@civic/auth 0.8.2 → 0.9.0-beta.1

package/dist/vanillajs/auth/config/ConfigProcessor.js.map

@@ -1 +1 @@
-{"version":3,"file":"ConfigProcessor.js","sourceRoot":"","sources":["../../../../src/vanillajs/auth/config/ConfigProcessor.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,mBAAmB,EAAE,MAAM,6BAA6B,CAAC;AAClE,OAAO,EAAE,cAAc,EAAE,mBAAmB,EAAE,MAAM,uBAAuB,CAAC;AAO5E,OAAO,EACL,cAAc,EACd,kBAAkB,EAClB,oBAAoB,GACrB,MAAM,uBAAuB,CAAC;AAE/B;;GAEG;AACH,MAAM,UAAU,yBAAyB,CACvC,MAA6B;IAE7B,kCAAkC;IAClC,sBAAsB,CAAC,MAAM,CAAC,CAAC;IAE/B,MAAM,aAAa,GAAkB;QACnC,OAAO,EAAE,KAAK;QACd,SAAS,EAAE,GAAG;QACd,KAAK,EAAE,OAAgB;QACvB,GAAG,MAAM,CAAC,OAAO;KAClB,CAAC;IAEF,uFAAuF;IACvF,sHAAsH;IACtH,MAAM,mBAAmB,GAAG,MAAM,CAAC,WAAW,IAAI,QAAQ,CAAC;IAC3D,MAAM,oBAAoB,GACxB,mBAAmB,KAAK,UAAU,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,mBAAmB,CAAC;IAEtE,MAAM,0BAA0B,GAC9B,mBAAmB,KAAK,UAAU,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC,MAAM,CAAC,iBAAiB,CAAC;IAE7E,yEAAyE;IACzE,MAAM,WAAW,GACf,MAAM,CAAC,WAAW;QAClB,GAAG,MAAM,CAAC,QAAQ,CAAC,MAAM,GAAG,MAAM,CAAC,QAAQ,CAAC,QAAQ,EAAE,CAAC;IAEzD,+GAA+G;IAC/G,MAAM,iBAAiB,GAAG,MAAM,CAAC,iBAAiB,IAAI,WAAW,CAAC;IAElE,OAAO;QACL,GAAG,MAAM;QACT,WAAW;QACX,iBAAiB;QACjB,kBAAkB,EAAE,MAAM,CAAC,kBAAkB,IAAI,mBAAmB;QACpE,MAAM,EAAE,MAAM,CAAC,MAAM,IAAI,cAAc;QACvC,WAAW,EAAE,MAAM,CAAC,WAAW,IAAI;YACjC,OAAO,EAAE,4BAA4B;YACrC,KAAK,EAAE,0CAA0C;SAClD;QACD,WAAW,EAAE,oBAAoB;QACjC,iBAAiB,EAAE,0BAA0B;QAC7C,kBAAkB,EAChB,MAAM,CAAC,kBAAkB;YACzB,oBAAoB,CAAC,4BAA4B;QACnD,QAAQ,EAAE,MAAM,CAAC,QAAQ,IAAI,oBAAoB,CAAC,iBAAiB;QACnE,MAAM,EAAE,SAAS;QACjB,OAAO,EAAE,aAAa;QACtB,cAAc,EAAE,MAAM,CAAC,cAAc,IAAI,IAAI,mBAAmB,EAAE;KACnE,CAAC;AACJ,CAAC;AAED;;GAEG;AACH,SAAS,sBAAsB,CAAC,MAA6B;IAC3D,iCAAiC;IACjC,MAAM,eAAe,GAAG,CAAC,EAAE,GAAG,EAAE,UAAU,EAAE,KAAK,EAAE,MAAM,CAAC,QAAQ,EAAE,CAAC,CAAC;IAEtE,kCAAkC;IAClC,KAAK,MAAM,EAAE,GAAG,EAAE,KAAK,EAAE,IAAI,eAAe,EAAE,CAAC;QAC7C,IAAI,CAAC,KAAK,EAAE,CAAC;YACX,MAAM,IAAI,cAAc,CACtB,cAAc,GAAG,eAAe,EAChC,kBAAkB,CAAC,eAAe,CACnC,CAAC;QACJ,CAAC;IACH,CAAC;IAED,oDAAoD;IACpD,gGAAgG;IAChG,MAAM,WAAW,GAAG,MAAM,CAAC,WAAW,IAAI,QAAQ,CAAC;IACnD,MAAM,iBAAiB,GAAG,MAAM,CAAC,iBAAiB,CAAC;IAEnD,uCAAuC;IACvC,MAAM,cAAc,GAClB,WAAW,KAAK,UAAU,IAAI,qBAAqB;QACnD,CAAC,WAAW,KAAK,QAAQ,IAAI,iBAAiB,KAAK,UAAU,CAAC,CAAC,CAAC,aAAa;IAE/E,IAAI,cAAc,IAAI,CAAC,MAAM,CAAC,sBAAsB,EAAE,CAAC;QACrD,MAAM,IAAI,cAAc,CACtB,0EAA0E;YACxE,4DAA4D;YAC5D,mEAAmE;YACnE,8DAA8D;YAC9D,gEAAgE,EAClE,kBAAkB,CAAC,eAAe,CACnC,CAAC;IACJ,CAAC;AACH,CAAC","sourcesContent":["import { LocalStorageAdapter } from \"../../../browser/storage.js\";\nimport { DEFAULT_SCOPES, DEFAULT_AUTH_SERVER } from \"../../../constants.js\";\nimport type { DisplayMode } from \"../../../types.js\";\nimport type {\n  CivicAuthClientConfig,\n  ProcessedCivicAuthConfig,\n  LoggingConfig,\n} from \"../types/AuthTypes.js\";\nimport {\n  CivicAuthError,\n  CivicAuthErrorCode,\n  CIVIC_AUTH_CONSTANTS,\n} from \"../types/AuthTypes.js\";\n\n/**\n * Process the configuration with defaults and validation\n */\nexport function processConfigWithDefaults(\n  config: CivicAuthClientConfig,\n): ProcessedCivicAuthConfig {\n  // Validate required configuration\n  validateRequiredConfig(config);\n\n  const loggingConfig: LoggingConfig = {\n    enabled: false,\n    namespace: \"*\",\n    level: \"debug\" as const,\n    ...config.logging,\n  };\n\n  // Handle displayMode proxy: map \"embedded\" to \"iframe\" + iframeDisplayMode: \"embedded\"\n  // the original displaymode doesn't suppors embedded, so we need to proxy it to iframe + iframeDisplayMode: \"embedded\"\n  const originalDisplayMode = config.displayMode || \"iframe\";\n  const processedDisplayMode: DisplayMode =\n    originalDisplayMode === \"embedded\" ? \"iframe\" : originalDisplayMode;\n\n  const processedIframeDisplayMode =\n    originalDisplayMode === \"embedded\" ? \"embedded\" : config.iframeDisplayMode;\n\n  // Process redirectUrl - default to current page without query parameters\n  const redirectUrl =\n    config.redirectUrl ||\n    `${window.location.origin}${window.location.pathname}`;\n\n  // Process logoutRedirectUrl - default to redirectUrl if not provided (same behavior as reactjs implementation)\n  const logoutRedirectUrl = config.logoutRedirectUrl || redirectUrl;\n\n  return {\n    ...config,\n    redirectUrl,\n    logoutRedirectUrl,\n    oauthServerBaseUrl: config.oauthServerBaseUrl || DEFAULT_AUTH_SERVER,\n    scopes: config.scopes || DEFAULT_SCOPES,\n    textSignals: config.textSignals || {\n      success: \"Authentication successful!\",\n      error: \"Authentication failed. Please try again.\",\n    },\n    displayMode: processedDisplayMode,\n    iframeDisplayMode: processedIframeDisplayMode,\n    authProcessTimeout:\n      config.authProcessTimeout ||\n      CIVIC_AUTH_CONSTANTS.DEFAULT_AUTH_PROCESS_TIMEOUT,\n    iframeId: config.iframeId || CIVIC_AUTH_CONSTANTS.DEFAULT_IFRAME_ID,\n    prompt: \"consent\",\n    logging: loggingConfig,\n    storageAdapter: config.storageAdapter || new LocalStorageAdapter(),\n  };\n}\n\n/**\n * Validates required configuration properties\n */\nfunction validateRequiredConfig(config: CivicAuthClientConfig): void {\n  // Always required configurations\n  const requiredConfigs = [{ key: \"clientId\", value: config.clientId }];\n\n  // Validate always-required fields\n  for (const { key, value } of requiredConfigs) {\n    if (!value) {\n      throw new CivicAuthError(\n        `CivicAuth: ${key} is required.`,\n        CivicAuthErrorCode.CONFIG_REQUIRED,\n      );\n    }\n  }\n\n  // Conditional validation for targetContainerElement\n  // Handle both the new \"embedded\" displayMode and the legacy iframe + iframeDisplayMode approach\n  const displayMode = config.displayMode || \"iframe\";\n  const iframeDisplayMode = config.iframeDisplayMode;\n\n  // Check if we need a container element\n  const needsContainer =\n    displayMode === \"embedded\" || // New simplified API\n    (displayMode === \"iframe\" && iframeDisplayMode === \"embedded\"); // Legacy API\n\n  if (needsContainer && !config.targetContainerElement) {\n    throw new CivicAuthError(\n      \"CivicAuth: targetContainerElement is required for embedded iframe mode. \" +\n        \"You can use displayMode: 'embedded' for a simplified API, \" +\n        \"or use displayMode: 'iframe' with iframeDisplayMode: 'embedded'. \" +\n        \"For modal iframe mode, use displayMode: 'iframe' (default). \" +\n        \"For non-iframe modes, use displayMode 'redirect' or 'new_tab'.\",\n      CivicAuthErrorCode.CONFIG_REQUIRED,\n    );\n  }\n}\n"]}
+{"version":3,"file":"ConfigProcessor.js","sourceRoot":"","sources":["../../../../src/vanillajs/auth/config/ConfigProcessor.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,mBAAmB,EAAE,MAAM,6BAA6B,CAAC;AAClE,OAAO,EAAE,oBAAoB,EAAE,MAAM,6CAA6C,CAAC;AACnF,OAAO,EAAE,cAAc,EAAE,mBAAmB,EAAE,MAAM,uBAAuB,CAAC;AAO5E,OAAO,EACL,cAAc,EACd,kBAAkB,EAClB,oBAAoB,GACrB,MAAM,uBAAuB,CAAC;AAE/B;;GAEG;AACH,MAAM,UAAU,yBAAyB,CACvC,MAA6B;IAE7B,kCAAkC;IAClC,sBAAsB,CAAC,MAAM,CAAC,CAAC;IAE/B,MAAM,aAAa,GAAkB;QACnC,OAAO,EAAE,KAAK;QACd,SAAS,EAAE,GAAG;QACd,KAAK,EAAE,OAAgB;QACvB,GAAG,MAAM,CAAC,OAAO;KAClB,CAAC;IAEF,uFAAuF;IACvF,sHAAsH;IACtH,MAAM,mBAAmB,GAAG,MAAM,CAAC,WAAW,IAAI,QAAQ,CAAC;IAC3D,MAAM,oBAAoB,GACxB,mBAAmB,KAAK,UAAU,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,mBAAmB,CAAC;IAEtE,MAAM,0BAA0B,GAC9B,mBAAmB,KAAK,UAAU,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC,MAAM,CAAC,iBAAiB,CAAC;IAE7E,yEAAyE;IACzE,MAAM,WAAW,GACf,MAAM,CAAC,WAAW;QAClB,GAAG,MAAM,CAAC,QAAQ,CAAC,MAAM,GAAG,MAAM,CAAC,QAAQ,CAAC,QAAQ,EAAE,CAAC;IAEzD,+GAA+G;IAC/G,MAAM,iBAAiB,GAAG,MAAM,CAAC,iBAAiB,IAAI,WAAW,CAAC;IAElE,gDAAgD;IAChD,wFAAwF;IACxF,2EAA2E;IAC3E,MAAM,cAAc,GAAG,MAAM,CAAC,QAAQ;QACpC,CAAC,CAAC,IAAI,oBAAoB,EAAE;QAC5B,CAAC,CAAC,MAAM,CAAC,cAAc,IAAI,IAAI,mBAAmB,EAAE,CAAC;IAEvD,OAAO;QACL,GAAG,MAAM;QACT,WAAW;QACX,iBAAiB;QACjB,kBAAkB,EAAE,MAAM,CAAC,kBAAkB,IAAI,mBAAmB;QACpE,MAAM,EAAE,MAAM,CAAC,MAAM,IAAI,cAAc;QACvC,WAAW,EAAE,MAAM,CAAC,WAAW,IAAI;YACjC,OAAO,EAAE,4BAA4B;YACrC,KAAK,EAAE,0CAA0C;SAClD;QACD,WAAW,EAAE,oBAAoB;QACjC,iBAAiB,EAAE,0BAA0B;QAC7C,kBAAkB,EAChB,MAAM,CAAC,kBAAkB;YACzB,oBAAoB,CAAC,4BAA4B;QACnD,QAAQ,EAAE,MAAM,CAAC,QAAQ,IAAI,oBAAoB,CAAC,iBAAiB;QACnE,MAAM,EAAE,SAAS;QACjB,OAAO,EAAE,aAAa;QACtB,cAAc;QACd,QAAQ,EAAE,MAAM,CAAC,QAAQ,EAAE,uCAAuC;QAClE,gBAAgB,EAAE,MAAM,CAAC,gBAAgB,EAAE,gDAAgD;QAC3F,aAAa,EAAE,MAAM,CAAC,aAAa,KAAK,KAAK,EAAE,iDAAiD;QAChG,YAAY,EAAE,MAAM,CAAC,YAAY,KAAK,KAAK,EAAE,iDAAiD;KAC/F,CAAC;AACJ,CAAC;AAED;;GAEG;AACH,SAAS,sBAAsB,CAAC,MAA6B;IAC3D,4EAA4E;IAC5E,IAAI,CAAC,MAAM,CAAC,QAAQ,IAAI,CAAC,MAAM,CAAC,QAAQ,EAAE,CAAC;QACzC,MAAM,IAAI,cAAc,CACtB,gEAAgE,EAChE,kBAAkB,CAAC,eAAe,CACnC,CAAC;IACJ,CAAC;IAED,oDAAoD;IACpD,gGAAgG;IAChG,MAAM,WAAW,GAAG,MAAM,CAAC,WAAW,IAAI,QAAQ,CAAC;IACnD,MAAM,iBAAiB,GAAG,MAAM,CAAC,iBAAiB,CAAC;IAEnD,uCAAuC;IACvC,MAAM,cAAc,GAClB,WAAW,KAAK,UAAU,IAAI,qBAAqB;QACnD,CAAC,WAAW,KAAK,QAAQ,IAAI,iBAAiB,KAAK,UAAU,CAAC,CAAC,CAAC,aAAa;IAE/E,IAAI,cAAc,IAAI,CAAC,MAAM,CAAC,sBAAsB,EAAE,CAAC;QACrD,MAAM,IAAI,cAAc,CACtB,0EAA0E;YACxE,4DAA4D;YAC5D,mEAAmE;YACnE,8DAA8D;YAC9D,gEAAgE,EAClE,kBAAkB,CAAC,eAAe,CACnC,CAAC;IACJ,CAAC;AACH,CAAC","sourcesContent":["import { LocalStorageAdapter } from \"../../../browser/storage.js\";\nimport { BrowserCookieStorage } from \"../../../shared/lib/BrowserCookieStorage.js\";\nimport { DEFAULT_SCOPES, DEFAULT_AUTH_SERVER } from \"../../../constants.js\";\nimport type { DisplayMode } from \"../../../types.js\";\nimport type {\n  CivicAuthClientConfig,\n  ProcessedCivicAuthConfig,\n  LoggingConfig,\n} from \"../types/AuthTypes.js\";\nimport {\n  CivicAuthError,\n  CivicAuthErrorCode,\n  CIVIC_AUTH_CONSTANTS,\n} from \"../types/AuthTypes.js\";\n\n/**\n * Process the configuration with defaults and validation\n */\nexport function processConfigWithDefaults(\n  config: CivicAuthClientConfig,\n): ProcessedCivicAuthConfig {\n  // Validate required configuration\n  validateRequiredConfig(config);\n\n  const loggingConfig: LoggingConfig = {\n    enabled: false,\n    namespace: \"*\",\n    level: \"debug\" as const,\n    ...config.logging,\n  };\n\n  // Handle displayMode proxy: map \"embedded\" to \"iframe\" + iframeDisplayMode: \"embedded\"\n  // the original displaymode doesn't suppors embedded, so we need to proxy it to iframe + iframeDisplayMode: \"embedded\"\n  const originalDisplayMode = config.displayMode || \"iframe\";\n  const processedDisplayMode: DisplayMode =\n    originalDisplayMode === \"embedded\" ? \"iframe\" : originalDisplayMode;\n\n  const processedIframeDisplayMode =\n    originalDisplayMode === \"embedded\" ? \"embedded\" : config.iframeDisplayMode;\n\n  // Process redirectUrl - default to current page without query parameters\n  const redirectUrl =\n    config.redirectUrl ||\n    `${window.location.origin}${window.location.pathname}`;\n\n  // Process logoutRedirectUrl - default to redirectUrl if not provided (same behavior as reactjs implementation)\n  const logoutRedirectUrl = config.logoutRedirectUrl || redirectUrl;\n\n  // Auto-select storage adapter based on loginUrl\n  // If loginUrl is provided (backend integration), automatically use BrowserCookieStorage\n  // Otherwise, use provided storageAdapter or default to LocalStorageAdapter\n  const storageAdapter = config.loginUrl\n    ? new BrowserCookieStorage()\n    : config.storageAdapter || new LocalStorageAdapter();\n\n  return {\n    ...config,\n    redirectUrl,\n    logoutRedirectUrl,\n    oauthServerBaseUrl: config.oauthServerBaseUrl || DEFAULT_AUTH_SERVER,\n    scopes: config.scopes || DEFAULT_SCOPES,\n    textSignals: config.textSignals || {\n      success: \"Authentication successful!\",\n      error: \"Authentication failed. Please try again.\",\n    },\n    displayMode: processedDisplayMode,\n    iframeDisplayMode: processedIframeDisplayMode,\n    authProcessTimeout:\n      config.authProcessTimeout ||\n      CIVIC_AUTH_CONSTANTS.DEFAULT_AUTH_PROCESS_TIMEOUT,\n    iframeId: config.iframeId || CIVIC_AUTH_CONSTANTS.DEFAULT_IFRAME_ID,\n    prompt: \"consent\",\n    logging: loggingConfig,\n    storageAdapter,\n    loginUrl: config.loginUrl, // Include loginUrl in processed config\n    backendEndpoints: config.backendEndpoints, // Include backend endpoints in processed config\n    preloadIframe: config.preloadIframe !== false, // Default to true unless explicitly set to false\n    autoRedirect: config.autoRedirect !== false, // Default to true unless explicitly set to false\n  };\n}\n\n/**\n * Validates required configuration properties\n */\nfunction validateRequiredConfig(config: CivicAuthClientConfig): void {\n  // Dynamic validation: clientId is only required if loginUrl is not provided\n  if (!config.loginUrl && !config.clientId) {\n    throw new CivicAuthError(\n      \"CivicAuth: clientId is required when loginUrl is not provided.\",\n      CivicAuthErrorCode.CONFIG_REQUIRED,\n    );\n  }\n\n  // Conditional validation for targetContainerElement\n  // Handle both the new \"embedded\" displayMode and the legacy iframe + iframeDisplayMode approach\n  const displayMode = config.displayMode || \"iframe\";\n  const iframeDisplayMode = config.iframeDisplayMode;\n\n  // Check if we need a container element\n  const needsContainer =\n    displayMode === \"embedded\" || // New simplified API\n    (displayMode === \"iframe\" && iframeDisplayMode === \"embedded\"); // Legacy API\n\n  if (needsContainer && !config.targetContainerElement) {\n    throw new CivicAuthError(\n      \"CivicAuth: targetContainerElement is required for embedded iframe mode. \" +\n        \"You can use displayMode: 'embedded' for a simplified API, \" +\n        \"or use displayMode: 'iframe' with iframeDisplayMode: 'embedded'. \" +\n        \"For modal iframe mode, use displayMode: 'iframe' (default). \" +\n        \"For non-iframe modes, use displayMode 'redirect' or 'new_tab'.\",\n      CivicAuthErrorCode.CONFIG_REQUIRED,\n    );\n  }\n}\n"]}

package/dist/vanillajs/auth/handlers/IframeAuthHandler.d.ts

@@ -21,7 +21,13 @@ export declare class IframeAuthHandler {
     private iframeElement?;
     private signalObserver?;
     private earlyAuthSuccessHandler;
+    private isPreloadEnabled;
     constructor(handlerConfig: IframeAuthHandlerConfig);
+    /**
+     * Preloads the iframe with the authentication URL for instant display later
+     * This creates the iframe in the background but keeps it completely hidden
+     */
+    preloadIframe(fullAuthUrl: string): Promise<void>;
     handleIframeAuth(fullAuthUrl: string): Promise<HTMLIFrameElement>;
     getIframeManager(): IframeManager | undefined;
     getIframeElement(): HTMLIFrameElement | undefined;
@@ -37,5 +43,43 @@ export declare class IframeAuthHandler {
     private setupIframeNavigationMonitoring;
     private processCallbackUrl;
     navigateIframe(url: string): void;
+    /**
+     * Enable or disable iframe preloading
+     */
+    setPreloadEnabled(enabled: boolean): void;
+    /**
+     * Check if iframe preloading is enabled
+     */
+    getPreloadEnabled(): boolean;
+    /**
+     * Check if an iframe is currently preloaded and ready for instant display
+     *
+     * This function helps optimize user experience by determining if we can show
+     * a preloaded iframe immediately instead of loading a new one. The logic:
+     *
+     * 1. Returns false if no iframe manager exists (can't have preloaded content)
+     * 2. Checks if any iframe is currently preloaded via the iframe manager
+     * 3. If no specific URL is provided, returns whether any iframe is preloaded
+     * 4. If a URL is provided, ensures both that an iframe is preloaded AND
+     *    that it contains the exact URL we need
+     *
+     * This prevents unnecessary iframe reloads when the user triggers auth flows
+     * with the same URL that's already loaded and ready to display.
