA,EAAM,EAAA,EAAI,OAAO,QAAA,CAAS,QAAA,GAAW,MAAA,CAAO,QAAA,CAAS,MAAM,CAAA;AACvF,MAAA,MAAM,IAAI,kBAAA,CAAmB,SAAA,EAAW,YAAY,CAAA;AAAA,IACtD;AAEA,IAAA,MAAM,WAAA,GAAc,MAAA,CAAO,GAAA,CAAI,cAAc,CAAA;AAC7C,IAAA,MAAM,KAAA,GAAQ,MAAA,CAAO,GAAA,CAAI,OAAO,CAAA;AAChC,IAAA,MAAM,YAAY,QAAA,CAAS,MAAA,CAAO,IAAI,YAAY,CAAA,IAAK,KAAK,EAAE,CAAA;AAE9D,IAAA,IAAI,CAAC,WAAA,IAAe,CAAC,KAAA,EAAO,OAAO,KAAA;AAEnC,IAAA,MAAA,CAAO,OAAA,CAAQ,aAAa,IAAA,EAAM,EAAA,EAAI,OAAO,QAAA,CAAS,QAAA,GAAW,MAAA,CAAO,QAAA,CAAS,MAAM,CAAA;AACvF,IAAA,IAAA,CAAK,cAAA,CAAe,WAAA,EAAa,KAAA,EAAO,SAAS,CAAA;AACjD,IAAA,OAAO,IAAA;AAAA,EACT;AAAA;AAAA;AAAA;AAAA,EAKA,cAAA,CAAe,KAAA,EAAe,KAAA,EAAe,SAAA,EAAmB;AAC9D,IAAA,IAAA,CAAK,WAAA,GAAc,KAAA;AACnB,IAAA,IAAA,CAAK,SAAA,GAAY,KAAA;AACjB,IAAA,IAAA,CAAK,WAAA,GAAc,IAAA,CAAK,GAAA,EAAI,GAAI,SAAA,GAAY,GAAA;AAE5C,IAAA,IAAI,OAAO,WAAW,WAAA,EAAa;AACjC,MAAA,IAAI;AACF,QAAA,YAAA,CAAa,OAAA;AAAA,UACX,iBAAA;AAAA,UACA,IAAA,CAAK,UAAU,EAAE,KAAA,EAAO,OAAO,SAAA,EAAW,IAAA,CAAK,aAAa;AAAA,SAC9D;AAAA,MACF,CAAA,CAAA,MAAQ;AAAA,MAER;AAAA,IACF;AAEA,IAAA,MAAM,UAAuB,EAAE,IAAA,EAAM,EAAE,EAAA,EAAI,KAAA,EAAO,OAAM,EAAE;AAC1D,IAAA,KAAA,MAAW,QAAA,IAAY,KAAK,aAAA,EAAe;AACzC,MAAA,QAAA,CAAS,aAAa,OAAO,CAAA;AAAA,IAC/B;AAAA,EACF;AAAA,EAEA,MAAM,UAAA,GAA0C;AAC9C,IAAA,IAAI,KAAK,WAAA,IAAe,IAAA,CAAK,GAAA,EAAI,GAAI,KAAK,WAAA,EAAa;AACrD,MAAA,OAAO,EAAE,IAAA,EAAM,EAAE,EAAA,EAAI,IAAA,CAAK,SAAA,IAAa,EAAA,EAAI,KAAA,EAAO,IAAA,CAAK,SAAA,IAAa,EAAA,EAAG,EAAE;AAAA,IAC3E;AACA,IAAA,OAAO,IAAA;AAAA,EACT;AAAA,EAEA,MAAM,OAAA,GAAU;AACd,IAAA,IAAA,CAAK,WAAA,GAAc,IAAA;AACnB,IAAA,IAAA,CAAK,WAAA,GAAc,CAAA;AACnB,IAAA,IAAA,CAAK,SAAA,GAAY,IAAA;AACjB,IAAA,IAAA,CAAK,aAAA,GAAgB,IAAA;AAErB,IAAA,IAAI,OAAO,WAAW,WAAA,EAAa;AACjC,MAAA,IAAI;AACF,QAAA,YAAA,CAAa,WAAW,iBAAiB,CAAA;AAAA,MAC3C,CAAA,CAAA,MAAQ;AAAA,MAER;AAAA,IACF;AAEA,IAAA,KAAA,MAAW,QAAA,IAAY,KAAK,aAAA,EAAe;AACzC,MAAA,QAAA,CAAS,cAAc,IAAI,CAAA;AAAA,IAC7B;AAEA,IAAA,OAAO,EAAE,OAAO,IAAA,EAAK;AAAA,EACvB;AAAA,EAEA,kBAAkB,QAAA,EAAgE;AAChF,IAAA,IAAA,CAAK,aAAA,CAAc,IAAI,QAAQ,CAAA;AAC/B,IAAA,OAAO;AAAA,MACL,IAAA,EAAM;AAAA,QACJ,YAAA,EAAc;AAAA,UACZ,aAAa,MAAM;AACjB,YAAA,IAAA,CAAK,aAAA,CAAc,OAAO,QAAQ,CAAA;AAAA,UACpC;AAAA;AACF;AACF,KACF;AAAA,EACF;AAAA;AAAA,EAIA,MAAc,OAAA,CAAW,IAAA,EAAc,IAAA,EAA4B;AACjE,IAAA,IAAI,CAAC,KAAK,WAAA,EAAa;AACrB,MAAA,MAAM,IAAI,kBAAA,CAAmB,mBAAA,EAAqB,YAAY,CAAA;AAAA,IAChE;AAEA,IAAA,MAAM,IAAA,GAAO,MAAM,KAAA,CAAM,CAAA,EAAG,KAAK,UAAU,CAAA,EAAG,IAAI,CAAA,CAAA,EAAI;AAAA,MACpD,MAAA,EAAQ,MAAA;AAAA,MACR,OAAA,EAAS;AAAA,QACP,aAAA,EAAe,CAAA,OAAA,EAAU,IAAA,CAAK,WAAW,CAAA,CAAA;AAAA,QACzC,cAAA,EAAgB;AAAA,OAClB;AAAA,MACA,MAAM,IAAA,KAAS,MAAA,GAAY,IAAA,CAAK,SAAA,CAAU,IAAI,CAAA,GAAI;AAAA,KACnD,CAAA;AAED,IAAA,MAAM,IAAA,GAAO,MAAM,IAAA,CAAK,IAAA,EAAK;AAE7B,IAAA,IAAI,CAAC,IAAA,CAAK,EAAA,IAAM,IAAA,EAAM,KAAA,EAAO;AAC3B,MAAA,MAAM,IAAI,kBAAA;AAAA,QACR,IAAA,EAAM,KAAA,IAAS,CAAA,gBAAA,EAAmB,IAAA,CAAK,MAAM,CAAA,CAAA;AAAA,QAC7C,IAAA,CAAK,MAAA,KAAW,GAAA,GAAM,YAAA,GAAe;AAAA,OACvC;AAAA,IACF;AAEA,IAAA,OAAO,IAAA;AAAA,EACT;AAAA;AAAA,EAIA,MAAM,WAAA,CAAY,YAAA,GAAe,KAAA,EAAkC;AACjE,IAAA,MAAM,GAAA,GAAM,KAAK,GAAA,EAAI;AACrB,IAAA,IAAI,CAAC,gBAAgB,IAAA,CAAK,aAAA,IAAiB,MAAM,IAAA,CAAK,iBAAA,GAAoB,KAAK,YAAA,EAAc;AAC3F,MAAA,OAAO,IAAA,CAAK,aAAA;AAAA,IACd;AAEA,IAAA,MAAM,IAAA,GAAO,MAAM,IAAA,CAAK,OAAA,CAA0B,cAAc,CAAA;AAChE,IAAA,IAAA,CAAK,aAAA,GAAgB,IAAA;AACrB,IAAA,IAAA,CAAK,iBAAA,GAAoB,GAAA;AACzB,IAAA,OAAO,IAAA;AAAA,EACT;AAAA,EAEA,MAAM,UAAA,GAAuC;AAC3C,IAAA,MAAM,EAAE,MAAA,EAAO,GAAI,MAAM,KAAK,WAAA,EAAY;AAC1C,IAAA,OAAO,OAAO,MAAA,CAAO,CAAC,CAAA,KAAM,CAAA,CAAE,SAAS,QAAQ,CAAA;AAAA,EACjD;AAAA,EAEA,MAAM,aAAA,GAA0C;AAC9C,IAAA,MAAM,EAAE,MAAA,EAAO,GAAI,MAAM,KAAK,WAAA,EAAY;AAC1C,IAAA,OAAO,MAAA,CAAO,OAAO,CAAC,CAAA,KAAM,EAAE,IAAA,KAAS,WAAA,IAAe,CAAA,CAAE,IAAA,KAAS,gBAAgB,CAAA;AAAA,EACnF;AAAA,EAEA,MAAM,SAAS,QAAA,EAAsD;AACnE,IAAA,MAAM,EAAE,MAAA,EAAO,GAAI,MAAM,KAAK,WAAA,EAAY;AAC1C,IAAA,OAAO,MAAA,CAAO,KAAK,CAAC,CAAA,KAAM,EAAE,IAAA,KAAS,QAAA,IAAY,CAAA,CAAE,EAAA,KAAO,QAAQ,CAAA;AAAA,EACpE;AAAA;AAAA,EAIA,MAAM,MAAM,MAAA,EAA2C;AACrD,IAAA,IAAI,MAAA,CAAO,MAAA,CAAO,MAAA,KAAW,CAAA,EAAG;AAC9B,MAAA,OAAO,EAAE,OAAA,EAAS,EAAC,EAAG,IAAA,EAAM,EAAC,EAAG,SAAA,EAAW,CAAA,EAAG,eAAA,EAAiB,CAAA,EAAE;AAAA,IACnE;AACA,IAAA,OAAO,IAAA,CAAK,OAAA,CAAqB,WAAA,EAAa,EAAE,QAAQ,CAAA;AAAA,EAC1D;AAAA,EAEA,MAAM,YAAY,KAAA,EAA+C;AAC/D,IAAA,MAAM,EAAE,MAAA,EAAO,GAAI,MAAM,KAAK,WAAA,EAAY;AAC1C,IAAA,MAAM,QAAA,GAAW,IAAI,GAAA,CAAI,MAAA,CAAO,GAAA,CAAI,CAAC,CAAA,KAAM,CAAC,CAAA,CAAE,IAAA,EAAM,CAAC,CAAC,CAAC,CAAA;AAEvD,IAAA,MAAM,MAAA,GAAS,KAAA,CAAM,OAAA,CAAQ,GAAA,CAAI,CAAC,IAAA,KAAS;AACzC,MAAA,MAAM,KAAA,GAAQ,QAAA,CAAS,GAAA,CAAI,IAAI,CAAA;AAC/B,MAAA,IAAI,CAAC,OAAO,MAAM,IAAI,mBAAmB,CAAA,iBAAA,EAAoB,IAAI,KAAK,eAAe,CAAA;AACrF,MAAA,OAAO,EAAE,OAAA,EAAS,KAAA,CAAM,EAAA,EAAI,KAAA,EAAM;AAAA,IACpC,CAAC,CAAA;AAED,IAAA,MAAM,QAAQ,KAAA,CAAM,OAAA,IAAW,EAAC,EAAG,GAAA,CAAI,CAAC,IAAA,KAAS;AAC/C,MAAA,MAAM,KAAA,GAAQ,QAAA,CAAS,GAAA,CAAI,IAAI,CAAA;AAC/B,MAAA,IAAI,CAAC,OAAO,MAAM,IAAI,mBAAmB,CAAA,oBAAA,EAAuB,IAAI,KAAK,eAAe,CAAA;AACxF,MAAA,MAAM,KAAA,GAAQ,KAAA,CAAM,IAAA,KAAS,gBAAA,GAAmB,MAAM,KAAA,GAAQ,MAAA;AAC9D,MAAA,OAAO,EAAE,OAAA,EAAS,KAAA,CAAM,EAAA,EAAI,OAAO,KAAA,EAAM;AAAA,IAC3C,CAAC,CAAA;AAED,IAAA,MAAM,OAAA,GAAU,MAAA,CAAO,OAAA,CAAQ,KAAA,CAAM,OAAA,IAAW,EAAE,CAAA,CAAE,GAAA,CAAI,CAAC,CAAC,IAAA,EAAM,YAAY,CAAA,KAAM;AAChF,MAAA,MAAM,KAAA,GAAQ,QAAA,CAAS,GAAA,CAAI,IAAI,CAAA;AAC/B,MAAA,IAAI,CAAC,OAAO,MAAM,IAAI,mBAAmB,CAAA,uBAAA,EAA0B,IAAI,KAAK,eAAe,CAAA;AAC3F,MAAA,OAAO,EAAE,OAAA,EAAS,KAAA,CAAM,EAAA,EAAI,OAAO,YAAA,EAAa;AAAA,IAClD,CAAC,CAAA;AAED,IAAA,OAAO,IAAA,CAAK,MAAM,EAAE,MAAA,EAAQ,MAAM,OAAA,EAAS,EAAC,EAAG,OAAA,EAAS,CAAA;AAAA,EAC1D;AAAA;AAAA,EAIA,MAAc,SAAA,CAAa,MAAA,EAAgB,IAAA,GAAgC,EAAC,EAAe;AACzF,IAAA,OAAO,KAAK,OAAA,CAAW,WAAA,EAAa,EAAE,MAAA,EAAQ,GAAG,MAAM,CAAA;AAAA,EACzD;AAkCF;AAMO,IAAM,kBAAA,GAAN,cAAiC,KAAA,CAAM;AAAA,EAE5C,WAAA,CAAY,SAAiB,IAAA,EAAc;AACzC,IAAA,KAAA,CAAM,OAAO,CAAA;AACb,IAAA,IAAA,CAAK,IAAA,GAAO,oBAAA;AACZ,IAAA,IAAA,CAAK,IAAA,GAAO,IAAA;AAAA,EACd;AACF","file":"chunk-ZYY77QMO.js","sourcesContent":["import type {\n  SemanticLayerConfig,\n  MetadataResponse,\n  PivotConfig,\n  QueryResult,\n  SimpleQueryInput,\n  SemanticField,\n  CuratedField,\n  AccessRole,\n  UserRoleAssignment,\n  UserFieldOverride,\n} from \"./types\";\n\nconst TOKEN_STORAGE_KEY = \"semantic-layer-token\";\n\nexport class SemanticLayerClient {\n  readonly gatewayUrl: string;\n  private accessToken: string | null = null;\n  private tokenExpiry = 0;\n  private userEmail: string | null = null;\n  private metadataCache: MetadataResponse | null = null;\n  private metadataCacheTime = 0;\n  private readonly CACHE_TTL_MS = 5 * 60 * 1000;\n  private authListeners = new Set<(event: string, session: SessionLike | null) => void>();\n\n  constructor(config: SemanticLayerConfig) {\n    this.gatewayUrl = config.gatewayUrl;\n\n    if (typeof window !== \"undefined\") {\n      try {\n        const stored = localStorage.getItem(TOKEN_STORAGE_KEY);\n        if (stored) {\n          const parsed = JSON.parse(stored);\n          if (parsed.expiresAt > Date.now()) {\n            this.accessToken = parsed.token;\n            this.tokenExpiry = parsed.expiresAt;\n            this.userEmail = parsed.email || null;\n          } else {\n            localStorage.removeItem(TOKEN_STORAGE_KEY);\n          }\n        }\n      } catch {\n        // Ignore storage errors\n      }\n    }\n  }\n\n  // -- Auth ------------------------------------------------------------------\n\n  /**\n   * Returns the URL to redirect the browser to for Google sign-in.\n   * After the user authenticates, the gateway redirects back to returnUrl\n   * with the access token in the URL hash fragment.\n   */\n  getSignInUrl(returnUrl?: string): string {\n    const target = returnUrl || (typeof window !== \"undefined\" ? window.location.href.split(\"#\")[0] : \"\");\n    return `${this.gatewayUrl}/auth/google?returnUrl=${encodeURIComponent(target)}`;\n  }\n\n  /**\n   * Returns true if the current page is running inside an iframe.\n   */\n  isInIframe(): boolean {\n    if (typeof window === \"undefined\") return false;\n    try {\n      return window.self !== window.top;\n    } catch {\n      return true;\n    }\n  }\n\n  /**\n   * Opens a popup window for Google sign-in. Used when the app is in an iframe\n   * (e.g., Lovable preview) where redirects to Google are blocked.\n   * Returns a promise that resolves when auth completes.\n   */\n  signInWithPopup(returnUrl?: string): Promise<boolean> {\n    return new Promise((resolve, reject) => {\n      const callbackUrl = `${this.gatewayUrl}/auth/popup-callback`;\n      const signInUrl = `${this.gatewayUrl}/auth/google?returnUrl=${encodeURIComponent(callbackUrl)}`;\n\n      const width = 500;\n      const height = 600;\n      const left = window.screenX + (window.outerWidth - width) / 2;\n      const top = window.screenY + (window.outerHeight - height) / 2;\n      const popup = window.open(\n        signInUrl,\n        \"semantic-layer-signin\",\n        `width=${width},height=${height},left=${left},top=${top},popup=true`,\n      );\n\n      if (!popup) {\n        reject(new SemanticLayerError(\"Popup blocked by browser\", \"AUTH_ERROR\"));\n        return;\n      }\n\n      const handleMessage = (event: MessageEvent) => {\n        if (event.origin !== this.gatewayUrl) return;\n        const { access_token, email, expires_in, auth_error } = event.data || {};\n\n        window.removeEventListener(\"message\", handleMessage);\n        clearInterval(pollTimer);\n\n        if (auth_error) {\n          reject(new SemanticLayerError(auth_error, \"AUTH_ERROR\"));\n          return;\n        }\n\n        if (access_token && email) {\n          this.setAccessToken(access_token, email, parseInt(expires_in || \"3600\", 10));\n          resolve(true);\n        } else {\n          resolve(false);\n        }\n      };\n\n      window.addEventListener(\"message\", handleMessage);\n\n      const pollTimer = setInterval(() => {\n        if (popup.closed) {\n          clearInterval(pollTimer);\n          window.removeEventListener(\"message\", handleMessage);\n          resolve(false);\n        }\n      }, 500);\n    });\n  }\n\n  /**\n   * Check the current URL hash for auth tokens (set by the gateway callback redirect).\n   * If found, extracts them, stores the session, clears the hash, and returns true.\n   */\n  handleAuthCallback(): boolean {\n    if (typeof window === \"undefined\") return false;\n\n    const hash = window.location.hash.slice(1);\n    if (!hash) return false;\n\n    const params = new URLSearchParams(hash);\n\n    const authError = params.get(\"auth_error\");\n    if (authError) {\n      window.history.replaceState(null, \"\", window.location.pathname + window.location.search);\n      throw new SemanticLayerError(authError, \"AUTH_ERROR\");\n    }\n\n    const accessToken = params.get(\"access_token\");\n    const email = params.get(\"email\");\n    const expiresIn = parseInt(params.get(\"expires_in\") || \"0\", 10);\n\n    if (!accessToken || !email) return false;\n\n    window.history.replaceState(null, \"\", window.location.pathname + window.location.search);\n    this.setAccessToken(accessToken, email, expiresIn);\n    return true;\n  }\n\n  /**\n   * Set the Google access token (called after OAuth redirect callback).\n   */\n  setAccessToken(token: string, email: string, expiresIn: number) {\n    this.accessToken = token;\n    this.userEmail = email;\n    this.tokenExpiry = Date.now() + expiresIn * 1000;\n\n    if (typeof window !== \"undefined\") {\n      try {\n        localStorage.setItem(\n          TOKEN_STORAGE_KEY,\n          JSON.stringify({ token, email, expiresAt: this.tokenExpiry }),\n        );\n      } catch {\n        // Ignore storage errors\n      }\n    }\n\n    const session: SessionLike = { user: { id: email, email } };\n    for (const listener of this.authListeners) {\n      listener(\"SIGNED_IN\", session);\n    }\n  }\n\n  async getSession(): Promise<SessionLike | null> {\n    if (this.accessToken && Date.now() < this.tokenExpiry) {\n      return { user: { id: this.userEmail || \"\", email: this.userEmail || \"\" } };\n    }\n    return null;\n  }\n\n  async signOut() {\n    this.accessToken = null;\n    this.tokenExpiry = 0;\n    this.userEmail = null;\n    this.metadataCache = null;\n\n    if (typeof window !== \"undefined\") {\n      try {\n        localStorage.removeItem(TOKEN_STORAGE_KEY);\n      } catch {\n        // Ignore storage errors\n      }\n    }\n\n    for (const listener of this.authListeners) {\n      listener(\"SIGNED_OUT\", null);\n    }\n\n    return { error: null };\n  }\n\n  onAuthStateChange(callback: (event: string, session: SessionLike | null) => void) {\n    this.authListeners.add(callback);\n    return {\n      data: {\n        subscription: {\n          unsubscribe: () => {\n            this.authListeners.delete(callback);\n          },\n        },\n      },\n    };\n  }\n\n  // -- API calls -------------------------------------------------------------\n\n  private async apiCall<T>(path: string, body?: unknown): Promise<T> {\n    if (!this.accessToken) {\n      throw new SemanticLayerError(\"Not authenticated\", \"AUTH_ERROR\");\n    }\n\n    const resp = await fetch(`${this.gatewayUrl}${path}`, {\n      method: \"POST\",\n      headers: {\n        Authorization: `Bearer ${this.accessToken}`,\n        \"Content-Type\": \"application/json\",\n      },\n      body: body !== undefined ? JSON.stringify(body) : undefined,\n    });\n\n    const data = await resp.json();\n\n    if (!resp.ok || data?.error) {\n      throw new SemanticLayerError(\n        data?.error || `Request failed: ${resp.status}`,\n        resp.status === 401 ? \"AUTH_ERROR\" : \"API_ERROR\",\n      );\n    }\n\n    return data as T;\n  }\n\n  // -- Metadata --------------------------------------------------------------\n\n  async getMetadata(forceRefresh = false): Promise<MetadataResponse> {\n    const now = Date.now();\n    if (!forceRefresh && this.metadataCache && now - this.metadataCacheTime < this.CACHE_TTL_MS) {\n      return this.metadataCache;\n    }\n\n    const data = await this.apiCall<MetadataResponse>(\"/v1/metadata\");\n    this.metadataCache = data;\n    this.metadataCacheTime = now;\n    return data;\n  }\n\n  async getMetrics(): Promise<SemanticField[]> {\n    const { fields } = await this.getMetadata();\n    return fields.filter((f) => f.type === \"metric\");\n  }\n\n  async getDimensions(): Promise<SemanticField[]> {\n    const { fields } = await this.getMetadata();\n    return fields.filter((f) => f.type === \"dimension\" || f.type === \"time_dimension\");\n  }\n\n  async getField(nameOrId: string): Promise<SemanticField | undefined> {\n    const { fields } = await this.getMetadata();\n    return fields.find((f) => f.name === nameOrId || f.id === nameOrId);\n  }\n\n  // -- Query -----------------------------------------------------------------\n\n  async query(config: PivotConfig): Promise<QueryResult> {\n    if (config.values.length === 0) {\n      return { columns: [], rows: [], totalRows: 0, executionTimeMs: 0 };\n    }\n    return this.apiCall<QueryResult>(\"/v1/query\", { config });\n  }\n\n  async simpleQuery(input: SimpleQueryInput): Promise<QueryResult> {\n    const { fields } = await this.getMetadata();\n    const fieldMap = new Map(fields.map((f) => [f.name, f]));\n\n    const values = input.metrics.map((name) => {\n      const field = fieldMap.get(name);\n      if (!field) throw new SemanticLayerError(`Unknown metric: \"${name}\"`, \"UNKNOWN_FIELD\");\n      return { fieldId: field.id, field };\n    });\n\n    const rows = (input.groupBy || []).map((name) => {\n      const field = fieldMap.get(name);\n      if (!field) throw new SemanticLayerError(`Unknown dimension: \"${name}\"`, \"UNKNOWN_FIELD\");\n      const grain = field.type === \"time_dimension\" ? input.grain : undefined;\n      return { fieldId: field.id, field, grain };\n    });\n\n    const filters = Object.entries(input.filters || {}).map(([name, filterValues]) => {\n      const field = fieldMap.get(name);\n      if (!field) throw new SemanticLayerError(`Unknown filter field: \"${name}\"`, \"UNKNOWN_FIELD\");\n      return { fieldId: field.id, field, filterValues };\n    });\n\n    return this.query({ values, rows, columns: [], filters });\n  }\n\n  // -- Admin -----------------------------------------------------------------\n\n  private async adminCall<T>(action: string, body: Record<string, unknown> = {}): Promise<T> {\n    return this.apiCall<T>(\"/v1/admin\", { action, ...body });\n  }\n\n  readonly admin = {\n    listFields: () => this.adminCall<{ fields: CuratedField[] }>(\"fields.list\"),\n    createField: (input: { field_name: string; field_type: string; display_name?: string; description?: string }) =>\n      this.adminCall<{ field: CuratedField }>(\"fields.create\", input),\n    updateField: (input: { id: number; field_name?: string; display_name?: string; description?: string; is_active?: boolean }) =>\n      this.adminCall<{ field: CuratedField }>(\"fields.update\", input),\n    deleteField: (id: number) =>\n      this.adminCall<{ deleted: boolean }>(\"fields.delete\", { id }),\n\n    listRoles: () => this.adminCall<{ roles: AccessRole[] }>(\"roles.list\"),\n    createRole: (input: { name: string; description?: string; is_default?: boolean }) =>\n      this.adminCall<{ role: AccessRole }>(\"roles.create\", input),\n    updateRole: (input: { id: number; name?: string; description?: string; is_default?: boolean }) =>\n      this.adminCall<{ role: AccessRole }>(\"roles.update\", input),\n    deleteRole: (id: number) =>\n      this.adminCall<{ deleted: boolean }>(\"roles.delete\", { id }),\n    setRoleFields: (role_id: number, curated_field_ids: number[]) =>\n      this.adminCall<{ role_id: number; field_count: number }>(\"roles.setFields\", { role_id, curated_field_ids }),\n\n    listUsers: () => this.adminCall<{ users: UserRoleAssignment[] }>(\"users.list\"),\n    assignUserRole: (input: { email: string; role_id: number; is_admin?: boolean }) =>\n      this.adminCall<{ assignment: UserRoleAssignment }>(\"users.assignRole\", input),\n    removeUserRole: (input: { email: string; role_id: number }) =>\n      this.adminCall<{ deleted: boolean }>(\"users.removeRole\", input),\n\n    listUserOverrides: (user_id: string) =>\n      this.adminCall<{ overrides: UserFieldOverride[] }>(\"users.listOverrides\", { user_id }),\n    setUserOverride: (input: { user_id: string; curated_field_id: number; access: \"grant\" | \"deny\" }) =>\n      this.adminCall<{ override: UserFieldOverride }>(\"users.setOverride\", input),\n    removeUserOverride: (input: { user_id: string; curated_field_id: number }) =>\n      this.adminCall<{ deleted: boolean }>(\"users.removeOverride\", input),\n  };\n}\n\nexport interface SessionLike {\n  user: { id: string; email: string };\n}\n\nexport class SemanticLayerError extends Error {\n  code: string;\n  constructor(message: string, code: string) {\n    super(message);\n    this.name = \"SemanticLayerError\";\n    this.code = code;\n  }\n}\n"]}

package/dist/index.cjs

@@ -1,16 +1,16 @@
 'use strict';
 
-var chunkW64RGDXH_cjs = require('./chunk-W64RGDXH.cjs');
+var chunkJLZMOWJ2_cjs = require('./chunk-JLZMOWJ2.cjs');
 
 
 
 Object.defineProperty(exports, "SemanticLayerClient", {
   enumerable: true,
-  get: function () { return chunkW64RGDXH_cjs.SemanticLayerClient; }
+  get: function () { return chunkJLZMOWJ2_cjs.SemanticLayerClient; }
 });
 Object.defineProperty(exports, "SemanticLayerError", {
   enumerable: true,
-  get: function () { return chunkW64RGDXH_cjs.SemanticLayerError; }
+  get: function () { return chunkJLZMOWJ2_cjs.SemanticLayerError; }
 });
 //# sourceMappingURL=index.cjs.map
 //# sourceMappingURL=index.cjs.map

package/dist/index.d.cts

@@ -17,6 +17,16 @@ declare class SemanticLayerClient {
      * with the access token in the URL hash fragment.
      */
     getSignInUrl(returnUrl?: string): string;
+    /**
+     * Returns true if the current page is running inside an iframe.
+     */
+    isInIframe(): boolean;
+    /**
+     * Opens a popup window for Google sign-in. Used when the app is in an iframe
+     * (e.g., Lovable preview) where redirects to Google are blocked.
+     * Returns a promise that resolves when auth completes.
+     */
+    signInWithPopup(returnUrl?: string): Promise<boolean>;
     /**
      * Check the current URL hash for auth tokens (set by the gateway callback redirect).
      * If found, extracts them, stores the session, clears the hash, and returns true.

package/dist/index.d.ts

@@ -17,6 +17,16 @@ declare class SemanticLayerClient {
      * with the access token in the URL hash fragment.
      */
     getSignInUrl(returnUrl?: string): string;
+    /**
+     * Returns true if the current page is running inside an iframe.
+     */
+    isInIframe(): boolean;
+    /**
+     * Opens a popup window for Google sign-in. Used when the app is in an iframe
+     * (e.g., Lovable preview) where redirects to Google are blocked.
+     * Returns a promise that resolves when auth completes.
+     */
+    signInWithPopup(returnUrl?: string): Promise<boolean>;
     /**
      * Check the current URL hash for auth tokens (set by the gateway callback redirect).
      * If found, extracts them, stores the session, clears the hash, and returns true.

package/dist/index.js

@@ -1,3 +1,3 @@
-export { SemanticLayerClient, SemanticLayerError } from './chunk-WR4D3UI6.js';
+export { SemanticLayerClient, SemanticLayerError } from './chunk-ZYY77QMO.js';
 //# sourceMappingURL=index.js.map
 //# sourceMappingURL=index.js.map

package/dist/react.cjs

@@ -1,6 +1,6 @@
 'use strict';
 
-var chunkW64RGDXH_cjs = require('./chunk-W64RGDXH.cjs');
+var chunkJLZMOWJ2_cjs = require('./chunk-JLZMOWJ2.cjs');
 var chunkT2C43AAL_cjs = require('./chunk-T2C43AAL.cjs');
 var react = require('react');
 var jsxRuntime = require('react/jsx-runtime');
@@ -12,7 +12,7 @@ function SemanticLayerProvider({
   children
 }) {
   const client = react.useMemo(
-    () => externalClient ?? new chunkW64RGDXH_cjs.SemanticLayerClient({ gatewayUrl }),
+    () => externalClient ?? new chunkJLZMOWJ2_cjs.SemanticLayerClient({ gatewayUrl }),
     [gatewayUrl, externalClient]
   );
   const [auth, setAuth] = react.useState({
@@ -104,7 +104,32 @@ function SemanticLayerProvider({
     };
   }, [client]);
   const signIn = react.useCallback(() => {
-    window.location.href = client.getSignInUrl();
+    if (client.isInIframe()) {
+      client.signInWithPopup().then(
+        (ok) => {
+          if (ok) {
+            client.getSession().then((session) => {
+              if (session?.user) {
+                setAuth({
+                  isAuthenticated: true,
+                  isLoading: false,
+                  user: { id: session.user.id, email: session.user.email },
+                  error: null
+                });
+              }
+            });
+          }
+        },
+        (err) => {
+          setAuth((prev) => ({
+            ...prev,
+            error: err instanceof Error ? err.message : "Sign-in failed"
+          }));
+        }
+      );
+    } else {
+      window.location.href = client.getSignInUrl();
+    }
   }, [client]);
   const value = react.useMemo(
     () => ({ client, auth, emailDomain, signIn }),

