@ic-reactor/react 3.11.0 → 3.12.1

package/dist/auth/types.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"types.d.ts","sourceRoot":"","sources":["../../src/auth/types.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,QAAQ,EAAE,YAAY,EAAE,MAAM,qBAAqB,CAAA;AACjE,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,wBAAwB,CAAA;AAC7D,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,yBAAyB,CAAA;AAExD,MAAM,WAAW,wBAAwB;IACvC,IAAI,EAAE,UAAU,CAAA;IAChB,SAAS,EAAE,UAAU,CAAA;CACtB;AAED;;;;;;;;GAQG;AACH,MAAM,MAAM,sBAAsB,GAChC,UAAU,GAAG,OAAO,CAAC,UAAU,CAAC,GAAG,CAAC,MAAM,UAAU,GAAG,OAAO,CAAC,UAAU,CAAC,CAAC,CAAA;AAE7E,MAAM,WAAW,wBAAwB;IACvC,IAAI,EAAE,MAAM,EAAE,CAAA;IACd,KAAK,EAAE,sBAAsB,CAAA;CAC9B;AAED,MAAM,WAAW,uBAAuB;IACtC,KAAK,CAAC,EAAE,MAAM,CAAA;IACd,IAAI,CAAC,EAAE,MAAM,CAAA;IACb,cAAc,CAAC,EAAE,MAAM,CAAA;IACvB,CAAC,GAAG,EAAE,MAAM,GAAG,MAAM,GAAG,SAAS,CAAA;CAClC;AAED,MAAM,WAAW,uBAAuB;IACtC,SAAS,EAAE,MAAM,CAAA;IACjB,aAAa,EAAE,MAAM,EAAE,CAAA;IACvB,gBAAgB,EAAE,wBAAwB,CAAA;IAC1C,iBAAiB,EAAE,uBAAuB,CAAA;IAC1C,WAAW,EAAE,MAAM,CAAA;CACpB;AAED;;;GAGG;AACH,KAAK,oCAAoC,GAAG,QAAQ,GAAG,OAAO,GAAG,WAAW,CAAA;AAE5E;;;;;;;;;;;;;;GAcG;AACH,MAAM,MAAM,+BAA+B,GACzC,oCAAoC,GAAG,CAAC,MAAM,GAAG,EAAE,CAAC,CAAA;AAEtD,mDAAmD;AACnD,MAAM,MAAM,iBAAiB,GAAG,OAAO,GAAG,SAAS,CAAA;AAEnD,kEAAkE;AAClE,MAAM,WAAW,qBAAqB;IACpC,GAAG,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,GAAG,aAAa,GAAG,IAAI,CAAC,CAAA;IACxD,GAAG,CAAC,GAAG,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,GAAG,aAAa,GAAG,OAAO,CAAC,IAAI,CAAC,CAAA;IAC9D,MAAM,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAAA;CACnC;AAED,yEAAyE;AACzE,MAAM,WAAW,qBAAqB;IACpC,+DAA+D;IAC/D,MAAM,CAAC,EAAE,MAAM,OAAO,CAAA;IACtB,wDAAwD;IACxD,WAAW,CAAC,EAAE,MAAM,CAAA;IACpB,sDAAsD;IACtD,aAAa,CAAC,EAAE,OAAO,CAAA;IACvB,0CAA0C;IAC1C,cAAc,CAAC,EAAE,MAAM,CAAA;IACvB,sDAAsD;IACtD,WAAW,CAAC,EAAE,OAAO,CAAA;IACrB;;;OAGG;IACH,0BAA0B,CAAC,EAAE,OAAO,CAAA;CACrC;AAED,MAAM,WAAW,2BAA2B;IAC1C,gEAAgE;IAChE,gBAAgB,CAAC,EAAE,MAAM,GAAG,GAAG,CAAA;IAC/B,qEAAqE;IACrE,oBAAoB,CAAC,EAAE,MAAM,CAAA;IAC7B;;;;;;;OAOG;IACH,cAAc,CAAC,EAAE,+BAA+B,CAAA;IAChD;;;;;;;OAOG;IACH,gBAAgB,CAAC,EAAE,MAAM,GAAG,GAAG,CAAA;IAC/B,qDAAqD;IACrD,OAAO,CAAC,EAAE,qBAAqB,CAAA;IAC/B;;;OAGG;IACH,OAAO,CAAC,EAAE,iBAAiB,CAAA;IAC3B;;;OAGG;IACH,WAAW,CAAC,EAAE,qBAAqB,CAAA;IACnC,2DAA2D;IAC3D,QAAQ,CAAC,EAAE,YAAY,GAAG,eAAe,CAAA;IACzC;;;;OAIG;IACH,SAAS,CAAC,EAAE,QAAQ,GAAG,UAAU,CAAA;CAClC;AAED,MAAM,WAAW,uBAAuB;IACtC,aAAa,CAAC,EAAE,MAAM,CAAA;IACtB,OAAO,CAAC,EAAE,SAAS,EAAE,CAAA;CACtB;AAED,MAAM,WAAW,2BACf,SAAQ,uBAAuB,EAAE,2BAA2B;IAC5D,SAAS,CAAC,EAAE,MAAM,IAAI,GAAG,OAAO,CAAC,IAAI,CAAC,CAAA;IACtC,OAAO,CAAC,EAAE,CAAC,KAAK,CAAC,EAAE,MAAM,KAAK,IAAI,GAAG,OAAO,CAAC,IAAI,CAAC,CAAA;CACnD;AAED,MAAM,WAAW,mCAAoC,SAAQ,2BAA2B;IACtF,IAAI,EAAE,MAAM,EAAE,CAAA;IACd,KAAK,EAAE,sBAAsB,CAAA;IAC7B;;;OAGG;IACH,MAAM,CAAC,EAAE,OAAO,CAAA;IAChB,aAAa,CAAC,EAAE,MAAM,CAAA;IACtB,OAAO,CAAC,EAAE,SAAS,EAAE,CAAA;CACtB;AAED,MAAM,WAAW,yCAA0C,SAAQ,IAAI,CACrE,mCAAmC,EACnC,gBAAgB,CACjB;IACC;;;;;;;;OAQG;IACH,cAAc,EAAE,+BAA+B,CAAA;CAChD;AAED;;;GAGG;AACH,MAAM,WAAW,cAAc;IAC7B,WAAW,IAAI,OAAO,CAAC,QAAQ,CAAC,GAAG,QAAQ,CAAA;IAC3C,eAAe,IAAI,OAAO,CAAC,OAAO,CAAC,GAAG,OAAO,CAAA;IAC7C,MAAM,CAAC,OAAO,CAAC,EAAE,uBAAuB,GAAG,OAAO,CAAC,QAAQ,CAAC,CAAA;IAC5D,OAAO,CAAC,OAAO,CAAC,EAAE;QAAE,QAAQ,CAAC,EAAE,MAAM,CAAA;KAAE,GAAG,OAAO,CAAC,IAAI,CAAC,CAAA;IACvD,iBAAiB,CAAC,MAAM,EAAE;QACxB,IAAI,EAAE,MAAM,EAAE,CAAA;QAId,KAAK,EAAE,UAAU,GAAG,OAAO,CAAC,UAAU,CAAC,GAAG,CAAC,MAAM,OAAO,CAAC,UAAU,CAAC,CAAC,CAAA;KACtE,GAAG,OAAO,CAAC,wBAAwB,CAAC,CAAA;IACrC,0EAA0E;IAC1E,OAAO,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE,MAAM,CAAC,GAAG,OAAO,CAAC,CAAC,CAAC,GAAG,OAAO,CAAC,CAAC,CAAC,CAAA;CACvD;AAED,MAAM,WAAW,SAAS;IACxB,QAAQ,EAAE,QAAQ,GAAG,IAAI,CAAA;IACzB,gBAAgB,EAAE,OAAO,CAAA;IACzB,eAAe,EAAE,OAAO,CAAA;IACxB,KAAK,EAAE,KAAK,GAAG,SAAS,CAAA;CACzB"}
+{"version":3,"file":"types.d.ts","sourceRoot":"","sources":["../../src/auth/types.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,QAAQ,EAAE,YAAY,EAAE,MAAM,qBAAqB,CAAA;AACjE,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,wBAAwB,CAAA;AAC7D,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,yBAAyB,CAAA;AAExD,MAAM,WAAW,wBAAwB;IACvC,IAAI,EAAE,UAAU,CAAA;IAChB,SAAS,EAAE,UAAU,CAAA;CACtB;AAED;;;;;;;GAOG;AACH,MAAM,MAAM,sBAAsB,GAChC,UAAU,GAAG,OAAO,CAAC,UAAU,CAAC,GAAG,CAAC,MAAM,UAAU,GAAG,OAAO,CAAC,UAAU,CAAC,CAAC,CAAA;AAE7E,MAAM,WAAW,wBAAwB;IACvC,IAAI,EAAE,MAAM,EAAE,CAAA;IACd,KAAK,EAAE,sBAAsB,CAAA;CAC9B;AAED,MAAM,WAAW,uBAAuB;IACtC,KAAK,CAAC,EAAE,MAAM,CAAA;IACd,IAAI,CAAC,EAAE,MAAM,CAAA;IACb,cAAc,CAAC,EAAE,MAAM,CAAA;IACvB,CAAC,GAAG,EAAE,MAAM,GAAG,MAAM,GAAG,SAAS,CAAA;CAClC;AAED,MAAM,WAAW,uBAAuB;IACtC,SAAS,EAAE,MAAM,CAAA;IACjB,aAAa,EAAE,MAAM,EAAE,CAAA;IACvB,gBAAgB,EAAE,wBAAwB,CAAA;IAC1C,iBAAiB,EAAE,uBAAuB,CAAA;IAC1C,WAAW,EAAE,MAAM,CAAA;CACpB;AAED;;;GAGG;AACH,KAAK,oCAAoC,GAAG,QAAQ,GAAG,OAAO,GAAG,WAAW,CAAA;AAE5E;;;;;;;;;;;;;;GAcG;AACH,MAAM,MAAM,+BAA+B,GACzC,oCAAoC,GAAG,CAAC,MAAM,GAAG,EAAE,CAAC,CAAA;AAEtD,mDAAmD;AACnD,MAAM,MAAM,iBAAiB,GAAG,OAAO,GAAG,SAAS,CAAA;AAEnD,kEAAkE;AAClE,MAAM,WAAW,qBAAqB;IACpC,GAAG,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,GAAG,aAAa,GAAG,IAAI,CAAC,CAAA;IACxD,GAAG,CAAC,GAAG,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,GAAG,aAAa,GAAG,OAAO,CAAC,IAAI,CAAC,CAAA;IAC9D,MAAM,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAAA;CACnC;AAED,yEAAyE;AACzE,MAAM,WAAW,qBAAqB;IACpC,+DAA+D;IAC/D,MAAM,CAAC,EAAE,MAAM,OAAO,CAAA;IACtB,wDAAwD;IACxD,WAAW,CAAC,EAAE,MAAM,CAAA;IACpB,sDAAsD;IACtD,aAAa,CAAC,EAAE,OAAO,CAAA;IACvB,0CAA0C;IAC1C,cAAc,CAAC,EAAE,MAAM,CAAA;IACvB,sDAAsD;IACtD,WAAW,CAAC,EAAE,OAAO,CAAA;IACrB;;;OAGG;IACH,0BAA0B,CAAC,EAAE,OAAO,CAAA;CACrC;AAED,MAAM,WAAW,2BAA2B;IAC1C,gEAAgE;IAChE,gBAAgB,CAAC,EAAE,MAAM,GAAG,GAAG,CAAA;IAC/B,qEAAqE;IACrE,oBAAoB,CAAC,EAAE,MAAM,CAAA;IAC7B;;;;;;;OAOG;IACH,cAAc,CAAC,EAAE,+BAA+B,CAAA;IAChD;;;;;;;OAOG;IACH,gBAAgB,CAAC,EAAE,MAAM,GAAG,GAAG,CAAA;IAC/B,qDAAqD;IACrD,OAAO,CAAC,EAAE,qBAAqB,CAAA;IAC/B;;;OAGG;IACH,OAAO,CAAC,EAAE,iBAAiB,CAAA;IAC3B;;;OAGG;IACH,WAAW,CAAC,EAAE,qBAAqB,CAAA;IACnC,2DAA2D;IAC3D,QAAQ,CAAC,EAAE,YAAY,GAAG,eAAe,CAAA;IACzC;;;;OAIG;IACH,SAAS,CAAC,EAAE,QAAQ,GAAG,UAAU,CAAA;CAClC;AAED,MAAM,WAAW,uBAAuB;IACtC,aAAa,CAAC,EAAE,MAAM,CAAA;IACtB,OAAO,CAAC,EAAE,SAAS,EAAE,CAAA;CACtB;AAED,MAAM,WAAW,2BACf,SAAQ,uBAAuB,EAAE,2BAA2B;IAC5D,SAAS,CAAC,EAAE,MAAM,IAAI,GAAG,OAAO,CAAC,IAAI,CAAC,CAAA;IACtC,OAAO,CAAC,EAAE,CAAC,KAAK,CAAC,EAAE,MAAM,KAAK,IAAI,GAAG,OAAO,CAAC,IAAI,CAAC,CAAA;CACnD;AAED,MAAM,WAAW,mCAAoC,SAAQ,2BAA2B;IACtF,IAAI,EAAE,MAAM,EAAE,CAAA;IACd,KAAK,EAAE,sBAAsB,CAAA;IAC7B;;;OAGG;IACH,MAAM,CAAC,EAAE,OAAO,CAAA;IAChB,aAAa,CAAC,EAAE,MAAM,CAAA;IACtB,OAAO,CAAC,EAAE,SAAS,EAAE,CAAA;CACtB;AAED,MAAM,WAAW,yCAA0C,SAAQ,IAAI,CACrE,mCAAmC,EACnC,gBAAgB,CACjB;IACC;;;;;;;;OAQG;IACH,cAAc,EAAE,+BAA+B,CAAA;CAChD;AAED;;;GAGG;AACH,MAAM,WAAW,cAAc;IAC7B,WAAW,IAAI,OAAO,CAAC,QAAQ,CAAC,GAAG,QAAQ,CAAA;IAC3C,eAAe,IAAI,OAAO,CAAC,OAAO,CAAC,GAAG,OAAO,CAAA;IAC7C,MAAM,CAAC,OAAO,CAAC,EAAE,uBAAuB,GAAG,OAAO,CAAC,QAAQ,CAAC,CAAA;IAC5D,OAAO,CAAC,OAAO,CAAC,EAAE;QAAE,QAAQ,CAAC,EAAE,MAAM,CAAA;KAAE,GAAG,OAAO,CAAC,IAAI,CAAC,CAAA;IACvD,iBAAiB,CAAC,MAAM,EAAE;QACxB,IAAI,EAAE,MAAM,EAAE,CAAA;QAGd,KAAK,EAAE,MAAM,OAAO,CAAC,UAAU,CAAC,CAAA;KACjC,GAAG,OAAO,CAAC,wBAAwB,CAAC,CAAA;CACtC;AAED,MAAM,WAAW,SAAS;IACxB,QAAQ,EAAE,QAAQ,GAAG,IAAI,CAAA;IACzB,gBAAgB,EAAE,OAAO,CAAA;IACzB,eAAe,EAAE,OAAO,CAAA;IACxB,KAAK,EAAE,KAAK,GAAG,SAAS,CAAA;CACzB"}

package/dist/defineReactor.d.ts

@@ -70,7 +70,8 @@ export interface DefineReactorSharedParameters extends Omit<ReactorParameters, "
      * When omitted, a ClientManager is created from the agent options below.
