fix(auth): ensure Google sign-in popup works reliably across browsers by preloading GIS script on app mount

- Export preloadGoogleIdentity() and call it on App mount
- Retain lazy-load as fallback but avoid losing user gesture
- No UI or type changes; safe and cross-browser friendly

Author: MStarRobotics

App.tsx

@@ -9,6 +9,7 @@ import { generateRecipe, generateImageForRecipe } from './services/geminiService
 import { LANGUAGES, COOKING_TIMES, DISH_TYPES, RECIPE_GENERATION_MESSAGES, IMAGE_GENERATION_MESSAGES } from './constants';
 import { connectWallet, recordRecipeOnchain, fetchOnchainCookbook, resolveBasename, fetchMembershipPrice, checkLifetimeMembership, purchaseLifetimeMembership, DEFAULT_MEMBERSHIP_PRICE_WEI } from './services/baseRegistry';
 import { clearPersistedToken, fetchAuthenticatedProfile, isMetaMaskAvailable, linkWalletToGoogleAccount, persistAuthToken, requestNonce, retrievePersistedToken, signMessageWithWallet, verifySignature, logout as logoutSession } from './services/authService';
+import { preloadGoogleIdentity } from './services/googleIdentity';
 import type { User } from 'firebase/auth';
 import { firebaseSignOut, isFirebaseReady, signInWithFirebaseCustomToken, signInWithGooglePopup, subscribeToFirebaseAuth } from './services/firebaseClient';
 import type { GoogleIdentityProfile } from './services/googleIdentity';
@@ -358,6 +359,10 @@ const App: React.FC = () => {
   }, []);
 
   React.useEffect(() => {
+    // Preload Google Identity script early so the click handler can open the
+    // consent popup within the same user gesture (prevents popup blockers).
+    void preloadGoogleIdentity();
+
     detectProviderAvailability();
     const globalWindow =
       typeof globalThis === 'object' &&

services/googleIdentity.ts

@@ -54,6 +54,19 @@ const loadGoogleIdentityScript = async (): Promise<void> => {
   return scriptPromise;
 };
 
+// Preload the Google Identity Services script early so that any popup/consent UI
+// can be triggered within a direct user gesture (click) without being blocked
+// by browsers like Safari/Chrome. Exported for callers (e.g., App) to invoke on mount.
+export const preloadGoogleIdentity = async (): Promise<void> => {
+  try {
+    await loadGoogleIdentityScript();
+  } catch (err) {
+    // Swallow preload errors; a subsequent interactive call will surface a clearer message
+    // and we don't want this to break app startup.
+    console.warn('Google Identity script preload failed:', err);
+  }
+};
+
 export type GoogleIdentityProfile = {
   googleId: string;
   email?: string;
@@ -100,6 +113,10 @@ export const signInWithGoogleIdentity = async (): Promise<GoogleIdentityProfile>
     throw new Error('Set VITE_GOOGLE_OAUTH_CLIENT_ID to enable Google sign-in.');
   }
 
+  // The script is expected to be preloaded during app initialization to retain
+  // the user gesture context for the popup. We still attempt a quick load here
+  // in case preload was skipped, but note some browsers may block the popup if
+  // this lazy load occurs after the click.
   await loadGoogleIdentityScript();
 
   return new Promise<GoogleIdentityProfile>((resolve, reject) => {