package/dist/react.cjs.map

@@ -1 +1 @@
-{"version":3,"sources":["../src/react/provider.tsx","../src/react/auth-gate.tsx"],"names":["useMemo","SemanticLayerClient","useState","useEffect","useCallback","jsx","SemanticLayerContext","useAuth","Fragment","jsxs"],"mappings":";;;;;;;AAqBO,SAAS,qBAAA,CAAsB;AAAA,EACpC,UAAA;AAAA,EACA,WAAA;AAAA,EACA,MAAA,EAAQ,cAAA;AAAA,EACR;AACF,CAAA,EAA+B;AAC7B,EAAA,MAAM,MAAA,GAASA,aAAA;AAAA,IACb,MAAM,cAAA,IAAkB,IAAIC,qCAAA,CAAoB,EAAE,YAAY,CAAA;AAAA,IAC9D,CAAC,YAAY,cAAc;AAAA,GAC7B;AAEA,EAAA,MAAM,CAAC,IAAA,EAAM,OAAO,CAAA,GAAIC,cAAA,CAAoB;AAAA,IAC1C,eAAA,EAAiB,KAAA;AAAA,IACjB,SAAA,EAAW,IAAA;AAAA,IACX,IAAA,EAAM,IAAA;AAAA,IACN,KAAA,EAAO;AAAA,GACR,CAAA;AAID,EAAAC,eAAA,CAAU,MAAM;AACd,IAAA,IAAI,OAAA,GAAU,IAAA;AAEd,IAAA,eAAe,QAAA,GAAW;AACxB,MAAA,IAAI;AACF,QAAA,MAAM,eAAA,GAAkB,OAAO,kBAAA,EAAmB;AAElD,QAAA,IAAI,eAAA,EAAiB;AACnB,UAAA,MAAM,OAAA,GAAU,MAAM,MAAA,CAAO,UAAA,EAAW;AACxC,UAAA,IAAI,CAAC,OAAA,EAAS;AACd,UAAA,IAAI,SAAS,IAAA,EAAM;AACjB,YAAA,OAAA,CAAQ;AAAA,cACN,eAAA,EAAiB,IAAA;AAAA,cACjB,SAAA,EAAW,KAAA;AAAA,cACX,IAAA,EAAM,EAAE,EAAA,EAAI,OAAA,CAAQ,KAAK,EAAA,EAAI,KAAA,EAAO,OAAA,CAAQ,IAAA,CAAK,KAAA,EAAM;AAAA,cACvD,KAAA,EAAO;AAAA,aACR,CAAA;AACD,YAAA;AAAA,UACF;AAAA,QACF;AAAA,MACF,SAAS,GAAA,EAAK;AACZ,QAAA,IAAI,CAAC,OAAA,EAAS;AACd,QAAA,OAAA,CAAQ;AAAA,UACN,eAAA,EAAiB,KAAA;AAAA,UACjB,SAAA,EAAW,KAAA;AAAA,UACX,IAAA,EAAM,IAAA;AAAA,UACN,KAAA,EAAO,GAAA,YAAe,KAAA,GAAQ,GAAA,CAAI,OAAA,GAAU;AAAA,SAC7C,CAAA;AACD,QAAA;AAAA,MACF;AAEA,MAAA,IAAI;AACF,QAAA,MAAM,OAAA,GAAU,MAAM,MAAA,CAAO,UAAA,EAAW;AACxC,QAAA,IAAI,CAAC,OAAA,EAAS;AACd,QAAA,IAAI,SAAS,IAAA,EAAM;AACjB,UAAA,OAAA,CAAQ;AAAA,YACN,eAAA,EAAiB,IAAA;AAAA,YACjB,SAAA,EAAW,KAAA;AAAA,YACX,IAAA,EAAM,EAAE,EAAA,EAAI,OAAA,CAAQ,KAAK,EAAA,EAAI,KAAA,EAAO,OAAA,CAAQ,IAAA,CAAK,KAAA,EAAM;AAAA,YACvD,KAAA,EAAO;AAAA,WACR,CAAA;AAAA,QACH,CAAA,MAAO;AACL,UAAA,OAAA,CAAQ;AAAA,YACN,eAAA,EAAiB,KAAA;AAAA,YACjB,SAAA,EAAW,KAAA;AAAA,YACX,IAAA,EAAM,IAAA;AAAA,YACN,KAAA,EAAO;AAAA,WACR,CAAA;AAAA,QACH;AAAA,MACF,SAAS,GAAA,EAAK;AACZ,QAAA,IAAI,CAAC,OAAA,EAAS;AACd,QAAA,OAAA,CAAQ;AAAA,UACN,eAAA,EAAiB,KAAA;AAAA,UACjB,SAAA,EAAW,KAAA;AAAA,UACX,IAAA,EAAM,IAAA;AAAA,UACN,KAAA,EAAO,GAAA,YAAe,KAAA,GAAQ,GAAA,CAAI,OAAA,GAAU;AAAA,SAC7C,CAAA;AAAA,MACH;AAAA,IACF;AAEA,IAAA,QAAA,EAAS;AAET,IAAA,MAAM;AAAA,MACJ,IAAA,EAAM,EAAE,YAAA;AAAa,KACvB,GAAI,MAAA,CAAO,iBAAA,CAAkB,CAAC,QAAQ,OAAA,KAAY;AAChD,MAAA,IAAI,CAAC,OAAA,EAAS;AACd,MAAA,IAAI,SAAS,IAAA,EAAM;AACjB,QAAA,OAAA,CAAQ;AAAA,UACN,eAAA,EAAiB,IAAA;AAAA,UACjB,SAAA,EAAW,KAAA;AAAA,UACX,IAAA,EAAM,EAAE,EAAA,EAAI,OAAA,CAAQ,KAAK,EAAA,EAAI,KAAA,EAAO,OAAA,CAAQ,IAAA,CAAK,KAAA,EAAM;AAAA,UACvD,KAAA,EAAO;AAAA,SACR,CAAA;AAAA,MACH,CAAA,MAAO;AACL,QAAA,OAAA,CAAQ;AAAA,UACN,eAAA,EAAiB,KAAA;AAAA,UACjB,SAAA,EAAW,KAAA;AAAA,UACX,IAAA,EAAM,IAAA;AAAA,UACN,KAAA,EAAO;AAAA,SACR,CAAA;AAAA,MACH;AAAA,IACF,CAAC,CAAA;AAED,IAAA,OAAO,MAAM;AACX,MAAA,OAAA,GAAU,KAAA;AACV,MAAA,YAAA,CAAa,WAAA,EAAY;AAAA,IAC3B,CAAA;AAAA,EACF,CAAA,EAAG,CAAC,MAAM,CAAC,CAAA;AAEX,EAAA,MAAM,MAAA,GAASC,kBAAY,MAAM;AAC/B,IAAA,MAAA,CAAO,QAAA,CAAS,IAAA,GAAO,MAAA,CAAO,YAAA,EAAa;AAAA,EAC7C,CAAA,EAAG,CAAC,MAAM,CAAC,CAAA;AAEX,EAAA,MAAM,KAAA,GAAQJ,aAAA;AAAA,IACZ,OAAO,EAAE,MAAA,EAAQ,IAAA,EAAM,aAAa,MAAA,EAAO,CAAA;AAAA,IAC3C,CAAC,MAAA,EAAQ,IAAA,EAAM,WAAA,EAAa,MAAM;AAAA,GACpC;AAEA,EAAA,uBACEK,cAAA,CAACC,sCAAA,CAAqB,QAAA,EAArB,EAA8B,OAC5B,QAAA,EACH,CAAA;AAEJ;ACrIA,IAAM,cAAA,GAAsC;AAAA,EAC1C,OAAA,EAAS,MAAA;AAAA,EACT,aAAA,EAAe,QAAA;AAAA,EACf,UAAA,EAAY,QAAA;AAAA,EACZ,cAAA,EAAgB,QAAA;AAAA,EAChB,SAAA,EAAW,OAAA;AAAA,EACX,UAAA,EAAY,sCAAA;AAAA,EACZ,GAAA,EAAK;AACP,CAAA;AAEA,IAAM,YAAA,GAAoC;AAAA,EACxC,OAAA,EAAS,MAAA;AAAA,EACT,UAAA,EAAY,QAAA;AAAA,EACZ,cAAA,EAAgB,QAAA;AAAA,EAChB,SAAA,EAAW,OAAA;AAAA,EACX,UAAA,EAAY,sCAAA;AAAA,EACZ,KAAA,EAAO;AACT,CAAA;AAEA,IAAM,WAAA,GAAmC;AAAA,EACvC,OAAA,EAAS,WAAA;AAAA,EACT,QAAA,EAAU,MAAA;AAAA,EACV,UAAA,EAAY,GAAA;AAAA,EACZ,KAAA,EAAO,SAAA;AAAA,EACP,eAAA,EAAiB,SAAA;AAAA,EACjB,MAAA,EAAQ,MAAA;AAAA,EACR,YAAA,EAAc,KAAA;AAAA,EACd,MAAA,EAAQ,SAAA;AAAA,EACR,OAAA,EAAS,MAAA;AAAA,EACT,UAAA,EAAY,QAAA;AAAA,EACZ,GAAA,EAAK;AACP,CAAA;AAEA,IAAM,UAAA,GAAkC;AAAA,EACtC,MAAA,EAAQ,CAAA;AAAA,EACR,KAAA,EAAO,SAAA;AAAA,EACP,QAAA,EAAU;AACZ,CAAA;AAMO,SAAS,QAAA,CAAS,EAAE,QAAA,EAAU,OAAA,EAAS,iBAAgB,EAAkB;AAC9E,EAAA,MAAM,EAAE,eAAA,EAAiB,SAAA,EAAW,KAAA,EAAO,MAAA,KAAWC,yBAAA,EAAQ;AAC9D,EAAA,MAAM,CAAC,SAAA,EAAW,YAAY,CAAA,GAAIL,eAAS,KAAK,CAAA;AAEhD,EAAA,MAAM,YAAA,GAAeE,kBAAY,MAAM;AACrC,IAAA,YAAA,CAAa,IAAI,CAAA;AACjB,IAAA,MAAA,EAAO;AAAA,EACT,CAAA,EAAG,CAAC,MAAM,CAAC,CAAA;AAEX,EAAA,IAAI,SAAA,EAAW;AACb,IAAA,uBAAOC,cAAAA,CAAAG,mBAAA,EAAA,EAAG,QAAA,EAAA,OAAA,oBAAWH,eAAC,KAAA,EAAA,EAAI,KAAA,EAAO,YAAA,EAAc,QAAA,EAAA,YAAA,EAAU,CAAA,EAAO,CAAA;AAAA,EAClE;AAEA,EAAA,IAAI,CAAC,eAAA,EAAiB;AACpB,IAAA,IAAI,eAAA,EAAiB;AACnB,MAAA,uBAAOA,eAAAG,mBAAA,EAAA,EAAG,QAAA,EAAA,eAAA,CAAgB,EAAE,MAAA,EAAQ,YAAA,EAAc,CAAA,EAAE,CAAA;AAAA,IACtD;AAEA,IAAA,uBACEC,eAAA,CAAC,KAAA,EAAA,EAAI,KAAA,EAAO,cAAA,EACV,QAAA,EAAA;AAAA,sBAAAJ,cAAAA,CAAC,IAAA,EAAA,EAAG,KAAA,EAAO,EAAE,MAAA,EAAQ,CAAA,EAAG,QAAA,EAAU,MAAA,EAAQ,KAAA,EAAO,SAAA,EAAU,EAAG,QAAA,EAAA,qBAAA,EAAmB,CAAA;AAAA,sBACjFA,cAAAA,CAAC,GAAA,EAAA,EAAE,KAAA,EAAO,EAAE,QAAQ,CAAA,EAAG,KAAA,EAAO,SAAA,EAAU,EAAG,QAAA,EAAA,yCAAA,EAE3C,CAAA;AAAA,MACC,yBAASA,cAAAA,CAAC,GAAA,EAAA,EAAE,KAAA,EAAO,YAAa,QAAA,EAAA,KAAA,EAAM,CAAA;AAAA,sBACvCA,cAAAA,CAAC,QAAA,EAAA,EAAO,KAAA,EAAO,WAAA,EAAa,OAAA,EAAS,YAAA,EAAc,QAAA,EAAU,SAAA,EAC1D,QAAA,EAAA,SAAA,GAAY,eAAA,GAAkB,qBAAA,EACjC;AAAA,KAAA,EACF,CAAA;AAAA,EAEJ;AAEA,EAAA,uBAAOA,cAAAA,CAAAG,mBAAA,EAAA,EAAG,QAAA,EAAS,CAAA;AACrB","file":"react.cjs","sourcesContent":["import React, { useEffect, useMemo, useState, useCallback } from \"react\";\nimport { SemanticLayerClient } from \"../client\";\nimport type { AuthState } from \"../types\";\nimport { SemanticLayerContext } from \"./context\";\n\nexport interface SemanticLayerProviderProps {\n  /** The gateway API URL (e.g. https://semantic-layer-gateway.inkind-dev.com). */\n  gatewayUrl: string;\n  /**\n   * Optional: restrict sign-in to emails matching this domain (e.g. \"inkind.com\").\n   * This is a client-side hint only; the gateway enforces domain restrictions server-side.\n   */\n  emailDomain?: string;\n  /**\n   * Optional: a pre-constructed client instance.\n   * If provided, gatewayUrl is ignored.\n   */\n  client?: SemanticLayerClient;\n  children: React.ReactNode;\n}\n\nexport function SemanticLayerProvider({\n  gatewayUrl,\n  emailDomain,\n  client: externalClient,\n  children,\n}: SemanticLayerProviderProps) {\n  const client = useMemo(\n    () => externalClient ?? new SemanticLayerClient({ gatewayUrl }),\n    [gatewayUrl, externalClient],\n  );\n\n  const [auth, setAuth] = useState<AuthState>({\n    isAuthenticated: false,\n    isLoading: true,\n    user: null,\n    error: null,\n  });\n\n  // On mount, check for auth tokens in the URL hash (from gateway redirect)\n  // and check for an existing session in sessionStorage.\n  useEffect(() => {\n    let mounted = true;\n\n    async function initAuth() {\n      try {\n        const handledCallback = client.handleAuthCallback();\n\n        if (handledCallback) {\n          const session = await client.getSession();\n          if (!mounted) return;\n          if (session?.user) {\n            setAuth({\n              isAuthenticated: true,\n              isLoading: false,\n              user: { id: session.user.id, email: session.user.email },\n              error: null,\n            });\n            return;\n          }\n        }\n      } catch (err) {\n        if (!mounted) return;\n        setAuth({\n          isAuthenticated: false,\n          isLoading: false,\n          user: null,\n          error: err instanceof Error ? err.message : \"Auth callback failed\",\n        });\n        return;\n      }\n\n      try {\n        const session = await client.getSession();\n        if (!mounted) return;\n        if (session?.user) {\n          setAuth({\n            isAuthenticated: true,\n            isLoading: false,\n            user: { id: session.user.id, email: session.user.email },\n            error: null,\n          });\n        } else {\n          setAuth({\n            isAuthenticated: false,\n            isLoading: false,\n            user: null,\n            error: null,\n          });\n        }\n      } catch (err) {\n        if (!mounted) return;\n        setAuth({\n          isAuthenticated: false,\n          isLoading: false,\n          user: null,\n          error: err instanceof Error ? err.message : \"Auth initialization failed\",\n        });\n      }\n    }\n\n    initAuth();\n\n    const {\n      data: { subscription },\n    } = client.onAuthStateChange((_event, session) => {\n      if (!mounted) return;\n      if (session?.user) {\n        setAuth({\n          isAuthenticated: true,\n          isLoading: false,\n          user: { id: session.user.id, email: session.user.email },\n          error: null,\n        });\n      } else {\n        setAuth({\n          isAuthenticated: false,\n          isLoading: false,\n          user: null,\n          error: null,\n        });\n      }\n    });\n\n    return () => {\n      mounted = false;\n      subscription.unsubscribe();\n    };\n  }, [client]);\n\n  const signIn = useCallback(() => {\n    window.location.href = client.getSignInUrl();\n  }, [client]);\n\n  const value = useMemo(\n    () => ({ client, auth, emailDomain, signIn }),\n    [client, auth, emailDomain, signIn],\n  );\n\n  return (\n    <SemanticLayerContext.Provider value={value}>\n      {children}\n    </SemanticLayerContext.Provider>\n  );\n}\n","import React, { useCallback, useState } from \"react\";\nimport { useAuth } from \"./hooks\";\n\nexport interface AuthGateProps {\n  children: React.ReactNode;\n  /** Custom loading component. */\n  loading?: React.ReactNode;\n  /** Custom sign-in component. Receives a signIn callback. */\n  signInComponent?: (props: { signIn: () => void }) => React.ReactNode;\n}\n\nconst containerStyle: React.CSSProperties = {\n  display: \"flex\",\n  flexDirection: \"column\",\n  alignItems: \"center\",\n  justifyContent: \"center\",\n  minHeight: \"100vh\",\n  fontFamily: \"system-ui, -apple-system, sans-serif\",\n  gap: \"16px\",\n};\n\nconst loadingStyle: React.CSSProperties = {\n  display: \"flex\",\n  alignItems: \"center\",\n  justifyContent: \"center\",\n  minHeight: \"100vh\",\n  fontFamily: \"system-ui, -apple-system, sans-serif\",\n  color: \"#6b7280\",\n};\n\nconst buttonStyle: React.CSSProperties = {\n  padding: \"12px 24px\",\n  fontSize: \"16px\",\n  fontWeight: 500,\n  color: \"#ffffff\",\n  backgroundColor: \"#4285f4\",\n  border: \"none\",\n  borderRadius: \"8px\",\n  cursor: \"pointer\",\n  display: \"flex\",\n  alignItems: \"center\",\n  gap: \"8px\",\n};\n\nconst errorStyle: React.CSSProperties = {\n  margin: 0,\n  color: \"#ef4444\",\n  fontSize: \"14px\",\n};\n\n/**\n * Wraps children and only renders them when the user is authenticated.\n * Shows a Google sign-in button when unauthenticated.\n */\nexport function AuthGate({ children, loading, signInComponent }: AuthGateProps) {\n  const { isAuthenticated, isLoading, error, signIn } = useAuth();\n  const [signingIn, setSigningIn] = useState(false);\n\n  const handleSignIn = useCallback(() => {\n    setSigningIn(true);\n    signIn();\n  }, [signIn]);\n\n  if (isLoading) {\n    return <>{loading || <div style={loadingStyle}>Loading...</div>}</>;\n  }\n\n  if (!isAuthenticated) {\n    if (signInComponent) {\n      return <>{signInComponent({ signIn: handleSignIn })}</>;\n    }\n\n    return (\n      <div style={containerStyle}>\n        <h2 style={{ margin: 0, fontSize: \"24px\", color: \"#111827\" }}>Sign in to continue</h2>\n        <p style={{ margin: 0, color: \"#6b7280\" }}>\n          Use your Google account to access data.\n        </p>\n        {error && <p style={errorStyle}>{error}</p>}\n        <button style={buttonStyle} onClick={handleSignIn} disabled={signingIn}>\n          {signingIn ? \"Signing in...\" : \"Sign in with Google\"}\n        </button>\n      </div>\n    );\n  }\n\n  return <>{children}</>;\n}\n"]}