      *
      * A supplied or adopted manager brings its own agent and QueryClient, so
-     * `agentOptions` and `queryClient` apply only when this call creates one.
+     * `agentOptions`, `queryClient` and `allowEnvConfig` apply only when this
+     * call creates one.
      */
     clientManager?: ClientManager;
     /**

package/dist/defineReactor.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"defineReactor.d.ts","sourceRoot":"","sources":["../src/defineReactor.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAuDG;AACH,OAAO,EACL,aAAa,EACb,OAAO,EACP,cAAc,EAEf,MAAM,kBAAkB,CAAA;AACzB,OAAO,KAAK,EACV,SAAS,EACT,YAAY,EACZ,iBAAiB,EACjB,uBAAuB,EACvB,wBAAwB,EACzB,MAAM,kBAAkB,CAAA;AACzB,OAAO,EAAE,WAAW,EAAE,MAAM,uBAAuB,CAAA;AACnD,OAAO,EAAoB,UAAU,EAAE,MAAM,uBAAuB,CAAA;AACpE,OAAO,EAAE,qBAAqB,EAAE,MAAM,kCAAkC,CAAA;AACxE,OAAO,EAAE,yBAAyB,EAAE,MAAM,uCAAuC,CAAA;AAEjF,OAAO,KAAK,EAAE,2BAA2B,EAAE,MAAM,wCAAwC,CAAA;AAEzF,OAAO,KAAK,EAAE,qBAAqB,EAAE,MAAM,4BAA4B,CAAA;AACvE,OAAO,KAAK,EAAE,+BAA+B,EAAE,MAAM,kCAAkC,CAAA;AAEvF,iFAAiF;AACjF,MAAM,WAAW,6BACf,SACE,IAAI,CAAC,iBAAiB,EAAE,eAAe,CAAC,EACxC,IAAI,CAAC,uBAAuB,EAAE,aAAa,CAAC;IAC9C;;;;;;OAMG;IACH,aAAa,CAAC,EAAE,aAAa,CAAA;IAC7B;;;;;OAKG;IACH,WAAW,CAAC,EAAE,WAAW,CAAA;IACzB;;;;;;;OAOG;IACH,cAAc,CAAC,EAAE,qBAAqB,CAAA;IACtC;;;;;;OAMG;IACH,IAAI,CAAC,EAAE,IAAI,CAAC,+BAA+B,EAAE,eAAe,CAAC,CAAA;CAC9D;AAED,4DAA4D;AAC5D,MAAM,WAAW,uBAAwB,SAAQ,6BAA6B;IAC5E,OAAO,CAAC,EAAE,KAAK,CAAA;CAChB;AAED,+EAA+E;AAC/E,MAAM,WAAW,8BAA8B,CAC7C,OAAO,CACP,SAAQ,6BAA6B;IACrC,OAAO,EAAE,IAAI,CAAA;IACb,oEAAoE;IACpE,UAAU,CAAC,EAAE,wBAAwB,CAAC,OAAO,CAAC,CAAC,YAAY,CAAC,CAAA;CAC7D;AAED,2EAA2E;AAC3E,MAAM,MAAM,mBAAmB,CAC7B,OAAO,EACP,SAAS,SAAS,YAAY,EAC9B,CAAC,SAAS,OAAO,CAAC,OAAO,EAAE,SAAS,CAAC,IACnC,UAAU,CAAC,OAAO,EAAE,SAAS,CAAC,GAChC,qBAAqB,GAAG;IACtB,OAAO,EAAE,CAAC,CAAA;IACV,aAAa,EAAE,aAAa,CAAA;IAC5B,WAAW,EAAE,WAAW,CAAA;IACxB,2DAA2D;IAC3D,cAAc,EAAE,qBAAqB,CAAA;IACrC,0EAA0E;IAC1E,kBAAkB,EAAE,yBAAyB,CAAA;IAC7C,qBAAqB,EAAE,MAAM,2BAA2B,CAAA;CACzD,CAAA;AAmBH,wBAAgB,aAAa,CAAC,OAAO,GAAG,SAAS,EAC/C,MAAM,EAAE,8BAA8B,CAAC,OAAO,CAAC,GAC9C,mBAAmB,CAAC,OAAO,EAAE,SAAS,EAAE,cAAc,CAAC,OAAO,CAAC,CAAC,CAAA;AAEnE,wBAAgB,aAAa,CAAC,OAAO,GAAG,SAAS,EAC/C,MAAM,EAAE,uBAAuB,GAC9B,mBAAmB,CAAC,OAAO,EAAE,QAAQ,EAAE,OAAO,CAAC,OAAO,EAAE,QAAQ,CAAC,CAAC,CAAA"}
+{"version":3,"file":"defineReactor.d.ts","sourceRoot":"","sources":["../src/defineReactor.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAuDG;AACH,OAAO,EACL,aAAa,EACb,OAAO,EACP,cAAc,EAEf,MAAM,kBAAkB,CAAA;AACzB,OAAO,KAAK,EACV,SAAS,EACT,YAAY,EACZ,iBAAiB,EACjB,uBAAuB,EACvB,wBAAwB,EACzB,MAAM,kBAAkB,CAAA;AACzB,OAAO,EAAE,WAAW,EAAE,MAAM,uBAAuB,CAAA;AACnD,OAAO,EAAoB,UAAU,EAAE,MAAM,uBAAuB,CAAA;AACpE,OAAO,EAAE,qBAAqB,EAAE,MAAM,kCAAkC,CAAA;AACxE,OAAO,EAAE,yBAAyB,EAAE,MAAM,uCAAuC,CAAA;AAEjF,OAAO,KAAK,EAAE,2BAA2B,EAAE,MAAM,wCAAwC,CAAA;AAEzF,OAAO,KAAK,EAAE,qBAAqB,EAAE,MAAM,4BAA4B,CAAA;AACvE,OAAO,KAAK,EAAE,+BAA+B,EAAE,MAAM,kCAAkC,CAAA;AAEvF,iFAAiF;AACjF,MAAM,WAAW,6BACf,SACE,IAAI,CAAC,iBAAiB,EAAE,eAAe,CAAC,EACxC,IAAI,CAAC,uBAAuB,EAAE,aAAa,CAAC;IAC9C;;;;;;;OAOG;IACH,aAAa,CAAC,EAAE,aAAa,CAAA;IAC7B;;;;;OAKG;IACH,WAAW,CAAC,EAAE,WAAW,CAAA;IACzB;;;;;;;OAOG;IACH,cAAc,CAAC,EAAE,qBAAqB,CAAA;IACtC;;;;;;OAMG;IACH,IAAI,CAAC,EAAE,IAAI,CAAC,+BAA+B,EAAE,eAAe,CAAC,CAAA;CAC9D;AAED,4DAA4D;AAC5D,MAAM,WAAW,uBAAwB,SAAQ,6BAA6B;IAC5E,OAAO,CAAC,EAAE,KAAK,CAAA;CAChB;AAED,+EAA+E;AAC/E,MAAM,WAAW,8BAA8B,CAC7C,OAAO,CACP,SAAQ,6BAA6B;IACrC,OAAO,EAAE,IAAI,CAAA;IACb,oEAAoE;IACpE,UAAU,CAAC,EAAE,wBAAwB,CAAC,OAAO,CAAC,CAAC,YAAY,CAAC,CAAA;CAC7D;AAED,2EAA2E;AAC3E,MAAM,MAAM,mBAAmB,CAC7B,OAAO,EACP,SAAS,SAAS,YAAY,EAC9B,CAAC,SAAS,OAAO,CAAC,OAAO,EAAE,SAAS,CAAC,IACnC,UAAU,CAAC,OAAO,EAAE,SAAS,CAAC,GAChC,qBAAqB,GAAG;IACtB,OAAO,EAAE,CAAC,CAAA;IACV,aAAa,EAAE,aAAa,CAAA;IAC5B,WAAW,EAAE,WAAW,CAAA;IACxB,2DAA2D;IAC3D,cAAc,EAAE,qBAAqB,CAAA;IACrC,0EAA0E;IAC1E,kBAAkB,EAAE,yBAAyB,CAAA;IAC7C,qBAAqB,EAAE,MAAM,2BAA2B,CAAA;CACzD,CAAA;AAmBH,wBAAgB,aAAa,CAAC,OAAO,GAAG,SAAS,EAC/C,MAAM,EAAE,8BAA8B,CAAC,OAAO,CAAC,GAC9C,mBAAmB,CAAC,OAAO,EAAE,SAAS,EAAE,cAAc,CAAC,OAAO,CAAC,CAAC,CAAA;AAEnE,wBAAgB,aAAa,CAAC,OAAO,GAAG,SAAS,EAC/C,MAAM,EAAE,uBAAuB,GAC9B,mBAAmB,CAAC,OAAO,EAAE,QAAQ,EAAE,OAAO,CAAC,OAAO,EAAE,QAAQ,CAAC,CAAC,CAAA"}

package/dist/defineReactor.js

@@ -79,7 +79,7 @@ const createDefaultQueryClient = () => new QueryClient({
 export function defineReactor(params
 // eslint-disable-next-line @typescript-eslint/no-explicit-any
 ) {
-    const { clientManager: providedClientManager, queryClient: providedQueryClient, authentication: providedAuthentication, auth, display, agentOptions, name, idlFactory, canisterId, pollingOptions, } = params;
+    const { clientManager: providedClientManager, queryClient: providedQueryClient, authentication: providedAuthentication, auth, display, agentOptions, allowEnvConfig, allowEnvRootKey, name, idlFactory, canisterId, pollingOptions, } = params;
     // A shared AuthenticationManager updates the identity on its own
     // ClientManager. Giving this reactor a different one would leave its calls
     // anonymous after sign-in, so adopt the manager's rather than building a new
@@ -98,11 +98,32 @@ export function defineReactor(params
             `The supplied manager is already configured, so \`auth\` (${Object.keys(auth).join(", ")}) would be ignored. ` +
             `Pass those options where that AuthenticationManager is created, or drop \`authentication\` to build one here.`);
     }
+    // Same reasoning as `auth`, and it matters more here: an ignored
+    // `allowEnvConfig: false` reads as "I locked the cookie out" while the
+    // supplied manager carries whatever decision it was built with.
