Auth

Human access for sites, files, preview, and publish.

The dashboard needs a simple human auth path first. Email links work well for lightweight access, Google works well for teams, and automation tokens can stay separate from the human session model.

Google OAuth

Best fit for operators, agencies, and future shared workspaces.

Email magic links

Best short path for occasional collaborators and private early access.

Automation later

Agent and CLI tokens should stay scoped and separate from human dashboard sessions.

Current mode auth is optional right now, which keeps review and internal iteration lightweight

Continue

Pick an auth path

Email link

Request a one-time login link without forcing password auth into the first version.

available

internal preview mode is on, so the magic link is exposed in the UI until real delivery is wired

Google

Best fit for operators, teams, and later org membership once route guards go live.

setup-needed

needs GOOGLE_CLIENT_ID, GOOGLE_CLIENT_SECRET, and GOOGLE_REDIRECT_URI

Plan

Now

human sessions, email token consumption, and Google callback plumbing

Next

real outbound email delivery, route-guard enforcement, and account settings polish

Later

site roles, org membership, invitation links, and delegated automation tokens