+     *
+     * @param url - Optional URL to match against the preloaded iframe's URL
+     * @returns true if a suitable preloaded iframe exists, false otherwise
+     */
+    hasPreloadedIframe(url?: string): boolean;
+    /**
+     * Force the iframe to hide, even if it is currently showing
+     *
+     * This is useful for cleanup or when you want to ensure the iframe is not visible
+     * regardless of its current state.
+     */
+    forceHideIframe(): void;
+    /**
+     * Force the iframe to show the loading indicator
+     */
+    forceShowLoader(): void;
 }
 //# sourceMappingURL=IframeAuthHandler.d.ts.map

package/dist/vanillajs/auth/handlers/IframeAuthHandler.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"IframeAuthHandler.d.ts","sourceRoot":"","sources":["../../../../src/vanillajs/auth/handlers/IframeAuthHandler.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,sBAAsB,CAAC;AACvD,OAAO,KAAK,EAAE,wBAAwB,EAAE,MAAM,uBAAuB,CAAC;AAGtE,OAAO,EAAE,aAAa,EAAE,MAAM,+BAA+B,CAAC;AAC9D,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,uBAAuB,CAAC;AAG1D,MAAM,WAAW,uBAAuB;IACtC,MAAM,EAAE,wBAAwB,CAAC;IACjC,MAAM,EAAE,UAAU,CAAC,OAAO,YAAY,CAAC,CAAC;IACxC,aAAa,EAAE,CAAC,MAAM,EAAE,UAAU,KAAK,IAAI,CAAC;IAC5C,WAAW,EAAE,CAAC,KAAK,EAAE,KAAK,KAAK,IAAI,CAAC;IACpC,OAAO,EAAE,MAAM,IAAI,CAAC;IACpB,cAAc,EAAE,CAAC,KAAK,EAAE,YAAY,KAAK,IAAI,CAAC;CAC/C;AAED,qBAAa,iBAAiB;IAC5B,OAAO,CAAC,MAAM,CAA2B;IACzC,OAAO,CAAC,MAAM,CAAiC;IAC/C,OAAO,CAAC,aAAa,CAA+B;IACpD,OAAO,CAAC,WAAW,CAAyB;IAC5C,OAAO,CAAC,OAAO,CAAa;IAC5B,OAAO,CAAC,cAAc,CAAgC;IACtD,OAAO,CAAC,aAAa,CAAC,CAAgB;IACtC,OAAO,CAAC,aAAa,CAAC,CAAoB;IAC1C,OAAO,CAAC,cAAc,CAAC,CAAiB;IACxC,OAAO,CAAC,uBAAuB,CAA+B;gBAElD,aAAa,EAAE,uBAAuB;IAgCrC,gBAAgB,CAC3B,WAAW,EAAE,MAAM,GAClB,OAAO,CAAC,iBAAiB,CAAC;IA2EtB,gBAAgB,IAAI,aAAa,GAAG,SAAS;IAI7C,gBAAgB,IAAI,iBAAiB,GAAG,SAAS;IAIjD,aAAa,IAAI,IAAI;IAqB5B,OAAO,CAAC,4BAA4B;IAgBpC,OAAO,CAAC,oBAAoB;IAe5B,OAAO,CAAC,mBAAmB;IAmB3B,OAAO,CAAC,0BAA0B;IA4BlC,OAAO,CAAC,wBAAwB;IAyDhC,OAAO,CAAC,2BAA2B;IA4DnC,OAAO,CAAC,mBAAmB;IAsD3B,OAAO,CAAC,mBAAmB;IAgB3B,OAAO,CAAC,+BAA+B;IA6EvC,OAAO,CAAC,kBAAkB;IAgCnB,cAAc,CAAC,GAAG,EAAE,MAAM,GAAG,IAAI;CA8BzC"}
+{"version":3,"file":"IframeAuthHandler.d.ts","sourceRoot":"","sources":["../../../../src/vanillajs/auth/handlers/IframeAuthHandler.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,sBAAsB,CAAC;AACvD,OAAO,KAAK,EAAE,wBAAwB,EAAE,MAAM,uBAAuB,CAAC;AAGtE,OAAO,EAAE,aAAa,EAAE,MAAM,+BAA+B,CAAC;AAC9D,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,uBAAuB,CAAC;AAI1D,MAAM,WAAW,uBAAuB;IACtC,MAAM,EAAE,wBAAwB,CAAC;IACjC,MAAM,EAAE,UAAU,CAAC,OAAO,YAAY,CAAC,CAAC;IACxC,aAAa,EAAE,CAAC,MAAM,EAAE,UAAU,KAAK,IAAI,CAAC;IAC5C,WAAW,EAAE,CAAC,KAAK,EAAE,KAAK,KAAK,IAAI,CAAC;IACpC,OAAO,EAAE,MAAM,IAAI,CAAC;IACpB,cAAc,EAAE,CAAC,KAAK,EAAE,YAAY,KAAK,IAAI,CAAC;CAC/C;AAED,qBAAa,iBAAiB;IAC5B,OAAO,CAAC,MAAM,CAA2B;IACzC,OAAO,CAAC,MAAM,CAAiC;IAC/C,OAAO,CAAC,aAAa,CAA+B;IACpD,OAAO,CAAC,WAAW,CAAyB;IAC5C,OAAO,CAAC,OAAO,CAAa;IAC5B,OAAO,CAAC,cAAc,CAAgC;IACtD,OAAO,CAAC,aAAa,CAAC,CAAgB;IACtC,OAAO,CAAC,aAAa,CAAC,CAAoB;IAC1C,OAAO,CAAC,cAAc,CAAC,CAAiB;IACxC,OAAO,CAAC,uBAAuB,CAA+B;IAC9D,OAAO,CAAC,gBAAgB,CAAU;gBAEtB,aAAa,EAAE,uBAAuB;IAmClD;;;OAGG;IACU,aAAa,CAAC,WAAW,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC;IA2DjD,gBAAgB,CAC3B,WAAW,EAAE,MAAM,GAClB,OAAO,CAAC,iBAAiB,CAAC;IAgItB,gBAAgB,IAAI,aAAa,GAAG,SAAS;IAI7C,gBAAgB,IAAI,iBAAiB,GAAG,SAAS;IAIjD,aAAa,IAAI,IAAI;IAqB5B,OAAO,CAAC,4BAA4B;IAgBpC,OAAO,CAAC,oBAAoB;IAe5B,OAAO,CAAC,mBAAmB;IAmB3B,OAAO,CAAC,0BAA0B;IA4BlC,OAAO,CAAC,wBAAwB;IAyDhC,OAAO,CAAC,2BAA2B;IAgEnC,OAAO,CAAC,mBAAmB;IAsD3B,OAAO,CAAC,mBAAmB;IAgB3B,OAAO,CAAC,+BAA+B;IA6EvC,OAAO,CAAC,kBAAkB;IAgCnB,cAAc,CAAC,GAAG,EAAE,MAAM,GAAG,IAAI;IA+BxC;;OAEG;IACI,iBAAiB,CAAC,OAAO,EAAE,OAAO,GAAG,IAAI;IAKhD;;OAEG;IACI,iBAAiB,IAAI,OAAO;IAInC;;;;;;;;;;;;;;;;;OAiBG;IACI,kBAAkB,CAAC,GAAG,CAAC,EAAE,MAAM,GAAG,OAAO;IAShD;;;;;OAKG;IACI,eAAe,IAAI,IAAI;IAW9B;;OAEG;IACI,eAAe,IAAI,IAAI;CAU/B"}

package/dist/vanillajs/auth/handlers/IframeAuthHandler.js

@@ -3,6 +3,7 @@ import { CivicAuthError, CivicAuthErrorCode } from "../types/AuthTypes.js";
 import { SignalObserver } from "../../iframe/SignalObserver.js";
 import { IframeManager } from "../../iframe/IframeManager.js";
 import { createLogger as createLoggerFn } from "../../utils/logger.js";
+import { WAIT_FOR_LOGIN_APP_BROWSER_DETECTION_TIMEOUT } from "../../../constants.js";
 export class IframeAuthHandler {
     config;
     logger = createLoggerFn("iframe-auth");
@@ -14,6 +15,7 @@ export class IframeAuthHandler {
     iframeElement;
     signalObserver;
     earlyAuthSuccessHandler;
+    isPreloadEnabled; // Initialized from config
     constructor(handlerConfig) {
         this.config = handlerConfig.config;
         this.logger = handlerConfig.logger;
@@ -21,6 +23,8 @@ export class IframeAuthHandler {
         this.onAuthError = handlerConfig.onAuthError;
         this.cleanup = handlerConfig.cleanup;
         this.messageHandler = handlerConfig.messageHandler;
+        // Set preload enabled state from config
+        this.isPreloadEnabled = this.config.preloadIframe;
         // Listen for early auth success signals from login-app
         this.earlyAuthSuccessHandler = (event) => {
             this.logger.info("Received early auth success signal from login-app", {
@@ -38,7 +42,95 @@ export class IframeAuthHandler {
         };
         window.addEventListener("civic-auth-success-early", this.earlyAuthSuccessHandler);
     }
+    /**
+     * Preloads the iframe with the authentication URL for instant display later
+     * This creates the iframe in the background but keeps it completely hidden
+     */
+    async preloadIframe(fullAuthUrl) {
+        if (!this.isPreloadEnabled) {
+            this.logger.debug("Iframe preloading is disabled, skipping preload");
+            return;
+        }
+        this.logger.debug("Preloading iframe for instant sign-in", {
+            url: fullAuthUrl,
+        });
+        // Determine the actual display mode for IframeManager first
+        const iframeDisplayMode = this.determineIframeDisplayMode();
+        let container = this.getContainerElement();
+        // For modal mode, if no container is provided, create one dynamically
+        if (iframeDisplayMode === "modal" && !container) {
+            container = this.createModalContainer();
+        }
+        if (!container) {
+            const error = new CivicAuthError("Target container element not found for preloading.", CivicAuthErrorCode.CONTAINER_NOT_FOUND);
+            this.logger.error(error.message);
+            throw error;
+        }
+        this.logger.debug("Creating IframeManager for preloading", {
+            url: fullAuthUrl,
+            containerId: container?.id,
+            iframeId: this.config.iframeId,
+            origin: window.location.origin,
+            iframeDisplayMode,
+        });
+        // Create IframeManager with appropriate display mode
+        this.iframeManager = new IframeManager({
+            container: container,
+            displayMode: iframeDisplayMode,
+            iframeId: this.config.iframeId,
+            onClose: () => {
+                this.logger.debug("Authentication close requested during preload");
+                // For preload, we don't want to trigger auth error, just cleanup
+                this.cleanupIframe();
+            },
+        });
+        // Preload the iframe using IframeManager
+        this.iframeElement = this.iframeManager.preloadIframe(fullAuthUrl);
+        // Set up event handlers for the preloaded iframe
+        this.setupIframeEventHandlers();
+        this.setupIframeNavigationMonitoring();
+        this.logger.debug("Iframe preloaded successfully", { url: fullAuthUrl });
+    }
     async handleIframeAuth(fullAuthUrl) {
+        // Check if we have a preloaded iframe that we can show instantly
+        // We use the preloaded iframe if available, even if URLs don't exactly match,
+        // since PKCE challenges and other parameters may differ between preload and actual auth
+        if (this.iframeManager?.isIframePreloaded() && this.iframeElement) {
+            const preloadedUrl = this.iframeManager.getPreloadedUrl();
+            this.logger.debug("Using preloaded iframe for instant sign-in", {
+                preloadedUrl,
+                requestedUrl: fullAuthUrl,
+                urlsMatch: preloadedUrl === fullAuthUrl,
+            });
+            // Don't change iframe.src for preloaded iframes - use them as-is to avoid reload
+            // The preloaded authentication flow will work perfectly without URL changes
+            this.logger.debug("Using preloaded iframe without reload", {
+                preloadedUrl,
+                requestedUrl: fullAuthUrl,
+                action: "skipping_url_change_to_prevent_reload",
+            });
+            // Update the onClose handler for active authentication
+            // During preload, onClose only cleaned up, but during active auth it should emit error events
+            this.iframeManager.updateOnCloseHandler(() => {
+                this.logger.debug("Authentication close requested by user (backdrop click, close button, or Escape key)");
+                this.config.events?.emit(AuthEvent.SIGN_IN_ERROR, {
+                    detail: "Authentication cancelled by user",
+                });
+                const error = new CivicAuthError("Authentication cancelled by user", CivicAuthErrorCode.USER_CANCELLED);
+                this.onAuthError(error);
+                this.cleanup();
+            });
+            // Show the preloaded iframe instantly
+            this.iframeElement = this.iframeManager.createIframe(fullAuthUrl);
+            this.config.events?.emit(AuthEvent.SIGN_IN_STARTED, {
+                detail: "Preloaded iframe displayed instantly",
+            });
+            return this.iframeElement;
+        }
+        // Fallback to creating a new iframe if no preload is available
+        this.logger.debug("No preloaded iframe available, creating new iframe", {
+            url: fullAuthUrl,
+        });
         // Determine the actual display mode for IframeManager first
         const iframeDisplayMode = this.determineIframeDisplayMode();
         let container = this.getContainerElement();
@@ -258,7 +350,11 @@ export class IframeAuthHandler {
         }
         catch (error) {
             this.logger.debug("Cannot access iframe URL (likely cross-origin) - assuming login app, showing content.", { error: error instanceof Error ? error.message : String(error) });
-            this.iframeManager?.forceHideLoader();
+            setTimeout(() => {
+                // Force hide loader after a short delay to ensure any initial loading is complete
+                // to give the login-app time to send any post message signals
+                this.iframeManager?.forceHideLoader();
+            }, WAIT_FOR_LOGIN_APP_BROWSER_DETECTION_TIMEOUT);
         }
     }
     checkIframeRedirect() {
@@ -407,5 +503,71 @@ export class IframeAuthHandler {
         // After changing src, existing onload/onmessage handlers in IframeManager
         // and navigation monitoring in this class should manage visibility and state.
     }
+    /**
+     * Enable or disable iframe preloading
+     */
+    setPreloadEnabled(enabled) {
+        this.isPreloadEnabled = enabled;
+        this.logger.debug("Iframe preloading", { enabled });
+    }
+    /**
+     * Check if iframe preloading is enabled
+     */
+    getPreloadEnabled() {
+        return this.isPreloadEnabled;
+    }
+    /**
+     * Check if an iframe is currently preloaded and ready for instant display
+     *
+     * This function helps optimize user experience by determining if we can show
+     * a preloaded iframe immediately instead of loading a new one. The logic:
+     *
+     * 1. Returns false if no iframe manager exists (can't have preloaded content)
+     * 2. Checks if any iframe is currently preloaded via the iframe manager
+     * 3. If no specific URL is provided, returns whether any iframe is preloaded
+     * 4. If a URL is provided, ensures both that an iframe is preloaded AND
+     *    that it contains the exact URL we need
+     *
+     * This prevents unnecessary iframe reloads when the user triggers auth flows
+     * with the same URL that's already loaded and ready to display.
+     *
+     * @param url - Optional URL to match against the preloaded iframe's URL
+     * @returns true if a suitable preloaded iframe exists, false otherwise
+     */
+    hasPreloadedIframe(url) {
+        if (!this.iframeManager)
+            return false;
+        const isPreloaded = this.iframeManager.isIframePreloaded();
+        if (!url)
+            return isPreloaded;
+        return isPreloaded && this.iframeManager.getPreloadedUrl() === url;
+    }
+    /**
+     * Force the iframe to hide, even if it is currently showing
+     *
+     * This is useful for cleanup or when you want to ensure the iframe is not visible
+     * regardless of its current state.