+{"version":3,"sources":["../src/react/provider.tsx","../src/react/auth-gate.tsx"],"names":["useMemo","SemanticLayerClient","useState","useEffect","useCallback","jsx","SemanticLayerContext","useAuth","Fragment","jsxs"],"mappings":";;;;;;;AAqBO,SAAS,qBAAA,CAAsB;AAAA,EACpC,UAAA;AAAA,EACA,WAAA;AAAA,EACA,MAAA,EAAQ,cAAA;AAAA,EACR;AACF,CAAA,EAA+B;AAC7B,EAAA,MAAM,MAAA,GAASA,aAAA;AAAA,IACb,MAAM,cAAA,IAAkB,IAAIC,qCAAA,CAAoB,EAAE,YAAY,CAAA;AAAA,IAC9D,CAAC,YAAY,cAAc;AAAA,GAC7B;AAEA,EAAA,MAAM,CAAC,IAAA,EAAM,OAAO,CAAA,GAAIC,cAAA,CAAoB;AAAA,IAC1C,eAAA,EAAiB,KAAA;AAAA,IACjB,SAAA,EAAW,IAAA;AAAA,IACX,IAAA,EAAM,IAAA;AAAA,IACN,KAAA,EAAO;AAAA,GACR,CAAA;AAID,EAAAC,eAAA,CAAU,MAAM;AACd,IAAA,IAAI,OAAA,GAAU,IAAA;AAEd,IAAA,eAAe,QAAA,GAAW;AACxB,MAAA,IAAI;AACF,QAAA,MAAM,eAAA,GAAkB,OAAO,kBAAA,EAAmB;AAElD,QAAA,IAAI,eAAA,EAAiB;AACnB,UAAA,MAAM,OAAA,GAAU,MAAM,MAAA,CAAO,UAAA,EAAW;AACxC,UAAA,IAAI,CAAC,OAAA,EAAS;AACd,UAAA,IAAI,SAAS,IAAA,EAAM;AACjB,YAAA,OAAA,CAAQ;AAAA,cACN,eAAA,EAAiB,IAAA;AAAA,cACjB,SAAA,EAAW,KAAA;AAAA,cACX,IAAA,EAAM,EAAE,EAAA,EAAI,OAAA,CAAQ,KAAK,EAAA,EAAI,KAAA,EAAO,OAAA,CAAQ,IAAA,CAAK,KAAA,EAAM;AAAA,cACvD,KAAA,EAAO;AAAA,aACR,CAAA;AACD,YAAA;AAAA,UACF;AAAA,QACF;AAAA,MACF,SAAS,GAAA,EAAK;AACZ,QAAA,IAAI,CAAC,OAAA,EAAS;AACd,QAAA,OAAA,CAAQ;AAAA,UACN,eAAA,EAAiB,KAAA;AAAA,UACjB,SAAA,EAAW,KAAA;AAAA,UACX,IAAA,EAAM,IAAA;AAAA,UACN,KAAA,EAAO,GAAA,YAAe,KAAA,GAAQ,GAAA,CAAI,OAAA,GAAU;AAAA,SAC7C,CAAA;AACD,QAAA;AAAA,MACF;AAEA,MAAA,IAAI;AACF,QAAA,MAAM,OAAA,GAAU,MAAM,MAAA,CAAO,UAAA,EAAW;AACxC,QAAA,IAAI,CAAC,OAAA,EAAS;AACd,QAAA,IAAI,SAAS,IAAA,EAAM;AACjB,UAAA,OAAA,CAAQ;AAAA,YACN,eAAA,EAAiB,IAAA;AAAA,YACjB,SAAA,EAAW,KAAA;AAAA,YACX,IAAA,EAAM,EAAE,EAAA,EAAI,OAAA,CAAQ,KAAK,EAAA,EAAI,KAAA,EAAO,OAAA,CAAQ,IAAA,CAAK,KAAA,EAAM;AAAA,YACvD,KAAA,EAAO;AAAA,WACR,CAAA;AAAA,QACH,CAAA,MAAO;AACL,UAAA,OAAA,CAAQ;AAAA,YACN,eAAA,EAAiB,KAAA;AAAA,YACjB,SAAA,EAAW,KAAA;AAAA,YACX,IAAA,EAAM,IAAA;AAAA,YACN,KAAA,EAAO;AAAA,WACR,CAAA;AAAA,QACH;AAAA,MACF,SAAS,GAAA,EAAK;AACZ,QAAA,IAAI,CAAC,OAAA,EAAS;AACd,QAAA,OAAA,CAAQ;AAAA,UACN,eAAA,EAAiB,KAAA;AAAA,UACjB,SAAA,EAAW,KAAA;AAAA,UACX,IAAA,EAAM,IAAA;AAAA,UACN,KAAA,EAAO,GAAA,YAAe,KAAA,GAAQ,GAAA,CAAI,OAAA,GAAU;AAAA,SAC7C,CAAA;AAAA,MACH;AAAA,IACF;AAEA,IAAA,QAAA,EAAS;AAET,IAAA,MAAM;AAAA,MACJ,IAAA,EAAM,EAAE,YAAA;AAAa,KACvB,GAAI,MAAA,CAAO,iBAAA,CAAkB,CAAC,QAAQ,OAAA,KAAY;AAChD,MAAA,IAAI,CAAC,OAAA,EAAS;AACd,MAAA,IAAI,SAAS,IAAA,EAAM;AACjB,QAAA,OAAA,CAAQ;AAAA,UACN,eAAA,EAAiB,IAAA;AAAA,UACjB,SAAA,EAAW,KAAA;AAAA,UACX,IAAA,EAAM,EAAE,EAAA,EAAI,OAAA,CAAQ,KAAK,EAAA,EAAI,KAAA,EAAO,OAAA,CAAQ,IAAA,CAAK,KAAA,EAAM;AAAA,UACvD,KAAA,EAAO;AAAA,SACR,CAAA;AAAA,MACH,CAAA,MAAO;AACL,QAAA,OAAA,CAAQ;AAAA,UACN,eAAA,EAAiB,KAAA;AAAA,UACjB,SAAA,EAAW,KAAA;AAAA,UACX,IAAA,EAAM,IAAA;AAAA,UACN,KAAA,EAAO;AAAA,SACR,CAAA;AAAA,MACH;AAAA,IACF,CAAC,CAAA;AAED,IAAA,OAAO,MAAM;AACX,MAAA,OAAA,GAAU,KAAA;AACV,MAAA,YAAA,CAAa,WAAA,EAAY;AAAA,IAC3B,CAAA;AAAA,EACF,CAAA,EAAG,CAAC,MAAM,CAAC,CAAA;AAEX,EAAA,MAAM,MAAA,GAASC,kBAAY,MAAM;AAC/B,IAAA,IAAI,MAAA,CAAO,YAAW,EAAG;AACvB,MAAA,MAAA,CAAO,iBAAgB,CAAE,IAAA;AAAA,QACvB,CAAC,EAAA,KAAO;AACN,UAAA,IAAI,EAAA,EAAI;AACN,YAAA,MAAA,CAAO,UAAA,EAAW,CAAE,IAAA,CAAK,CAAC,OAAA,KAAY;AACpC,cAAA,IAAI,SAAS,IAAA,EAAM;AACjB,gBAAA,OAAA,CAAQ;AAAA,kBACN,eAAA,EAAiB,IAAA;AAAA,kBACjB,SAAA,EAAW,KAAA;AAAA,kBACX,IAAA,EAAM,EAAE,EAAA,EAAI,OAAA,CAAQ,KAAK,EAAA,EAAI,KAAA,EAAO,OAAA,CAAQ,IAAA,CAAK,KAAA,EAAM;AAAA,kBACvD,KAAA,EAAO;AAAA,iBACR,CAAA;AAAA,cACH;AAAA,YACF,CAAC,CAAA;AAAA,UACH;AAAA,QACF,CAAA;AAAA,QACA,CAAC,GAAA,KAAQ;AACP,UAAA,OAAA,CAAQ,CAAC,IAAA,MAAU;AAAA,YACjB,GAAG,IAAA;AAAA,YACH,KAAA,EAAO,GAAA,YAAe,KAAA,GAAQ,GAAA,CAAI,OAAA,GAAU;AAAA,WAC9C,CAAE,CAAA;AAAA,QACJ;AAAA,OACF;AAAA,IACF,CAAA,MAAO;AACL,MAAA,MAAA,CAAO,QAAA,CAAS,IAAA,GAAO,MAAA,CAAO,YAAA,EAAa;AAAA,IAC7C;AAAA,EACF,CAAA,EAAG,CAAC,MAAM,CAAC,CAAA;AAEX,EAAA,MAAM,KAAA,GAAQJ,aAAA;AAAA,IACZ,OAAO,EAAE,MAAA,EAAQ,IAAA,EAAM,aAAa,MAAA,EAAO,CAAA;AAAA,IAC3C,CAAC,MAAA,EAAQ,IAAA,EAAM,WAAA,EAAa,MAAM;AAAA,GACpC;AAEA,EAAA,uBACEK,cAAA,CAACC,sCAAA,CAAqB,QAAA,EAArB,EAA8B,OAC5B,QAAA,EACH,CAAA;AAEJ;AC9JA,IAAM,cAAA,GAAsC;AAAA,EAC1C,OAAA,EAAS,MAAA;AAAA,EACT,aAAA,EAAe,QAAA;AAAA,EACf,UAAA,EAAY,QAAA;AAAA,EACZ,cAAA,EAAgB,QAAA;AAAA,EAChB,SAAA,EAAW,OAAA;AAAA,EACX,UAAA,EAAY,sCAAA;AAAA,EACZ,GAAA,EAAK;AACP,CAAA;AAEA,IAAM,YAAA,GAAoC;AAAA,EACxC,OAAA,EAAS,MAAA;AAAA,EACT,UAAA,EAAY,QAAA;AAAA,EACZ,cAAA,EAAgB,QAAA;AAAA,EAChB,SAAA,EAAW,OAAA;AAAA,EACX,UAAA,EAAY,sCAAA;AAAA,EACZ,KAAA,EAAO;AACT,CAAA;AAEA,IAAM,WAAA,GAAmC;AAAA,EACvC,OAAA,EAAS,WAAA;AAAA,EACT,QAAA,EAAU,MAAA;AAAA,EACV,UAAA,EAAY,GAAA;AAAA,EACZ,KAAA,EAAO,SAAA;AAAA,EACP,eAAA,EAAiB,SAAA;AAAA,EACjB,MAAA,EAAQ,MAAA;AAAA,EACR,YAAA,EAAc,KAAA;AAAA,EACd,MAAA,EAAQ,SAAA;AAAA,EACR,OAAA,EAAS,MAAA;AAAA,EACT,UAAA,EAAY,QAAA;AAAA,EACZ,GAAA,EAAK;AACP,CAAA;AAEA,IAAM,UAAA,GAAkC;AAAA,EACtC,MAAA,EAAQ,CAAA;AAAA,EACR,KAAA,EAAO,SAAA;AAAA,EACP,QAAA,EAAU;AACZ,CAAA;AAMO,SAAS,QAAA,CAAS,EAAE,QAAA,EAAU,OAAA,EAAS,iBAAgB,EAAkB;AAC9E,EAAA,MAAM,EAAE,eAAA,EAAiB,SAAA,EAAW,KAAA,EAAO,MAAA,KAAWC,yBAAA,EAAQ;AAC9D,EAAA,MAAM,CAAC,SAAA,EAAW,YAAY,CAAA,GAAIL,eAAS,KAAK,CAAA;AAEhD,EAAA,MAAM,YAAA,GAAeE,kBAAY,MAAM;AACrC,IAAA,YAAA,CAAa,IAAI,CAAA;AACjB,IAAA,MAAA,EAAO;AAAA,EACT,CAAA,EAAG,CAAC,MAAM,CAAC,CAAA;AAEX,EAAA,IAAI,SAAA,EAAW;AACb,IAAA,uBAAOC,cAAAA,CAAAG,mBAAA,EAAA,EAAG,QAAA,EAAA,OAAA,oBAAWH,eAAC,KAAA,EAAA,EAAI,KAAA,EAAO,YAAA,EAAc,QAAA,EAAA,YAAA,EAAU,CAAA,EAAO,CAAA;AAAA,EAClE;AAEA,EAAA,IAAI,CAAC,eAAA,EAAiB;AACpB,IAAA,IAAI,eAAA,EAAiB;AACnB,MAAA,uBAAOA,eAAAG,mBAAA,EAAA,EAAG,QAAA,EAAA,eAAA,CAAgB,EAAE,MAAA,EAAQ,YAAA,EAAc,CAAA,EAAE,CAAA;AAAA,IACtD;AAEA,IAAA,uBACEC,eAAA,CAAC,KAAA,EAAA,EAAI,KAAA,EAAO,cAAA,EACV,QAAA,EAAA;AAAA,sBAAAJ,cAAAA,CAAC,IAAA,EAAA,EAAG,KAAA,EAAO,EAAE,MAAA,EAAQ,CAAA,EAAG,QAAA,EAAU,MAAA,EAAQ,KAAA,EAAO,SAAA,EAAU,EAAG,QAAA,EAAA,qBAAA,EAAmB,CAAA;AAAA,sBACjFA,cAAAA,CAAC,GAAA,EAAA,EAAE,KAAA,EAAO,EAAE,QAAQ,CAAA,EAAG,KAAA,EAAO,SAAA,EAAU,EAAG,QAAA,EAAA,yCAAA,EAE3C,CAAA;AAAA,MACC,yBAASA,cAAAA,CAAC,GAAA,EAAA,EAAE,KAAA,EAAO,YAAa,QAAA,EAAA,KAAA,EAAM,CAAA;AAAA,sBACvCA,cAAAA,CAAC,QAAA,EAAA,EAAO,KAAA,EAAO,WAAA,EAAa,OAAA,EAAS,YAAA,EAAc,QAAA,EAAU,SAAA,EAC1D,QAAA,EAAA,SAAA,GAAY,eAAA,GAAkB,qBAAA,EACjC;AAAA,KAAA,EACF,CAAA;AAAA,EAEJ;AAEA,EAAA,uBAAOA,cAAAA,CAAAG,mBAAA,EAAA,EAAG,QAAA,EAAS,CAAA;AACrB","file":"react.cjs","sourcesContent":["import React, { useEffect, useMemo, useState, useCallback } from \"react\";\nimport { SemanticLayerClient } from \"../client\";\nimport type { AuthState } from \"../types\";\nimport { SemanticLayerContext } from \"./context\";\n\nexport interface SemanticLayerProviderProps {\n  /** The gateway API URL (e.g. https://semantic-layer-gateway.inkind-dev.com). */\n  gatewayUrl: string;\n  /**\n   * Optional: restrict sign-in to emails matching this domain (e.g. \"inkind.com\").\n   * This is a client-side hint only; the gateway enforces domain restrictions server-side.\n   */\n  emailDomain?: string;\n  /**\n   * Optional: a pre-constructed client instance.\n   * If provided, gatewayUrl is ignored.\n   */\n  client?: SemanticLayerClient;\n  children: React.ReactNode;\n}\n\nexport function SemanticLayerProvider({\n  gatewayUrl,\n  emailDomain,\n  client: externalClient,\n  children,\n}: SemanticLayerProviderProps) {\n  const client = useMemo(\n    () => externalClient ?? new SemanticLayerClient({ gatewayUrl }),\n    [gatewayUrl, externalClient],\n  );\n\n  const [auth, setAuth] = useState<AuthState>({\n    isAuthenticated: false,\n    isLoading: true,\n    user: null,\n    error: null,\n  });\n\n  // On mount, check for auth tokens in the URL hash (from gateway redirect)\n  // and check for an existing session in sessionStorage.\n  useEffect(() => {\n    let mounted = true;\n\n    async function initAuth() {\n      try {\n        const handledCallback = client.handleAuthCallback();\n\n        if (handledCallback) {\n          const session = await client.getSession();\n          if (!mounted) return;\n          if (session?.user) {\n            setAuth({\n              isAuthenticated: true,\n              isLoading: false,\n              user: { id: session.user.id, email: session.user.email },\n              error: null,\n            });\n            return;\n          }\n        }\n      } catch (err) {\n        if (!mounted) return;\n        setAuth({\n          isAuthenticated: false,\n          isLoading: false,\n          user: null,\n          error: err instanceof Error ? err.message : \"Auth callback failed\",\n        });\n        return;\n      }\n\n      try {\n        const session = await client.getSession();\n        if (!mounted) return;\n        if (session?.user) {\n          setAuth({\n            isAuthenticated: true,\n            isLoading: false,\n            user: { id: session.user.id, email: session.user.email },\n            error: null,\n          });\n        } else {\n          setAuth({\n            isAuthenticated: false,\n            isLoading: false,\n            user: null,\n            error: null,\n          });\n        }\n      } catch (err) {\n        if (!mounted) return;\n        setAuth({\n          isAuthenticated: false,\n          isLoading: false,\n          user: null,\n          error: err instanceof Error ? err.message : \"Auth initialization failed\",\n        });\n      }\n    }\n\n    initAuth();\n\n    const {\n      data: { subscription },\n    } = client.onAuthStateChange((_event, session) => {\n      if (!mounted) return;\n      if (session?.user) {\n        setAuth({\n          isAuthenticated: true,\n          isLoading: false,\n          user: { id: session.user.id, email: session.user.email },\n          error: null,\n        });\n      } else {\n        setAuth({\n          isAuthenticated: false,\n          isLoading: false,\n          user: null,\n          error: null,\n        });\n      }\n    });\n\n    return () => {\n      mounted = false;\n      subscription.unsubscribe();\n    };\n  }, [client]);\n\n  const signIn = useCallback(() => {\n    if (client.isInIframe()) {\n      client.signInWithPopup().then(\n        (ok) => {\n          if (ok) {\n            client.getSession().then((session) => {\n              if (session?.user) {\n                setAuth({\n                  isAuthenticated: true,\n                  isLoading: false,\n                  user: { id: session.user.id, email: session.user.email },\n                  error: null,\n                });\n              }\n            });\n          }\n        },\n        (err) => {\n          setAuth((prev) => ({\n            ...prev,\n            error: err instanceof Error ? err.message : \"Sign-in failed\",\n          }));\n        },\n      );\n    } else {\n      window.location.href = client.getSignInUrl();\n    }\n  }, [client]);\n\n  const value = useMemo(\n    () => ({ client, auth, emailDomain, signIn }),\n    [client, auth, emailDomain, signIn],\n  );\n\n  return (\n    <SemanticLayerContext.Provider value={value}>\n      {children}\n    </SemanticLayerContext.Provider>\n  );\n}\n","import React, { useCallback, useState } from \"react\";\nimport { useAuth } from \"./hooks\";\n\nexport interface AuthGateProps {\n  children: React.ReactNode;\n  /** Custom loading component. */\n  loading?: React.ReactNode;\n  /** Custom sign-in component. Receives a signIn callback. */\n  signInComponent?: (props: { signIn: () => void }) => React.ReactNode;\n}\n\nconst containerStyle: React.CSSProperties = {\n  display: \"flex\",\n  flexDirection: \"column\",\n  alignItems: \"center\",\n  justifyContent: \"center\",\n  minHeight: \"100vh\",\n  fontFamily: \"system-ui, -apple-system, sans-serif\",\n  gap: \"16px\",\n};\n\nconst loadingStyle: React.CSSProperties = {\n  display: \"flex\",\n  alignItems: \"center\",\n  justifyContent: \"center\",\n  minHeight: \"100vh\",\n  fontFamily: \"system-ui, -apple-system, sans-serif\",\n  color: \"#6b7280\",\n};\n\nconst buttonStyle: React.CSSProperties = {\n  padding: \"12px 24px\",\n  fontSize: \"16px\",\n  fontWeight: 500,\n  color: \"#ffffff\",\n  backgroundColor: \"#4285f4\",\n  border: \"none\",\n  borderRadius: \"8px\",\n  cursor: \"pointer\",\n  display: \"flex\",\n  alignItems: \"center\",\n  gap: \"8px\",\n};\n\nconst errorStyle: React.CSSProperties = {\n  margin: 0,\n  color: \"#ef4444\",\n  fontSize: \"14px\",\n};\n\n/**\n * Wraps children and only renders them when the user is authenticated.\n * Shows a Google sign-in button when unauthenticated.\n */\nexport function AuthGate({ children, loading, signInComponent }: AuthGateProps) {\n  const { isAuthenticated, isLoading, error, signIn } = useAuth();\n  const [signingIn, setSigningIn] = useState(false);\n\n  const handleSignIn = useCallback(() => {\n    setSigningIn(true);\n    signIn();\n  }, [signIn]);\n\n  if (isLoading) {\n    return <>{loading || <div style={loadingStyle}>Loading...</div>}</>;\n  }\n\n  if (!isAuthenticated) {\n    if (signInComponent) {\n      return <>{signInComponent({ signIn: handleSignIn })}</>;\n    }\n\n    return (\n      <div style={containerStyle}>\n        <h2 style={{ margin: 0, fontSize: \"24px\", color: \"#111827\" }}>Sign in to continue</h2>\n        <p style={{ margin: 0, color: \"#6b7280\" }}>\n          Use your Google account to access data.\n        </p>\n        {error && <p style={errorStyle}>{error}</p>}\n        <button style={buttonStyle} onClick={handleSignIn} disabled={signingIn}>\n          {signingIn ? \"Signing in...\" : \"Sign in with Google\"}\n        </button>\n      </div>\n    );\n  }\n\n  return <>{children}</>;\n}\n"]}