+    if ((providedClientManager || providedAuthentication) &&
+        (allowEnvConfig !== undefined || allowEnvRootKey !== undefined)) {
+        const passed = [
+            allowEnvConfig !== undefined && "allowEnvConfig",
+            allowEnvRootKey !== undefined && "allowEnvRootKey",
+        ]
+            .filter(Boolean)
+            .join(", ");
+        throw new Error(`[ic-reactor] defineReactor("${name}") received both a ClientManager and \`${passed}\`. ` +
+            `That option is resolved when a ClientManager is constructed, so the supplied one already carries its own ` +
+            `decision and this would be ignored — silently changing nothing about whether the ic_env cookie is trusted. ` +
+            `Pass it where that ClientManager is created, or drop \`clientManager\` to build one here.`);
+    }
     const clientManager = providedClientManager ??
         providedAuthentication?.clientManager ??
         new ClientManager({
             queryClient: providedQueryClient ?? createDefaultQueryClient(),
             agentOptions,
+            // Forwarded, not dropped: the type has always accepted these (it extends
+            // ClientManagerParameters) while the call ignored them, so the one
+            // documented setup path silently discarded the ic_env opt-in it advertised.
+            allowEnvConfig,
+            allowEnvRootKey,
         });
     // Always report the QueryClient actually in use: when a ClientManager is
     // supplied or adopted, its own QueryClient is the one queries run against.

package/dist/defineReactor.js.map

@@ -1 +1 @@
-{"version":3,"file":"defineReactor.js","sourceRoot":"","sources":["../src/defineReactor.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAuDG;AACH,OAAO,EACL,aAAa,EACb,OAAO,EACP,cAAc,EACd,YAAY,GACb,MAAM,kBAAkB,CAAA;AAQzB,OAAO,EAAE,WAAW,EAAE,MAAM,uBAAuB,CAAA;AACnD,OAAO,EAAE,gBAAgB,EAAc,MAAM,uBAAuB,CAAA;AACpE,OAAO,EAAE,qBAAqB,EAAE,MAAM,kCAAkC,CAAA;AACxE,OAAO,EAAE,yBAAyB,EAAE,MAAM,uCAAuC,CAAA;AACjF,OAAO,EAAE,4BAA4B,EAAE,MAAM,wCAAwC,CAAA;AAErF,OAAO,EAAE,eAAe,EAAE,MAAM,4BAA4B,CAAA;AA0E5D;;;;;;;;;;;GAWG;AACH,MAAM,wBAAwB,GAAG,GAAG,EAAE,CACpC,IAAI,WAAW,CAAC;IACd,cAAc,EAAE,EAAE,OAAO,EAAE,EAAE,KAAK,EAAE,YAAY,EAAE,EAAE;CACrD,CAAC,CAAA;AAUJ,MAAM,UAAU,aAAa,CAC3B,MAAyE;AACzE,8DAA8D;;IAE9D,