+     */
+    forceHideIframe() {
+        if (this.iframeManager) {
+            this.iframeManager.hide();
+            this.logger.debug("Forced iframe to hide");
+        }
+        else {
+            this.logger.warn("Cannot force hide iframe, iframe manager not initialized");
+        }
+    }
+    /**
+     * Force the iframe to show the loading indicator
+     */
+    forceShowLoader() {
+        if (this.iframeManager) {
+            this.iframeManager.forceShowLoader();
+            this.logger.debug("Forced iframe loader to show");
+        }
+        else {
+            this.logger.warn("Cannot force show loader, iframe manager not initialized");
+        }
+    }
 }
 //# sourceMappingURL=IframeAuthHandler.js.map

package/dist/vanillajs/auth/handlers/IframeAuthHandler.js.map

@@ -1 +1 @@
-{"version":3,"file":"IframeAuthHandler.js","sourceRoot":"","sources":["../../../../src/vanillajs/auth/handlers/IframeAuthHandler.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,SAAS,EAAE,MAAM,sBAAsB,CAAC;AAGjD,OAAO,EAAE,cAAc,EAAE,kBAAkB,EAAE,MAAM,uBAAuB,CAAC;AAC3E,OAAO,EAAE,cAAc,EAAE,MAAM,gCAAgC,CAAC;AAChE,OAAO,EAAE,aAAa,EAAE,MAAM,+BAA+B,CAAC;AAE9D,OAAO,EAAE,YAAY,IAAI,cAAc,EAAE,MAAM,uBAAuB,CAAC;AAWvE,MAAM,OAAO,iBAAiB;IACpB,MAAM,CAA2B;IACjC,MAAM,GAAG,cAAc,CAAC,aAAa,CAAC,CAAC;IACvC,aAAa,CAA+B;IAC5C,WAAW,CAAyB;IACpC,OAAO,CAAa;IACpB,cAAc,CAAgC;IAC9C,aAAa,CAAiB;IAC9B,aAAa,CAAqB;IAClC,cAAc,CAAkB;IAChC,uBAAuB,CAA+B;IAE9D,YAAY,aAAsC;QAChD,IAAI,CAAC,MAAM,GAAG,aAAa,CAAC,MAAM,CAAC;QACnC,IAAI,CAAC,MAAM,GAAG,aAAa,CAAC,MAAM,CAAC;QACnC,IAAI,CAAC,aAAa,GAAG,aAAa,CAAC,aAAa,CAAC;QACjD,IAAI,CAAC,WAAW,GAAG,aAAa,CAAC,WAAW,CAAC;QAC7C,IAAI,CAAC,OAAO,GAAG,aAAa,CAAC,OAAO,CAAC;QACrC,IAAI,CAAC,cAAc,GAAG,aAAa,CAAC,cAAc,CAAC;QAEnD,uDAAuD;QACvD,IAAI,CAAC,uBAAuB,GAAG,CAAC,KAAkB,EAAE,EAAE;YACpD,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,mDAAmD,EAAE;gBACpE,MAAM,EAAE,KAAK,CAAC,MAAM;aACrB,CAAC,CAAC;YAEH,sEAAsE;YACtE,IAAI,IAAI,CAAC,aAAa,EAAE,CAAC;gBACvB,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,gDAAgD,CAAC,CAAC;gBACnE,IAAI,CAAC,aAAa,CAAC,IAAI,EAAE,CAAC;gBAE1B,mDAAmD;gBACnD,IAAI,CAAC,MAAM,CAAC,MAAM,EAAE,IAAI,CAAC,SAAS,CAAC,eAAe,EAAE;oBAClD,MAAM,EAAE,+CAA+C;iBACxD,CAAC,CAAC;YACL,CAAC;QACH,CAAC,CAAC;QAEF,MAAM,CAAC,gBAAgB,CACrB,0BAA0B,EAC1B,IAAI,CAAC,uBAAwC,CAC9C,CAAC;IACJ,CAAC;IAEM,KAAK,CAAC,gBAAgB,CAC3B,WAAmB;QAEnB,4DAA4D;QAC5D,MAAM,iBAAiB,GAAG,IAAI,CAAC,0BAA0B,EAAE,CAAC;QAE5D,IAAI,SAAS,GAAG,IAAI,CAAC,mBAAmB,EAAE,CAAC;QAE3C,sEAAsE;QACtE,IAAI,iBAAiB,KAAK,OAAO,IAAI,CAAC,SAAS,EAAE,CAAC;YAChD,SAAS,GAAG,IAAI,CAAC,oBAAoB,EAAE,CAAC;QAC1C,CAAC;QAED,IAAI,CAAC,SAAS,EAAE,CAAC;YACf,MAAM,KAAK,GAAG,IAAI,cAAc,CAC9B,qCAAqC,EACrC,kBAAkB,CAAC,mBAAmB,CACvC,CAAC;YACF,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC;YACjC,MAAM,KAAK,CAAC;QACd,CAAC;QAED,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,qCAAqC,EAAE;YACvD,GAAG,EAAE,WAAW;YAChB,WAAW,EAAE,SAAS,EAAE,EAAE;YAC1B,QAAQ,EAAE,IAAI,CAAC,MAAM,CAAC,QAAQ;YAC9B,MAAM,EAAE,MAAM,CAAC,QAAQ,CAAC,MAAM;YAC9B,iBAAiB;YACjB,gBAAgB,EACd,iBAAiB,KAAK,OAAO,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,sBAAsB;SACvE,CAAC,CAAC;QAEH,IAAI,CAAC,MAAM,CAAC,KAAK,CACf,2DAA2D,iBAAiB,EAAE,CAC/E,CAAC;QAEF,qDAAqD;QACrD,IAAI,CAAC,aAAa,GAAG,IAAI,aAAa,CAAC;YACrC,SAAS,EAAE,SAAS;YACpB,WAAW,EAAE,iBAAiB;YAC9B,QAAQ,EAAE,IAAI,CAAC,MAAM,CAAC,QAAQ;YAC9B;;;;eAIG;YACH,OAAO,EAAE,GAAG,EAAE;gBACZ,IAAI,CAAC,MAAM,CAAC,KAAK,CACf,sFAAsF,CACvF,CAAC;gBACF,IAAI,CAAC,MAAM,CAAC,MAAM,EAAE,IAAI,CAAC,SAAS,CAAC,aAAa,EAAE;oBAChD,MAAM,EAAE,kCAAkC;iBAC3C,CAAC,CAAC;gBAEH,MAAM,KAAK,GAAG,IAAI,cAAc,CAC9B,kCAAkC,EAClC,kBAAkB,CAAC,cAAc,CAClC,CAAC;gBAEF,IAAI,CAAC,WAAW,CAAC,KAAK,CAAC,CAAC;gBACxB,IAAI,CAAC,OAAO,EAAE,CAAC;YACjB,CAAC;SACF,CAAC,CAAC;QAEH,wCAAwC;QACxC,IAAI,CAAC,aAAa,GAAG,IAAI,CAAC,aAAa,CAAC,YAAY,CAAC,WAAW,CAAC,CAAC;QAElE,IAAI,CAAC,MAAM,CAAC,MAAM,EAAE,IAAI,CAAC,SAAS,CAAC,eAAe,EAAE;YAClD,MAAM,EAAE,oCAAoC;SAC7C,CAAC,CAAC;QAEH,IAAI,CAAC,wBAAwB,EAAE,CAAC;QAChC,IAAI,CAAC,+BAA+B,EAAE,CAAC;QAEvC,OAAO,IAAI,CAAC,aAAa,CAAC;IAC5B,CAAC;IAEM,gBAAgB;QACrB,OAAO,IAAI,CAAC,aAAa,CAAC;IAC5B,CAAC;IAEM,gBAAgB;QACrB,OAAO,IAAI,CAAC,aAAa,CAAC;IAC5B,CAAC;IAEM,aAAa;QAClB,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,4BAA4B,CAAC,CAAC;QAChD,IAAI,CAAC,aAAa,EAAE,OAAO,EAAE,CAAC;QAC9B,IAAI,CAAC,aAAa,GAAG,SAAS,CAAC;QAE/B,IAAI,IAAI,CAAC,aAAa,EAAE,CAAC;YACvB,IAAI,CAAC,aAAa,GAAG,SAAS,CAAC;QACjC,CAAC;QAED,2CAA2C;QAC3C,IAAI,IAAI,CAAC,uBAAuB,EAAE,CAAC;YACjC,MAAM,CAAC,mBAAmB,CACxB,0BAA0B,EAC1B,IAAI,CAAC,uBAAwC,CAC9C,CAAC;QACJ,CAAC;QAED,gDAAgD;QAChD,IAAI,CAAC,4BAA4B,EAAE,CAAC;IACtC,CAAC;IAEO,4BAA4B;QAClC,2EAA2E;QAC3E,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,sBAAsB,EAAE,CAAC;YACxC,MAAM,gBAAgB,GAAG,QAAQ,CAAC,aAAa,CAC7C,kCAAkC,IAAI,CAAC,MAAM,CAAC,QAAQ,kBAAkB,CACzE,CAAC;YAEF,IAAI,gBAAgB,IAAI,gBAAgB,CAAC,UAAU,EAAE,CAAC;gBACpD,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,kCAAkC,EAAE;oBACpD,WAAW,EAAE,gBAAgB,CAAC,EAAE;iBACjC,CAAC,CAAC;gBACH,gBAAgB,CAAC,UAAU,CAAC,WAAW,CAAC,gBAAgB,CAAC,CAAC;YAC5D,CAAC;QACH,CAAC;IACH,CAAC;IAEO,oBAAoB;QAC1B,MAAM,SAAS,GAAG,QAAQ,CAAC,aAAa,CAAC,KAAK,CAAC,CAAC;QAChD,SAAS,CAAC,EAAE,GAAG,GAAG,IAAI,CAAC,MAAM,CAAC,QAAQ,kBAAkB,CAAC;QACzD,SAAS,CAAC,YAAY,CAAC,uBAAuB,EAAE,MAAM,CAAC,CAAC;QAExD,mCAAmC;QACnC,QAAQ,CAAC,IAAI,CAAC,WAAW,CAAC,SAAS,CAAC,CAAC;QAErC,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,iCAAiC,EAAE;YACnD,WAAW,EAAE,SAAS,CAAC,EAAE;SAC1B,CAAC,CAAC;QAEH,OAAO,SAAS,CAAC;IACnB,CAAC;IAEO,mBAAmB;QACzB,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,sBAAsB,EAAE,CAAC;YACxC,OAAO,IAAI,CAAC;QACd,CAAC;QAED,IAAI,OAAO,IAAI,CAAC,MAAM,CAAC,sBAAsB,KAAK,QAAQ,EAAE,CAAC;YAC3D,MAAM,OAAO,GAAG,QAAQ,CAAC,cAAc,CACrC,IAAI,CAAC,MAAM,CAAC,sBAAsB,CACnC,CAAC;YACF,IAAI,CAAC,OAAO,EAAE,CAAC;gBACb,IAAI,CAAC,MAAM,CAAC,IAAI,CACd,8BAA8B,IAAI,CAAC,MAAM,CAAC,sBAAsB,aAAa,CAC9E,CAAC;YACJ,CAAC;YACD,OAAO,OAAO,CAAC;QACjB,CAAC;QACD,OAAO,IAAI,CAAC,MAAM,CAAC,sBAAsB,CAAC;IAC5C,CAAC;IAEO,0BAA0B;QAChC,6DAA6D;QAC7D,oFAAoF;QACpF,IAAI,IAAI,CAAC,MAAM,CAAC,iBAAiB,EAAE,CAAC;YAClC,IAAI,CAAC,MAAM,CAAC,KAAK,CACf,uCAAuC,IAAI,CAAC,MAAM,CAAC,iBAAiB,EAAE,CACvE,CAAC;YACF,OAAO,IAAI,CAAC,MAAM,CAAC,iBAAiB,CAAC;QACvC,CAAC;QAED,wFAAwF;QACxF,+EAA+E;QAC/E,qFAAqF;QACrF,IAAI,IAAI,CAAC,MAAM,CAAC,WAAW,KAAK,QAAQ,EAAE,CAAC;YACzC,IAAI,CAAC,MAAM,CAAC,KAAK,CACf,uGAAuG,CACxG,CAAC;YACF,OAAO,OAAO,CAAC;QACjB,CAAC;QAED,gGAAgG;QAChG,IAAI,CAAC,MAAM,CAAC,IAAI,CACd,gEAAgE,IAAI,CAAC,MAAM,CAAC,WAAW,IAAI;YACzF,wEAAwE,CAC3E,CAAC;QACF,OAAO,OAAO,CAAC;IACjB,CAAC;IAEO,wBAAwB;QAC9B,IAAI,CAAC,IAAI,CAAC,aAAa;YAAE,OAAO;QAEhC,IAAI,CAAC,aAAa,CAAC,MAAM,GAAG,GAAG,EAAE;YAC/B,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,eAAe,EAAE;gBAChC,SAAS,EAAE,IAAI,CAAC,aAAa,EAAE,GAAG;gBAClC,aAAa,EAAE,MAAM,CAAC,QAAQ,CAAC,MAAM;gBACrC,wBAAwB,EAAE,IAAI,GAAG,CAAC,IAAI,CAAC,MAAM,CAAC,kBAAkB,CAAC;qBAC9D,MAAM;aACV,CAAC,CAAC;YAEH,IAAI,CAAC,IAAI,CAAC,aAAa,EAAE,aAAa,EAAE,CAAC;gBACvC,MAAM,QAAQ,GAAG,iDAAiD,CAAC;gBACnE,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,QAAQ,EAAE;oBAC1B,SAAS,EAAE,IAAI,CAAC,aAAa,EAAE,GAAG;iBACnC,CAAC,CAAC;gBAEH,MAAM,KAAK,GAAG,IAAI,KAAK,CAAC,QAAQ,CAAC,CAAC;gBAClC,IAAI,CAAC,WAAW,CAAC,KAAK,CAAC,CAAC;gBACxB,IAAI,CAAC,OAAO,EAAE,CAAC;gBACf,OAAO;YACT,CAAC;YAED,6DAA6D;YAC7D,MAAM,CAAC,gBAAgB,CAAC,SAAS,EAAE,IAAI,CAAC,cAAc,CAAC,CAAC;YACxD,IAAI,CAAC,MAAM,CAAC,IAAI,CACd,yEAAyE,EACzE;gBACE,YAAY,EAAE,MAAM,CAAC,QAAQ,CAAC,MAAM;gBACpC,gBAAgB,EAAE,IAAI,GAAG,CAAC,IAAI,CAAC,MAAM,CAAC,kBAAkB,CAAC,CAAC,MAAM;aACjE,CACF,CAAC;YAEF,gDAAgD;YAChD,IAAI,CAAC,2BAA2B,EAAE,CAAC;YAEnC,uCAAuC;YACvC,IAAI,CAAC,mBAAmB,EAAE,CAAC;QAC7B,CAAC,CAAC;QAEF,IAAI,CAAC,aAAa,CAAC,OAAO,GAAG,CAAC,KAAK,EAAE,EAAE;YACrC,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,mBAAmB,EAAE;gBACrC,KAAK;gBACL,SAAS,EAAE,IAAI,CAAC,aAAa,EAAE,GAAG;gBAClC,aAAa,EAAE,MAAM,CAAC,QAAQ,CAAC,MAAM;aACtC,CAAC,CAAC;YACH,IAAI,CAAC,MAAM,CAAC,MAAM,EAAE,IAAI,CAAC,SAAS,CAAC,aAAa,EAAE;gBAChD,MAAM,EAAE,mBAAmB;gBAC3B,KAAK,EAAE,KAAK;aACb,CAAC,CAAC;YAEH,MAAM,KAAK,GAAG,IAAI,KAAK,CAAC,wBAAwB,CAAC,CAAC;YAClD,IAAI,CAAC,WAAW,CAAC,KAAK,CAAC,CAAC;YACxB,IAAI,CAAC,OAAO,EAAE,CAAC;QACjB,CAAC,CAAC;IACJ,CAAC;IAEO,2BAA2B;QACjC,IAAI,CAAC;YACH,MAAM,UAAU,GAAG,IAAI,CAAC,aAAa,EAAE,aAAa,EAAE,QAAQ,CAAC,IAAI,CAAC;YACpE,IAAI,UAAU,EAAE,CAAC;gBACf,MAAM,aAAa,GAAG,IAAI,GAAG,CAAC,UAAU,CAAC,CAAC,MAAM,CAAC;gBACjD,MAAM,wBAAwB,GAAG,IAAI,CAAC,MAAM,CAAC,kBAAkB;oBAC7D,CAAC,CAAC,IAAI,GAAG,CAAC,IAAI,CAAC,MAAM,CAAC,kBAAkB,CAAC,CAAC,MAAM;oBAChD,CAAC,CAAC,IAAI,CAAC;gBACT,MAAM,cAAc,GAAG,wBAAwB;oBAC7C,CAAC,CAAC,aAAa,KAAK,wBAAwB;oBAC5C,CAAC,CAAC,KAAK,CAAC;gBACV,MAAM,aAAa,GAAG,IAAI,CAAC,MAAM,CAAC,WAAW;oBAC3C,CAAC,CAAC,UAAU,CAAC,UAAU,CAAC,IAAI,CAAC,MAAM,CAAC,WAAW,CAAC;oBAChD,CAAC,CAAC,KAAK,CAAC;gBAEV,IAAI,cAAc,IAAI,CAAC,aAAa,EAAE,CAAC;oBACrC,IAAI,CAAC,MAAM,CAAC,IAAI,CACd,uEAAuE,EACvE;wBACE,UAAU;wBACV,cAAc;wBACd,aAAa;wBACb,aAAa;wBACb,wBAAwB;qBACzB,CACF,CAAC;oBACF,IAAI,CAAC,aAAa,EAAE,eAAe,EAAE,CAAC;gBACxC,CAAC;qBAAM,CAAC;oBACN,IAAI,CAAC,MAAM,CAAC,IAAI,CACd,gEAAgE,EAChE;wBACE,UAAU;wBACV,cAAc;wBACd,aAAa;wBACb,aAAa;wBACb,wBAAwB;wBACxB,MAAM,EAAE,CAAC,cAAc;4BACrB,CAAC,CAAC,wBAAwB;gCACxB,CAAC,CAAC,sCAAsC;gCACxC,CAAC,CAAC,4BAA4B;4BAChC,CAAC,CAAC,qDAAqD;qBAC1D,CACF,CAAC;oBAEF,IAAI,aAAa,EAAE,CAAC;wBAClB,IAAI,CAAC,aAAa,EAAE,IAAI,EAAE,CAAC;oBAC7B,CAAC;yBAAM,CAAC;wBACN,IAAI,CAAC,aAAa,EAAE,eAAe,EAAE,CAAC;oBACxC,CAAC;gBACH,CAAC;YACH,CAAC;QACH,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,IAAI,CAAC,MAAM,CAAC,KAAK,CACf,uFAAuF,EACvF,EAAE,KAAK,EAAE,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,EAAE,CAClE,CAAC;YACF,IAAI,CAAC,aAAa,EAAE,eAAe,EAAE,CAAC;QACxC,CAAC;IACH,CAAC;IAEO,mBAAmB;QACzB,IAAI,CAAC;YACH,MAAM,iBAAiB,GACrB,IAAI,CAAC,aAAa,EAAE,aAAa,EAAE,QAAQ,CAAC,IAAI,CAAC;YAEnD,IAAI,iBAAiB,EAAE,CAAC;gBACtB,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,gCAAgC,EAAE;oBAClD,IAAI,EAAE,iBAAiB;oBACvB,WAAW,EAAE,IAAI,CAAC,MAAM,CAAC,WAAW;oBACpC,kBAAkB,EAAE,iBAAiB,CAAC,UAAU,CAC9C,IAAI,CAAC,MAAM,CAAC,WAAW,CACxB;iBACF,CAAC,CAAC;gBAEH,IAAI,iBAAiB,CAAC,UAAU,CAAC,IAAI,CAAC,MAAM,CAAC,WAAW,CAAC,EAAE,CAAC;oBAC1D,IAAI,CAAC,MAAM,CAAC,IAAI,CACd,6EAA6E,CAC9E,CAAC;oBAEF,gDAAgD;oBAChD,IAAI,CAAC,2BAA2B,EAAE,CAAC;oBAEnC,uDAAuD;oBACvD,IACE,IAAI,CAAC,aAAa,EAAE,eAAe;wBACnC,IAAI,CAAC,aAAa,CAAC,eAAe,CAAC,IAAI,EACvC,CAAC;wBACD,IAAI,CAAC,mBAAmB,CAAC,IAAI,CAAC,aAAa,CAAC,eAAe,CAAC,CAAC;oBAC/D,CAAC;yBAAM,CAAC;wBACN,IAAI,CAAC,MAAM,CAAC,IAAI,CACd,mEAAmE,CACpE,CAAC;oBACJ,CAAC;gBACH,CAAC;YACH,CAAC;QACH,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,IAAI,CAAC,MAAM,CAAC,KAAK,CACf,wDAAwD,EACxD;gBACE,KAAK,EAAE,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC;gBAC7D,SAAS,EAAE,IAAI,CAAC,aAAa,EAAE,GAAG;aACnC,CACF,CAAC;YACF,gEAAgE;YAChE,IAAI,CAAC,MAAM,CAAC,IAAI,CACd,uEAAuE,EACvE;gBACE,YAAY,EAAE,MAAM,CAAC,QAAQ,CAAC,MAAM;gBACpC,gBAAgB,EAAE,IAAI,GAAG,CAAC,IAAI,CAAC,MAAM,CAAC,kBAAkB,CAAC,CAAC,MAAM;aACjE,CACF,CAAC;QACJ,CAAC;IACH,CAAC;IAEO,mBAAmB,CAAC,SAAmB;QAC7C,MAAM,cAAc,GAAG,IAAI,cAAc,CACvC;YACE,WAAW,EAAE,IAAI,CAAC,MAAM,CAAC,WAAW;YACpC,MAAM,EAAE,IAAI,CAAC,MAAM,CAAC,MAAM;YAC1B,MAAM,EAAE,IAAI,CAAC,MAAM;SACpB,EACD,IAAI,CAAC,aAAa,EAClB,CAAC,KAAa,EAAE,EAAE,CAChB,IAAI,CAAC,WAAW,CAAC,KAAK,IAAI,IAAI,KAAK,CAAC,uBAAuB,CAAC,CAAC,EAC/D,GAAG,EAAE,CAAC,IAAI,CAAC,OAAO,EAAE,CACrB,CAAC;QAEF,cAAc,CAAC,KAAK,CAAC,SAAS,CAAC,CAAC;IAClC,CAAC;IAEO,+BAA+B;QACrC,4EAA4E;QAC5E,IAAI,kBAAkB,GAAuB,SAAS,CAAC;QACvD,IAAI,YAAY,GAAG,EAAE,CAAC;QAEtB,MAAM,qBAAqB,GAAG,GAAG,EAAE;YACjC,IAAI,CAAC,IAAI,CAAC,aAAa,EAAE,aAAa,EAAE,CAAC;gBACvC,IAAI,kBAAkB,EAAE,CAAC;oBACvB,aAAa,CAAC,kBAAkB,CAAC,CAAC;gBACpC,CAAC;gBACD,OAAO;YACT,CAAC;YAED,IAAI,CAAC;gBACH,MAAM,UAAU,GAAG,IAAI,CAAC,aAAa,CAAC,aAAa,CAAC,QAAQ,CAAC,IAAI,CAAC;gBAElE,IAAI,UAAU,KAAK,YAAY,EAAE,CAAC;oBAChC,YAAY,GAAG,UAAU,CAAC;oBAC1B,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,4BAA4B,EAAE;wBAC9C,MAAM,EAAE,UAAU;wBAClB,WAAW,EAAE,IAAI,CAAC,MAAM,CAAC,WAAW;wBACpC,aAAa,EAAE,UAAU,CAAC,UAAU,CAAC,IAAI,CAAC,MAAM,CAAC,WAAW,CAAC;qBAC9D,CAAC,CAAC;oBAEH,oDAAoD;oBACpD,IAAI,UAAU,CAAC,UAAU,CAAC,IAAI,CAAC,MAAM,CAAC,WAAW,CAAC,EAAE,CAAC;wBACnD,6CAA6C;wBAC7C,IAAI,CAAC,aAAa,EAAE,IAAI,EAAE,CAAC;wBAC3B,IAAI,CAAC,MAAM,CAAC,IAAI,CACd,+DAA+D,CAChE,CAAC;wBAEF,IAAI,kBAAkB,EAAE,CAAC;4BACvB,aAAa,CAAC,kBAAkB,CAAC,CAAC;wBACpC,CAAC;wBAED,uDAAuD;wBACvD,IACE,IAAI,CAAC,aAAa,CAAC,eAAe;4BAClC,IAAI,CAAC,aAAa,CAAC,eAAe,CAAC,IAAI,EACvC,CAAC;4BACD,IAAI,CAAC,mBAAmB,CAAC,IAAI,CAAC,aAAa,CAAC,eAAe,CAAC,CAAC;wBAC/D,CAAC;wBAED,yEAAyE;wBACzE,IAAI,CAAC,kBAAkB,CAAC,UAAU,CAAC,CAAC;oBACtC,CAAC;yBAAM,CAAC;wBACN,mCAAmC;wBACnC,IAAI,CAAC,2BAA2B,EAAE,CAAC;oBACrC,CAAC;gBACH,CAAC;YACH,CAAC;YAAC,MAAM,CAAC;gBACP,8CAA8C;gBAC9C,0CAA0C;gBAC1C,IAAI,YAAY,KAAK,cAAc,EAAE,CAAC;oBACpC,YAAY,GAAG,cAAc,CAAC;oBAC9B,IAAI,CAAC,MAAM,CAAC,KAAK,CACf,2DAA2D,CAC5D,CAAC;gBACJ,CAAC;YACH,CAAC;QACH,CAAC,CAAC;QAEF,8DAA8D;QAC9D,qBAAqB,EAAE,CAAC;QACxB,kBAAkB,GAAG,MAAM,CAAC,WAAW,CAAC,qBAAqB,EAAE,GAAG,CAAC,CAAC;QAEpE,6CAA6C;QAC7C,MAAM,eAAe,GAAG,IAAI,CAAC,OAAO,CAAC;QACrC,IAAI,CAAC,OAAO,GAAG,GAAG,EAAE;YAClB,IAAI,kBAAkB,EAAE,CAAC;gBACvB,aAAa,CAAC,kBAAkB,CAAC,CAAC;YACpC,CAAC;YACD,eAAe,EAAE,CAAC;QACpB,CAAC,CAAC;IACJ,CAAC;IAEO,kBAAkB,CAAC,UAAkB;QAC3C,MAAM,SAAS,GAAG,IAAI,eAAe,CAAC,IAAI,GAAG,CAAC,UAAU,CAAC,CAAC,MAAM,CAAC,CAAC;QAClE,MAAM,IAAI,GAAG,SAAS,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC;QACnC,MAAM,KAAK,GAAG,SAAS,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC;QAErC,IAAI,IAAI,EAAE,CAAC;YACT,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,2CAA2C,EAAE;gBAC5D,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,CAAC,EAAE,EAAE,CAAC,GAAG,KAAK;gBACnC,QAAQ,EAAE,CAAC,CAAC,SAAS,CAAC,GAAG,CAAC,OAAO,CAAC;aACnC,CAAC,CAAC;QACL,CAAC;QAED,IAAI,KAAK,EAAE,CAAC;YACV,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,oCAAoC,EAAE;gBACtD,KAAK;gBACL,gBAAgB,EAAE,SAAS,CAAC,GAAG,CAAC,mBAAmB,CAAC;aACrD,CAAC,CAAC;YAEH,MAAM,SAAS,GAAG,IAAI,cAAc,CAClC,gBAAgB,KAAK,EAAE,EACvB,kBAAkB,CAAC,eAAe,CACnC,CAAC;YAEF,IAAI,CAAC,MAAM,CAAC,MAAM,EAAE,IAAI,CAAC,SAAS,CAAC,aAAa,EAAE;gBAChD,MAAM,EAAE,SAAS,CAAC,OAAO;gBACzB,KAAK,EAAE,SAAS,CAAC,GAAG,CAAC,mBAAmB,CAAC,IAAI,KAAK;aACnD,CAAC,CAAC;YAEH,IAAI,CAAC,WAAW,CAAC,SAAS,CAAC,CAAC;QAC9B,CAAC;IACH,CAAC;IAEM,cAAc,CAAC,GAAW;QAC/B,IAAI,CAAC,IAAI,CAAC,aAAa,EAAE,CAAC;YACxB,IAAI,CAAC,MAAM,CAAC,KAAK,CACf,yDAAyD,CAC1D,CAAC;YACF,IAAI,CAAC,WAAW,CACd,IAAI,cAAc,CAChB,0CAA0C,EAC1C,kBAAkB,CAAC,gBAAgB,CACpC,CACF,CAAC;YACF,OAAO;QACT,CAAC;QACD,IAAI,CAAC,IAAI,CAAC,aAAa,EAAE,CAAC;YACxB,IAAI,CAAC,MAAM,CAAC,KAAK,CACf,yDAAyD,CAC1D,CAAC;YACF,IAAI,CAAC,WAAW,CACd,IAAI,cAAc,CAChB,0CAA0C,EAC1C,kBAAkB,CAAC,cAAc,CAClC,CACF,CAAC;YACF,OAAO;QACT,CAAC;QACD,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,8BAA8B,EAAE,EAAE,GAAG,EAAE,CAAC,CAAC;QAC1D,IAAI,CAAC,aAAa,CAAC,GAAG,GAAG,GAAG,CAAC;QAC7B,0EAA0E;QAC1E,8EAA8E;IAChF,CAAC;CACF","sourcesContent":["import { AuthEvent } from \"../../types/index.js\";\nimport type { AuthResult } from \"../../types/index.js\";\nimport type { ProcessedCivicAuthConfig } from \"../types/AuthTypes.js\";\nimport { CivicAuthError, CivicAuthErrorCode } from \"../types/AuthTypes.js\";\nimport { SignalObserver } from \"../../iframe/SignalObserver.js\";\nimport { IframeManager } from \"../../iframe/IframeManager.js\";\nimport type { createLogger } from \"../../utils/logger.js\";\nimport { createLogger as createLoggerFn } from \"../../utils/logger.js\";\n\nexport interface IframeAuthHandlerConfig {\n  config: ProcessedCivicAuthConfig;\n  logger: ReturnType<typeof createLogger>;\n  onAuthSuccess: (result: AuthResult) => void;\n  onAuthError: (error: Error) => void;\n  cleanup: () => void;\n  messageHandler: (event: MessageEvent) => void;\n}\n\nexport class IframeAuthHandler {\n  private config: ProcessedCivicAuthConfig;\n  private logger = createLoggerFn(\"iframe-auth\");\n  private onAuthSuccess: (result: AuthResult) => void;\n  private onAuthError: (error: Error) => void;\n  private cleanup: () => void;\n  private messageHandler: (event: MessageEvent) => void;\n  private iframeManager?: IframeManager;\n  private iframeElement?: HTMLIFrameElement;\n  private signalObserver?: SignalObserver;\n  private earlyAuthSuccessHandler: (event: CustomEvent) => void;\n\n  constructor(handlerConfig: IframeAuthHandlerConfig) {\n    this.config = handlerConfig.config;\n    this.logger = handlerConfig.logger;\n    this.onAuthSuccess = handlerConfig.onAuthSuccess;\n    this.onAuthError = handlerConfig.onAuthError;\n    this.cleanup = handlerConfig.cleanup;\n    this.messageHandler = handlerConfig.messageHandler;\n\n    // Listen for early auth success signals from login-app\n    this.earlyAuthSuccessHandler = (event: CustomEvent) => {\n      this.logger.info(\"Received early auth success signal from login-app\", {\n        detail: event.detail,\n      });\n\n      // Close the modal immediately but keep iframe for callback processing\n      if (this.iframeManager) {\n        this.logger.info(\"Closing modal early due to auth success signal\");\n        this.iframeManager.hide();\n\n        // Emit event to notify that modal is closing early\n        this.config.events?.emit(AuthEvent.SIGN_IN_STARTED, {\n          detail: \"Modal closed early due to auth success signal\",\n        });\n      }\n    };\n\n    window.addEventListener(\n      \"civic-auth-success-early\",\n      this.earlyAuthSuccessHandler as EventListener,\n    );\n  }\n\n  public async handleIframeAuth(\n    fullAuthUrl: string,\n  ): Promise<HTMLIFrameElement> {\n    // Determine the actual display mode for IframeManager first\n    const iframeDisplayMode = this.determineIframeDisplayMode();\n\n    let container = this.getContainerElement();\n\n    // For modal mode, if no container is provided, create one dynamically\n    if (iframeDisplayMode === \"modal\" && !container) {\n      container = this.createModalContainer();\n    }\n\n    if (!container) {\n      const error = new CivicAuthError(\n        \"Target container element not found.\",\n        CivicAuthErrorCode.CONTAINER_NOT_FOUND,\n      );\n      this.logger.error(error.message);\n      throw error;\n    }\n\n    this.logger.debug(\"Creating iframe with modal backdrop\", {\n      url: fullAuthUrl,\n      containerId: container?.id,\n      iframeId: this.config.iframeId,\n      origin: window.location.origin,\n      iframeDisplayMode,\n      containerCreated:\n        iframeDisplayMode === \"modal\" && !this.config.targetContainerElement,\n    });\n\n    this.logger.debug(\n      `🎯 CivicAuth: Creating IframeManager with display mode: ${iframeDisplayMode}`,\n    );\n\n    // Create IframeManager with appropriate display mode\n    this.iframeManager = new IframeManager({\n      container: container,\n      displayMode: iframeDisplayMode,\n      iframeId: this.config.iframeId,\n      /**\n       * Handles iframe closure events initiated by the user.\n       * This includes backdrop clicks, close button clicks, or Escape key presses.\n       * Emits an error event and cleans up the authentication process.\n       */\n      onClose: () => {\n        this.logger.debug(\n          \"Authentication close requested by user (backdrop click, close button, or Escape key)\",\n        );\n        this.config.events?.emit(AuthEvent.SIGN_IN_ERROR, {\n          detail: \"Authentication cancelled by user\",\n        });\n\n        const error = new CivicAuthError(\n          \"Authentication cancelled by user\",\n          CivicAuthErrorCode.USER_CANCELLED,\n        );\n\n        this.onAuthError(error);\n        this.cleanup();\n      },\n    });\n\n    // Create the iframe using IframeManager\n    this.iframeElement = this.iframeManager.createIframe(fullAuthUrl);\n\n    this.config.events?.emit(AuthEvent.SIGN_IN_STARTED, {\n      detail: \"Iframe created with modal backdrop\",\n    });\n\n    this.setupIframeEventHandlers();\n    this.setupIframeNavigationMonitoring();\n\n    return this.iframeElement;\n  }\n\n  public getIframeManager(): IframeManager | undefined {\n    return this.iframeManager;\n  }\n\n  public getIframeElement(): HTMLIFrameElement | undefined {\n    return this.iframeElement;\n  }\n\n  public cleanupIframe(): void {\n    this.logger.debug(\"Cleaning up iframe manager\");\n    this.iframeManager?.cleanup();\n    this.iframeManager = undefined;\n\n    if (this.iframeElement) {\n      this.iframeElement = undefined;\n    }\n\n    // Remove early auth success event listener\n    if (this.earlyAuthSuccessHandler) {\n      window.removeEventListener(\n        \"civic-auth-success-early\",\n        this.earlyAuthSuccessHandler as EventListener,\n      );\n    }\n\n    // Clean up dynamically created modal containers\n    this.cleanupDynamicModalContainer();\n  }\n\n  private cleanupDynamicModalContainer(): void {\n    // Only clean up containers we created dynamically (not user-provided ones)\n    if (!this.config.targetContainerElement) {\n      const dynamicContainer = document.querySelector(\n        `[data-civic-auth-modal=\"true\"]#${this.config.iframeId}-modal-container`,\n      );\n\n      if (dynamicContainer && dynamicContainer.parentNode) {\n        this.logger.debug(\"Removing dynamic modal container\", {\n          containerId: dynamicContainer.id,\n        });\n        dynamicContainer.parentNode.removeChild(dynamicContainer);\n      }\n    }\n  }\n\n  private createModalContainer(): HTMLElement {\n    const container = document.createElement(\"div\");\n    container.id = `${this.config.iframeId}-modal-container`;\n    container.setAttribute(\"data-civic-auth-modal\", \"true\");\n\n    // Append to body for modal overlay\n    document.body.appendChild(container);\n\n    this.logger.debug(\"Created dynamic modal container\", {\n      containerId: container.id,\n    });\n\n    return container;\n  }\n\n  private getContainerElement(): HTMLElement | null {\n    if (!this.config.targetContainerElement) {\n      return null;\n    }\n\n    if (typeof this.config.targetContainerElement === \"string\") {\n      const element = document.getElementById(\n        this.config.targetContainerElement,\n      );\n      if (!element) {\n        this.logger.warn(\n          `Container element with ID \"${this.config.targetContainerElement}\" not found`,\n        );\n      }\n      return element;\n    }\n    return this.config.targetContainerElement;\n  }\n\n  private determineIframeDisplayMode(): \"modal\" | \"embedded\" {\n    // Priority 1: Explicit iframeDisplayMode setting from config\n    // This is the most specific instruction for how the iframe itself should be styled.\n    if (this.config.iframeDisplayMode) {\n      this.logger.debug(\n        `Using configured iframeDisplayMode: ${this.config.iframeDisplayMode}`,\n      );\n      return this.config.iframeDisplayMode;\n    }\n\n    // Priority 2: If iframeDisplayMode is NOT set, and the overall displayMode is \"iframe\",\n    // default the iframe's own rendering style to \"modal\" (user-friendly default).\n    // To get an embedded iframe, iframeDisplayMode: \"embedded\" should be set explicitly.\n    if (this.config.displayMode === \"iframe\") {\n      this.logger.debug(\n        \"Overall displayMode is 'iframe' and iframeDisplayMode is not set, defaulting iframe style to 'modal'.\",\n      );\n      return \"modal\";\n    }\n\n    // Fallback for unexpected scenarios or if IframeAuthHandler is invoked with other displayModes.\n    this.logger.warn(\n      `determineIframeDisplayMode called with overall displayMode: '${this.config.displayMode}' ` +\n        `and no explicit iframeDisplayMode. Defaulting iframe style to 'modal'.`,\n    );\n    return \"modal\";\n  }\n\n  private setupIframeEventHandlers(): void {\n    if (!this.iframeElement) return;\n\n    this.iframeElement.onload = () => {\n      this.logger.info(\"Iframe loaded\", {\n        iframeSrc: this.iframeElement?.src,\n        currentOrigin: window.location.origin,\n        expectedAuthServerOrigin: new URL(this.config.oauthServerBaseUrl)\n          .origin,\n      });\n\n      if (!this.iframeElement?.contentWindow) {\n        const errorMsg = \"Iframe content window not available after load.\";\n        this.logger.error(errorMsg, {\n          iframeSrc: this.iframeElement?.src,\n        });\n\n        const error = new Error(errorMsg);\n        this.onAuthError(error);\n        this.cleanup();\n        return;\n      }\n\n      // Set up postMessage listener for cross-origin communication\n      window.addEventListener(\"message\", this.messageHandler);\n      this.logger.info(\n        \"Added cross-origin message event listener for auth server communication\",\n        {\n          parentOrigin: window.location.origin,\n          authServerOrigin: new URL(this.config.oauthServerBaseUrl).origin,\n        },\n      );\n\n      // Hide iframe content if it's not the login app\n      this.checkAndHideNonLoginContent();\n\n      // Try to detect redirect to our domain\n      this.checkIframeRedirect();\n    };\n\n    this.iframeElement.onerror = (event) => {\n      this.logger.error(\"Iframe load error\", {\n        event,\n        iframeSrc: this.iframeElement?.src,\n        currentOrigin: window.location.origin,\n      });\n      this.config.events?.emit(AuthEvent.SIGN_IN_ERROR, {\n        detail: \"Iframe load error\",\n        error: event,\n      });\n\n      const error = new Error(\"Iframe failed to load.\");\n      this.onAuthError(error);\n      this.cleanup();\n    };\n  }\n\n  private checkAndHideNonLoginContent(): void {\n    try {\n      const currentUrl = this.iframeElement?.contentWindow?.location.href;\n      if (currentUrl) {\n        const currentOrigin = new URL(currentUrl).origin;\n        const expectedAuthServerOrigin = this.config.oauthServerBaseUrl\n          ? new URL(this.config.oauthServerBaseUrl).origin\n          : null;\n        const isOnAuthServer = expectedAuthServerOrigin\n          ? currentOrigin === expectedAuthServerOrigin\n          : false;\n        const isCallbackUrl = this.config.redirectUrl\n          ? currentUrl.startsWith(this.config.redirectUrl)\n          : false;\n\n        if (isOnAuthServer && !isCallbackUrl) {\n          this.logger.info(\n            \"👀 Showing iframe content - confirmed login app on auth server origin\",\n            {\n              currentUrl,\n              isOnAuthServer,\n              isCallbackUrl,\n              currentOrigin,\n              expectedAuthServerOrigin,\n            },\n          );\n          this.iframeManager?.forceHideLoader();\n        } else {\n          this.logger.info(\n            \"🙈 Hiding iframe completely - not login app or on callback URL\",\n            {\n              currentUrl,\n              isOnAuthServer,\n              isCallbackUrl,\n              currentOrigin,\n              expectedAuthServerOrigin,\n              reason: !isOnAuthServer\n                ? expectedAuthServerOrigin\n                  ? \"not on auth server (origin mismatch)\"\n                  : \"auth server origin unknown\"\n                : \"on callback URL (or origin mismatch for login page)\",\n            },\n          );\n\n          if (isCallbackUrl) {\n            this.iframeManager?.hide();\n          } else {\n            this.iframeManager?.forceShowLoader();\n          }\n        }\n      }\n    } catch (error) {\n      this.logger.debug(\n        \"Cannot access iframe URL (likely cross-origin) - assuming login app, showing content.\",\n        { error: error instanceof Error ? error.message : String(error) },\n      );\n      this.iframeManager?.forceHideLoader();\n    }\n  }\n\n  private checkIframeRedirect(): void {\n    try {\n      const currentIframeHref =\n        this.iframeElement?.contentWindow?.location.href;\n\n      if (currentIframeHref) {\n        this.logger.debug(\"Iframe current href accessible\", {\n          href: currentIframeHref,\n          redirectUrl: this.config.redirectUrl,\n          startsWithRedirect: currentIframeHref.startsWith(\n            this.config.redirectUrl,\n          ),\n        });\n\n        if (currentIframeHref.startsWith(this.config.redirectUrl)) {\n          this.logger.info(\n            \"Iframe has navigated to redirectUrl (same-origin). Setting up DOM observer.