package/dist/react.js

@@ -1,4 +1,4 @@
-import { SemanticLayerClient } from './chunk-WR4D3UI6.js';
+import { SemanticLayerClient } from './chunk-ZYY77QMO.js';
 import { SemanticLayerContext, useAuth } from './chunk-3OR3QCN6.js';
 export { SemanticLayerContext, useAdminFields, useAdminRoles, useAdminUsers, useAuth, useMetrics, usePivotQuery, useSemanticQuery } from './chunk-3OR3QCN6.js';
 import { useMemo, useState, useEffect, useCallback } from 'react';
@@ -103,7 +103,32 @@ function SemanticLayerProvider({
     };
   }, [client]);
   const signIn = useCallback(() => {
-    window.location.href = client.getSignInUrl();
+    if (client.isInIframe()) {
+      client.signInWithPopup().then(
+        (ok) => {
+          if (ok) {
+            client.getSession().then((session) => {
+              if (session?.user) {
+                setAuth({
+                  isAuthenticated: true,
+                  isLoading: false,
+                  user: { id: session.user.id, email: session.user.email },
+                  error: null
+                });
+              }
+            });
+          }
+        },
+        (err) => {
+          setAuth((prev) => ({
+            ...prev,
+            error: err instanceof Error ? err.message : "Sign-in failed"
+          }));
+        }
+      );
+    } else {
+      window.location.href = client.getSignInUrl();
+    }
   }, [client]);
   const value = useMemo(
     () => ({ client, auth, emailDomain, signIn }),