MAAM,EACJ,aAAa,EAAE,qBAAqB,EACpC,WAAW,EAAE,mBAAmB,EAChC,cAAc,EAAE,sBAAsB,EACtC,IAAI,EACJ,OAAO,EACP,YAAY,EACZ,IAAI,EACJ,UAAU,EACV,UAAU,EACV,cAAc,GACf,GAAG,MAAiD,CAAA;IAErD,iEAAiE;IACjE,2EAA2E;IAC3E,6EAA6E;IAC7E,2EAA2E;IAC3E,IACE,qBAAqB;QACrB,sBAAsB;QACtB,sBAAsB,CAAC,aAAa,KAAK,qBAAqB,EAC9D,CAAC;QACD,MAAM,IAAI,KAAK,CACb,+BAA+B,IAAI,oFAAoF;YACrH,wGAAwG;YACxG,2HAA2H,CAC9H,CAAA;IACH,CAAC;IAED,wEAAwE;IACxE,4EAA4E;IAC5E,IAAI,sBAAsB,IAAI,IAAI,EAAE,CAAC;QACnC,MAAM,IAAI,KAAK,CACb,+BAA+B,IAAI,oDAAoD;YACrF,4DAA4D,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,sBAAsB;YAC9G,+GAA+G,CAClH,CAAA;IACH,CAAC;IAED,MAAM,aAAa,GACjB,qBAAqB;QACrB,sBAAsB,EAAE,aAAa;QACrC,IAAI,aAAa,CAAC;YAChB,WAAW,EAAE,mBAAmB,IAAI,wBAAwB,EAAE;YAC9D,YAAY;SACb,CAAC,CAAA;IAEJ,yEAAyE;IACzE,2EAA2E;IAC3E,MAAM,WAAW,GAAG,aAAa,CAAC,WAAW,CAAA;IAE7C,MAAM,aAAa,GAAG;QACpB,aAAa;QACb,IAAI;QACJ,UAAU;QACV,UAAU;QACV,cAAc;KACf,CAAA;IAED,4EAA4E;IAC5E,2EAA2E;IAC3E,8DAA8D;IAC9D,8DAA8D;IAC9D,MAAM,OAAO,GAAQ,OAAO;QAC1B,CAAC,CAAC,IAAI,cAAc,CAAU;YAC1B,GAAG,aAAa;YAChB,UAAU,EAAG,MAAkD;iBAC5D,UAAU;SACd,CAAC;QACJ,CAAC,CAAC,IAAI,OAAO,CAAU,aAAa,CAAC,CAAA;IAEvC,MAAM,KAAK,GAAG,gBAAgB,CAAC,OAAO,CAAC,CAAA;IAEvC,8EAA8E;IAC9E,2EAA2E;IAC3E,2DAA2D;IAC3D,IAAI,sBAAyD,CAAA;IAC7D,MAAM,iBAAiB,GAAG,GAAG,EAAE,CAC7B,CAAC,sBAAsB,KAAtB,sBAAsB,GACrB,sBAAsB;QACtB,IAAI,qBAAqB,CAAC,EAAE,GAAG,IAAI,EAAE,aAAa,EAAE,CAAC,EAAC,CAAA;IAE1D,IAAI,0BAAiE,CAAA;IACrE,MAAM,qBAAqB,GAAG,GAAG,EAAE,CACjC,CAAC,0BAA0B,KAA1B,0BAA0B,GAAK,IAAI,yBAAyB,CAC3D,iBAAiB,EAAE,CACpB,EAAC,CAAA;IAEJ,IAAI,SAA4C,CAAA;IAChD,MAAM,YAAY,GAAG,GAAG,EAAE,CACxB,CAAC,SAAS,KAAT,SAAS,GAAK,eAAe,CAAC,iBAAiB,EAAE,CAAC,EAAC,CAAA;IAEtD,IAAI,cACyD,CAAA;IAC7D,MAAM,iBAAiB,GAAG,GAAG,EAAE,CAC7B,CAAC,cAAc,KAAd,cAAc,GAAK,4BAA4B,CAAC,qBAAqB,EAAE,CAAC,EAAC,CAAA;IAE5E,OAAO;QACL,GAAG,KAAK;QACR,OAAO;QACP,aAAa;QACb,WAAW;QACX,yEAAyE;QACzE,6BAA6B;QAC7B,OAAO,EAAE,GAAG,EAAE,CAAC,YAAY,EAAE,CAAC,OAAO,EAAE;QACvC,aAAa,EAAE,GAAG,EAAE,CAAC,YAAY,EAAE,CAAC,aAAa,EAAE;QACnD,gBAAgB,EAAE,GAAG,EAAE,CAAC,YAAY,EAAE,CAAC,gBAAgB,EAAE;QACzD,qBAAqB,EAAE,GAAG,EAAE,CAAC,iBAAiB,EAAE,CAAC,qBAAqB,EAAE;QACxE,IAAI,cAAc;YAChB,OAAO,iBAAiB,EAAE,CAAA;QAC5B,CAAC;QACD,IAAI,kBAAkB;YACpB,OAAO,qBAAqB,EAAE,CAAA;QAChC,CAAC;KACF,CAAA;AACH,CAAC"}