\",\n          );\n\n          // Hide content since we're on callback page now\n          this.checkAndHideNonLoginContent();\n\n          // Set up signal observer for same-origin callback page\n          if (\n            this.iframeElement?.contentDocument &&\n            this.iframeElement.contentDocument.body\n          ) {\n            this.setupSignalObserver(this.iframeElement.contentDocument);\n          } else {\n            this.logger.warn(\n              \"Iframe content document or body not available for signal observer\",\n            );\n          }\n        }\n      }\n    } catch (error) {\n      this.logger.debug(\n        \"Error checking iframe href (expected for cross-origin)\",\n        {\n          error: error instanceof Error ? error.message : String(error),\n          iframeSrc: this.iframeElement?.src,\n        },\n      );\n      // This is expected when the iframe is on the auth server domain\n      this.logger.info(\n        \"Iframe is on auth server domain - using postMessage for communication\",\n        {\n          parentOrigin: window.location.origin,\n          authServerOrigin: new URL(this.config.oauthServerBaseUrl).origin,\n        },\n      );\n    }\n  }\n\n  private setupSignalObserver(iframeDoc: Document): void {\n    const signalObserver = new SignalObserver(\n      {\n        textSignals: this.config.textSignals,\n        events: this.config.events,\n        logger: this.logger,\n      },\n      this.onAuthSuccess,\n      (error?: Error) =>\n        this.onAuthError(error || new Error(\"Signal observer error\")),\n      () => this.cleanup(),\n    );\n\n    signalObserver.setup(iframeDoc);\n  }\n\n  private setupIframeNavigationMonitoring(): void {\n    // Monitor iframe navigation to detect when it redirects to our callback URL\n    let monitoringInterval: number | undefined = undefined;\n    let lastKnownUrl = \"\";\n\n    const checkIframeNavigation = () => {\n      if (!this.iframeElement?.contentWindow) {\n        if (monitoringInterval) {\n          clearInterval(monitoringInterval);\n        }\n        return;\n      }\n\n      try {\n        const currentUrl = this.iframeElement.contentWindow.location.href;\n\n        if (currentUrl !== lastKnownUrl) {\n          lastKnownUrl = currentUrl;\n          this.logger.debug(\"Iframe navigation detected\", {\n            newUrl: currentUrl,\n            redirectUrl: this.config.redirectUrl,\n            isCallbackUrl: currentUrl.startsWith(this.config.redirectUrl),\n          });\n\n          // Check if iframe has navigated to our callback URL\n          if (currentUrl.startsWith(this.config.redirectUrl)) {\n            // Hide immediately on callback URL detection\n            this.iframeManager?.hide();\n            this.logger.info(\n              \"Iframe navigated to callback URL - setting up signal observer\",\n            );\n\n            if (monitoringInterval) {\n              clearInterval(monitoringInterval);\n            }\n\n            // Set up signal observer for same-origin callback page\n            if (\n              this.iframeElement.contentDocument &&\n              this.iframeElement.contentDocument.body\n            ) {\n              this.setupSignalObserver(this.iframeElement.contentDocument);\n            }\n\n            // Also check for URL parameters (code, error) in case of direct callback\n            this.processCallbackUrl(currentUrl);\n          } else {\n            // Hide content if not on login app\n            this.checkAndHideNonLoginContent();\n          }\n        }\n      } catch {\n        // Expected when iframe is on different origin\n        // Only log if we haven't seen this before\n        if (lastKnownUrl !== \"cross-origin\") {\n          lastKnownUrl = \"cross-origin\";\n          this.logger.debug(\n            \"Iframe on cross-origin domain (expected during auth flow)\",\n          );\n        }\n      }\n    };\n\n    // Check immediately and then every 100ms for faster detection\n    checkIframeNavigation();\n    monitoringInterval = window.setInterval(checkIframeNavigation, 100);\n\n    // Store cleanup function to clear monitoring\n    const originalCleanup = this.cleanup;\n    this.cleanup = () => {\n      if (monitoringInterval) {\n        clearInterval(monitoringInterval);\n      }\n      originalCleanup();\n    };\n  }\n\n  private processCallbackUrl(currentUrl: string): void {\n    const urlParams = new URLSearchParams(new URL(currentUrl).search);\n    const code = urlParams.get(\"code\");\n    const error = urlParams.get(\"error\");\n\n    if (code) {\n      this.logger.info(\"Authorization code detected in iframe URL\", {\n        code: code.substring(0, 10) + \"...\",\n        hasState: !!urlParams.get(\"state\"),\n      });\n    }\n\n    if (error) {\n      this.logger.error(\"OAuth error detected in iframe URL\", {\n        error,\n        errorDescription: urlParams.get(\"error_description\"),\n      });\n\n      const authError = new CivicAuthError(\n        `OAuth error: ${error}`,\n        CivicAuthErrorCode.INVALID_MESSAGE,\n      );\n\n      this.config.events?.emit(AuthEvent.SIGN_IN_ERROR, {\n        detail: authError.message,\n        error: urlParams.get(\"error_description\") || error,\n      });\n\n      this.onAuthError(authError);\n    }\n  }\n\n  public navigateIframe(url: string): void {\n    if (!this.iframeElement) {\n      this.logger.error(\n        \"Cannot navigate iframe, iframeElement is not available.\",\n      );\n      this.onAuthError(\n        new CivicAuthError(\n          \"Iframe element not found for navigation.\",\n          CivicAuthErrorCode.IFRAME_NOT_FOUND,\n        ),\n      );\n      return;\n    }\n    if (!this.iframeManager) {\n      this.logger.error(\n        \"Cannot navigate iframe, iframeManager is not available.\",\n      );\n      this.onAuthError(\n        new CivicAuthError(\n          \"Iframe manager not found for navigation.\",\n          CivicAuthErrorCode.INTERNAL_ERROR,\n        ),\n      );\n      return;\n    }\n    this.logger.info(\"Navigating iframe to new URL\", { url });\n    this.iframeElement.src = url;\n    // After changing src, existing onload/onmessage handlers in IframeManager\n    // and navigation monitoring in this class should manage visibility and state.\n  }\n}\n"]}
+{"version":3,"file":"IframeAuthHandler.js","sourceRoot":"","sources":["../../../../src/vanillajs/auth/handlers/IframeAuthHandler.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,SAAS,EAAE,MAAM,sBAAsB,CAAC;AAGjD,OAAO,EAAE,cAAc,EAAE,kBAAkB,EAAE,MAAM,uBAAuB,CAAC;AAC3E,OAAO,EAAE,cAAc,EAAE,MAAM,gCAAgC,CAAC;AAChE,OAAO,EAAE,aAAa,EAAE,MAAM,+BAA+B,CAAC;AAE9D,OAAO,EAAE,YAAY,IAAI,cAAc,EAAE,MAAM,uBAAuB,CAAC;AACvE,OAAO,EAAE,4CAA4C,EAAE,MAAM,gBAAgB,CAAC;AAW9E,MAAM,OAAO,iBAAiB;IACpB,MAAM,CAA2B;IACjC,MAAM,GAAG,cAAc,CAAC,aAAa,CAAC,CAAC;IACvC,aAAa,CAA+B;IAC5C,WAAW,CAAyB;IACpC,OAAO,CAAa;IACpB,cAAc,CAAgC;IAC9C,aAAa,CAAiB;IAC9B,aAAa,CAAqB;IAClC,cAAc,CAAkB;IAChC,uBAAuB,CAA+B;IACtD,gBAAgB,CAAU,CAAC,0BAA0B;IAE7D,YAAY,aAAsC;QAChD,IAAI,CAAC,MAAM,GAAG,aAAa,CAAC,MAAM,CAAC;QACnC,IAAI,CAAC,MAAM,GAAG,aAAa,CAAC,MAAM,CAAC;QACnC,IAAI,CAAC,aAAa,GAAG,aAAa,CAAC,aAAa,CAAC;QACjD,IAAI,CAAC,WAAW,GAAG,aAAa,CAAC,WAAW,CAAC;QAC7C,IAAI,CAAC,OAAO,GAAG,aAAa,CAAC,OAAO,CAAC;QACrC,IAAI,CAAC,cAAc,GAAG,aAAa,CAAC,cAAc,CAAC;QAEnD,wCAAwC;QACxC,IAAI,CAAC,gBAAgB,GAAG,IAAI,CAAC,MAAM,CAAC,aAAa,CAAC;QAElD,uDAAuD;QACvD,IAAI,CAAC,uBAAuB,GAAG,CAAC,KAAkB,EAAE,EAAE;YACpD,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,mDAAmD,EAAE;gBACpE,MAAM,EAAE,KAAK,CAAC,MAAM;aACrB,CAAC,CAAC;YAEH,sEAAsE;YACtE,IAAI,IAAI,CAAC,aAAa,EAAE,CAAC;gBACvB,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,gDAAgD,CAAC,CAAC;gBACnE,IAAI,CAAC,aAAa,CAAC,IAAI,EAAE,CAAC;gBAE1B,mDAAmD;gBACnD,IAAI,CAAC,MAAM,CAAC,MAAM,EAAE,IAAI,CAAC,SAAS,CAAC,eAAe,EAAE;oBAClD,MAAM,EAAE,+CAA+C;iBACxD,CAAC,CAAC;YACL,CAAC;QACH,CAAC,CAAC;QAEF,MAAM,CAAC,gBAAgB,CACrB,0BAA0B,EAC1B,IAAI,CAAC,uBAAwC,CAC9C,CAAC;IACJ,CAAC;IAED;;;OAGG;IACI,KAAK,CAAC,aAAa,CAAC,WAAmB;QAC5C,IAAI,CAAC,IAAI,CAAC,gBAAgB,EAAE,CAAC;YAC3B,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,iDAAiD,CAAC,CAAC;YACrE,OAAO;QACT,CAAC;QAED,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,uCAAuC,EAAE;YACzD,GAAG,EAAE,WAAW;SACjB,CAAC,CAAC;QAEH,4DAA4D;QAC5D,MAAM,iBAAiB,GAAG,IAAI,CAAC,0BAA0B,EAAE,CAAC;QAE5D,IAAI,SAAS,GAAG,IAAI,CAAC,mBAAmB,EAAE,CAAC;QAE3C,sEAAsE;QACtE,IAAI,iBAAiB,KAAK,OAAO,IAAI,CAAC,SAAS,EAAE,CAAC;YAChD,SAAS,GAAG,IAAI,CAAC,oBAAoB,EAAE,CAAC;QAC1C,CAAC;QAED,IAAI,CAAC,SAAS,EAAE,CAAC;YACf,MAAM,KAAK,GAAG,IAAI,cAAc,CAC9B,oDAAoD,EACpD,kBAAkB,CAAC,mBAAmB,CACvC,CAAC;YACF,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC;YACjC,MAAM,KAAK,CAAC;QACd,CAAC;QAED,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,uCAAuC,EAAE;YACzD,GAAG,EAAE,WAAW;YAChB,WAAW,EAAE,SAAS,EAAE,EAAE;YAC1B,QAAQ,EAAE,IAAI,CAAC,MAAM,CAAC,QAAQ;YAC9B,MAAM,EAAE,MAAM,CAAC,QAAQ,CAAC,MAAM;YAC9B,iBAAiB;SAClB,CAAC,CAAC;QAEH,qDAAqD;QACrD,IAAI,CAAC,aAAa,GAAG,IAAI,aAAa,CAAC;YACrC,SAAS,EAAE,SAAS;YACpB,WAAW,EAAE,iBAAiB;YAC9B,QAAQ,EAAE,IAAI,CAAC,MAAM,CAAC,QAAQ;YAC9B,OAAO,EAAE,GAAG,EAAE;gBACZ,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,+CAA+C,CAAC,CAAC;gBACnE,iEAAiE;gBACjE,IAAI,CAAC,aAAa,EAAE,CAAC;YACvB,CAAC;SACF,CAAC,CAAC;QAEH,yCAAyC;QACzC,IAAI,CAAC,aAAa,GAAG,IAAI,CAAC,aAAa,CAAC,aAAa,CAAC,WAAW,CAAC,CAAC;QAEnE,iDAAiD;QACjD,IAAI,CAAC,wBAAwB,EAAE,CAAC;QAChC,IAAI,CAAC,+BAA+B,EAAE,CAAC;QAEvC,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,+BAA+B,EAAE,EAAE,GAAG,EAAE,WAAW,EAAE,CAAC,CAAC;IAC3E,CAAC;IAEM,KAAK,CAAC,gBAAgB,CAC3B,WAAmB;QAEnB,iEAAiE;QACjE,8EAA8E;QAC9E,wFAAwF;QACxF,IAAI,IAAI,CAAC,aAAa,EAAE,iBAAiB,EAAE,IAAI,IAAI,CAAC,aAAa,EAAE,CAAC;YAClE,MAAM,YAAY,GAAG,IAAI,CAAC,aAAa,CAAC,eAAe,EAAE,CAAC;YAC1D,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,4CAA4C,EAAE;gBAC9D,YAAY;gBACZ,YAAY,EAAE,WAAW;gBACzB,SAAS,EAAE,YAAY,KAAK,WAAW;aACxC,CAAC,CAAC;YAEH,iFAAiF;YACjF,4EAA4E;YAC5E,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,uCAAuC,EAAE;gBACzD,YAAY;gBACZ,YAAY,EAAE,WAAW;gBACzB,MAAM,EAAE,uCAAuC;aAChD,CAAC,CAAC;YAEH,uDAAuD;YACvD,8FAA8F;YAC9F,IAAI,CAAC,aAAa,CAAC,oBAAoB,CAAC,GAAG,EAAE;gBAC3C,IAAI,CAAC,MAAM,CAAC,KAAK,CACf,sFAAsF,CACvF,CAAC;gBACF,IAAI,CAAC,MAAM,CAAC,MAAM,EAAE,IAAI,CAAC,SAAS,CAAC,aAAa,EAAE;oBAChD,MAAM,EAAE,kCAAkC;iBAC3C,CAAC,CAAC;gBAEH,MAAM,KAAK,GAAG,IAAI,cAAc,CAC9B,kCAAkC,EAClC,kBAAkB,CAAC,cAAc,CAClC,CAAC;gBAEF,IAAI,CAAC,WAAW,CAAC,KAAK,CAAC,CAAC;gBACxB,IAAI,CAAC,OAAO,EAAE,CAAC;YACjB,CAAC,CAAC,CAAC;YAEH,sCAAsC;YACtC,IAAI,CAAC,aAAa,GAAG,IAAI,CAAC,aAAa,CAAC,YAAY,CAAC,WAAW,CAAC,CAAC;YAElE,IAAI,CAAC,MAAM,CAAC,MAAM,EAAE,IAAI,CAAC,SAAS,CAAC,eAAe,EAAE;gBAClD,MAAM,EAAE,sCAAsC;aAC/C,CAAC,CAAC;YAEH,OAAO,IAAI,CAAC,aAAa,CAAC;QAC5B,CAAC;QAED,+DAA+D;QAC/D,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,oDAAoD,EAAE;YACtE,GAAG,EAAE,WAAW;SACjB,CAAC,CAAC;QAEH,4DAA4D;QAC5D,MAAM,iBAAiB,GAAG,IAAI,CAAC,0BAA0B,EAAE,CAAC;QAE5D,IAAI,SAAS,GAAG,IAAI,CAAC,mBAAmB,EAAE,CAAC;QAE3C,sEAAsE;QACtE,IAAI,iBAAiB,KAAK,OAAO,IAAI,CAAC,SAAS,EAAE,CAAC;YAChD,SAAS,GAAG,IAAI,CAAC,oBAAoB,EAAE,CAAC;QAC1C,CAAC;QAED,IAAI,CAAC,SAAS,EAAE,CAAC;YACf,MAAM,KAAK,GAAG,IAAI,cAAc,CAC9B,qCAAqC,EACrC,kBAAkB,CAAC,mBAAmB,CACvC,CAAC;YACF,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC;YACjC,MAAM,KAAK,CAAC;QACd,CAAC;QAED,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,qCAAqC,EAAE;YACvD,GAAG,EAAE,WAAW;YAChB,WAAW,EAAE,SAAS,EAAE,EAAE;YAC1B,QAAQ,EAAE,IAAI,CAAC,MAAM,CAAC,QAAQ;YAC9B,MAAM,EAAE,MAAM,CAAC,QAAQ,CAAC,MAAM;YAC9B,iBAAiB;YACjB,gBAAgB,EACd,iBAAiB,KAAK,OAAO,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,sBAAsB;SACvE,CAAC,CAAC;QAEH,IAAI,CAAC,MAAM,CAAC,KAAK,CACf,2DAA2D,iBAAiB,EAAE,CAC/E,CAAC;QAEF,qDAAqD;QACrD,IAAI,CAAC,aAAa,GAAG,IAAI,aAAa,CAAC;YACrC,SAAS,EAAE,SAAS;YACpB,WAAW,EAAE,iBAAiB;YAC9B,QAAQ,EAAE,IAAI,CAAC,MAAM,CAAC,QAAQ;YAC9B;;;;eAIG;YACH,OAAO,EAAE,GAAG,EAAE;gBACZ,IAAI,CAAC,MAAM,CAAC,KAAK,CACf,sFAAsF,CACvF,CAAC;gBACF,IAAI,CAAC,MAAM,CAAC,MAAM,EAAE,IAAI,CAAC,SAAS,CAAC,aAAa,EAAE;oBAChD,MAAM,EAAE,kCAAkC;iBAC3C,CAAC,CAAC;gBAEH,MAAM,KAAK,GAAG,IAAI,cAAc,CAC9B,kCAAkC,EAClC,kBAAkB,CAAC,cAAc,CAClC,CAAC;gBAEF,IAAI,CAAC,WAAW,CAAC,KAAK,CAAC,CAAC;gBACxB,IAAI,CAAC,OAAO,EAAE,CAAC;YACjB,CAAC;SACF,CAAC,CAAC;QAEH,wCAAwC;QACxC,IAAI,CAAC,aAAa,GAAG,IAAI,CAAC,aAAa,CAAC,YAAY,CAAC,WAAW,CAAC,CAAC;QAElE,IAAI,CAAC,MAAM,CAAC,MAAM,EAAE,IAAI,CAAC,SAAS,CAAC,eAAe,EAAE;YAClD,MAAM,EAAE,oCAAoC;SAC7C,CAAC,CAAC;QAEH,IAAI,CAAC,wBAAwB,EAAE,CAAC;QAChC,IAAI,CAAC,+BAA+B,EAAE,CAAC;QAEvC,OAAO,IAAI,CAAC,aAAa,CAAC;IAC5B,CAAC;IAEM,gBAAgB;QACrB,OAAO,IAAI,CAAC,aAAa,CAAC;IAC5B,CAAC;IAEM,gBAAgB;QACrB,OAAO,IAAI,CAAC,aAAa,CAAC;IAC5B,CAAC;IAEM,aAAa;QAClB,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,4BAA4B,CAAC,CAAC;QAChD,IAAI,CAAC,aAAa,EAAE,OAAO,EAAE,CAAC;QAC9B,IAAI,CAAC,aAAa,GAAG,SAAS,CAAC;QAE/B,IAAI,IAAI,CAAC,aAAa,EAAE,CAAC;YACvB,IAAI,CAAC,aAAa,GAAG,SAAS,CAAC;QACjC,CAAC;QAED,2CAA2C;QAC3C,IAAI,IAAI,CAAC,uBAAuB,EAAE,CAAC;YACjC,MAAM,CAAC,mBAAmB,CACxB,0BAA0B,EAC1B,IAAI,CAAC,uBAAwC,CAC9C,CAAC;QACJ,CAAC;QAED,gDAAgD;QAChD,IAAI,CAAC,4BAA4B,EAAE,CAAC;IACtC,CAAC;IAEO,4BAA4B;QAClC,2EAA2E;QAC3E,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,sBAAsB,EAAE,CAAC;YACxC,MAAM,gBAAgB,GAAG,QAAQ,CAAC,aAAa,CAC7C,kCAAkC,IAAI,CAAC,MAAM,CAAC,QAAQ,kBAAkB,CACzE,CAAC;YAEF,IAAI,gBAAgB,IAAI,gBAAgB,CAAC,UAAU,EAAE,CAAC;gBACpD,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,kCAAkC,EAAE;oBACpD,WAAW,EAAE,gBAAgB,CAAC,EAAE;iBACjC,CAAC,CAAC;gBACH,gBAAgB,CAAC,UAAU,CAAC,WAAW,CAAC,gBAAgB,CAAC,CAAC;YAC5D,CAAC;QACH,CAAC;IACH,CAAC;IAEO,oBAAoB;QAC1B,MAAM,SAAS,GAAG,QAAQ,CAAC,aAAa,CAAC,KAAK,CAAC,CAAC;QAChD,SAAS,CAAC,EAAE,GAAG,GAAG,IAAI,CAAC,MAAM,CAAC,QAAQ,kBAAkB,CAAC;QACzD,SAAS,CAAC,YAAY,CAAC,uBAAuB,EAAE,MAAM,CAAC,CAAC;QAExD,mCAAmC;QACnC,QAAQ,CAAC,IAAI,CAAC,WAAW,CAAC,SAAS,CAAC,CAAC;QAErC,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,iCAAiC,EAAE;YACnD,WAAW,EAAE,SAAS,CAAC,EAAE;SAC1B,CAAC,CAAC;QAEH,OAAO,SAAS,CAAC;IACnB,CAAC;IAEO,mBAAmB;QACzB,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,sBAAsB,EAAE,CAAC;YACxC,OAAO,IAAI,CAAC;QACd,CAAC;QAED,IAAI,OAAO,IAAI,CAAC,MAAM,CAAC,sBAAsB,KAAK,QAAQ,EAAE,CAAC;YAC3D,MAAM,OAAO,GAAG,QAAQ,CAAC,cAAc,CACrC,IAAI,CAAC,MAAM,CAAC,sBAAsB,CACnC,CAAC;YACF,IAAI,CAAC,OAAO,EAAE,CAAC;gBACb,IAAI,CAAC,MAAM,CAAC,IAAI,CACd,8BAA8B,IAAI,CAAC,MAAM,CAAC,sBAAsB,aAAa,CAC9E,CAAC;YACJ,CAAC;YACD,OAAO,OAAO,CAAC;QACjB,CAAC;QACD,OAAO,IAAI,CAAC,MAAM,CAAC,sBAAsB,CAAC;IAC5C,CAAC;IAEO,0BAA0B;QAChC,6DAA6D;QAC7D,oFAAoF;QACpF,IAAI,IAAI,CAAC,MAAM,CAAC,iBAAiB,EAAE,CAAC;YAClC,IAAI,CAAC,MAAM,CAAC,KAAK,CACf,uCAAuC,IAAI,CAAC,MAAM,CAAC,iBAAiB,EAAE,CACvE,CAAC;YACF,OAAO,IAAI,CAAC,MAAM,CAAC,iBAAiB,CAAC;QACvC,CAAC;QAED,wFAAwF;QACxF,+EAA+E;QAC/E,qFAAqF;QACrF,IAAI,IAAI,CAAC,MAAM,CAAC,WAAW,KAAK,QAAQ,EAAE,CAAC;YACzC,IAAI,CAAC,MAAM,CAAC,KAAK,CACf,uGAAuG,CACxG,CAAC;YACF,OAAO,OAAO,CAAC;QACjB,CAAC;QAED,gGAAgG;QAChG,IAAI,CAAC,MAAM,CAAC,IAAI,CACd,gEAAgE,IAAI,CAAC,MAAM,CAAC,WAAW,IAAI;YACzF,wEAAwE,CAC3E,CAAC;QACF,OAAO,OAAO,CAAC;IACjB,CAAC;IAEO,wBAAwB;QAC9B,IAAI,CAAC,IAAI,CAAC,aAAa;YAAE,OAAO;QAEhC,IAAI,CAAC,aAAa,CAAC,MAAM,GAAG,GAAG,EAAE;YAC/B,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,eAAe,EAAE;gBAChC,SAAS,EAAE,IAAI,CAAC,aAAa,EAAE,GAAG;gBAClC,aAAa,EAAE,MAAM,CAAC,QAAQ,CAAC,MAAM;gBACrC,wBAAwB,EAAE,IAAI,GAAG,CAAC,IAAI,CAAC,MAAM,CAAC,kBAAkB,CAAC;qBAC9D,MAAM;aACV,CAAC,CAAC;YAEH,IAAI,CAAC,IAAI,CAAC,aAAa,EAAE,aAAa,EAAE,CAAC;gBACvC,MAAM,QAAQ,GAAG,iDAAiD,CAAC;gBACnE,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,QAAQ,EAAE;oBAC1B,SAAS,EAAE,IAAI,CAAC,aAAa,EAAE,GAAG;iBACnC,CAAC,CAAC;gBAEH,MAAM,KAAK,GAAG,IAAI,KAAK,CAAC,QAAQ,CAAC,CAAC;gBAClC,IAAI,CAAC,WAAW,CAAC,KAAK,CAAC,CAAC;gBACxB,IAAI,CAAC,OAAO,EAAE,CAAC;gBACf,OAAO;YACT,CAAC;YAED,6DAA6D;YAC7D,MAAM,CAAC,gBAAgB,CAAC,SAAS,EAAE,IAAI,CAAC,cAAc,CAAC,CAAC;YACxD,IAAI,CAAC,MAAM,CAAC,IAAI,CACd,yEAAyE,EACzE;gBACE,YAAY,EAAE,MAAM,CAAC,QAAQ,CAAC,MAAM;gBACpC,gBAAgB,EAAE,IAAI,GAAG,CAAC,IAAI,CAAC,MAAM,CAAC,kBAAkB,CAAC,CAAC,MAAM;aACjE,CACF,CAAC;YAEF,gDAAgD;YAChD,IAAI,CAAC,2BAA2B,EAAE,CAAC;YAEnC,uCAAuC;YACvC,IAAI,CAAC,mBAAmB,EAAE,CAAC;QAC7B,CAAC,CAAC;QAEF,IAAI,CAAC,aAAa,CAAC,OAAO,GAAG,CAAC,KAAK,EAAE,EAAE;YACrC,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,mBAAmB,EAAE;gBACrC,KAAK;gBACL,SAAS,EAAE,IAAI,CAAC,aAAa,EAAE,GAAG;gBAClC,aAAa,EAAE,MAAM,CAAC,QAAQ,CAAC,MAAM;aACtC,CAAC,CAAC;YACH,IAAI,CAAC,MAAM,CAAC,MAAM,EAAE,IAAI,CAAC,SAAS,CAAC,aAAa,EAAE;gBAChD,MAAM,EAAE,mBAAmB;gBAC3B,KAAK,EAAE,KAAK;aACb,CAAC,CAAC;YAEH,MAAM,KAAK,GAAG,IAAI,KAAK,CAAC,wBAAwB,CAAC,CAAC;YAClD,IAAI,CAAC,WAAW,CAAC,KAAK,CAAC,CAAC;YACxB,IAAI,CAAC,OAAO,EAAE,CAAC;QACjB,CAAC,CAAC;IACJ,CAAC;IAEO,2BAA2B;QACjC,IAAI,CAAC;YACH,MAAM,UAAU,GAAG,IAAI,CAAC,aAAa,EAAE,aAAa,EAAE,QAAQ,CAAC,IAAI,CAAC;YACpE,IAAI,UAAU,EAAE,CAAC;gBACf,MAAM,aAAa,GAAG,IAAI,GAAG,CAAC,UAAU,CAAC,CAAC,MAAM,CAAC;gBACjD,MAAM,wBAAwB,GAAG,IAAI,CAAC,MAAM,CAAC,kBAAkB;oBAC7D,CAAC,CAAC,IAAI,GAAG,CAAC,IAAI,CAAC,MAAM,CAAC,kBAAkB,CAAC,CAAC,MAAM;oBAChD,CAAC,CAAC,IAAI,CAAC;gBACT,MAAM,cAAc,GAAG,wBAAwB;oBAC7C,CAAC,CAAC,aAAa,KAAK,wBAAwB;oBAC5C,CAAC,CAAC,KAAK,CAAC;gBACV,MAAM,aAAa,GAAG,IAAI,CAAC,MAAM,CAAC,WAAW;oBAC3C,CAAC,CAAC,UAAU,CAAC,UAAU,CAAC,IAAI,CAAC,MAAM,CAAC,WAAW,CAAC;oBAChD,CAAC,CAAC,KAAK,CAAC;gBAEV,IAAI,cAAc,IAAI,CAAC,aAAa,EAAE,CAAC;oBACrC,IAAI,CAAC,MAAM,CAAC,IAAI,CACd,uEAAuE,EACvE;wBACE,UAAU;wBACV,cAAc;wBACd,aAAa;wBACb,aAAa;wBACb,wBAAwB;qBACzB,CACF,CAAC;oBACF,IAAI,CAAC,aAAa,EAAE,eAAe,EAAE,CAAC;gBACxC,CAAC;qBAAM,CAAC;oBACN,IAAI,CAAC,MAAM,CAAC,IAAI,CACd,gEAAgE,EAChE;wBACE,UAAU;wBACV,cAAc;wBACd,aAAa;wBACb,aAAa;wBACb,wBAAwB;wBACxB,MAAM,EAAE,CAAC,cAAc;4BACrB,CAAC,CAAC,wBAAwB;gCACxB,CAAC,CAAC,sCAAsC;gCACxC,CAAC,CAAC,4BAA4B;4BAChC,CAAC,CAAC,qDAAqD;qBAC1D,CACF,CAAC;oBAEF,IAAI,aAAa,EAAE,CAAC;wBAClB,IAAI,CAAC,aAAa,EAAE,IAAI,EAAE,CAAC;oBAC7B,CAAC;yBAAM,CAAC;wBACN,IAAI,CAAC,aAAa,EAAE,eAAe,EAAE,CAAC;oBACxC,CAAC;gBACH,CAAC;YACH,CAAC;QACH,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,IAAI,CAAC,MAAM,CAAC,KAAK,CACf,uFAAuF,EACvF,EAAE,KAAK,EAAE,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,EAAE,CAClE,CAAC;YACF,UAAU,CAAC,GAAG,EAAE;gBACd,kFAAkF;gBAClF,8DAA8D;gBAC9D,IAAI,CAAC,aAAa,EAAE,eAAe,EAAE,CAAC;YACxC,CAAC,EAAE,4CAA4C,CAAC,CAAC;QACnD,CAAC;IACH,CAAC;IAEO,mBAAmB;QACzB,IAAI,CAAC;YACH,MAAM,iBAAiB,GACrB,IAAI,CAAC,aAAa,EAAE,aAAa,EAAE,QAAQ,CAAC,IAAI,CAAC;YAEnD,IAAI,iBAAiB,EAAE,CAAC;gBACtB,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,gCAAgC,EAAE;oBAClD,IAAI,EAAE,iBAAiB;oBACvB,WAAW,EAAE,IAAI,CAAC,MAAM,CAAC,WAAW;oBACpC,kBAAkB,EAAE,iBAAiB,CAAC,UAAU,CAC9C,IAAI,CAAC,MAAM,CAAC,WAAW,CACxB;iBACF,CAAC,CAAC;gBAEH,IAAI,iBAAiB,CAAC,UAAU,CAAC,IAAI,CAAC,MAAM,CAAC,WAAW,CAAC,EAAE,CAAC;oBAC1D,IAAI,CAAC,MAAM,CAAC,IAAI,CACd,6EAA6E,CAC9E,CAAC;oBAEF,gDAAgD;oBAChD,IAAI,CAAC,2BAA2B,EAAE,CAAC;oBAEnC,uDAAuD;oBACvD,IACE,IAAI,CAAC,aAAa,EAAE,eAAe;wBACnC,IAAI,CAAC,aAAa,CAAC,eAAe,CAAC,IAAI,EACvC,CAAC;wBACD,IAAI,CAAC,mBAAmB,CAAC,IAAI,CAAC,aAAa,CAAC,eAAe,CAAC,CAAC;oBAC/D,CAAC;yBAAM,CAAC;wBACN,IAAI,CAAC,MAAM,CAAC,IAAI,CACd,mEAAmE,CACpE,CAAC;oBACJ,CAAC;gBACH,CAAC;YACH,CAAC;QACH,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,IAAI,CAAC,MAAM,CAAC,KAAK,CACf,wDAAwD,EACxD;gBACE,KAAK,EAAE,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC;gBAC7D,SAAS,EAAE,IAAI,CAAC,aAAa,EAAE,GAAG;aACnC,CACF,CAAC;YACF,gEAAgE;YAChE,IAAI,CAAC,MAAM,CAAC,IAAI,CACd,uEAAuE,EACvE;gBACE,YAAY,EAAE,MAAM,CAAC,QAAQ,CAAC,MAAM;gBACpC,gBAAgB,EAAE,IAAI,GAAG,CAAC,IAAI,CAAC,MAAM,CAAC,kBAAkB,CAAC,CAAC,MAAM;aACjE,CACF,CAAC;QACJ,CAAC;IACH,CAAC;IAEO,mBAAmB,CAAC,SAAmB;QAC7C,MAAM,cAAc,GAAG,IAAI,cAAc,CACvC;YACE,WAAW,EAAE,IAAI,CAAC,MAAM,CAAC,WAAW;YACpC,MAAM,EAAE,IAAI,CAAC,MAAM,CAAC,MAAM;YAC1B,MAAM,EAAE,IAAI,CAAC,MAAM;SACpB,EACD,IAAI,CAAC,aAAa,EAClB,CAAC,KAAa,EAAE,EAAE,CAChB,IAAI,CAAC,WAAW,CAAC,KAAK,IAAI,IAAI,KAAK,CAAC,uBAAuB,CAAC,CAAC,EAC/D,GAAG,EAAE,CAAC,IAAI,CAAC,OAAO,EAAE,CACrB,CAAC;QAEF,cAAc,CAAC,KAAK,CAAC,SAAS,CAAC,CAAC;IAClC,CAAC;IAEO,+BAA+B;QACrC,4EAA4E;QAC5E,IAAI,kBAAkB,GAAuB,SAAS,CAAC;QACvD,IAAI,YAAY,GAAG,EAAE,CAAC;QAEtB,MAAM,qBAAqB,GAAG,GAAG,EAAE;YACjC,IAAI,CAAC,IAAI,CAAC,aAAa,EAAE,aAAa,EAAE,CAAC;gBACvC,IAAI,kBAAkB,EAAE,CAAC;oBACvB,aAAa,CAAC,kBAAkB,CAAC,CAAC;gBACpC,CAAC;gBACD,OAAO;YACT,CAAC;YAED,IAAI,CAAC;gBACH,MAAM,UAAU,GAAG,IAAI,CAAC,aAAa,CAAC,aAAa,CAAC,QAAQ,CAAC,IAAI,CAAC;gBAElE,IAAI,UAAU,KAAK,YAAY,EAAE,CAAC;oBAChC,YAAY,GAAG,UAAU,CAAC;oBAC1B,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,4BAA4B,EAAE;wBAC9C,MAAM,EAAE,UAAU;wBAClB,WAAW,EAAE,IAAI,CAAC,MAAM,CAAC,WAAW;wBACpC,aAAa,EAAE,UAAU,CAAC,UAAU,CAAC,IAAI,CAAC,MAAM,CAAC,WAAW,CAAC;qBAC9D,CAAC,CAAC;oBAEH,oDAAoD;oBACpD,IAAI,UAAU,CAAC,UAAU,CAAC,IAAI,CAAC,MAAM,CAAC,WAAW,CAAC,EAAE,CAAC;wBACnD,6CAA6C;wBAC7C,IAAI,CAAC,aAAa,EAAE,IAAI,EAAE,CAAC;wBAC3B,IAAI,CAAC,MAAM,CAAC,IAAI,CACd,+DAA+D,CAChE,CAAC;wBAEF,IAAI,kBAAkB,EAAE,CAAC;4BACvB,aAAa,CAAC,kBAAkB,CAAC,CAAC;wBACpC,CAAC;wBAED,uDAAuD;wBACvD,IACE,IAAI,CAAC,aAAa,CAAC,eAAe;4BAClC,IAAI,CAAC,aAAa,CAAC,eAAe,CAAC,IAAI,EACvC,CAAC;4BACD,IAAI,CAAC,mBAAmB,CAAC,IAAI,CAAC,aAAa,CAAC,eAAe,CAAC,CAAC;wBAC/D,CAAC;wBAED,yEAAyE;wBACzE,IAAI,CAAC,kBAAkB,CAAC,UAAU,CAAC,CAAC;oBACtC,CAAC;yBAAM,CAAC;wBACN,mCAAmC;wBACnC,IAAI,CAAC,2BAA2B,EAAE,CAAC;oBACrC,CAAC;gBACH,CAAC;YACH,CAAC;YAAC,MAAM,CAAC;gBACP,8CAA8C;gBAC9C,0CAA0C;gBAC1C,IAAI,YAAY,KAAK,cAAc,EAAE,CAAC;oBACpC,YAAY,GAAG,cAAc,CAAC;oBAC9B,IAAI,CAAC,MAAM,CAAC,KAAK,CACf,2DAA2D,CAC5D,CAAC;gBACJ,CAAC;YACH,CAAC;QACH,CAAC,CAAC;QAEF,8DAA8D;QAC9D,qBAAqB,EAAE,CAAC;QACxB,kBAAkB,GAAG,MAAM,CAAC,WAAW,CAAC,qBAAqB,EAAE,GAAG,CAAC,CAAC;QAEpE,6CAA6C;QAC7C,MAAM,eAAe,GAAG,IAAI,CAAC,OAAO,CAAC;QACrC,IAAI,CAAC,OAAO,GAAG,GAAG,EAAE;YAClB,IAAI,kBAAkB,EAAE,CAAC;gBACvB,aAAa,CAAC,kBAAkB,CAAC,CAAC;YACpC,CAAC;YACD,eAAe,EAAE,CAAC;QACpB,CAAC,CAAC;IACJ,CAAC;IAEO,kBAAkB,CAAC,UAAkB;QAC3C,MAAM,SAAS,GAAG,IAAI,eAAe,CAAC,IAAI,GAAG,CAAC,UAAU,CAAC,CAAC,MAAM,CAAC,CAAC;QAClE,MAAM,IAAI,GAAG,SAAS,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC;QACnC,MAAM,KAAK,GAAG,SAAS,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC;QAErC,IAAI,IAAI,EAAE,CAAC;YACT,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,2CAA2C,EAAE;gBAC5D,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,CAAC,EAAE,EAAE,CAAC,GAAG,KAAK;gBACnC,QAAQ,EAAE,CAAC,CAAC,SAAS,CAAC,GAAG,CAAC,OAAO,CAAC;aACnC,CAAC,CAAC;QACL,CAAC;QAED,IAAI,KAAK,EAAE,CAAC;YACV,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,oCAAoC,EAAE;gBACtD,KAAK;gBACL,gBAAgB,EAAE,SAAS,CAAC,GAAG,CAAC,mBAAmB,CAAC;aACrD,CAAC,CAAC;YAEH,MAAM,SAAS,GAAG,IAAI,cAAc,CAClC,gBAAgB,KAAK,EAAE,EACvB,kBAAkB,CAAC,eAAe,CACnC,CAAC;YAEF,IAAI,CAAC,MAAM,CAAC,MAAM,EAAE,IAAI,CAAC,SAAS,CAAC,aAAa,EAAE;gBAChD,MAAM,EAAE,SAAS,CAAC,OAAO;gBACzB,KAAK,EAAE,SAAS,CAAC,GAAG,CAAC,mBAAmB,CAAC,IAAI,KAAK;aACnD,CAAC,CAAC;YAEH,IAAI,CAAC,WAAW,CAAC,SAAS,CAAC,CAAC;QAC9B,CAAC;IACH,CAAC;IAEM,cAAc,CAAC,GAAW;QAC/B,IAAI,CAAC,IAAI,CAAC,aAAa,EAAE,CAAC;YACxB,IAAI,CAAC,MAAM,CAAC,KAAK,CACf,yDAAyD,CAC1D,CAAC;YACF,IAAI,CAAC,WAAW,CACd,IAAI,cAAc,CAChB,0CAA0C,EAC1C,kBAAkB,CAAC,gBAAgB,CACpC,CACF,CAAC;YACF,OAAO;QACT,CAAC;QACD,IAAI,CAAC,IAAI,CAAC,aAAa,EAAE,CAAC;YACxB,IAAI,CAAC,MAAM,CAAC,KAAK,CACf,yDAAyD,CAC1D,CAAC;YACF,IAAI,CAAC,WAAW,CACd,IAAI,cAAc,CAChB,0CAA0C,EAC1C,kBAAkB,CAAC,cAAc,CAClC,CACF,CAAC;YACF,OAAO;QACT,CAAC;QACD,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,8BAA8B,EAAE,EAAE,GAAG,EAAE,CAAC,CAAC;QAC1D,IAAI,CAAC,aAAa,CAAC,GAAG,GAAG,GAAG,CAAC;QAC7B,0EAA0E;QAC1E,8EAA8E;IAChF,CAAC;IAED;;OAEG;IACI,iBAAiB,CAAC,OAAgB;QACvC,IAAI,CAAC,gBAAgB,GAAG,OAAO,CAAC;QAChC,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,mBAAmB,EAAE,EAAE,OAAO,EAAE,CAAC,CAAC;IACtD,CAAC;IAED;;OAEG;IACI,iBAAiB;QACtB,OAAO,IAAI,CAAC,gBAAgB,CAAC;IAC/B,CAAC;IAED;;;;;;;;;;;;;;;;;OAiBG;IACI,kBAAkB,CAAC,GAAY;QACpC,IAAI,CAAC,IAAI,CAAC,aAAa;YAAE,OAAO,KAAK,CAAC;QAEtC,MAAM,WAAW,GAAG,IAAI,CAAC,aAAa,CAAC,iBAAiB,EAAE,CAAC;QAC3D,IAAI,CAAC,GAAG;YAAE,OAAO,WAAW,CAAC;QAE7B,OAAO,WAAW,IAAI,IAAI,CAAC,aAAa,CAAC,eAAe,EAAE,KAAK,GAAG,CAAC;IACrE,CAAC;IAED;;;;;OAKG;IACI,eAAe;QACpB,IAAI,IAAI,CAAC,aAAa,EAAE,CAAC;YACvB,IAAI,CAAC,aAAa,CAAC,IAAI,EAAE,CAAC;YAC1B,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,uBAAuB,CAAC,CAAC;QAC7C,CAAC;aAAM,CAAC;YACN,IAAI,CAAC,MAAM,CAAC,IAAI,CACd,0DAA0D,CAC3D,CAAC;QACJ,CAAC;IACH,CAAC;IAED;;OAEG;IACI,eAAe;QACpB,IAAI,IAAI,CAAC,aAAa,EAAE,CAAC;YACvB,IAAI,CAAC,aAAa,CAAC,eAAe,EAAE,CAAC;YACrC,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,8BAA8B,CAAC,CAAC;QACpD,CAAC;aAAM,CAAC;YACN,IAAI,CAAC,MAAM,CAAC,IAAI,CACd,0DAA0D,CAC3D,CAAC;QACJ,CAAC;IACH,CAAC;CACF","sourcesContent":["import { AuthEvent } from \"../../types/index.js\";\nimport type { AuthResult } from \"../../types/index.js\";\nimport type { ProcessedCivicAuthConfig } from \"../types/AuthTypes.js\";\nimport { CivicAuthError, CivicAuthErrorCode } from \"../types/AuthTypes.js\";\nimport { SignalObserver } from \"../../iframe/SignalObserver.js\";\nimport { IframeManager } from \"../../iframe/IframeManager.js\";\nimport type { createLogger } from \"../../utils/logger.js\";\nimport { createLogger as createLoggerFn } from \"../../utils/logger.js\";\nimport { WAIT_FOR_LOGIN_APP_BROWSER_DETECTION_TIMEOUT } from \"@/constants.js\";\n\nexport interface IframeAuthHandlerConfig {\n  config: ProcessedCivicAuthConfig;\n  logger: ReturnType<typeof createLogger>;\n  onAuthSuccess: (result: AuthResult) => void;\n  onAuthError: (error: Error) => void;\n  cleanup: () => void;\n  messageHandler: (event: MessageEvent) => void;\n}\n\nexport class IframeAuthHandler {\n  private config: ProcessedCivicAuthConfig;\n  private logger = createLoggerFn(\"iframe-auth\");\n  private onAuthSuccess: (result: AuthResult) => void;\n  private onAuthError: (error: Error) => void;\n  private cleanup: () => void;\n  private messageHandler: (event: MessageEvent) => void;\n  private iframeManager?: IframeManager;\n  private iframeElement?: HTMLIFrameElement;\n  private signalObserver?: SignalObserver;\n  private earlyAuthSuccessHandler: (event: CustomEvent) => void;\n  private isPreloadEnabled: boolean; // Initialized from config\n\n  constructor(handlerConfig: IframeAuthHandlerConfig) {\n    this.config = handlerConfig.config;\n    this.logger = handlerConfig.logger;\n    this.onAuthSuccess = handlerConfig.onAuthSuccess;\n    this.onAuthError = handlerConfig.onAuthError;\n    this.cleanup = handlerConfig.cleanup;\n    this.messageHandler = handlerConfig.messageHandler;\n\n    // Set preload enabled state from config\n    this.isPreloadEnabled = this.config.preloadIframe;\n\n    // Listen for early auth success signals from login-app\n    this.earlyAuthSuccessHandler = (event: CustomEvent) => {\n      this.logger.info(\"Received early auth success signal from login-app\", {\n        detail: event.detail,\n      });\n\n      // Close the modal immediately but keep iframe for callback processing\n      if (this.iframeManager) {\n        this.logger.info(\"Closing modal early due to auth success signal\");\n        this.iframeManager.hide();\n\n        // Emit event to notify that modal is closing early\n        this.config.events?.emit(AuthEvent.SIGN_IN_STARTED, {\n          detail: \"Modal closed early due to auth success signal\",\n        });\n      }\n    };\n\n    window.addEventListener(\n      \"civic-auth-success-early\",\n      this.earlyAuthSuccessHandler as EventListener,\n    );\n  }\n\n  /**\n   * Preloads the iframe with the authentication URL for instant display later\n   * This creates the iframe in the background but keeps it completely hidden\n   */\n  public async preloadIframe(fullAuthUrl: string): Promise<void> {\n    if (!this.isPreloadEnabled) {\n      this.logger.debug(\"Iframe preloading is disabled, skipping preload\");\n      return;\n    }\n\n    this.logger.debug(\"Preloading iframe for instant sign-in\", {\n      url: fullAuthUrl,\n    });\n\n    // Determine the actual display mode for IframeManager first\n    const iframeDisplayMode = this.determineIframeDisplayMode();\n\n    let container = this.getContainerElement();\n\n    // For modal mode, if no container is provided, create one dynamically\n    if (iframeDisplayMode === \"modal\" && !container) {\n      container = this.createModalContainer();\n    }\n\n    if (!container) {\n      const error = new CivicAuthError(\n        \"Target container element not found for preloading.