package/dist/react.js.map

@@ -1 +1 @@
-{"version":3,"sources":["../src/react/provider.tsx","../src/react/auth-gate.tsx"],"names":["useState","useCallback","jsx"],"mappings":";;;;;;AAqBO,SAAS,qBAAA,CAAsB;AAAA,EACpC,UAAA;AAAA,EACA,WAAA;AAAA,EACA,MAAA,EAAQ,cAAA;AAAA,EACR;AACF,CAAA,EAA+B;AAC7B,EAAA,MAAM,MAAA,GAAS,OAAA;AAAA,IACb,MAAM,cAAA,IAAkB,IAAI,mBAAA,CAAoB,EAAE,YAAY,CAAA;AAAA,IAC9D,CAAC,YAAY,cAAc;AAAA,GAC7B;AAEA,EAAA,MAAM,CAAC,IAAA,EAAM,OAAO,CAAA,GAAI,QAAA,CAAoB;AAAA,IAC1C,eAAA,EAAiB,KAAA;AAAA,IACjB,SAAA,EAAW,IAAA;AAAA,IACX,IAAA,EAAM,IAAA;AAAA,IACN,KAAA,EAAO;AAAA,GACR,CAAA;AAID,EAAA,SAAA,CAAU,MAAM;AACd,IAAA,IAAI,OAAA,GAAU,IAAA;AAEd,IAAA,eAAe,QAAA,GAAW;AACxB,MAAA,IAAI;AACF,QAAA,MAAM,eAAA,GAAkB,OAAO,kBAAA,EAAmB;AAElD,QAAA,IAAI,eAAA,EAAiB;AACnB,UAAA,MAAM,OAAA,GAAU,MAAM,MAAA,CAAO,UAAA,EAAW;AACxC,UAAA,IAAI,CAAC,OAAA,EAAS;AACd,UAAA,IAAI,SAAS,IAAA,EAAM;AACjB,YAAA,OAAA,CAAQ;AAAA,cACN,eAAA,EAAiB,IAAA;AAAA,cACjB,SAAA,EAAW,KAAA;AAAA,cACX,IAAA,EAAM,EAAE,EAAA,EAAI,OAAA,CAAQ,KAAK,EAAA,EAAI,KAAA,EAAO,OAAA,CAAQ,IAAA,CAAK,KAAA,EAAM;AAAA,cACvD,KAAA,EAAO;AAAA,aACR,CAAA;AACD,YAAA;AAAA,UACF;AAAA,QACF;AAAA,MACF,SAAS,GAAA,EAAK;AACZ,QAAA,IAAI,CAAC,OAAA,EAAS;AACd,QAAA,OAAA,CAAQ;AAAA,UACN,eAAA,EAAiB,KAAA;AAAA,UACjB,SAAA,EAAW,KAAA;AAAA,UACX,IAAA,EAAM,IAAA;AAAA,UACN,KAAA,EAAO,GAAA,YAAe,KAAA,GAAQ,GAAA,CAAI,OAAA,GAAU;AAAA,SAC7C,CAAA;AACD,QAAA;AAAA,MACF;AAEA,MAAA,IAAI;AACF,QAAA,MAAM,OAAA,GAAU,MAAM,MAAA,CAAO,UAAA,EAAW;AACxC,QAAA,IAAI,CAAC,OAAA,EAAS;AACd,QAAA,IAAI,SAAS,IAAA,EAAM;AACjB,UAAA,OAAA,CAAQ;AAAA,YACN,eAAA,EAAiB,IAAA;AAAA,YACjB,SAAA,EAAW,KAAA;AAAA,YACX,IAAA,EAAM,EAAE,EAAA,EAAI,OAAA,CAAQ,KAAK,EAAA,EAAI,KAAA,EAAO,OAAA,CAAQ,IAAA,CAAK,KAAA,EAAM;AAAA,YACvD,KAAA,EAAO;AAAA,WACR,CAAA;AAAA,QACH,CAAA,MAAO;AACL,UAAA,OAAA,CAAQ;AAAA,YACN,eAAA,EAAiB,KAAA;AAAA,YACjB,SAAA,EAAW,KAAA;AAAA,YACX,IAAA,EAAM,IAAA;AAAA,YACN,KAAA,EAAO;AAAA,WACR,CAAA;AAAA,QACH;AAAA,MACF,SAAS,GAAA,EAAK;AACZ,QAAA,IAAI,CAAC,OAAA,EAAS;AACd,QAAA,OAAA,CAAQ;AAAA,UACN,eAAA,EAAiB,KAAA;AAAA,UACjB,SAAA,EAAW,KAAA;AAAA,UACX,IAAA,EAAM,IAAA;AAAA,UACN,KAAA,EAAO,GAAA,YAAe,KAAA,GAAQ,GAAA,CAAI,OAAA,GAAU;AAAA,SAC7C,CAAA;AAAA,MACH;AAAA,IACF;AAEA,IAAA,QAAA,EAAS;AAET,IAAA,MAAM;AAAA,MACJ,IAAA,EAAM,EAAE,YAAA;AAAa,KACvB,GAAI,MAAA,CAAO,iBAAA,CAAkB,CAAC,QAAQ,OAAA,KAAY;AAChD,MAAA,IAAI,CAAC,OAAA,EAAS;AACd,MAAA,IAAI,SAAS,IAAA,EAAM;AACjB,QAAA,OAAA,CAAQ;AAAA,UACN,eAAA,EAAiB,IAAA;AAAA,UACjB,SAAA,EAAW,KAAA;AAAA,UACX,IAAA,EAAM,EAAE,EAAA,EAAI,OAAA,CAAQ,KAAK,EAAA,EAAI,KAAA,EAAO,OAAA,CAAQ,IAAA,CAAK,KAAA,EAAM;AAAA,UACvD,KAAA,EAAO;AAAA,SACR,CAAA;AAAA,MACH,CAAA,MAAO;AACL,QAAA,OAAA,CAAQ;AAAA,UACN,eAAA,EAAiB,KAAA;AAAA,UACjB,SAAA,EAAW,KAAA;AAAA,UACX,IAAA,EAAM,IAAA;AAAA,UACN,KAAA,EAAO;AAAA,SACR,CAAA;AAAA,MACH;AAAA,IACF,CAAC,CAAA;AAED,IAAA,OAAO,MAAM;AACX,MAAA,OAAA,GAAU,KAAA;AACV,MAAA,YAAA,CAAa,WAAA,EAAY;AAAA,IAC3B,CAAA;AAAA,EACF,CAAA,EAAG,CAAC,MAAM,CAAC,CAAA;AAEX,EAAA,MAAM,MAAA,GAAS,YAAY,MAAM;AAC/B,IAAA,MAAA,CAAO,QAAA,CAAS,IAAA,GAAO,MAAA,CAAO,YAAA,EAAa;AAAA,EAC7C,CAAA,EAAG,CAAC,MAAM,CAAC,CAAA;AAEX,EAAA,MAAM,KAAA,GAAQ,OAAA;AAAA,IACZ,OAAO,EAAE,MAAA,EAAQ,IAAA,EAAM,aAAa,MAAA,EAAO,CAAA;AAAA,IAC3C,CAAC,MAAA,EAAQ,IAAA,EAAM,WAAA,EAAa,MAAM;AAAA,GACpC;AAEA,EAAA,uBACE,GAAA,CAAC,oBAAA,CAAqB,QAAA,EAArB,EAA8B,OAC5B,QAAA,EACH,CAAA;AAEJ;ACrIA,IAAM,cAAA,GAAsC;AAAA,EAC1C,OAAA,EAAS,MAAA;AAAA,EACT,aAAA,EAAe,QAAA;AAAA,EACf,UAAA,EAAY,QAAA;AAAA,EACZ,cAAA,EAAgB,QAAA;AAAA,EAChB,SAAA,EAAW,OAAA;AAAA,EACX,UAAA,EAAY,sCAAA;AAAA,EACZ,GAAA,EAAK;AACP,CAAA;AAEA,IAAM,YAAA,GAAoC;AAAA,EACxC,OAAA,EAAS,MAAA;AAAA,EACT,UAAA,EAAY,QAAA;AAAA,EACZ,cAAA,EAAgB,QAAA;AAAA,EAChB,SAAA,EAAW,OAAA;AAAA,EACX,UAAA,EAAY,sCAAA;AAAA,EACZ,KAAA,EAAO;AACT,CAAA;AAEA,IAAM,WAAA,GAAmC;AAAA,EACvC,OAAA,EAAS,WAAA;AAAA,EACT,QAAA,EAAU,MAAA;AAAA,EACV,UAAA,EAAY,GAAA;AAAA,EACZ,KAAA,EAAO,SAAA;AAAA,EACP,eAAA,EAAiB,SAAA;AAAA,EACjB,MAAA,EAAQ,MAAA;AAAA,EACR,YAAA,EAAc,KAAA;AAAA,EACd,MAAA,EAAQ,SAAA;AAAA,EACR,OAAA,EAAS,MAAA;AAAA,EACT,UAAA,EAAY,QAAA;AAAA,EACZ,GAAA,EAAK;AACP,CAAA;AAEA,IAAM,UAAA,GAAkC;AAAA,EACtC,MAAA,EAAQ,CAAA;AAAA,EACR,KAAA,EAAO,SAAA;AAAA,EACP,QAAA,EAAU;AACZ,CAAA;AAMO,SAAS,QAAA,CAAS,EAAE,QAAA,EAAU,OAAA,EAAS,iBAAgB,EAAkB;AAC9E,EAAA,MAAM,EAAE,eAAA,EAAiB,SAAA,EAAW,KAAA,EAAO,MAAA,KAAW,OAAA,EAAQ;AAC9D,EAAA,MAAM,CAAC,SAAA,EAAW,YAAY,CAAA,GAAIA,SAAS,KAAK,CAAA;AAEhD,EAAA,MAAM,YAAA,GAAeC,YAAY,MAAM;AACrC,IAAA,YAAA,CAAa,IAAI,CAAA;AACjB,IAAA,MAAA,EAAO;AAAA,EACT,CAAA,EAAG,CAAC,MAAM,CAAC,CAAA;AAEX,EAAA,IAAI,SAAA,EAAW;AACb,IAAA,uBAAOC,GAAAA,CAAA,QAAA,EAAA,EAAG,QAAA,EAAA,OAAA,oBAAWA,IAAC,KAAA,EAAA,EAAI,KAAA,EAAO,YAAA,EAAc,QAAA,EAAA,YAAA,EAAU,CAAA,EAAO,CAAA;AAAA,EAClE;AAEA,EAAA,IAAI,CAAC,eAAA,EAAiB;AACpB,IAAA,IAAI,eAAA,EAAiB;AACnB,MAAA,uBAAOA,IAAA,QAAA,EAAA,EAAG,QAAA,EAAA,eAAA,CAAgB,EAAE,MAAA,EAAQ,YAAA,EAAc,CAAA,EAAE,CAAA;AAAA,IACtD;AAEA,IAAA,uBACE,IAAA,CAAC,KAAA,EAAA,EAAI,KAAA,EAAO,cAAA,EACV,QAAA,EAAA;AAAA,sBAAAA,GAAAA,CAAC,IAAA,EAAA,EAAG,KAAA,EAAO,EAAE,MAAA,EAAQ,CAAA,EAAG,QAAA,EAAU,MAAA,EAAQ,KAAA,EAAO,SAAA,EAAU,EAAG,QAAA,EAAA,qBAAA,EAAmB,CAAA;AAAA,sBACjFA,GAAAA,CAAC,GAAA,EAAA,EAAE,KAAA,EAAO,EAAE,QAAQ,CAAA,EAAG,KAAA,EAAO,SAAA,EAAU,EAAG,QAAA,EAAA,yCAAA,EAE3C,CAAA;AAAA,MACC,yBAASA,GAAAA,CAAC,GAAA,EAAA,EAAE,KAAA,EAAO,YAAa,QAAA,EAAA,KAAA,EAAM,CAAA;AAAA,sBACvCA,GAAAA,CAAC,QAAA,EAAA,EAAO,KAAA,EAAO,WAAA,EAAa,OAAA,EAAS,YAAA,EAAc,QAAA,EAAU,SAAA,EAC1D,QAAA,EAAA,SAAA,GAAY,eAAA,GAAkB,qBAAA,EACjC;AAAA,KAAA,EACF,CAAA;AAAA,EAEJ;AAEA,EAAA,uBAAOA,GAAAA,CAAA,QAAA,EAAA,EAAG,QAAA,EAAS,CAAA;AACrB","file":"react.js","sourcesContent":["import React, { useEffect, useMemo, useState, useCallback } from \"react\";\nimport { SemanticLayerClient } from \"../client\";\nimport type { AuthState } from \"../types\";\nimport { SemanticLayerContext } from \"./context\";\n\nexport interface SemanticLayerProviderProps {\n  /** The gateway API URL (e.g. https://semantic-layer-gateway.inkind-dev.com). */\n  gatewayUrl: string;\n  /**\n   * Optional: restrict sign-in to emails matching this domain (e.g. \"inkind.com\").\n   * This is a client-side hint only; the gateway enforces domain restrictions server-side.\n   */\n  emailDomain?: string;\n  /**\n   * Optional: a pre-constructed client instance.\n   * If provided, gatewayUrl is ignored.\n   */\n  client?: SemanticLayerClient;\n  children: React.ReactNode;\n}\n\nexport function SemanticLayerProvider({\n  gatewayUrl,\n  emailDomain,\n  client: externalClient,\n  children,\n}: SemanticLayerProviderProps) {\n  const client = useMemo(\n    () => externalClient ?? new SemanticLayerClient({ gatewayUrl }),\n    [gatewayUrl, externalClient],\n  );\n\n  const [auth, setAuth] = useState<AuthState>({\n    isAuthenticated: false,\n    isLoading: true,\n    user: null,\n    error: null,\n  });\n\n  // On mount, check for auth tokens in the URL hash (from gateway redirect)\n  // and check for an existing session in sessionStorage.\n  useEffect(() => {\n    let mounted = true;\n\n    async function initAuth() {\n      try {\n        const handledCallback = client.handleAuthCallback();\n\n        if (handledCallback) {\n          const session = await client.getSession();\n          if (!mounted) return;\n          if (session?.user) {\n            setAuth({\n              isAuthenticated: true,\n              isLoading: false,\n              user: { id: session.user.id, email: session.user.email },\n              error: null,\n            });\n            return;\n          }\n        }\n      } catch (err) {\n        if (!mounted) return;\n        setAuth({\n          isAuthenticated: false,\n          isLoading: false,\n          user: null,\n          error: err instanceof Error ? err.message : \"Auth callback failed\",\n        });\n        return;\n      }\n\n      try {\n        const session = await client.getSession();\n        if (!mounted) return;\n        if (session?.user) {\n          setAuth({\n            isAuthenticated: true,\n            isLoading: false,\n            user: { id: session.user.id, email: session.user.email },\n            error: null,\n          });\n        } else {\n          setAuth({\n            isAuthenticated: false,\n            isLoading: false,\n            user: null,\n            error: null,\n          });\n        }\n      } catch (err) {\n        if (!mounted) return;\n        setAuth({\n          isAuthenticated: false,\n          isLoading: false,\n          user: null,\n          error: err instanceof Error ? err.message : \"Auth initialization failed\",\n        });\n      }\n    }\n\n    initAuth();\n\n    const {\n      data: { subscription },\n    } = client.onAuthStateChange((_event, session) => {\n      if (!mounted) return;\n      if (session?.user) {\n        setAuth({\n          isAuthenticated: true,\n          isLoading: false,\n          user: { id: session.user.id, email: session.user.email },\n          error: null,\n        });\n      } else {\n        setAuth({\n          isAuthenticated: false,\n          isLoading: false,\n          user: null,\n          error: null,\n        });\n      }\n    });\n\n    return () => {\n      mounted = false;\n      subscription.unsubscribe();\n    };\n  }, [client]);\n\n  const signIn = useCallback(() => {\n    window.location.href = client.getSignInUrl();\n  }, [client]);\n\n  const value = useMemo(\n    () => ({ client, auth, emailDomain, signIn }),\n    [client, auth, emailDomain, signIn],\n  );\n\n  return (\n    <SemanticLayerContext.Provider value={value}>\n      {children}\n    </SemanticLayerContext.Provider>\n  );\n}\n","import React, { useCallback, useState } from \"react\";\nimport { useAuth } from \"./hooks\";\n\nexport interface AuthGateProps {\n  children: React.ReactNode;\n  /** Custom loading component. */\n  loading?: React.ReactNode;\n  /** Custom sign-in component. Receives a signIn callback. */\n  signInComponent?: (props: { signIn: () => void }) => React.ReactNode;\n}\n\nconst containerStyle: React.CSSProperties = {\n  display: \"flex\",\n  flexDirection: \"column\",\n  alignItems: \"center\",\n  justifyContent: \"center\",\n  minHeight: \"100vh\",\n  fontFamily: \"system-ui, -apple-system, sans-serif\",\n  gap: \"16px\",\n};\n\nconst loadingStyle: React.CSSProperties = {\n  display: \"flex\",\n  alignItems: \"center\",\n  justifyContent: \"center\",\n  minHeight: \"100vh\",\n  fontFamily: \"system-ui, -apple-system, sans-serif\",\n  color: \"#6b7280\",\n};\n\nconst buttonStyle: React.CSSProperties = {\n  padding: \"12px 24px\",\n  fontSize: \"16px\",\n  fontWeight: 500,\n  color: \"#ffffff\",\n  backgroundColor: \"#4285f4\",\n  border: \"none\",\n  borderRadius: \"8px\",\n  cursor: \"pointer\",\n  display: \"flex\",\n  alignItems: \"center\",\n  gap: \"8px\",\n};\n\nconst errorStyle: React.CSSProperties = {\n  margin: 0,\n  color: \"#ef4444\",\n  fontSize: \"14px\",\n};\n\n/**\n * Wraps children and only renders them when the user is authenticated.\n * Shows a Google sign-in button when unauthenticated.\n */\nexport function AuthGate({ children, loading, signInComponent }: AuthGateProps) {\n  const { isAuthenticated, isLoading, error, signIn } = useAuth();\n  const [signingIn, setSigningIn] = useState(false);\n\n  const handleSignIn = useCallback(() => {\n    setSigningIn(true);\n    signIn();\n  }, [signIn]);\n\n  if (isLoading) {\n    return <>{loading || <div style={loadingStyle}>Loading...</div>}</>;\n  }\n\n  if (!isAuthenticated) {\n    if (signInComponent) {\n      return <>{signInComponent({ signIn: handleSignIn })}</>;\n    }\n\n    return (\n      <div style={containerStyle}>\n        <h2 style={{ margin: 0, fontSize: \"24px\", color: \"#111827\" }}>Sign in to continue</h2>\n        <p style={{ margin: 0, color: \"#6b7280\" }}>\n          Use your Google account to access data.\n        </p>\n        {error && <p style={errorStyle}>{error}</p>}\n        <button style={buttonStyle} onClick={handleSignIn} disabled={signingIn}>\n          {signingIn ? \"Signing in...\" : \"Sign in with Google\"}\n        </button>\n      </div>\n    );\n  }\n\n  return <>{children}</>;\n}\n"]}
+{"version":3,"sources":["../src/react/provider.tsx","../src/react/auth-gate.tsx"],"names":["useState","useCallback","jsx"],"mappings":";;;;;;AAqBO,SAAS,qBAAA,CAAsB;AAAA,EACpC,UAAA;AAAA,EACA,WAAA;AAAA,EACA,MAAA,EAAQ,cAAA;AAAA,EACR;AACF,CAAA,EAA+B;AAC7B,EAAA,MAAM,MAAA,GAAS,OAAA;AAAA,IACb,MAAM,cAAA,IAAkB,IAAI,mBAAA,CAAoB,EAAE,YAAY,CAAA;AAAA,IAC9D,CAAC,YAAY,cAAc;AAAA,GAC7B;AAEA,EAAA,MAAM,CAAC,IAAA,EAAM,OAAO,CAAA,GAAI,QAAA,CAAoB;AAAA,IAC1C,eAAA,EAAiB,KAAA;AAAA,IACjB,SAAA,EAAW,IAAA;AAAA,IACX,IAAA,EAAM,IAAA;AAAA,IACN,KAAA,EAAO;AAAA,GACR,CAAA;AAID,EAAA,SAAA,CAAU,MAAM;AACd,IAAA,IAAI,OAAA,GAAU,IAAA;AAEd,IAAA,eAAe,QAAA,GAAW;AACxB,MAAA,IAAI;AACF,QAAA,MAAM,eAAA,GAAkB,OAAO,kBAAA,EAAmB;AAElD,QAAA,IAAI,eAAA,EAAiB;AACnB,UAAA,MAAM,OAAA,GAAU,MAAM,MAAA,CAAO,UAAA,EAAW;AACxC,UAAA,IAAI,CAAC,OAAA,EAAS;AACd,UAAA,IAAI,SAAS,IAAA,EAAM;AACjB,YAAA,OAAA,CAAQ;AAAA,cACN,eAAA,EAAiB,IAAA;AAAA,cACjB,SAAA,EAAW,KAAA;AAAA,cACX,IAAA,EAAM,EAAE,EAAA,EAAI,OAAA,CAAQ,KAAK,EAAA,EAAI,KAAA,EAAO,OAAA,CAAQ,IAAA,CAAK,KAAA,EAAM;AAAA,cACvD,KAAA,EAAO;AAAA,aACR,CAAA;AACD,YAAA;AAAA,UACF;AAAA,QACF;AAAA,MACF,SAAS,GAAA,EAAK;AACZ,QAAA,IAAI,CAAC,OAAA,EAAS;AACd,QAAA,OAAA,CAAQ;AAAA,UACN,eAAA,EAAiB,KAAA;AAAA,UACjB,SAAA,EAAW,KAAA;AAAA,UACX,IAAA,EAAM,IAAA;AAAA,UACN,KAAA,EAAO,GAAA,YAAe,KAAA,GAAQ,GAAA,CAAI,OAAA,GAAU;AAAA,SAC7C,CAAA;AACD,QAAA;AAAA,MACF;AAEA,MAAA,IAAI;AACF,QAAA,MAAM,OAAA,GAAU,MAAM,MAAA,CAAO,UAAA,EAAW;AACxC,QAAA,IAAI,CAAC,OAAA,EAAS;AACd,QAAA,IAAI,SAAS,IAAA,EAAM;AACjB,UAAA,OAAA,CAAQ;AAAA,YACN,eAAA,EAAiB,IAAA;AAAA,YACjB,SAAA,EAAW,KAAA;AAAA,YACX,IAAA,EAAM,EAAE,EAAA,EAAI,OAAA,CAAQ,KAAK,EAAA,EAAI,KAAA,EAAO,OAAA,CAAQ,IAAA,CAAK,KAAA,EAAM;AAAA,YACvD,KAAA,EAAO;AAAA,WACR,CAAA;AAAA,QACH,CAAA,MAAO;AACL,UAAA,OAAA,CAAQ;AAAA,YACN,eAAA,EAAiB,KAAA;AAAA,YACjB,SAAA,EAAW,KAAA;AAAA,YACX,IAAA,EAAM,IAAA;AAAA,YACN,KAAA,EAAO;AAAA,WACR,CAAA;AAAA,QACH;AAAA,MACF,SAAS,GAAA,EAAK;AACZ,QAAA,IAAI,CAAC,OAAA,EAAS;AACd,QAAA,OAAA,CAAQ;AAAA,UACN,eAAA,EAAiB,KAAA;AAAA,UACjB,SAAA,EAAW,KAAA;AAAA,UACX,IAAA,EAAM,IAAA;AAAA,UACN,KAAA,EAAO,GAAA,YAAe,KAAA,GAAQ,GAAA,CAAI,OAAA,GAAU;AAAA,SAC7C,CAAA;AAAA,MACH;AAAA,IACF;AAEA,IAAA,QAAA,EAAS;AAET,IAAA,MAAM;AAAA,MACJ,IAAA,EAAM,EAAE,YAAA;AAAa,KACvB,GAAI,MAAA,CAAO,iBAAA,CAAkB,CAAC,QAAQ,OAAA,KAAY;AAChD,MAAA,IAAI,CAAC,OAAA,EAAS;AACd,MAAA,IAAI,SAAS,IAAA,EAAM;AACjB,QAAA,OAAA,CAAQ;AAAA,UACN,eAAA,EAAiB,IAAA;AAAA,UACjB,SAAA,EAAW,KAAA;AAAA,UACX,IAAA,EAAM,EAAE,EAAA,EAAI,OAAA,CAAQ,KAAK,EAAA,EAAI,KAAA,EAAO,OAAA,CAAQ,IAAA,CAAK,KAAA,EAAM;AAAA,UACvD,KAAA,EAAO;AAAA,SACR,CAAA;AAAA,MACH,CAAA,MAAO;AACL,QAAA,OAAA,CAAQ;AAAA,UACN,eAAA,EAAiB,KAAA;AAAA,UACjB,SAAA,EAAW,KAAA;AAAA,UACX,IAAA,EAAM,IAAA;AAAA,UACN,KAAA,EAAO;AAAA,SACR,CAAA;AAAA,MACH;AAAA,IACF,CAAC,CAAA;AAED,IAAA,OAAO,MAAM;AACX,MAAA,OAAA,GAAU,KAAA;AACV,MAAA,YAAA,CAAa,WAAA,EAAY;AAAA,IAC3B,CAAA;AAAA,EACF,CAAA,EAAG,CAAC,MAAM,CAAC,CAAA;AAEX,EAAA,MAAM,MAAA,GAAS,YAAY,MAAM;AAC/B,IAAA,IAAI,MAAA,CAAO,YAAW,EAAG;AACvB,MAAA,MAAA,CAAO,iBAAgB,CAAE,IAAA;AAAA,QACvB,CAAC,EAAA,KAAO;AACN,UAAA,IAAI,EAAA,EAAI;AACN,YAAA,MAAA,CAAO,UAAA,EAAW,CAAE,IAAA,CAAK,CAAC,OAAA,KAAY;AACpC,cAAA,IAAI,SAAS,IAAA,EAAM;AACjB,gBAAA,OAAA,CAAQ;AAAA,kBACN,eAAA,EAAiB,IAAA;AAAA,kBACjB,SAAA,EAAW,KAAA;AAAA,kBACX,IAAA,EAAM,EAAE,EAAA,EAAI,OAAA,CAAQ,KAAK,EAAA,EAAI,KAAA,EAAO,OAAA,CAAQ,IAAA,CAAK,KAAA,EAAM;AAAA,kBACvD,KAAA,EAAO;AAAA,iBACR,CAAA;AAAA,cACH;AAAA,YACF,CAAC,CAAA;AAAA,UACH;AAAA,QACF,CAAA;AAAA,QACA,CAAC,GAAA,KAAQ;AACP,UAAA,OAAA,CAAQ,CAAC,IAAA,MAAU;AAAA,YACjB,GAAG,IAAA;AAAA,YACH,KAAA,EAAO,GAAA,YAAe,KAAA,GAAQ,GAAA,CAAI,OAAA,GAAU;AAAA,WAC9C,CAAE,CAAA;AAAA,QACJ;AAAA,OACF;AAAA,IACF,CAAA,MAAO;AACL,MAAA,MAAA,CAAO,QAAA,CAAS,IAAA,GAAO,MAAA,CAAO,YAAA,EAAa;AAAA,IAC7C;AAAA,EACF,CAAA,EAAG,CAAC,MAAM,CAAC,CAAA;AAEX,EAAA,MAAM,KAAA,GAAQ,OAAA;AAAA,IACZ,OAAO,EAAE,MAAA,EAAQ,IAAA,EAAM,aAAa,MAAA,EAAO,CAAA;AAAA,IAC3C,CAAC,MAAA,EAAQ,IAAA,EAAM,WAAA,EAAa,MAAM;AAAA,GACpC;AAEA,EAAA,uBACE,GAAA,CAAC,oBAAA,CAAqB,QAAA,EAArB,EAA8B,OAC5B,QAAA,EACH,CAAA;AAEJ;AC9JA,IAAM,cAAA,GAAsC;AAAA,EAC1C,OAAA,EAAS,MAAA;AAAA,EACT,aAAA,EAAe,QAAA;AAAA,EACf,UAAA,EAAY,QAAA;AAAA,EACZ,cAAA,EAAgB,QAAA;AAAA,EAChB,SAAA,EAAW,OAAA;AAAA,EACX,UAAA,EAAY,sCAAA;AAAA,EACZ,GAAA,EAAK;AACP,CAAA;AAEA,IAAM,YAAA,GAAoC;AAAA,EACxC,OAAA,EAAS,MAAA;AAAA,EACT,UAAA,EAAY,QAAA;AAAA,EACZ,cAAA,EAAgB,QAAA;AAAA,EAChB,SAAA,EAAW,OAAA;AAAA,EACX,UAAA,EAAY,sCAAA;AAAA,EACZ,KAAA,EAAO;AACT,CAAA;AAEA,IAAM,WAAA,GAAmC;AAAA,EACvC,OAAA,EAAS,WAAA;AAAA,EACT,QAAA,EAAU,MAAA;AAAA,EACV,UAAA,EAAY,GAAA;AAAA,EACZ,KAAA,EAAO,SAAA;AAAA,EACP,eAAA,EAAiB,SAAA;AAAA,EACjB,MAAA,EAAQ,MAAA;AAAA,EACR,YAAA,EAAc,KAAA;AAAA,EACd,MAAA,EAAQ,SAAA;AAAA,EACR,OAAA,EAAS,MAAA;AAAA,EACT,UAAA,EAAY,QAAA;AAAA,EACZ,GAAA,EAAK;AACP,CAAA;AAEA,IAAM,UAAA,GAAkC;AAAA,EACtC,MAAA,EAAQ,CAAA;AAAA,EACR,KAAA,EAAO,SAAA;AAAA,EACP,QAAA,EAAU;AACZ,CAAA;AAMO,SAAS,QAAA,CAAS,EAAE,QAAA,EAAU,OAAA,EAAS,iBAAgB,EAAkB;AAC9E,EAAA,MAAM,EAAE,eAAA,EAAiB,SAAA,EAAW,KAAA,EAAO,MAAA,KAAW,OAAA,EAAQ;AAC9D,EAAA,MAAM,CAAC,SAAA,EAAW,YAAY,CAAA,GAAIA,SAAS,KAAK,CAAA;AAEhD,EAAA,MAAM,YAAA,GAAeC,YAAY,MAAM;AACrC,IAAA,YAAA,CAAa,IAAI,CAAA;AACjB,IAAA,MAAA,EAAO;AAAA,EACT,CAAA,EAAG,CAAC,MAAM,CAAC,CAAA;AAEX,EAAA,IAAI,SAAA,EAAW;AACb,IAAA,uBAAOC,GAAAA,CAAA,QAAA,EAAA,EAAG,QAAA,EAAA,OAAA,oBAAWA,IAAC,KAAA,EAAA,EAAI,KAAA,EAAO,YAAA,EAAc,QAAA,EAAA,YAAA,EAAU,CAAA,EAAO,CAAA;AAAA,EAClE;AAEA,EAAA,IAAI,CAAC,eAAA,EAAiB;AACpB,IAAA,IAAI,eAAA,EAAiB;AACnB,MAAA,uBAAOA,IAAA,QAAA,EAAA,EAAG,QAAA,EAAA,eAAA,CAAgB,EAAE,MAAA,EAAQ,YAAA,EAAc,CAAA,EAAE,CAAA;AAAA,IACtD;AAEA,IAAA,uBACE,IAAA,CAAC,KAAA,EAAA,EAAI,KAAA,EAAO,cAAA,EACV,QAAA,EAAA;AAAA,sBAAAA,GAAAA,CAAC,IAAA,EAAA,EAAG,KAAA,EAAO,EAAE,MAAA,EAAQ,CAAA,EAAG,QAAA,EAAU,MAAA,EAAQ,KAAA,EAAO,SAAA,EAAU,EAAG,QAAA,EAAA,qBAAA,EAAmB,CAAA;AAAA,sBACjFA,GAAAA,CAAC,GAAA,EAAA,EAAE,KAAA,EAAO,EAAE,QAAQ,CAAA,EAAG,KAAA,EAAO,SAAA,EAAU,EAAG,QAAA,EAAA,yCAAA,EAE3C,CAAA;AAAA,MACC,yBAASA,GAAAA,CAAC,GAAA,EAAA,EAAE,KAAA,EAAO,YAAa,QAAA,EAAA,KAAA,EAAM,CAAA;AAAA,sBACvCA,GAAAA,CAAC,QAAA,EAAA,EAAO,KAAA,EAAO,WAAA,EAAa,OAAA,EAAS,YAAA,EAAc,QAAA,EAAU,SAAA,EAC1D,QAAA,EAAA,SAAA,GAAY,eAAA,GAAkB,qBAAA,EACjC;AAAA,KAAA,EACF,CAAA;AAAA,EAEJ;AAEA,EAAA,uBAAOA,GAAAA,CAAA,QAAA,EAAA,EAAG,QAAA,EAAS,CAAA;AACrB","file":"react.js","sourcesContent":["import React, { useEffect, useMemo, useState, useCallback } from \"react\";\nimport { SemanticLayerClient } from \"../client\";\nimport type { AuthState } from \"../types\";\nimport { SemanticLayerContext } from \"./context\";\n\nexport interface SemanticLayerProviderProps {\n  /** The gateway API URL (e.g. https://semantic-layer-gateway.inkind-dev.com). */\n  gatewayUrl: string;\n  /**\n   * Optional: restrict sign-in to emails matching this domain (e.g. \"inkind.com\").\n   * This is a client-side hint only; the gateway enforces domain restrictions server-side.\n   */\n  emailDomain?: string;\n  /**\n   * Optional: a pre-constructed client instance.\n   * If provided, gatewayUrl is ignored.\n   */\n  client?: SemanticLayerClient;\n  children: React.ReactNode;\n}\n\nexport function SemanticLayerProvider({\n  gatewayUrl,\n  emailDomain,\n  client: externalClient,\n  children,\n}: SemanticLayerProviderProps) {\n  const client = useMemo(\n    () => externalClient ?? new SemanticLayerClient({ gatewayUrl }),\n    [gatewayUrl, externalClient],\n  );\n\n  const [auth, setAuth] = useState<AuthState>({\n    isAuthenticated: false,\n    isLoading: true,\n    user: null,\n    error: null,\n  });\n\n  // On mount, check for auth tokens in the URL hash (from gateway redirect)\n  // and check for an existing session in sessionStorage.\n  useEffect(() => {\n    let mounted = true;\n\n    async function initAuth() {\n      try {\n        const handledCallback = client.handleAuthCallback();\n\n        if (handledCallback) {\n          const session = await client.getSession();\n          if (!mounted) return;\n          if (session?.user) {\n            setAuth({\n              isAuthenticated: true,\n              isLoading: false,\n              user: { id: session.user.id, email: session.user.email },\n              error: null,\n            });\n            return;\n          }\n        }\n      } catch (err) {\n        if (!mounted) return;\n        setAuth({\n          isAuthenticated: false,\n          isLoading: false,\n          user: null,\n          error: err instanceof Error ? err.message : \"Auth callback failed\",\n        });\n        return;\n      }\n\n      try {\n        const session = await client.getSession();\n        if (!mounted) return;\n        if (session?.user) {\n          setAuth({\n            isAuthenticated: true,\n            isLoading: false,\n            user: { id: session.user.id, email: session.user.email },\n            error: null,\n          });\n        } else {\n          setAuth({\n            isAuthenticated: false,\n            isLoading: false,\n            user: null,\n            error: null,\n          });\n        }\n      } catch (err) {\n        if (!mounted) return;\n        setAuth({\n          isAuthenticated: false,\n          isLoading: false,\n          user: null,\n          error: err instanceof Error ? err.message : \"Auth initialization failed\",\n        });\n      }\n    }\n\n    initAuth();\n\n    const {\n      data: { subscription },\n    } = client.onAuthStateChange((_event, session) => {\n      if (!mounted) return;\n      if (session?.user) {\n        setAuth({\n          isAuthenticated: true,\n          isLoading: false,\n          user: { id: session.user.id, email: session.user.email },\n          error: null,\n        });\n      } else {\n        setAuth({\n          isAuthenticated: false,\n          isLoading: false,\n          user: null,\n          error: null,\n        });\n      }\n    });\n\n    return () => {\n      mounted = false;\n      subscription.unsubscribe();\n    };\n  }, [client]);\n\n  const signIn = useCallback(() => {\n    if (client.isInIframe()) {\n      client.signInWithPopup().then(\n        (ok) => {\n          if (ok) {\n            client.getSession().then((session) => {\n              if (session?.user) {\n                setAuth({\n                  isAuthenticated: true,\n                  isLoading: false,\n                  user: { id: session.user.id, email: session.user.email },\n                  error: null,\n                });\n              }\n            });\n          }\n        },\n        (err) => {\n          setAuth((prev) => ({\n            ...prev,\n            error: err instanceof Error ? err.message : \"Sign-in failed\",\n          }));\n        },\n      );\n    } else {\n      window.location.href = client.getSignInUrl();\n    }\n  }, [client]);\n\n  const value = useMemo(\n    () => ({ client, auth, emailDomain, signIn }),\n    [client, auth, emailDomain, signIn],\n  );\n\n  return (\n    <SemanticLayerContext.Provider value={value}>\n      {children}\n    </SemanticLayerContext.Provider>\n  );\n}\n","import React, { useCallback, useState } from \"react\";\nimport { useAuth } from \"./hooks\";\n\nexport interface AuthGateProps {\n  children: React.ReactNode;\n  /** Custom loading component. */\n  loading?: React.ReactNode;\n  /** Custom sign-in component. Receives a signIn callback. */\n  signInComponent?: (props: { signIn: () => void }) => React.ReactNode;\n}\n\nconst containerStyle: React.CSSProperties = {\n  display: \"flex\",\n  flexDirection: \"column\",\n  alignItems: \"center\",\n  justifyContent: \"center\",\n  minHeight: \"100vh\",\n  fontFamily: \"system-ui, -apple-system, sans-serif\",\n  gap: \"16px\",\n};\n\nconst loadingStyle: React.CSSProperties = {\n  display: \"flex\",\n  alignItems: \"center\",\n  justifyContent: \"center\",\n  minHeight: \"100vh\",\n  fontFamily: \"system-ui, -apple-system, sans-serif\",\n  color: \"#6b7280\",\n};\n\nconst buttonStyle: React.CSSProperties = {\n  padding: \"12px 24px\",\n  fontSize: \"16px\",\n  fontWeight: 500,\n  color: \"#ffffff\",\n  backgroundColor: \"#4285f4\",\n  border: \"none\",\n  borderRadius: \"8px\",\n  cursor: \"pointer\",\n  display: \"flex\",\n  alignItems: \"center\",\n  gap: \"8px\",\n};\n\nconst errorStyle: React.CSSProperties = {\n  margin: 0,\n  color: \"#ef4444\",\n  fontSize: \"14px\",\n};\n\n/**\n * Wraps children and only renders them when the user is authenticated.\n * Shows a Google sign-in button when unauthenticated.\n */\nexport function AuthGate({ children, loading, signInComponent }: AuthGateProps) {\n  const { isAuthenticated, isLoading, error, signIn } = useAuth();\n  const [signingIn, setSigningIn] = useState(false);\n\n  const handleSignIn = useCallback(() => {\n    setSigningIn(true);\n    signIn();\n  }, [signIn]);\n\n  if (isLoading) {\n    return <>{loading || <div style={loadingStyle}>Loading...</div>}</>;\n  }\n\n  if (!isAuthenticated) {\n    if (signInComponent) {\n      return <>{signInComponent({ signIn: handleSignIn })}</>;\n    }\n\n    return (\n      <div style={containerStyle}>\n        <h2 style={{ margin: 0, fontSize: \"24px\", color: \"#111827\" }}>Sign in to continue</h2>\n        <p style={{ margin: 0, color: \"#6b7280\" }}>\n          Use your Google account to access data.\n        </p>\n        {error && <p style={errorStyle}>{error}</p>}\n        <button style={buttonStyle} onClick={handleSignIn} disabled={signingIn}>\n          {signingIn ? \"Signing in...\" : \"Sign in with Google\"}\n        </button>\n      </div>\n    );\n  }\n\n  return <>{children}</>;\n}\n"]}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@inkindcards/semantic-layer",
-  "version": "2.1.0",
+  "version": "2.2.0",
   "description": "SDK for connecting Lovable apps to the dbt Semantic Layer via a shared gateway",
   "type": "module",
   "main": "./dist/index.cjs",