\",\n        CivicAuthErrorCode.CONTAINER_NOT_FOUND,\n      );\n      this.logger.error(error.message);\n      throw error;\n    }\n\n    this.logger.debug(\"Creating IframeManager for preloading\", {\n      url: fullAuthUrl,\n      containerId: container?.id,\n      iframeId: this.config.iframeId,\n      origin: window.location.origin,\n      iframeDisplayMode,\n    });\n\n    // Create IframeManager with appropriate display mode\n    this.iframeManager = new IframeManager({\n      container: container,\n      displayMode: iframeDisplayMode,\n      iframeId: this.config.iframeId,\n      onClose: () => {\n        this.logger.debug(\"Authentication close requested during preload\");\n        // For preload, we don't want to trigger auth error, just cleanup\n        this.cleanupIframe();\n      },\n    });\n\n    // Preload the iframe using IframeManager\n    this.iframeElement = this.iframeManager.preloadIframe(fullAuthUrl);\n\n    // Set up event handlers for the preloaded iframe\n    this.setupIframeEventHandlers();\n    this.setupIframeNavigationMonitoring();\n\n    this.logger.debug(\"Iframe preloaded successfully\", { url: fullAuthUrl });\n  }\n\n  public async handleIframeAuth(\n    fullAuthUrl: string,\n  ): Promise<HTMLIFrameElement> {\n    // Check if we have a preloaded iframe that we can show instantly\n    // We use the preloaded iframe if available, even if URLs don't exactly match,\n    // since PKCE challenges and other parameters may differ between preload and actual auth\n    if (this.iframeManager?.isIframePreloaded() && this.iframeElement) {\n      const preloadedUrl = this.iframeManager.getPreloadedUrl();\n      this.logger.debug(\"Using preloaded iframe for instant sign-in\", {\n        preloadedUrl,\n        requestedUrl: fullAuthUrl,\n        urlsMatch: preloadedUrl === fullAuthUrl,\n      });\n\n      // Don't change iframe.src for preloaded iframes - use them as-is to avoid reload\n      // The preloaded authentication flow will work perfectly without URL changes\n      this.logger.debug(\"Using preloaded iframe without reload\", {\n        preloadedUrl,\n        requestedUrl: fullAuthUrl,\n        action: \"skipping_url_change_to_prevent_reload\",\n      });\n\n      // Update the onClose handler for active authentication\n      // During preload, onClose only cleaned up, but during active auth it should emit error events\n      this.iframeManager.updateOnCloseHandler(() => {\n        this.logger.debug(\n          \"Authentication close requested by user (backdrop click, close button, or Escape key)\",\n        );\n        this.config.events?.emit(AuthEvent.SIGN_IN_ERROR, {\n          detail: \"Authentication cancelled by user\",\n        });\n\n        const error = new CivicAuthError(\n          \"Authentication cancelled by user\",\n          CivicAuthErrorCode.USER_CANCELLED,\n        );\n\n        this.onAuthError(error);\n        this.cleanup();\n      });\n\n      // Show the preloaded iframe instantly\n      this.iframeElement = this.iframeManager.createIframe(fullAuthUrl);\n\n      this.config.events?.emit(AuthEvent.SIGN_IN_STARTED, {\n        detail: \"Preloaded iframe displayed instantly\",\n      });\n\n      return this.iframeElement;\n    }\n\n    // Fallback to creating a new iframe if no preload is available\n    this.logger.debug(\"No preloaded iframe available, creating new iframe\", {\n      url: fullAuthUrl,\n    });\n\n    // Determine the actual display mode for IframeManager first\n    const iframeDisplayMode = this.determineIframeDisplayMode();\n\n    let container = this.getContainerElement();\n\n    // For modal mode, if no container is provided, create one dynamically\n    if (iframeDisplayMode === \"modal\" && !container) {\n      container = this.createModalContainer();\n    }\n\n    if (!container) {\n      const error = new CivicAuthError(\n        \"Target container element not found.\",\n        CivicAuthErrorCode.CONTAINER_NOT_FOUND,\n      );\n      this.logger.error(error.message);\n      throw error;\n    }\n\n    this.logger.debug(\"Creating iframe with modal backdrop\", {\n      url: fullAuthUrl,\n      containerId: container?.id,\n      iframeId: this.config.iframeId,\n      origin: window.location.origin,\n      iframeDisplayMode,\n      containerCreated:\n        iframeDisplayMode === \"modal\" && !this.config.targetContainerElement,\n    });\n\n    this.logger.debug(\n      `🎯 CivicAuth: Creating IframeManager with display mode: ${iframeDisplayMode}`,\n    );\n\n    // Create IframeManager with appropriate display mode\n    this.iframeManager = new IframeManager({\n      container: container,\n      displayMode: iframeDisplayMode,\n      iframeId: this.config.iframeId,\n      /**\n       * Handles iframe closure events initiated by the user.\n       * This includes backdrop clicks, close button clicks, or Escape key presses.\n       * Emits an error event and cleans up the authentication process.\n       */\n      onClose: () => {\n        this.logger.debug(\n          \"Authentication close requested by user (backdrop click, close button, or Escape key)\",\n        );\n        this.config.events?.emit(AuthEvent.SIGN_IN_ERROR, {\n          detail: \"Authentication cancelled by user\",\n        });\n\n        const error = new CivicAuthError(\n          \"Authentication cancelled by user\",\n          CivicAuthErrorCode.USER_CANCELLED,\n        );\n\n        this.onAuthError(error);\n        this.cleanup();\n      },\n    });\n\n    // Create the iframe using IframeManager\n    this.iframeElement = this.iframeManager.createIframe(fullAuthUrl);\n\n    this.config.events?.emit(AuthEvent.SIGN_IN_STARTED, {\n      detail: \"Iframe created with modal backdrop\",\n    });\n\n    this.setupIframeEventHandlers();\n    this.setupIframeNavigationMonitoring();\n\n    return this.iframeElement;\n  }\n\n  public getIframeManager(): IframeManager | undefined {\n    return this.iframeManager;\n  }\n\n  public getIframeElement(): HTMLIFrameElement | undefined {\n    return this.iframeElement;\n  }\n\n  public cleanupIframe(): void {\n    this.logger.debug(\"Cleaning up iframe manager\");\n    this.iframeManager?.cleanup();\n    this.iframeManager = undefined;\n\n    if (this.iframeElement) {\n      this.iframeElement = undefined;\n    }\n\n    // Remove early auth success event listener\n    if (this.earlyAuthSuccessHandler) {\n      window.removeEventListener(\n        \"civic-auth-success-early\",\n        this.earlyAuthSuccessHandler as EventListener,\n      );\n    }\n\n    // Clean up dynamically created modal containers\n    this.cleanupDynamicModalContainer();\n  }\n\n  private cleanupDynamicModalContainer(): void {\n    // Only clean up containers we created dynamically (not user-provided ones)\n    if (!this.config.targetContainerElement) {\n      const dynamicContainer = document.querySelector(\n        `[data-civic-auth-modal=\"true\"]#${this.config.iframeId}-modal-container`,\n      );\n\n      if (dynamicContainer && dynamicContainer.parentNode) {\n        this.logger.debug(\"Removing dynamic modal container\", {\n          containerId: dynamicContainer.id,\n        });\n        dynamicContainer.parentNode.removeChild(dynamicContainer);\n      }\n    }\n  }\n\n  private createModalContainer(): HTMLElement {\n    const container = document.createElement(\"div\");\n    container.id = `${this.config.iframeId}-modal-container`;\n    container.setAttribute(\"data-civic-auth-modal\", \"true\");\n\n    // Append to body for modal overlay\n    document.body.appendChild(container);\n\n    this.logger.debug(\"Created dynamic modal container\", {\n      containerId: container.id,\n    });\n\n    return container;\n  }\n\n  private getContainerElement(): HTMLElement | null {\n    if (!this.config.targetContainerElement) {\n      return null;\n    }\n\n    if (typeof this.config.targetContainerElement === \"string\") {\n      const element = document.getElementById(\n        this.config.targetContainerElement,\n      );\n      if (!element) {\n        this.logger.warn(\n          `Container element with ID \"${this.config.targetContainerElement}\" not found`,\n        );\n      }\n      return element;\n    }\n    return this.config.targetContainerElement;\n  }\n\n  private determineIframeDisplayMode(): \"modal\" | \"embedded\" {\n    // Priority 1: Explicit iframeDisplayMode setting from config\n    // This is the most specific instruction for how the iframe itself should be styled.\n    if (this.config.iframeDisplayMode) {\n      this.logger.debug(\n        `Using configured iframeDisplayMode: ${this.config.iframeDisplayMode}`,\n      );\n      return this.config.iframeDisplayMode;\n    }\n\n    // Priority 2: If iframeDisplayMode is NOT set, and the overall displayMode is \"iframe\",\n    // default the iframe's own rendering style to \"modal\" (user-friendly default).\n    // To get an embedded iframe, iframeDisplayMode: \"embedded\" should be set explicitly.\n    if (this.config.displayMode === \"iframe\") {\n      this.logger.debug(\n        \"Overall displayMode is 'iframe' and iframeDisplayMode is not set, defaulting iframe style to 'modal'.\",\n      );\n      return \"modal\";\n    }\n\n    // Fallback for unexpected scenarios or if IframeAuthHandler is invoked with other displayModes.\n    this.logger.warn(\n      `determineIframeDisplayMode called with overall displayMode: '${this.config.displayMode}' ` +\n        `and no explicit iframeDisplayMode. Defaulting iframe style to 'modal'.`,\n    );\n    return \"modal\";\n  }\n\n  private setupIframeEventHandlers(): void {\n    if (!this.iframeElement) return;\n\n    this.iframeElement.onload = () => {\n      this.logger.info(\"Iframe loaded\", {\n        iframeSrc: this.iframeElement?.src,\n        currentOrigin: window.location.origin,\n        expectedAuthServerOrigin: new URL(this.config.oauthServerBaseUrl)\n          .origin,\n      });\n\n      if (!this.iframeElement?.contentWindow) {\n        const errorMsg = \"Iframe content window not available after load.\";\n        this.logger.error(errorMsg, {\n          iframeSrc: this.iframeElement?.src,\n        });\n\n        const error = new Error(errorMsg);\n        this.onAuthError(error);\n        this.cleanup();\n        return;\n      }\n\n      // Set up postMessage listener for cross-origin communication\n      window.addEventListener(\"message\", this.messageHandler);\n      this.logger.info(\n        \"Added cross-origin message event listener for auth server communication\",\n        {\n          parentOrigin: window.location.origin,\n          authServerOrigin: new URL(this.config.oauthServerBaseUrl).origin,\n        },\n      );\n\n      // Hide iframe content if it's not the login app\n      this.checkAndHideNonLoginContent();\n\n      // Try to detect redirect to our domain\n      this.checkIframeRedirect();\n    };\n\n    this.iframeElement.onerror = (event) => {\n      this.logger.error(\"Iframe load error\", {\n        event,\n        iframeSrc: this.iframeElement?.src,\n        currentOrigin: window.location.origin,\n      });\n      this.config.events?.emit(AuthEvent.SIGN_IN_ERROR, {\n        detail: \"Iframe load error\",\n        error: event,\n      });\n\n      const error = new Error(\"Iframe failed to load.\");\n      this.onAuthError(error);\n      this.cleanup();\n    };\n  }\n\n  private checkAndHideNonLoginContent(): void {\n    try {\n      const currentUrl = this.iframeElement?.contentWindow?.location.href;\n      if (currentUrl) {\n        const currentOrigin = new URL(currentUrl).origin;\n        const expectedAuthServerOrigin = this.config.oauthServerBaseUrl\n          ? new URL(this.config.oauthServerBaseUrl).origin\n          : null;\n        const isOnAuthServer = expectedAuthServerOrigin\n          ? currentOrigin === expectedAuthServerOrigin\n          : false;\n        const isCallbackUrl = this.config.redirectUrl\n          ? currentUrl.startsWith(this.config.redirectUrl)\n          : false;\n\n        if (isOnAuthServer && !isCallbackUrl) {\n          this.logger.info(\n            \"👀 Showing iframe content - confirmed login app on auth server origin\",\n            {\n              currentUrl,\n              isOnAuthServer,\n              isCallbackUrl,\n              currentOrigin,\n              expectedAuthServerOrigin,\n            },\n          );\n          this.iframeManager?.forceHideLoader();\n        } else {\n          this.logger.info(\n            \"🙈 Hiding iframe completely - not login app or on callback URL\",\n            {\n              currentUrl,\n              isOnAuthServer,\n              isCallbackUrl,\n              currentOrigin,\n              expectedAuthServerOrigin,\n              reason: !isOnAuthServer\n                ? expectedAuthServerOrigin\n                  ? \"not on auth server (origin mismatch)\"\n                  : \"auth server origin unknown\"\n                : \"on callback URL (or origin mismatch for login page)\",\n            },\n          );\n\n          if (isCallbackUrl) {\n            this.iframeManager?.hide();\n          } else {\n            this.iframeManager?.forceShowLoader();\n          }\n        }\n      }\n    } catch (error) {\n      this.logger.debug(\n        \"Cannot access iframe URL (likely cross-origin) - assuming login app, showing content.\",\n        { error: error instanceof Error ? error.message : String(error) },\n      );\n      setTimeout(() => {\n        // Force hide loader after a short delay to ensure any initial loading is complete\n        // to give the login-app time to send any post message signals\n        this.iframeManager?.forceHideLoader();\n      }, WAIT_FOR_LOGIN_APP_BROWSER_DETECTION_TIMEOUT);\n    }\n  }\n\n  private checkIframeRedirect(): void {\n    try {\n      const currentIframeHref =\n        this.iframeElement?.contentWindow?.location.href;\n\n      if (currentIframeHref) {\n        this.logger.debug(\"Iframe current href accessible\", {\n          href: currentIframeHref,\n          redirectUrl: this.config.redirectUrl,\n          startsWithRedirect: currentIframeHref.startsWith(\n            this.config.redirectUrl,\n          ),\n        });\n\n        if (currentIframeHref.startsWith(this.config.redirectUrl)) {\n          this.logger.info(\n            \"Iframe has navigated to redirectUrl (same-origin). Setting up DOM observer.