package/dist/chunk-W64RGDXH.cjs.map

@@ -1 +0,0 @@
-{"version":3,"sources":["../src/client.ts"],"names":[],"mappings":";;;AAaA,IAAM,iBAAA,GAAoB,sBAAA;AAEnB,IAAM,sBAAN,MAA0B;AAAA,EAU/B,YAAY,MAAA,EAA6B;AARzC,IAAA,IAAA,CAAQ,WAAA,GAA6B,IAAA;AACrC,IAAA,IAAA,CAAQ,WAAA,GAAc,CAAA;AACtB,IAAA,IAAA,CAAQ,SAAA,GAA2B,IAAA;AACnC,IAAA,IAAA,CAAQ,aAAA,GAAyC,IAAA;AACjD,IAAA,IAAA,CAAQ,iBAAA,GAAoB,CAAA;AAC5B,IAAA,IAAA,CAAiB,YAAA,GAAe,IAAI,EAAA,GAAK,GAAA;AACzC,IAAA,IAAA,CAAQ,aAAA,uBAAoB,GAAA,EAA0D;AAqOtF,IAAA,IAAA,CAAS,KAAA,GAAQ;AAAA,MACf,UAAA,EAAY,MAAM,IAAA,CAAK,SAAA,CAAsC,aAAa,CAAA;AAAA,MAC1E,aAAa,CAAC,KAAA,KACZ,IAAA,CAAK,SAAA,CAAmC,iBAAiB,KAAK,CAAA;AAAA,MAChE,aAAa,CAAC,KAAA,KACZ,IAAA,CAAK,SAAA,CAAmC,iBAAiB,KAAK,CAAA;AAAA,MAChE,WAAA,EAAa,CAAC,EAAA,KACZ,IAAA,CAAK,UAAgC,eAAA,EAAiB,EAAE,IAAI,CAAA;AAAA,MAE9D,SAAA,EAAW,MAAM,IAAA,CAAK,SAAA,CAAmC,YAAY,CAAA;AAAA,MACrE,YAAY,CAAC,KAAA,KACX,IAAA,CAAK,SAAA,CAAgC,gBAAgB,KAAK,CAAA;AAAA,MAC5D,YAAY,CAAC,KAAA,KACX,IAAA,CAAK,SAAA,CAAgC,gBAAgB,KAAK,CAAA;AAAA,MAC5D,UAAA,EAAY,CAAC,EAAA,KACX,IAAA,CAAK,UAAgC,cAAA,EAAgB,EAAE,IAAI,CAAA;AAAA,MAC7D,aAAA,EAAe,CAAC,OAAA,EAAiB,iBAAA,KAC/B,IAAA,CAAK,UAAoD,iBAAA,EAAmB,EAAE,OAAA,EAAS,iBAAA,EAAmB,CAAA;AAAA,MAE5G,SAAA,EAAW,MAAM,IAAA,CAAK,SAAA,CAA2C,YAAY,CAAA;AAAA,MAC7E,gBAAgB,CAAC,KAAA,KACf,IAAA,CAAK,SAAA,CAA8C,oBAAoB,KAAK,CAAA;AAAA,MAC9E,gBAAgB,CAAC,KAAA,KACf,IAAA,CAAK,SAAA,CAAgC,oBAAoB,KAAK,CAAA;AAAA,MAEhE,iBAAA,EAAmB,CAAC,OAAA,KAClB,IAAA,CAAK,UAA8C,qBAAA,EAAuB,EAAE,SAAS,CAAA;AAAA,MACvF,iBAAiB,CAAC,KAAA,KAChB,IAAA,CAAK,SAAA,CAA2C,qBAAqB,KAAK,CAAA;AAAA,MAC5E,oBAAoB,CAAC,KAAA,KACnB,IAAA,CAAK,SAAA,CAAgC,wBAAwB,KAAK;AAAA,KACtE;AAjQE,IAAA,IAAA,CAAK,aAAa,MAAA,CAAO,UAAA;AAEzB,IAAA,IAAI,OAAO,WAAW,WAAA,EAAa;AACjC,MAAA,IAAI;AACF,QAAA,MAAM,MAAA,GAAS,cAAA,CAAe,OAAA,CAAQ,iBAAiB,CAAA;AACvD,QAAA,IAAI,MAAA,EAAQ;AACV,UAAA,MAAM,MAAA,GAAS,IAAA,CAAK,KAAA,CAAM,MAAM,CAAA;AAChC,UAAA,IAAI,MAAA,CAAO,SAAA,GAAY,IAAA,CAAK,GAAA,EAAI,EAAG;AACjC,YAAA,IAAA,CAAK,cAAc,MAAA,CAAO,KAAA;AAC1B,YAAA,IAAA,CAAK,cAAc,MAAA,CAAO,SAAA;AAC1B,YAAA,IAAA,CAAK,SAAA,GAAY,OAAO,KAAA,IAAS,IAAA;AAAA,UACnC,CAAA,MAAO;AACL,YAAA,cAAA,CAAe,WAAW,iBAAiB,CAAA;AAAA,UAC7C;AAAA,QACF;AAAA,MACF,CAAA,CAAA,MAAQ;AAAA,MAER;AAAA,IACF;AAAA,EACF;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EASA,aAAa,SAAA,EAA4B;AACvC,IAAA,MAAM,MAAA,GAAS,SAAA,KAAc,OAAO,MAAA,KAAW,WAAA,GAAc,MAAA,CAAO,QAAA,CAAS,IAAA,CAAK,KAAA,CAAM,GAAG,CAAA,CAAE,CAAC,CAAA,GAAI,EAAA,CAAA;AAClG,IAAA,OAAO,GAAG,IAAA,CAAK,UAAU,CAAA,uBAAA,EAA0B,kBAAA,CAAmB,MAAM,CAAC,CAAA,CAAA;AAAA,EAC/E;AAAA;AAAA;AAAA;AAAA;AAAA,EAMA,kBAAA,GAA8B;AAC5B,IAAA,IAAI,OAAO,MAAA,KAAW,WAAA,EAAa,OAAO,KAAA;AAE1C,IAAA,MAAM,IAAA,GAAO,MAAA,CAAO,QAAA,CAAS,IAAA,CAAK,MAAM,CAAC,CAAA;AACzC,IAAA,IAAI,CAAC,MAAM,OAAO,KAAA;AAElB,IAAA,MAAM,MAAA,GAAS,IAAI,eAAA,CAAgB,IAAI,CAAA;AAEvC,IAAA,MAAM,SAAA,GAAY,MAAA,CAAO,GAAA,CAAI,YAAY,CAAA;AACzC,IAAA,IAAI,SAAA,EAAW;AACb,MAAA,MAAA,CAAO,OAAA,CAAQ,aAAa,IAAA,EAAM,EAAA,EAAI,OAAO,QAAA,CAAS,QAAA,GAAW,MAAA,CAAO,QAAA,CAAS,MAAM,CAAA;AACvF,MAAA,MAAM,IAAI,kBAAA,CAAmB,SAAA,EAAW,YAAY,CAAA;AAAA,IACtD;AAEA,IAAA,MAAM,WAAA,GAAc,MAAA,CAAO,GAAA,CAAI,cAAc,CAAA;AAC7C,IAAA,MAAM,KAAA,GAAQ,MAAA,CAAO,GAAA,CAAI,OAAO,CAAA;AAChC,IAAA,MAAM,YAAY,QAAA,CAAS,MAAA,CAAO,IAAI,YAAY,CAAA,IAAK,KAAK,EAAE,CAAA;AAE9D,IAAA,IAAI,CAAC,WAAA,IAAe,CAAC,KAAA,EAAO,OAAO,KAAA;AAEnC,IAAA,MAAA,CAAO,OAAA,CAAQ,aAAa,IAAA,EAAM,EAAA,EAAI,OAAO,QAAA,CAAS,QAAA,GAAW,MAAA,CAAO,QAAA,CAAS,MAAM,CAAA;AACvF,IAAA,IAAA,CAAK,cAAA,CAAe,WAAA,EAAa,KAAA,EAAO,SAAS,CAAA;AACjD,IAAA,OAAO,IAAA;AAAA,EACT;AAAA;AAAA;AAAA;AAAA,EAKA,cAAA,CAAe,KAAA,EAAe,KAAA,EAAe,SAAA,EAAmB;AAC9D,IAAA,IAAA,CAAK,WAAA,GAAc,KAAA;AACnB,IAAA,IAAA,CAAK,SAAA,GAAY,KAAA;AACjB,IAAA,IAAA,CAAK,WAAA,GAAc,IAAA,CAAK,GAAA,EAAI,GAAI,SAAA,GAAY,GAAA;AAE5C,IAAA,IAAI,OAAO,WAAW,WAAA,EAAa;AACjC,MAAA,IAAI;AACF,QAAA,cAAA,CAAe,OAAA;AAAA,UACb,iBAAA;AAAA,UACA,IAAA,CAAK,UAAU,EAAE,KAAA,EAAO,OAAO,SAAA,EAAW,IAAA,CAAK,aAAa;AAAA,SAC9D;AAAA,MACF,CAAA,CAAA,MAAQ;AAAA,MAER;AAAA,IACF;AAEA,IAAA,MAAM,UAAuB,EAAE,IAAA,EAAM,EAAE,EAAA,EAAI,KAAA,EAAO,OAAM,EAAE;AAC1D,IAAA,KAAA,MAAW,QAAA,IAAY,KAAK,aAAA,EAAe;AACzC,MAAA,QAAA,CAAS,aAAa,OAAO,CAAA;AAAA,IAC/B;AAAA,EACF;AAAA,EAEA,MAAM,UAAA,GAA0C;AAC9C,IAAA,IAAI,KAAK,WAAA,IAAe,IAAA,CAAK,GAAA,EAAI,GAAI,KAAK,WAAA,EAAa;AACrD,MAAA,OAAO,EAAE,IAAA,EAAM,EAAE,EAAA,EAAI,IAAA,CAAK,SAAA,IAAa,EAAA,EAAI,KAAA,EAAO,IAAA,CAAK,SAAA,IAAa,EAAA,EAAG,EAAE;AAAA,IAC3E;AACA,IAAA,OAAO,IAAA;AAAA,EACT;AAAA,EAEA,MAAM,OAAA,GAAU;AACd,IAAA,IAAA,CAAK,WAAA,GAAc,IAAA;AACnB,IAAA,IAAA,CAAK,WAAA,GAAc,CAAA;AACnB,IAAA,IAAA,CAAK,SAAA,GAAY,IAAA;AACjB,IAAA,IAAA,CAAK,aAAA,GAAgB,IAAA;AAErB,IAAA,IAAI,OAAO,WAAW,WAAA,EAAa;AACjC,MAAA,IAAI;AACF,QAAA,cAAA,CAAe,WAAW,iBAAiB,CAAA;AAAA,MAC7C,CAAA,CAAA,MAAQ;AAAA,MAER;AAAA,IACF;AAEA,IAAA,KAAA,MAAW,QAAA,IAAY,KAAK,aAAA,EAAe;AACzC,MAAA,QAAA,CAAS,cAAc,IAAI,CAAA;AAAA,IAC7B;AAEA,IAAA,OAAO,EAAE,OAAO,IAAA,EAAK;AAAA,EACvB;AAAA,EAEA,kBAAkB,QAAA,EAAgE;AAChF,IAAA,IAAA,CAAK,aAAA,CAAc,IAAI,QAAQ,CAAA;AAC/B,IAAA,OAAO;AAAA,MACL,IAAA,EAAM;AAAA,QACJ,YAAA,EAAc;AAAA,UACZ,aAAa,MAAM;AACjB,YAAA,IAAA,CAAK,aAAA,CAAc,OAAO,QAAQ,CAAA;AAAA,UACpC;AAAA;AACF;AACF,KACF;AAAA,EACF;AAAA;AAAA,EAIA,MAAc,OAAA,CAAW,IAAA,EAAc,IAAA,EAA4B;AACjE,IAAA,IAAI,CAAC,KAAK,WAAA,EAAa;AACrB,MAAA,MAAM,IAAI,kBAAA,CAAmB,mBAAA,EAAqB,YAAY,CAAA;AAAA,IAChE;AAEA,IAAA,MAAM,IAAA,GAAO,MAAM,KAAA,CAAM,CAAA,EAAG,KAAK,UAAU,CAAA,EAAG,IAAI,CAAA,CAAA,EAAI;AAAA,MACpD,MAAA,EAAQ,MAAA;AAAA,MACR,OAAA,EAAS;AAAA,QACP,aAAA,EAAe,CAAA,OAAA,EAAU,IAAA,CAAK,WAAW,CAAA,CAAA;AAAA,QACzC,cAAA,EAAgB;AAAA,OAClB;AAAA,MACA,MAAM,IAAA,KAAS,MAAA,GAAY,IAAA,CAAK,SAAA,CAAU,IAAI,CAAA,GAAI;AAAA,KACnD,CAAA;AAED,IAAA,MAAM,IAAA,GAAO,MAAM,IAAA,CAAK,IAAA,EAAK;AAE7B,IAAA,IAAI,CAAC,IAAA,CAAK,EAAA,IAAM,IAAA,EAAM,KAAA,EAAO;AAC3B,MAAA,MAAM,IAAI,kBAAA;AAAA,QACR,IAAA,EAAM,KAAA,IAAS,CAAA,gBAAA,EAAmB,IAAA,CAAK,MAAM,CAAA,CAAA;AAAA,QAC7C,IAAA,CAAK,MAAA,KAAW,GAAA,GAAM,YAAA,GAAe;AAAA,OACvC;AAAA,IACF;AAEA,IAAA,OAAO,IAAA;AAAA,EACT;AAAA;AAAA,EAIA,MAAM,WAAA,CAAY,YAAA,GAAe,KAAA,EAAkC;AACjE,IAAA,MAAM,GAAA,GAAM,KAAK,GAAA,EAAI;AACrB,IAAA,IAAI,CAAC,gBAAgB,IAAA,CAAK,aAAA,IAAiB,MAAM,IAAA,CAAK,iBAAA,GAAoB,KAAK,YAAA,EAAc;AAC3F,MAAA,OAAO,IAAA,CAAK,aAAA;AAAA,IACd;AAEA,IAAA,MAAM,IAAA,GAAO,MAAM,IAAA,CAAK,OAAA,CAA0B,cAAc,CAAA;AAChE,IAAA,IAAA,CAAK,aAAA,GAAgB,IAAA;AACrB,IAAA,IAAA,CAAK,iBAAA,GAAoB,GAAA;AACzB,IAAA,OAAO,IAAA;AAAA,EACT;AAAA,EAEA,MAAM,UAAA,GAAuC;AAC3C,IAAA,MAAM,EAAE,MAAA,EAAO,GAAI,MAAM,KAAK,WAAA,EAAY;AAC1C,IAAA,OAAO,OAAO,MAAA,CAAO,CAAC,CAAA,KAAM,CAAA,CAAE,SAAS,QAAQ,CAAA;AAAA,EACjD;AAAA,EAEA,MAAM,aAAA,GAA0C;AAC9C,IAAA,MAAM,EAAE,MAAA,EAAO,GAAI,MAAM,KAAK,WAAA,EAAY;AAC1C,IAAA,OAAO,MAAA,CAAO,OAAO,CAAC,CAAA,KAAM,EAAE,IAAA,KAAS,WAAA,IAAe,CAAA,CAAE,IAAA,KAAS,gBAAgB,CAAA;AAAA,EACnF;AAAA,EAEA,MAAM,SAAS,QAAA,EAAsD;AACnE,IAAA,MAAM,EAAE,MAAA,EAAO,GAAI,MAAM,KAAK,WAAA,EAAY;AAC1C,IAAA,OAAO,MAAA,CAAO,KAAK,CAAC,CAAA,KAAM,EAAE,IAAA,KAAS,QAAA,IAAY,CAAA,CAAE,EAAA,KAAO,QAAQ,CAAA;AAAA,EACpE;AAAA;AAAA,EAIA,MAAM,MAAM,MAAA,EAA2C;AACrD,IAAA,IAAI,MAAA,CAAO,MAAA,CAAO,MAAA,KAAW,CAAA,EAAG;AAC9B,MAAA,OAAO,EAAE,OAAA,EAAS,EAAC,EAAG,IAAA,EAAM,EAAC,EAAG,SAAA,EAAW,CAAA,EAAG,eAAA,EAAiB,CAAA,EAAE;AAAA,IACnE;AACA,IAAA,OAAO,IAAA,CAAK,OAAA,CAAqB,WAAA,EAAa,EAAE,QAAQ,CAAA;AAAA,EAC1D;AAAA,EAEA,MAAM,YAAY,KAAA,EAA+C;AAC/D,IAAA,MAAM,EAAE,MAAA,EAAO,GAAI,MAAM,KAAK,WAAA,EAAY;AAC1C,IAAA,MAAM,QAAA,GAAW,IAAI,GAAA,CAAI,MAAA,CAAO,GAAA,CAAI,CAAC,CAAA,KAAM,CAAC,CAAA,CAAE,IAAA,EAAM,CAAC,CAAC,CAAC,CAAA;AAEvD,IAAA,MAAM,MAAA,GAAS,KAAA,CAAM,OAAA,CAAQ,GAAA,CAAI,CAAC,IAAA,KAAS;AACzC,MAAA,MAAM,KAAA,GAAQ,QAAA,CAAS,GAAA,CAAI,IAAI,CAAA;AAC/B,MAAA,IAAI,CAAC,OAAO,MAAM,IAAI,mBAAmB,CAAA,iBAAA,EAAoB,IAAI,KAAK,eAAe,CAAA;AACrF,MAAA,OAAO,EAAE,OAAA,EAAS,KAAA,CAAM,EAAA,EAAI,KAAA,EAAM;AAAA,IACpC,CAAC,CAAA;AAED,IAAA,MAAM,QAAQ,KAAA,CAAM,OAAA,IAAW,EAAC,EAAG,GAAA,CAAI,CAAC,IAAA,KAAS;AAC/C,MAAA,MAAM,KAAA,GAAQ,QAAA,CAAS,GAAA,CAAI,IAAI,CAAA;AAC/B,MAAA,IAAI,CAAC,OAAO,MAAM,IAAI,mBAAmB,CAAA,oBAAA,EAAuB,IAAI,KAAK,eAAe,CAAA;AACxF,MAAA,MAAM,KAAA,GAAQ,KAAA,CAAM,IAAA,KAAS,gBAAA,GAAmB,MAAM,KAAA,GAAQ,MAAA;AAC9D,MAAA,OAAO,EAAE,OAAA,EAAS,KAAA,CAAM,EAAA,EAAI,OAAO,KAAA,EAAM;AAAA,IAC3C,CAAC,CAAA;AAED,IAAA,MAAM,OAAA,GAAU,MAAA,CAAO,OAAA,CAAQ,KAAA,CAAM,OAAA,IAAW,EAAE,CAAA,CAAE,GAAA,CAAI,CAAC,CAAC,IAAA,EAAM,YAAY,CAAA,KAAM;AAChF,MAAA,MAAM,KAAA,GAAQ,QAAA,CAAS,GAAA,CAAI,IAAI,CAAA;AAC/B,MAAA,IAAI,CAAC,OAAO,MAAM,IAAI,mBAAmB,CAAA,uBAAA,EAA0B,IAAI,KAAK,eAAe,CAAA;AAC3F,MAAA,OAAO,EAAE,OAAA,EAAS,KAAA,CAAM,EAAA,EAAI,OAAO,YAAA,EAAa;AAAA,IAClD,CAAC,CAAA;AAED,IAAA,OAAO,IAAA,CAAK,MAAM,EAAE,MAAA,EAAQ,MAAM,OAAA,EAAS,EAAC,EAAG,OAAA,EAAS,CAAA;AAAA,EAC1D;AAAA;AAAA,EAIA,MAAc,SAAA,CAAa,MAAA,EAAgB,IAAA,GAAgC,EAAC,EAAe;AACzF,IAAA,OAAO,KAAK,OAAA,CAAW,WAAA,EAAa,EAAE,MAAA,EAAQ,GAAG,MAAM,CAAA;AAAA,EACzD;AAkCF;AAMO,IAAM,kBAAA,GAAN,cAAiC,KAAA,CAAM;AAAA,EAE5C,WAAA,CAAY,SAAiB,IAAA,EAAc;AACzC,IAAA,KAAA,CAAM,OAAO,CAAA;AACb,IAAA,IAAA,CAAK,IAAA,GAAO,oBAAA;AACZ,IAAA,IAAA,CAAK,IAAA,GAAO,IAAA;AAAA,EACd;AACF","file":"chunk-W64RGDXH.cjs","sourcesContent":["import type {\n  SemanticLayerConfig,\n  MetadataResponse,\n  PivotConfig,\n  QueryResult,\n  SimpleQueryInput,\n  SemanticField,\n  CuratedField,\n  AccessRole,\n  UserRoleAssignment,\n  UserFieldOverride,\n} from \"./types\";\n\nconst TOKEN_STORAGE_KEY = \"semantic-layer-token\";\n\nexport class SemanticLayerClient {\n  readonly gatewayUrl: string;\n  private accessToken: string | null = null;\n  private tokenExpiry = 0;\n  private userEmail: string | null = null;\n  private metadataCache: MetadataResponse | null = null;\n  private metadataCacheTime = 0;\n  private readonly CACHE_TTL_MS = 5 * 60 * 1000;\n  private authListeners = new Set<(event: string, session: SessionLike | null) => void>();\n\n  constructor(config: SemanticLayerConfig) {\n    this.gatewayUrl = config.gatewayUrl;\n\n    if (typeof window !== \"undefined\") {\n      try {\n        const stored = sessionStorage.getItem(TOKEN_STORAGE_KEY);\n        if (stored) {\n          const parsed = JSON.parse(stored);\n          if (parsed.expiresAt > Date.now()) {\n            this.accessToken = parsed.token;\n            this.tokenExpiry = parsed.expiresAt;\n            this.userEmail = parsed.email || null;\n          } else {\n            sessionStorage.removeItem(TOKEN_STORAGE_KEY);\n          }\n        }\n      } catch {\n        // Ignore storage errors\n      }\n    }\n  }\n\n  // -- Auth ------------------------------------------------------------------\n\n  /**\n   * Returns the URL to redirect the browser to for Google sign-in.\n   * After the user authenticates, the gateway redirects back to returnUrl\n   * with the access token in the URL hash fragment.\n   */\n  getSignInUrl(returnUrl?: string): string {\n    const target = returnUrl || (typeof window !== \"undefined\" ? window.location.href.split(\"#\")[0] : \"\");\n    return `${this.gatewayUrl}/auth/google?returnUrl=${encodeURIComponent(target)}`;\n  }\n\n  /**\n   * Check the current URL hash for auth tokens (set by the gateway callback redirect).\n   * If found, extracts them, stores the session, clears the hash, and returns true.\n   */\n  handleAuthCallback(): boolean {\n    if (typeof window === \"undefined\") return false;\n\n    const hash = window.location.hash.slice(1);\n    if (!hash) return false;\n\n    const params = new URLSearchParams(hash);\n\n    const authError = params.get(\"auth_error\");\n    if (authError) {\n      window.history.replaceState(null, \"\", window.location.pathname + window.location.search);\n      throw new SemanticLayerError(authError, \"AUTH_ERROR\");\n    }\n\n    const accessToken = params.get(\"access_token\");\n    const email = params.get(\"email\");\n    const expiresIn = parseInt(params.get(\"expires_in\") || \"0\", 10);\n\n    if (!accessToken || !email) return false;\n\n    window.history.replaceState(null, \"\", window.location.pathname + window.location.search);\n    this.setAccessToken(accessToken, email, expiresIn);\n    return true;\n  }\n\n  /**\n   * Set the Google access token (called after OAuth redirect callback).\n   */\n  setAccessToken(token: string, email: string, expiresIn: number) {\n    this.accessToken = token;\n    this.userEmail = email;\n    this.tokenExpiry = Date.now() + expiresIn * 1000;\n\n    if (typeof window !== \"undefined\") {\n      try {\n        sessionStorage.setItem(\n          TOKEN_STORAGE_KEY,\n          JSON.stringify({ token, email, expiresAt: this.tokenExpiry }),\n        );\n      } catch {\n        // Ignore storage errors\n      }\n    }\n\n    const session: SessionLike = { user: { id: email, email } };\n    for (const listener of this.authListeners) {\n      listener(\"SIGNED_IN\", session);\n    }\n  }\n\n  async getSession(): Promise<SessionLike | null> {\n    if (this.accessToken && Date.now() < this.tokenExpiry) {\n      return { user: { id: this.userEmail || \"\", email: this.userEmail || \"\" } };\n    }\n    return null;\n  }\n\n  async signOut() {\n    this.accessToken = null;\n    this.tokenExpiry = 0;\n    this.userEmail = null;\n    this.metadataCache = null;\n\n    if (typeof window !== \"undefined\") {\n      try {\n        sessionStorage.removeItem(TOKEN_STORAGE_KEY);\n      } catch {\n        // Ignore storage errors\n      }\n    }\n\n    for (const listener of this.authListeners) {\n      listener(\"SIGNED_OUT\", null);\n    }\n\n    return { error: null };\n  }\n\n  onAuthStateChange(callback: (event: string, session: SessionLike | null) => void) {\n    this.authListeners.add(callback);\n    return {\n      data: {\n        subscription: {\n          unsubscribe: () => {\n            this.authListeners.delete(callback);\n          },\n        },\n      },\n    };\n  }\n\n  // -- API calls -------------------------------------------------------------\n\n  private async apiCall<T>(path: string, body?: unknown): Promise<T> {\n    if (!this.accessToken) {\n      throw new SemanticLayerError(\"Not authenticated\", \"AUTH_ERROR\");\n    }\n\n    const resp = await fetch(`${this.gatewayUrl}${path}`, {\n      method: \"POST\",\n      headers: {\n        Authorization: `Bearer ${this.accessToken}`,\n        \"Content-Type\": \"application/json\",\n      },\n      body: body !== undefined ? JSON.stringify(body) : undefined,\n    });\n\n    const data = await resp.json();\n\n    if (!resp.ok || data?.error) {\n      throw new SemanticLayerError(\n        data?.error || `Request failed: ${resp.status}`,\n        resp.status === 401 ? \"AUTH_ERROR\" : \"API_ERROR\",\n      );\n    }\n\n    return data as T;\n  }\n\n  // -- Metadata --------------------------------------------------------------\n\n  async getMetadata(forceRefresh = false): Promise<MetadataResponse> {\n    const now = Date.now();\n    if (!forceRefresh && this.metadataCache && now - this.metadataCacheTime < this.CACHE_TTL_MS) {\n      return this.metadataCache;\n    }\n\n    const data = await this.apiCall<MetadataResponse>(\"/v1/metadata\");\n    this.metadataCache = data;\n    this.metadataCacheTime = now;\n    return data;\n  }\n\n  async getMetrics(): Promise<SemanticField[]> {\n    const { fields } = await this.getMetadata();\n    return fields.filter((f) => f.type === \"metric\");\n  }\n\n  async getDimensions(): Promise<SemanticField[]> {\n    const { fields } = await this.getMetadata();\n    return fields.filter((f) => f.type === \"dimension\" || f.type === \"time_dimension\");\n  }\n\n  async getField(nameOrId: string): Promise<SemanticField | undefined> {\n    const { fields } = await this.getMetadata();\n    return fields.find((f) => f.name === nameOrId || f.id === nameOrId);\n  }\n\n  // -- Query -----------------------------------------------------------------\n\n  async query(config: PivotConfig): Promise<QueryResult> {\n    if (config.values.length === 0) {\n      return { columns: [], rows: [], totalRows: 0, executionTimeMs: 0 };\n    }\n    return this.apiCall<QueryResult>(\"/v1/query\", { config });\n  }\n\n  async simpleQuery(input: SimpleQueryInput): Promise<QueryResult> {\n    const { fields } = await this.getMetadata();\n    const fieldMap = new Map(fields.map((f) => [f.name, f]));\n\n    const values = input.metrics.map((name) => {\n      const field = fieldMap.get(name);\n      if (!field) throw new SemanticLayerError(`Unknown metric: \"${name}\"`, \"UNKNOWN_FIELD\");\n      return { fieldId: field.id, field };\n    });\n\n    const rows = (input.groupBy || []).map((name) => {\n      const field = fieldMap.get(name);\n      if (!field) throw new SemanticLayerError(`Unknown dimension: \"${name}\"`, \"UNKNOWN_FIELD\");\n      const grain = field.type === \"time_dimension\" ? input.grain : undefined;\n      return { fieldId: field.id, field, grain };\n    });\n\n    const filters = Object.entries(input.filters || {}).map(([name, filterValues]) => {\n      const field = fieldMap.get(name);\n      if (!field) throw new SemanticLayerError(`Unknown filter field: \"${name}\"`, \"UNKNOWN_FIELD\");\n      return { fieldId: field.id, field, filterValues };\n    });\n\n    return this.query({ values, rows, columns: [], filters });\n  }\n\n  // -- Admin -----------------------------------------------------------------\n\n  private async adminCall<T>(action: string, body: Record<string, unknown> = {}): Promise<T> {\n    return this.apiCall<T>(\"/v1/admin\", { action, ...body });\n  }\n\n  readonly admin = {\n    listFields: () => this.adminCall<{ fields: CuratedField[] }>(\"fields.list\"),\n    createField: (input: { field_name: string; field_type: string; display_name?: string; description?: string }) =>\n      this.adminCall<{ field: CuratedField }>(\"fields.create\", input),\n    updateField: (input: { id: number; field_name?: string; display_name?: string; description?: string; is_active?: boolean }) =>\n      this.adminCall<{ field: CuratedField }>(\"fields.update\", input),\n    deleteField: (id: number) =>\n      this.adminCall<{ deleted: boolean }>(\"fields.delete\", { id }),\n\n    listRoles: () => this.adminCall<{ roles: AccessRole[] }>(\"roles.list\"),\n    createRole: (input: { name: string; description?: string; is_default?: boolean }) =>\n      this.adminCall<{ role: AccessRole }>(\"roles.create\", input),\n    updateRole: (input: { id: number; name?: string; description?: string; is_default?: boolean }) =>\n      this.adminCall<{ role: AccessRole }>(\"roles.update\", input),\n    deleteRole: (id: number) =>\n      this.adminCall<{ deleted: boolean }>(\"roles.delete\", { id }),\n    setRoleFields: (role_id: number, curated_field_ids: number[]) =>\n      this.adminCall<{ role_id: number; field_count: number }>(\"roles.setFields\", { role_id, curated_field_ids }),\n\n    listUsers: () => this.adminCall<{ users: UserRoleAssignment[] }>(\"users.list\"),\n    assignUserRole: (input: { email: string; role_id: number; is_admin?: boolean }) =>\n      this.adminCall<{ assignment: UserRoleAssignment }>(\"users.assignRole\", input),\n    removeUserRole: (input: { email: string; role_id: number }) =>\n      this.adminCall<{ deleted: boolean }>(\"users.removeRole\", input),\n\n    listUserOverrides: (user_id: string) =>\n      this.adminCall<{ overrides: UserFieldOverride[] }>(\"users.listOverrides\", { user_id }),\n    setUserOverride: (input: { user_id: string; curated_field_id: number; access: \"grant\" | \"deny\" }) =>\n      this.adminCall<{ override: UserFieldOverride }>(\"users.setOverride\", input),\n    removeUserOverride: (input: { user_id: string; curated_field_id: number }) =>\n      this.adminCall<{ deleted: boolean }>(\"users.removeOverride\", input),\n  };\n}\n\nexport interface SessionLike {\n  user: { id: string; email: string };\n}\n\nexport class SemanticLayerError extends Error {\n  code: string;\n  constructor(message: string, code: string) {\n    super(message);\n    this.name = \"SemanticLayerError\";\n    this.code = code;\n  }\n}\n"]}

package/dist/chunk-WR4D3UI6.js.map

@@ -1 +0,0 @@
-{"version":3,"sources":["../src/client.ts"],"names":[],"mappings":";AAaA,IAAM,iBAAA,GAAoB,sBAAA;AAEnB,IAAM,sBAAN,MAA0B;AAAA,EAU/B,YAAY,MAAA,EAA6B;AARzC,IAAA,IAAA,CAAQ,WAAA,GAA6B,IAAA;AACrC,IAAA,IAAA,CAAQ,WAAA,GAAc,CAAA;AACtB,IAAA,IAAA,CAAQ,SAAA,GAA2B,IAAA;AACnC,IAAA,IAAA,CAAQ,aAAA,GAAyC,IAAA;AACjD,IAAA,IAAA,CAAQ,iBAAA,GAAoB,CAAA;AAC5B,IAAA,IAAA,CAAiB,YAAA,GAAe,IAAI,EAAA,GAAK,GAAA;AACzC,IAAA,IAAA,CAAQ,aAAA,uBAAoB,GAAA,EAA0D;AAqOtF,IAAA,IAAA,CAAS,KAAA,GAAQ;AAAA,MACf,UAAA,EAAY,MAAM,IAAA,CAAK,SAAA,CAAsC,aAAa,CAAA;AAAA,MAC1E,aAAa,CAAC,KAAA,KACZ,IAAA,CAAK,SAAA,CAAmC,iBAAiB,KAAK,CAAA;AAAA,MAChE,aAAa,CAAC,KAAA,KACZ,IAAA,CAAK,SAAA,CAAmC,iBAAiB,KAAK,CAAA;AAAA,MAChE,WAAA,EAAa,CAAC,EAAA,KACZ,IAAA,CAAK,UAAgC,eAAA,EAAiB,EAAE,IAAI,CAAA;AAAA,MAE9D,SAAA,EAAW,MAAM,IAAA,CAAK,SAAA,CAAmC,YAAY,CAAA;AAAA,MACrE,YAAY,CAAC,KAAA,KACX,IAAA,CAAK,SAAA,CAAgC,gBAAgB,KAAK,CAAA;AAAA,MAC5D,YAAY,CAAC,KAAA,KACX,IAAA,CAAK,SAAA,CAAgC,gBAAgB,KAAK,CAAA;AAAA,MAC5D,UAAA,EAAY,CAAC,EAAA,KACX,IAAA,CAAK,UAAgC,cAAA,EAAgB,EAAE,IAAI,CAAA;AAAA,MAC7D,aAAA,EAAe,CAAC,OAAA,EAAiB,iBAAA,KAC/B,IAAA,CAAK,UAAoD,iBAAA,EAAmB,EAAE,OAAA,EAAS,iBAAA,EAAmB,CAAA;AAAA,MAE5G,SAAA,EAAW,MAAM,IAAA,CAAK,SAAA,CAA2C,YAAY,CAAA;AAAA,MAC7E,gBAAgB,CAAC,KAAA,KACf,IAAA,CAAK,SAAA,CAA8C,oBAAoB,KAAK,CAAA;AAAA,MAC9E,gBAAgB,CAAC,KAAA,KACf,IAAA,CAAK,SAAA,CAAgC,oBAAoB,KAAK,CAAA;AAAA,MAEhE,iBAAA,EAAmB,CAAC,OAAA,KAClB,IAAA,CAAK,UAA8C,qBAAA,EAAuB,EAAE,SAAS,CAAA;AAAA,MACvF,iBAAiB,CAAC,KAAA,KAChB,IAAA,CAAK,SAAA,CAA2C,qBAAqB,KAAK,CAAA;AAAA,MAC5E,oBAAoB,CAAC,KAAA,KACnB,IAAA,CAAK,SAAA,CAAgC,wBAAwB,KAAK;AAAA,KACtE;AAjQE,IAAA,IAAA,CAAK,aAAa,MAAA,CAAO,UAAA;AAEzB,IAAA,IAAI,OAAO,WAAW,WAAA,EAAa;AACjC,MAAA,IAAI;AACF,QAAA,MAAM,MAAA,GAAS,cAAA,CAAe,OAAA,CAAQ,iBAAiB,CAAA;AACvD,QAAA,IAAI,MAAA,EAAQ;AACV,UAAA,MAAM,MAAA,GAAS,IAAA,CAAK,KAAA,CAAM,MAAM,CAAA;AAChC,UAAA,IAAI,MAAA,CAAO,SAAA,GAAY,IAAA,CAAK,GAAA,EAAI,EAAG;AACjC,YAAA,IAAA,CAAK,cAAc,MAAA,CAAO,KAAA;AAC1B,YAAA,IAAA,CAAK,cAAc,MAAA,CAAO,SAAA;AAC1B,YAAA,IAAA,CAAK,SAAA,GAAY,OAAO,KAAA,IAAS,IAAA;AAAA,UACnC,CAAA,MAAO;AACL,YAAA,cAAA,CAAe,WAAW,iBAAiB,CAAA;AAAA,UAC7C;AAAA,QACF;AAAA,MACF,CAAA,CAAA,MAAQ;AAAA,MAER;AAAA,IACF;AAAA,EACF;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EASA,aAAa,SAAA,EAA4B;AACvC,IAAA,MAAM,MAAA,GAAS,SAAA,KAAc,OAAO,MAAA,KAAW,WAAA,GAAc,MAAA,CAAO,QAAA,CAAS,IAAA,CAAK,KAAA,CAAM,GAAG,CAAA,CAAE,CAAC,CAAA,GAAI,EAAA,CAAA;AAClG,IAAA,OAAO,GAAG,IAAA,CAAK,UAAU,CAAA,uBAAA,EAA0B,kBAAA,CAAmB,MAAM,CAAC,CAAA,CAAA;AAAA,EAC/E;AAAA;AAAA;AAAA;AAAA;AAAA,EAMA,kBAAA,GAA8B;AAC5B,IAAA,IAAI,OAAO,MAAA,KAAW,WAAA,EAAa,OAAO,KAAA;AAE1C,IAAA,MAAM,IAAA,GAAO,MAAA,CAAO,QAAA,CAAS,IAAA,CAAK,MAAM,CAAC,CAAA;AACzC,IAAA,IAAI,CAAC,MAAM,OAAO,KAAA;AAElB,IAAA,MAAM,MAAA,GAAS,IAAI,eAAA,CAAgB,IAAI,CAAA;AAEvC,IAAA,MAAM,SAAA,GAAY,MAAA,CAAO,GAAA,CAAI,YAAY,CAAA;AACzC,IAAA,IAAI,SAAA,EAAW;AACb,MAAA,MAAA,CAAO,OAAA,CAAQ,aAAa,IAAA,EAAM,EAAA,EAAI,OAAO,QAAA,CAAS,QAAA,GAAW,MAAA,CAAO,QAAA,CAAS,MAAM,CAAA;AACvF,MAAA,MAAM,IAAI,kBAAA,CAAmB,SAAA,EAAW,YAAY,CAAA;AAAA,IACtD;AAEA,IAAA,MAAM,WAAA,GAAc,MAAA,CAAO,GAAA,CAAI,cAAc,CAAA;AAC7C,IAAA,MAAM,KAAA,GAAQ,MAAA,CAAO,GAAA,CAAI,OAAO,CAAA;AAChC,IAAA,MAAM,YAAY,QAAA,CAAS,MAAA,CAAO,IAAI,YAAY,CAAA,IAAK,KAAK,EAAE,CAAA;AAE9D,IAAA,IAAI,CAAC,WAAA,IAAe,CAAC,KAAA,EAAO,OAAO,KAAA;AAEnC,IAAA,MAAA,CAAO,OAAA,CAAQ,aAAa,IAAA,EAAM,EAAA,EAAI,OAAO,QAAA,CAAS,QAAA,GAAW,MAAA,CAAO,QAAA,CAAS,MAAM,CAAA;AACvF,IAAA,IAAA,CAAK,cAAA,CAAe,WAAA,EAAa,KAAA,EAAO,SAAS,CAAA;AACjD,IAAA,OAAO,IAAA;AAAA,EACT;AAAA;AAAA;AAAA;AAAA,EAKA,cAAA,CAAe,KAAA,EAAe,KAAA,EAAe,SAAA,EAAmB;AAC9D,IAAA,IAAA,CAAK,WAAA,GAAc,KAAA;AACnB,IAAA,IAAA,CAAK,SAAA,GAAY,KAAA;AACjB,IAAA,IAAA,CAAK,WAAA,GAAc,IAAA,CAAK,GAAA,EAAI,GAAI,SAAA,GAAY,GAAA;AAE5C,IAAA,IAAI,OAAO,WAAW,WAAA,EAAa;AACjC,MAAA,IAAI;AACF,QAAA,cAAA,CAAe,OAAA;AAAA,UACb,iBAAA;AAAA,UACA,IAAA,CAAK,UAAU,EAAE,KAAA,EAAO,OAAO,SAAA,EAAW,IAAA,CAAK,aAAa;AAAA,SAC9D;AAAA,MACF,CAAA,CAAA,MAAQ;AAAA,MAER;AAAA,IACF;AAEA,IAAA,MAAM,UAAuB,EAAE,IAAA,EAAM,EAAE,EAAA,EAAI,KAAA,EAAO,OAAM,EAAE;AAC1D,IAAA,KAAA,MAAW,QAAA,IAAY,KAAK,aAAA,EAAe;AACzC,MAAA,QAAA,CAAS,aAAa,OAAO,CAAA;AAAA,IAC/B;AAAA,EACF;AAAA,EAEA,MAAM,UAAA,GAA0C;AAC9C,IAAA,IAAI,KAAK,WAAA,IAAe,IAAA,CAAK,GAAA,EAAI,GAAI,KAAK,WAAA,EAAa;AACrD,MAAA,OAAO,EAAE,IAAA,EAAM,EAAE,EAAA,EAAI,IAAA,CAAK,SAAA,IAAa,EAAA,EAAI,KAAA,EAAO,IAAA,CAAK,SAAA,IAAa,EAAA,EAAG,EAAE;AAAA,IAC3E;AACA,IAAA,OAAO,IAAA;AAAA,EACT;AAAA,EAEA,MAAM,OAAA,GAAU;AACd,IAAA,IAAA,CAAK,WAAA,GAAc,IAAA;AACnB,IAAA,IAAA,CAAK,WAAA,GAAc,CAAA;AACnB,IAAA,IAAA,CAAK,SAAA,GAAY,IAAA;AACjB,IAAA,IAAA,CAAK,aAAA,GAAgB,IAAA;AAErB,IAAA,IAAI,OAAO,WAAW,WAAA,EAAa;AACjC,MAAA,IAAI;AACF,QAAA,cAAA,CAAe,WAAW,iBAAiB,CAAA;AAAA,MAC7C,CAAA,CAAA,MAAQ;AAAA,MAER;AAAA,IACF;AAEA,IAAA,KAAA,MAAW,QAAA,IAAY,KAAK,aAAA,EAAe;AACzC,MAAA,QAAA,CAAS,cAAc,IAAI,CAAA;AAAA,IAC7B;AAEA,IAAA,OAAO,EAAE,OAAO,IAAA,EAAK;AAAA,EACvB;AAAA,EAEA,kBAAkB,QAAA,EAAgE;AAChF,IAAA,IAAA,CAAK,aAAA,CAAc,IAAI,QAAQ,CAAA;AAC/B,IAAA,OAAO;AAAA,MACL,IAAA,EAAM;AAAA,QACJ,YAAA,EAAc;AAAA,UACZ,aAAa,MAAM;AACjB,YAAA,IAAA,CAAK,aAAA,CAAc,OAAO,QAAQ,CAAA;AAAA,UACpC;AAAA;AACF;AACF,KACF;AAAA,EACF;AAAA;AAAA,EAIA,MAAc,OAAA,CAAW,IAAA,EAAc,IAAA,EAA4B;AACjE,IAAA,IAAI,CAAC,KAAK,WAAA,EAAa;AACrB,MAAA,MAAM,IAAI,kBAAA,CAAmB,mBAAA,EAAqB,YAAY,CAAA;AAAA,IAChE;AAEA,IAAA,MAAM,IAAA,GAAO,MAAM,KAAA,CAAM,CAAA,EAAG,KAAK,UAAU,CAAA,EAAG,IAAI,CAAA,CAAA,EAAI;AAAA,MACpD,MAAA,EAAQ,MAAA;AAAA,MACR,OAAA,EAAS;AAAA,QACP,aAAA,EAAe,CAAA,OAAA,EAAU,IAAA,CAAK,WAAW,CAAA,CAAA;AAAA,QACzC,cAAA,EAAgB;AAAA,OAClB;AAAA,MACA,MAAM,IAAA,KAAS,MAAA,GAAY,IAAA,CAAK,SAAA,CAAU,IAAI,CAAA,GAAI;AAAA,KACnD,CAAA;AAED,IAAA,MAAM,IAAA,GAAO,MAAM,IAAA,CAAK,IAAA,EAAK;AAE7B,IAAA,IAAI,CAAC,IAAA,CAAK,EAAA,IAAM,IAAA,EAAM,KAAA,EAAO;AAC3B,MAAA,MAAM,IAAI,kBAAA;AAAA,QACR,IAAA,EAAM,KAAA,IAAS,CAAA,gBAAA,EAAmB,IAAA,CAAK,MAAM,CAAA,CAAA;AAAA,QAC7C,IAAA,CAAK,MAAA,KAAW,GAAA,GAAM,YAAA,GAAe;AAAA,OACvC;AAAA,IACF;AAEA,IAAA,OAAO,IAAA;AAAA,EACT;AAAA;AAAA,EAIA,MAAM,WAAA,CAAY,YAAA,GAAe,KAAA,EAAkC;AACjE,IAAA,MAAM,GAAA,GAAM,KAAK,GAAA,EAAI;AACrB,IAAA,IAAI,CAAC,gBAAgB,IAAA,CAAK,aAAA,IAAiB,MAAM,IAAA,CAAK,iBAAA,GAAoB,KAAK,YAAA,EAAc;AAC3F,MAAA,OAAO,IAAA,CAAK,aAAA;AAAA,IACd;AAEA,IAAA,MAAM,IAAA,GAAO,MAAM,IAAA,CAAK,OAAA,CAA0B,cAAc,CAAA;AAChE,IAAA,IAAA,CAAK,aAAA,GAAgB,IAAA;AACrB,IAAA,IAAA,CAAK,iBAAA,GAAoB,GAAA;AACzB,IAAA,OAAO,IAAA;AAAA,EACT;AAAA,EAEA,MAAM,UAAA,GAAuC;AAC3C,IAAA,MAAM,EAAE,MAAA,EAAO,GAAI,MAAM,KAAK,WAAA,EAAY;AAC1C,IAAA,OAAO,OAAO,MAAA,CAAO,CAAC,CAAA,KAAM,CAAA,CAAE,SAAS,QAAQ,CAAA;AAAA,EACjD;AAAA,EAEA,MAAM,aAAA,GAA0C;AAC9C,IAAA,MAAM,EAAE,MAAA,EAAO,GAAI,MAAM,KAAK,WAAA,EAAY;AAC1C,IAAA,OAAO,MAAA,CAAO,OAAO,CAAC,CAAA,KAAM,EAAE,IAAA,KAAS,WAAA,IAAe,CAAA,CAAE,IAAA,KAAS,gBAAgB,CAAA;AAAA,EACnF;AAAA,EAEA,MAAM,SAAS,QAAA,EAAsD;AACnE,IAAA,MAAM,EAAE,MAAA,EAAO,GAAI,MAAM,KAAK,WAAA,EAAY;AAC1C,IAAA,OAAO,MAAA,CAAO,KAAK,CAAC,CAAA,KAAM,EAAE,IAAA,KAAS,QAAA,IAAY,CAAA,CAAE,EAAA,KAAO,QAAQ,CAAA;AAAA,EACpE;AAAA;AAAA,EAIA,MAAM,MAAM,MAAA,EAA2C;AACrD,IAAA,IAAI,MAAA,CAAO,MAAA,CAAO,MAAA,KAAW,CAAA,EAAG;AAC9B,MAAA,OAAO,EAAE,OAAA,EAAS,EAAC,EAAG,IAAA,EAAM,EAAC,EAAG,SAAA,EAAW,CAAA,EAAG,eAAA,EAAiB,CAAA,EAAE;AAAA,IACnE;AACA,IAAA,OAAO,IAAA,CAAK,OAAA,CAAqB,WAAA,EAAa,EAAE,QAAQ,CAAA;AAAA,EAC1D;AAAA,EAEA,MAAM,YAAY,KAAA,EAA+C;AAC/D,IAAA,MAAM,EAAE,MAAA,EAAO,GAAI,MAAM,KAAK,WAAA,EAAY;AAC1C,IAAA,MAAM,QAAA,GAAW,IAAI,GAAA,CAAI,MAAA,CAAO,GAAA,CAAI,CAAC,CAAA,KAAM,CAAC,CAAA,CAAE,IAAA,EAAM,CAAC,CAAC,CAAC,CAAA;AAEvD,IAAA,MAAM,MAAA,GAAS,KAAA,CAAM,OAAA,CAAQ,GAAA,CAAI,CAAC,IAAA,KAAS;AACzC,MAAA,MAAM,KAAA,GAAQ,QAAA,CAAS,GAAA,CAAI,IAAI,CAAA;AAC/B,MAAA,IAAI,CAAC,OAAO,MAAM,IAAI,mBAAmB,CAAA,iBAAA,EAAoB,IAAI,KAAK,eAAe,CAAA;AACrF,MAAA,OAAO,EAAE,OAAA,EAAS,KAAA,CAAM,EAAA,EAAI,KAAA,EAAM;AAAA,IACpC,CAAC,CAAA;AAED,IAAA,MAAM,QAAQ,KAAA,CAAM,OAAA,IAAW,EAAC,EAAG,GAAA,CAAI,CAAC,IAAA,KAAS;AAC/C,MAAA,MAAM,KAAA,GAAQ,QAAA,CAAS,GAAA,CAAI,IAAI,CAAA;AAC/B,MAAA,IAAI,CAAC,OAAO,MAAM,IAAI,mBAAmB,CAAA,oBAAA,EAAuB,IAAI,KAAK,eAAe,CAAA;AACxF,MAAA,MAAM,KAAA,GAAQ,KAAA,CAAM,IAAA,KAAS,gBAAA,GAAmB,MAAM,KAAA,GAAQ,MAAA;AAC9D,MAAA,OAAO,EAAE,OAAA,EAAS,KAAA,CAAM,EAAA,EAAI,OAAO,KAAA,EAAM;AAAA,IAC3C,CAAC,CAAA;AAED,IAAA,MAAM,OAAA,GAAU,MAAA,CAAO,OAAA,CAAQ,KAAA,CAAM,OAAA,IAAW,EAAE,CAAA,CAAE,GAAA,CAAI,CAAC,CAAC,IAAA,EAAM,YAAY,CAAA,KAAM;AAChF,MAAA,MAAM,KAAA,GAAQ,QAAA,CAAS,GAAA,CAAI,IAAI,CAAA;AAC/B,MAAA,IAAI,CAAC,OAAO,MAAM,IAAI,mBAAmB,CAAA,uBAAA,EAA0B,IAAI,KAAK,eAAe,CAAA;AAC3F,MAAA,OAAO,EAAE,OAAA,EAAS,KAAA,CAAM,EAAA,EAAI,OAAO,YAAA,EAAa;AAAA,IAClD,CAAC,CAAA;AAED,IAAA,OAAO,IAAA,CAAK,MAAM,EAAE,MAAA,EAAQ,MAAM,OAAA,EAAS,EAAC,EAAG,OAAA,EAAS,CAAA;AAAA,EAC1D;AAAA;AAAA,EAIA,MAAc,SAAA,CAAa,MAAA,EAAgB,IAAA,GAAgC,EAAC,EAAe;AACzF,IAAA,OAAO,KAAK,OAAA,CAAW,WAAA,EAAa,EAAE,MAAA,EAAQ,GAAG,MAAM,CAAA;AAAA,EACzD;AAkCF;AAMO,IAAM,kBAAA,GAAN,cAAiC,KAAA,CAAM;AAAA,EAE5C,WAAA,CAAY,SAAiB,IAAA,EAAc;AACzC,IAAA,KAAA,CAAM,OAAO,CAAA;AACb,IAAA,IAAA,CAAK,IAAA,GAAO,oBAAA;AACZ,IAAA,IAAA,CAAK,IAAA,GAAO,IAAA;AAAA,EACd;AACF","file":"chunk-WR4D3UI6.js","sourcesContent":["import type {\n  SemanticLayerConfig,\n  MetadataResponse,\n  PivotConfig,\n  QueryResult,\n  SimpleQueryInput,\n  SemanticField,\n  CuratedField,\n  AccessRole,\n  UserRoleAssignment,\n  UserFieldOverride,\n} from \"./types\";\n\nconst TOKEN_STORAGE_KEY = \"semantic-layer-token\";\n\nexport class SemanticLayerClient {\n  readonly gatewayUrl: string;\n  private accessToken: string | null = null;\n  private tokenExpiry = 0;\n  private userEmail: string | null = null;\n  private metadataCache: MetadataResponse | null = null;\n  private metadataCacheTime = 0;\n  private readonly CACHE_TTL_MS = 5 * 60 * 1000;\n  private authListeners = new Set<(event: string, session: SessionLike | null) => void>();\n\n  constructor(config: SemanticLayerConfig) {\n    this.gatewayUrl = config.gatewayUrl;\n\n    if (typeof window !== \"undefined\") {\n      try {\n        const stored = sessionStorage.getItem(TOKEN_STORAGE_KEY);\n        if (stored) {\n          const parsed = JSON.parse(stored);\n          if (parsed.expiresAt > Date.now()) {\n            this.accessToken = parsed.token;\n            this.tokenExpiry = parsed.expiresAt;\n            this.userEmail = parsed.email || null;\n          } else {\n            sessionStorage.removeItem(TOKEN_STORAGE_KEY);\n          }\n        }\n      } catch {\n        // Ignore storage errors\n      }\n    }\n  }\n\n  // -- Auth ------------------------------------------------------------------\n\n  /**\n   * Returns the URL to redirect the browser to for Google sign-in.\n   * After the user authenticates, the gateway redirects back to returnUrl\n   * with the access token in the URL hash fragment.\n   */\n  getSignInUrl(returnUrl?: string): string {\n    const target = returnUrl || (typeof window !== \"undefined\" ? window.location.href.split(\"#\")[0] : \"\");\n    return `${this.gatewayUrl}/auth/google?returnUrl=${encodeURIComponent(target)}`;\n  }\n\n  /**\n   * Check the current URL hash for auth tokens (set by the gateway callback redirect).\n   * If found, extracts them, stores the session, clears the hash, and returns true.\n   */\n  handleAuthCallback(): boolean {\n    if (typeof window === \"undefined\") return false;\n\n    const hash = window.location.hash.slice(1);\n    if (!hash) return false;\n\n    const params = new URLSearchParams(hash);\n\n    const authError = params.get(\"auth_error\");\n    if (authError) {\n      window.history.replaceState(null, \"\", window.location.pathname + window.location.search);\n      throw new SemanticLayerError(authError, \"AUTH_ERROR\");\n    }\n\n    const accessToken = params.get(\"access_token\");\n    const email = params.get(\"email\");\n    const expiresIn = parseInt(params.get(\"expires_in\") || \"0\", 10);\n\n    if (!accessToken || !email) return false;\n\n    window.history.replaceState(null, \"\", window.location.pathname + window.location.search);\n    this.setAccessToken(accessToken, email, expiresIn);\n    return true;\n  }\n\n  /**\n   * Set the Google access token (called after OAuth redirect callback).\n   */\n  setAccessToken(token: string, email: string, expiresIn: number) {\n    this.accessToken = token;\n    this.userEmail = email;\n    this.tokenExpiry = Date.now() + expiresIn * 1000;\n\n    if (typeof window !== \"undefined\") {\n      try {\n        sessionStorage.setItem(\n          TOKEN_STORAGE_KEY,\n          JSON.stringify({ token, email, expiresAt: this.tokenExpiry }),\n        );\n      } catch {\n        // Ignore storage errors\n      }\n    }\n\n    const session: SessionLike = { user: { id: email, email } };\n    for (const listener of this.authListeners) {\n      listener(\"SIGNED_IN\", session);\n    }\n  }\n\n  async getSession(): Promise<SessionLike | null> {\n    if (this.accessToken && Date.now() < this.tokenExpiry) {\n      return { user: { id: this.userEmail || \"\", email: this.userEmail || \"\" } };\n    }\n    return null;\n  }\n\n  async signOut() {\n    this.accessToken = null;\n    this.tokenExpiry = 0;\n    this.userEmail = null;\n    this.metadataCache = null;\n\n    if (typeof window !== \"undefined\") {\n      try {\n        sessionStorage.removeItem(TOKEN_STORAGE_KEY);\n      } catch {\n        // Ignore storage errors\n      }\n    }\n\n    for (const listener of this.authListeners) {\n      listener(\"SIGNED_OUT\", null);\n    }\n\n    return { error: null };\n  }\n\n  onAuthStateChange(callback: (event: string, session: SessionLike | null) => void) {\n    this.authListeners.add(callback);\n    return {\n      data: {\n        subscription: {\n          unsubscribe: () => {\n            this.authListeners.delete(callback);\n          },\n        },\n      },\n    };\n  }\n\n  // -- API calls -------------------------------------------------------------\n\n  private async apiCall<T>(path: string, body?: unknown): Promise<T> {\n    if (!this.accessToken) {\n      throw new SemanticLayerError(\"Not authenticated\", \"AUTH_ERROR\");\n    }\n\n    const resp = await fetch(`${this.gatewayUrl}${path}`, {\n      method: \"POST\",\n      headers: {\n        Authorization: `Bearer ${this.accessToken}`,\n        \"Content-Type\": \"application/json\",\n      },\n      body: body !== undefined ? JSON.stringify(body) : undefined,\n    });\n\n    const data = await resp.json();\n\n    if (!resp.ok || data?.error) {\n      throw new SemanticLayerError(\n        data?.error || `Request failed: ${resp.status}`,\n        resp.status === 401 ? \"AUTH_ERROR\" : \"API_ERROR\",\n      );\n    }\n\n    return data as T;\n  }\n\n  // -- Metadata --------------------------------------------------------------\n\n  async getMetadata(forceRefresh = false): Promise<MetadataResponse> {\n    const now = Date.now();\n    if (!forceRefresh && this.metadataCache && now - this.metadataCacheTime < this.CACHE_TTL_MS) {\n      return this.metadataCache;\n    }\n\n    const data = await this.apiCall<MetadataResponse>(\"/v1/metadata\");\n    this.metadataCache = data;\n    this.metadataCacheTime = now;\n    return data;\n  }\n\n  async getMetrics(): Promise<SemanticField[]> {\n    const { fields } = await this.getMetadata();\n    return fields.filter((f) => f.type === \"metric\");\n  }\n\n  async getDimensions(): Promise<SemanticField[]> {\n    const { fields } = await this.getMetadata();\n    return fields.filter((f) => f.type === \"dimension\" || f.type === \"time_dimension\");\n  }\n\n  async getField(nameOrId: string): Promise<SemanticField | undefined> {\n    const { fields } = await this.getMetadata();\n    return fields.find((f) => f.name === nameOrId || f.id === nameOrId);\n  }\n\n  // -- Query -----------------------------------------------------------------\n\n  async query(config: PivotConfig): Promise<QueryResult> {\n    if (config.values.length === 0) {\n      return { columns: [], rows: [], totalRows: 0, executionTimeMs: 0 };\n    }\n    return this.apiCall<QueryResult>(\"/v1/query\", { config });\n  }\n\n  async simpleQuery(input: SimpleQueryInput): Promise<QueryResult> {\n    const { fields } = await this.getMetadata();\n    const fieldMap = new Map(fields.map((f) => [f.name, f]));\n\n    const values = input.metrics.map((name) => {\n      const field = fieldMap.get(name);\n      if (!field) throw new SemanticLayerError(`Unknown metric: \"${name}\"`, \"UNKNOWN_FIELD\");\n      return { fieldId: field.id, field };\n    });\n\n    const rows = (input.groupBy || []).map((name) => {\n      const field = fieldMap.get(name);\n      if (!field) throw new SemanticLayerError(`Unknown dimension: \"${name}\"`, \"UNKNOWN_FIELD\");\n      const grain = field.type === \"time_dimension\" ? input.grain : undefined;\n      return { fieldId: field.id, field, grain };\n    });\n\n    const filters = Object.entries(input.filters || {}).map(([name, filterValues]) => {\n      const field = fieldMap.get(name);\n      if (!field) throw new SemanticLayerError(`Unknown filter field: \"${name}\"`, \"UNKNOWN_FIELD\");\n      return { fieldId: field.id, field, filterValues };\n    });\n\n    return this.query({ values, rows, columns: [], filters });\n  }\n\n  // -- Admin -----------------------------------------------------------------\n\n  private async adminCall<T>(action: string, body: Record<string, unknown> = {}): Promise<T> {\n    return this.apiCall<T>(\"/v1/admin\", { action, ...body });\n  }\n\n  readonly admin = {\n    listFields: () => this.adminCall<{ fields: CuratedField[] }>(\"fields.list\"),\n    createField: (input: { field_name: string; field_type: string; display_name?: string; description?: string }) =>\n      this.adminCall<{ field: CuratedField }>(\"fields.create\", input),\n    updateField: (input: { id: number; field_name?: string; display_name?: string; description?: string; is_active?: boolean }) =>\n      this.adminCall<{ field: CuratedField }>(\"fields.update\", input),\n    deleteField: (id: number) =>\n      this.adminCall<{ deleted: boolean }>(\"fields.delete\", { id }),\n\n    listRoles: () => this.adminCall<{ roles: AccessRole[] }>(\"roles.list\"),\n    createRole: (input: { name: string; description?: string; is_default?: boolean }) =>\n      this.adminCall<{ role: AccessRole }>(\"roles.create\", input),\n    updateRole: (input: { id: number; name?: string; description?: string; is_default?: boolean }) =>\n      this.adminCall<{ role: AccessRole }>(\"roles.update\", input),\n    deleteRole: (id: number) =>\n      this.adminCall<{ deleted: boolean }>(\"roles.delete\", { id }),\n    setRoleFields: (role_id: number, curated_field_ids: number[]) =>\n      this.adminCall<{ role_id: number; field_count: number }>(\"roles.setFields\", { role_id, curated_field_ids }),\n\n    listUsers: () => this.adminCall<{ users: UserRoleAssignment[] }>(\"users.list\"),\n    assignUserRole: (input: { email: string; role_id: number; is_admin?: boolean }) =>\n      this.adminCall<{ assignment: UserRoleAssignment }>(\"users.assignRole\", input),\n    removeUserRole: (input: { email: string; role_id: number }) =>\n      this.adminCall<{ deleted: boolean }>(\"users.removeRole\", input),\n\n    listUserOverrides: (user_id: string) =>\n      this.adminCall<{ overrides: UserFieldOverride[] }>(\"users.listOverrides\", { user_id }),\n    setUserOverride: (input: { user_id: string; curated_field_id: number; access: \"grant\" | \"deny\" }) =>\n      this.adminCall<{ override: UserFieldOverride }>(\"users.setOverride\", input),\n    removeUserOverride: (input: { user_id: string; curated_field_id: number }) =>\n      this.adminCall<{ deleted: boolean }>(\"users.removeOverride\", input),\n  };\n}\n\nexport interface SessionLike {\n  user: { id: string; email: string };\n}\n\nexport class SemanticLayerError extends Error {\n  code: string;\n  constructor(message: string, code: string) {\n    super(message);\n    this.name = \"SemanticLayerError\";\n    this.code = code;\n  }\n}\n"]}