\",\n          );\n\n          // Hide content since we're on callback page now\n          this.checkAndHideNonLoginContent();\n\n          // Set up signal observer for same-origin callback page\n          if (\n            this.iframeElement?.contentDocument &&\n            this.iframeElement.contentDocument.body\n          ) {\n            this.setupSignalObserver(this.iframeElement.contentDocument);\n          } else {\n            this.logger.warn(\n              \"Iframe content document or body not available for signal observer\",\n            );\n          }\n        }\n      }\n    } catch (error) {\n      this.logger.debug(\n        \"Error checking iframe href (expected for cross-origin)\",\n        {\n          error: error instanceof Error ? error.message : String(error),\n          iframeSrc: this.iframeElement?.src,\n        },\n      );\n      // This is expected when the iframe is on the auth server domain\n      this.logger.info(\n        \"Iframe is on auth server domain - using postMessage for communication\",\n        {\n          parentOrigin: window.location.origin,\n          authServerOrigin: new URL(this.config.oauthServerBaseUrl).origin,\n        },\n      );\n    }\n  }\n\n  private setupSignalObserver(iframeDoc: Document): void {\n    const signalObserver = new SignalObserver(\n      {\n        textSignals: this.config.textSignals,\n        events: this.config.events,\n        logger: this.logger,\n      },\n      this.onAuthSuccess,\n      (error?: Error) =>\n        this.onAuthError(error || new Error(\"Signal observer error\")),\n      () => this.cleanup(),\n    );\n\n    signalObserver.setup(iframeDoc);\n  }\n\n  private setupIframeNavigationMonitoring(): void {\n    // Monitor iframe navigation to detect when it redirects to our callback URL\n    let monitoringInterval: number | undefined = undefined;\n    let lastKnownUrl = \"\";\n\n    const checkIframeNavigation = () => {\n      if (!this.iframeElement?.contentWindow) {\n        if (monitoringInterval) {\n          clearInterval(monitoringInterval);\n        }\n        return;\n      }\n\n      try {\n        const currentUrl = this.iframeElement.contentWindow.location.href;\n\n        if (currentUrl !== lastKnownUrl) {\n          lastKnownUrl = currentUrl;\n          this.logger.debug(\"Iframe navigation detected\", {\n            newUrl: currentUrl,\n            redirectUrl: this.config.redirectUrl,\n            isCallbackUrl: currentUrl.startsWith(this.config.redirectUrl),\n          });\n\n          // Check if iframe has navigated to our callback URL\n          if (currentUrl.startsWith(this.config.redirectUrl)) {\n            // Hide immediately on callback URL detection\n            this.iframeManager?.hide();\n            this.logger.info(\n              \"Iframe navigated to callback URL - setting up signal observer\",\n            );\n\n            if (monitoringInterval) {\n              clearInterval(monitoringInterval);\n            }\n\n            // Set up signal observer for same-origin callback page\n            if (\n              this.iframeElement.contentDocument &&\n              this.iframeElement.contentDocument.body\n            ) {\n              this.setupSignalObserver(this.iframeElement.contentDocument);\n            }\n\n            // Also check for URL parameters (code, error) in case of direct callback\n            this.processCallbackUrl(currentUrl);\n          } else {\n            // Hide content if not on login app\n            this.checkAndHideNonLoginContent();\n          }\n        }\n      } catch {\n        // Expected when iframe is on different origin\n        // Only log if we haven't seen this before\n        if (lastKnownUrl !== \"cross-origin\") {\n          lastKnownUrl = \"cross-origin\";\n          this.logger.debug(\n            \"Iframe on cross-origin domain (expected during auth flow)\",\n          );\n        }\n      }\n    };\n\n    // Check immediately and then every 100ms for faster detection\n    checkIframeNavigation();\n    monitoringInterval = window.setInterval(checkIframeNavigation, 100);\n\n    // Store cleanup function to clear monitoring\n    const originalCleanup = this.cleanup;\n    this.cleanup = () => {\n      if (monitoringInterval) {\n        clearInterval(monitoringInterval);\n      }\n      originalCleanup();\n    };\n  }\n\n  private processCallbackUrl(currentUrl: string): void {\n    const urlParams = new URLSearchParams(new URL(currentUrl).search);\n    const code = urlParams.get(\"code\");\n    const error = urlParams.get(\"error\");\n\n    if (code) {\n      this.logger.info(\"Authorization code detected in iframe URL\", {\n        code: code.substring(0, 10) + \"...\",\n        hasState: !!urlParams.get(\"state\"),\n      });\n    }\n\n    if (error) {\n      this.logger.error(\"OAuth error detected in iframe URL\", {\n        error,\n        errorDescription: urlParams.get(\"error_description\"),\n      });\n\n      const authError = new CivicAuthError(\n        `OAuth error: ${error}`,\n        CivicAuthErrorCode.INVALID_MESSAGE,\n      );\n\n      this.config.events?.emit(AuthEvent.SIGN_IN_ERROR, {\n        detail: authError.message,\n        error: urlParams.get(\"error_description\") || error,\n      });\n\n      this.onAuthError(authError);\n    }\n  }\n\n  public navigateIframe(url: string): void {\n    if (!this.iframeElement) {\n      this.logger.error(\n        \"Cannot navigate iframe, iframeElement is not available.\",\n      );\n      this.onAuthError(\n        new CivicAuthError(\n          \"Iframe element not found for navigation.\",\n          CivicAuthErrorCode.IFRAME_NOT_FOUND,\n        ),\n      );\n      return;\n    }\n    if (!this.iframeManager) {\n      this.logger.error(\n        \"Cannot navigate iframe, iframeManager is not available.\",\n      );\n      this.onAuthError(\n        new CivicAuthError(\n          \"Iframe manager not found for navigation.\",\n          CivicAuthErrorCode.INTERNAL_ERROR,\n        ),\n      );\n      return;\n    }\n    this.logger.info(\"Navigating iframe to new URL\", { url });\n    this.iframeElement.src = url;\n    // After changing src, existing onload/onmessage handlers in IframeManager\n    // and navigation monitoring in this class should manage visibility and state.\n  }\n\n  /**\n   * Enable or disable iframe preloading\n   */\n  public setPreloadEnabled(enabled: boolean): void {\n    this.isPreloadEnabled = enabled;\n    this.logger.debug(\"Iframe preloading\", { enabled });\n  }\n\n  /**\n   * Check if iframe preloading is enabled\n   */\n  public getPreloadEnabled(): boolean {\n    return this.isPreloadEnabled;\n  }\n\n  /**\n   * Check if an iframe is currently preloaded and ready for instant display\n   *\n   * This function helps optimize user experience by determining if we can show\n   * a preloaded iframe immediately instead of loading a new one. The logic:\n   *\n   * 1. Returns false if no iframe manager exists (can't have preloaded content)\n   * 2. Checks if any iframe is currently preloaded via the iframe manager\n   * 3. If no specific URL is provided, returns whether any iframe is preloaded\n   * 4. If a URL is provided, ensures both that an iframe is preloaded AND\n   *    that it contains the exact URL we need\n   *\n   * This prevents unnecessary iframe reloads when the user triggers auth flows\n   * with the same URL that's already loaded and ready to display.\n   *\n   * @param url - Optional URL to match against the preloaded iframe's URL\n   * @returns true if a suitable preloaded iframe exists, false otherwise\n   */\n  public hasPreloadedIframe(url?: string): boolean {\n    if (!this.iframeManager) return false;\n\n    const isPreloaded = this.iframeManager.isIframePreloaded();\n    if (!url) return isPreloaded;\n\n    return isPreloaded && this.iframeManager.getPreloadedUrl() === url;\n  }\n\n  /**\n   * Force the iframe to hide, even if it is currently showing\n   *\n   * This is useful for cleanup or when you want to ensure the iframe is not visible\n   * regardless of its current state.\n   */\n  public forceHideIframe(): void {\n    if (this.iframeManager) {\n      this.iframeManager.hide();\n      this.logger.debug(\"Forced iframe to hide\");\n    } else {\n      this.logger.warn(\n        \"Cannot force hide iframe, iframe manager not initialized\",\n      );\n    }\n  }\n\n  /**\n   * Force the iframe to show the loading indicator\n   */\n  public forceShowLoader(): void {\n    if (this.iframeManager) {\n      this.iframeManager.forceShowLoader();\n      this.logger.debug(\"Forced iframe loader to show\");\n    } else {\n      this.logger.warn(\n        \"Cannot force show loader, iframe manager not initialized\",\n      );\n    }\n  }\n}\n"]}

package/dist/vanillajs/auth/handlers/MessageHandler.d.ts

@@ -8,6 +8,7 @@ export interface MessageHandlerConfig {
     onAuthSuccess: (result: AuthResult) => void;
     onAuthError: (error: Error) => void;
     onPopupFailure: (failedUrl?: string) => void;
+    onBrowserCorsFailsSilently: (failedUrl?: string) => Promise<void>;
     cleanup: () => void;
 }
 /**
@@ -21,7 +22,9 @@ export declare class MessageHandler {
     private onAuthSuccess;
     private onAuthError;
     private onPopupFailure;
+    private onBrowserCorsFailsSilently;
     private cleanup;
+    private customExpectedOrigin?;
     constructor(handlerConfig: MessageHandlerConfig);
     /**
      * Updates the iframe element reference used for message validation.
@@ -33,6 +36,19 @@ export declare class MessageHandler {
      * @param iframeElement - The new iframe element to associate with this handler
      */
     updateIframeElement(iframeElement: HTMLIFrameElement): void;
+    /**
+     * Sets a custom expected origin for backend integration.
+     *
+     * This allows the MessageHandler to accept messages from a custom backend
+     * origin instead of the default OAuth server origin.
+     *
+     * @param customLoginUrl - The custom login URL to derive the origin from
+     */
+    setCustomExpectedOrigin(customLoginUrl: string): void;
+    /**
+     * Clears the custom expected origin and returns to OAuth server origin.
+     */
+    clearCustomExpectedOrigin(): void;
     /**
      * Main message handler for processing postMessage events.
      *
@@ -110,6 +126,13 @@ export declare class MessageHandler {
      * @param message - The civicloginApp error message to process
      */
     private handleCivicLoginAppError;
+    /**
+     * Handle the case where we know in advance that the browser will not prompt the user to open
+     * a popup and will fail silently instead. We want to handle this case gracefully by switching to redirect
+     * mode if the iframe is in modal display mode. This will be done when the auth flow actually starts
+     * @param message
+     */
+    private handleBrowserCorsFailsSilently;
     /**
      * Handles popup generation failure messages from civicloginApp.
      *

package/dist/vanillajs/auth/handlers/MessageHandler.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"MessageHandler.d.ts","sourceRoot":"","sources":["../../../../src/vanillajs/auth/handlers/MessageHandler.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,sBAAsB,CAAC;AACvD,OAAO,KAAK,EAIV,wBAAwB,EACzB,MAAM,uBAAuB,CAAC;AAE/B,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,uBAAuB,CAAC;AAG1D,MAAM,WAAW,oBAAoB;IACnC,MAAM,EAAE,wBAAwB,CAAC;IACjC,MAAM,EAAE,UAAU,CAAC,OAAO,YAAY,CAAC,CAAC;IACxC,aAAa,CAAC,EAAE,iBAAiB,CAAC;IAClC,aAAa,EAAE,CAAC,MAAM,EAAE,UAAU,KAAK,IAAI,CAAC;IAC5C,WAAW,EAAE,CAAC,KAAK,EAAE,KAAK,KAAK,IAAI,CAAC;IACpC,cAAc,EAAE,CAAC,SAAS,CAAC,EAAE,MAAM,KAAK,IAAI,CAAC;IAC7C,OAAO,EAAE,MAAM,IAAI,CAAC;CACrB;AAED;;;GAGG;AACH,qBAAa,cAAc;IACzB,OAAO,CAAC,MAAM,CAA2B;IACzC,OAAO,CAAC,MAAM,CAAqC;IACnD,OAAO,CAAC,aAAa,CAAC,CAAoB;IAC1C,OAAO,CAAC,aAAa,CAA+B;IACpD,OAAO,CAAC,WAAW,CAAyB;IAC5C,OAAO,CAAC,cAAc,CAA+B;IACrD,OAAO,CAAC,OAAO,CAAa;gBAEhB,aAAa,EAAE,oBAAoB;IAS/C;;;;;;;;OAQG;IACI,mBAAmB,CAAC,aAAa,EAAE,iBAAiB,GAAG,IAAI;IAIlE;;;;;;;OAOG;IACI,aAAa,UAAW,YAAY,KAAG,IAAI,CAShD;IAEF;;;;;;;;OAQG;IACH,OAAO,CAAC,kBAAkB;IAa1B;;;;;;;;;OASG;IACH,OAAO,CAAC,oBAAoB;IAyD5B;;;;;;;OAOG;IACH,OAAO,CAAC,kBAAkB;IAoC1B;;;;;;;;OAQG;IACH,OAAO,CAAC,sBAAsB;IAS9B;;;;;;;;OAQG;IACH,OAAO,CAAC,0BAA0B;IAuDlC;;;;;;;OAOG;IAEH,OAAO,CAAC,sBAAsB;IAc9B;;;;;;;OAOG;IACH,OAAO,CAAC,wBAAwB;IAoBhC;;;;;;;;OAQG;IACH,OAAO,CAAC,kBAAkB;IA2B1B;;;;;;;OAOG;IACH,OAAO,CAAC,iCAAiC;IAqBzC;;;;;;;;OAQG;IACH,OAAO,CAAC,sBAAsB;IAY9B;;;;;;;OAOG;IACH,OAAO,CAAC,0BAA0B;IAYlC;;;;;;;OAOG;IACH,OAAO,CAAC,yBAAyB;IAmCjC;;;;;;;OAOG;IACH,OAAO,CAAC,iBAAiB;IASzB;;;;;;;OAOG;IACH,OAAO,CAAC,eAAe;CAcxB"}
+{"version":3,"file":"MessageHandler.d.ts","sourceRoot":"","sources":["../../../../src/vanillajs/auth/handlers/MessageHandler.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,sBAAsB,CAAC;AACvD,OAAO,KAAK,EAIV,wBAAwB,EACzB,MAAM,uBAAuB,CAAC;AAE/B,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,uBAAuB,CAAC;AAI1D,MAAM,WAAW,oBAAoB;IACnC,MAAM,EAAE,wBAAwB,CAAC;IACjC,MAAM,EAAE,UAAU,CAAC,OAAO,YAAY,CAAC,CAAC;IACxC,aAAa,CAAC,EAAE,iBAAiB,CAAC;IAClC,aAAa,EAAE,CAAC,MAAM,EAAE,UAAU,KAAK,IAAI,CAAC;IAC5C,WAAW,EAAE,CAAC,KAAK,EAAE,KAAK,KAAK,IAAI,CAAC;IACpC,cAAc,EAAE,CAAC,SAAS,CAAC,EAAE,MAAM,KAAK,IAAI,CAAC;IAC7C,0BAA0B,EAAE,CAAC,SAAS,CAAC,EAAE,MAAM,KAAK,OAAO,CAAC,IAAI,CAAC,CAAC;IAClE,OAAO,EAAE,MAAM,IAAI,CAAC;CACrB;AAED;;;GAGG;AACH,qBAAa,cAAc;IACzB,OAAO,CAAC,MAAM,CAA2B;IACzC,OAAO,CAAC,MAAM,CAAqC;IACnD,OAAO,CAAC,aAAa,CAAC,CAAoB;IAC1C,OAAO,CAAC,aAAa,CAA+B;IACpD,OAAO,CAAC,WAAW,CAAyB;IAC5C,OAAO,CAAC,cAAc,CAA+B;IACrD,OAAO,CAAC,0BAA0B,CAG9B;IACJ,OAAO,CAAC,OAAO,CAAa;IAG5B,OAAO,CAAC,oBAAoB,CAAC,CAAS;gBAE1B,aAAa,EAAE,oBAAoB;IAU/C;;;;;;;;OAQG;IACI,mBAAmB,CAAC,aAAa,EAAE,iBAAiB,GAAG,IAAI;IAIlE;;;;;;;OAOG;IACI,uBAAuB,CAAC,cAAc,EAAE,MAAM,GAAG,IAAI;IAQ5D;;OAEG;IACI,yBAAyB,IAAI,IAAI;IAOxC;;;;;;;OAOG;IACI,aAAa,UAAW,YAAY,KAAG,IAAI,CAYhD;IAEF;;;;;;;;OAQG;IACH,OAAO,CAAC,kBAAkB;IAa1B;;;;;;;;;OASG;IACH,OAAO,CAAC,oBAAoB;IAyD5B;;;;;;;OAOG;IACH,OAAO,CAAC,kBAAkB;IAoC1B;;;;;;;;OAQG;IACH,OAAO,CAAC,sBAAsB;IAS9B;;;;;;;;OAQG;IACH,OAAO,CAAC,0BAA0B;IA6DlC;;;;;;;OAOG;IAEH,OAAO,CAAC,sBAAsB;IAc9B;;;;;;;OAOG;IACH,OAAO,CAAC,wBAAwB;IAoBhC;;;;;OAKG;IACH,OAAO,CAAC,8BAA8B;IAkBtC;;;;;;;;OAQG;IACH,OAAO,CAAC,kBAAkB;IA2B1B;;;;;;;OAOG;IACH,OAAO,CAAC,iCAAiC;IAqBzC;;;;;;;;OAQG;IACH,OAAO,CAAC,sBAAsB;IAY9B;;;;;;;OAOG;IACH,OAAO,CAAC,0BAA0B;IAYlC;;;;;;;OAOG;IACH,OAAO,CAAC,yBAAyB;IAmCjC;;;;;;;OAOG;IACH,OAAO,CAAC,iBAAiB;IASzB;;;;;;;OAOG;IACH,OAAO,CAAC,eAAe;CAcxB"}