+{"version":3,"file":"defineReactor.js","sourceRoot":"","sources":["../src/defineReactor.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAuDG;AACH,OAAO,EACL,aAAa,EACb,OAAO,EACP,cAAc,EACd,YAAY,GACb,MAAM,kBAAkB,CAAA;AAQzB,OAAO,EAAE,WAAW,EAAE,MAAM,uBAAuB,CAAA;AACnD,OAAO,EAAE,gBAAgB,EAAc,MAAM,uBAAuB,CAAA;AACpE,OAAO,EAAE,qBAAqB,EAAE,MAAM,kCAAkC,CAAA;AACxE,OAAO,EAAE,yBAAyB,EAAE,MAAM,uCAAuC,CAAA;AACjF,OAAO,EAAE,4BAA4B,EAAE,MAAM,wCAAwC,CAAA;AAErF,OAAO,EAAE,eAAe,EAAE,MAAM,4BAA4B,CAAA;AA2E5D;;;;;;;;;;;GAWG;AACH,MAAM,wBAAwB,GAAG,GAAG,EAAE,CACpC,IAAI,WAAW,CAAC;IACd,cAAc,EAAE,EAAE,OAAO,EAAE,EAAE,KAAK,EAAE,YAAY,EAAE,EAAE;CACrD,CAAC,CAAA;AAUJ,MAAM,UAAU,aAAa,CAC3B,MAAyE;AACzE,8DAA8D;;IAE9D,MAAM,EACJ,aAAa,EAAE,qBAAqB,EACpC,WAAW,EAAE,mBAAmB,EAChC,cAAc,EAAE,sBAAsB,EACtC,IAAI,EACJ,OAAO,EACP,YAAY,EACZ,cAAc,EACd,eAAe,EACf,IAAI,EACJ,UAAU,EACV,UAAU,EACV,cAAc,GACf,GAAG,MAAiD,CAAA;IAErD,iEAAiE;IACjE,2EAA2E;IAC3E,6EAA6E;IAC7E,2EAA2E;IAC3E,IACE,qBAAqB;QACrB,sBAAsB;QACtB,sBAAsB,CAAC,aAAa,KAAK,qBAAqB,EAC9D,CAAC;QACD,MAAM,IAAI,KAAK,CACb,+BAA+B,IAAI,oFAAoF;YACrH,wGAAwG;YACxG,2HAA2H,CAC9H,CAAA;IACH,CAAC;IAED,wEAAwE;IACxE,4EAA4E;IAC5E,IAAI,sBAAsB,IAAI,IAAI,EAAE,CAAC;QACnC,MAAM,IAAI,KAAK,CACb,+BAA+B,IAAI,oDAAoD;YACrF,4DAA4D,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,sBAAsB;YAC9G,+GAA+G,CAClH,CAAA;IACH,CAAC;IAED,iEAAiE;IACjE,uEAAuE;IACvE,gEAAgE;IAChE,IACE,CAAC,qBAAqB,IAAI,sBAAsB,CAAC;QACjD,CAAC,cAAc,KAAK,SAAS,IAAI,eAAe,KAAK,SAAS,CAAC,EAC/D,CAAC;QACD,MAAM,MAAM,GAAG;YACb,cAAc,KAAK,SAAS,IAAI,gBAAgB;YAChD,eAAe,KAAK,SAAS,IAAI,iBAAiB;SACnD;aACE,MAAM,CAAC,OAAO,CAAC;aACf,IAAI,CAAC,IAAI,CAAC,CAAA;QACb,MAAM,IAAI,KAAK,CACb,+BAA+B,IAAI,0CAA0C,MAAM,MAAM;YACvF,2GAA2G;YAC3G,6GAA6G;YAC7G,2FAA2F,CAC9F,CAAA;IACH,CAAC;IAED,MAAM,aAAa,GACjB,qBAAqB;QACrB,sBAAsB,EAAE,aAAa;QACrC,IAAI,aAAa,CAAC;YAChB,WAAW,EAAE,mBAAmB,IAAI,wBAAwB,EAAE;YAC9D,YAAY;YACZ,yEAAyE;YACzE,mEAAmE;YACnE,4EAA4E;YAC5E,cAAc;YACd,eAAe;SAChB,CAAC,CAAA;IAEJ,yEAAyE;IACzE,2EAA2E;IAC3E,MAAM,WAAW,GAAG,aAAa,CAAC,WAAW,CAAA;IAE7C,MAAM,aAAa,GAAG;QACpB,aAAa;QACb,IAAI;QACJ,UAAU;QACV,UAAU;QACV,cAAc;KACf,CAAA;IAED,4EAA4E;IAC5E,2EAA2E;IAC3E,8DAA8D;IAC9D,8DAA8D;IAC9D,MAAM,OAAO,GAAQ,OAAO;QAC1B,CAAC,CAAC,IAAI,cAAc,CAAU;YAC1B,GAAG,aAAa;YAChB,UAAU,EAAG,MAAkD;iBAC5D,UAAU;SACd,CAAC;QACJ,CAAC,CAAC,IAAI,OAAO,CAAU,aAAa,CAAC,CAAA;IAEvC,MAAM,KAAK,GAAG,gBAAgB,CAAC,OAAO,CAAC,CAAA;IAEvC,8EAA8E;IAC9E,2EAA2E;IAC3E,2DAA2D;IAC3D,IAAI,sBAAyD,CAAA;IAC7D,MAAM,iBAAiB,GAAG,GAAG,EAAE,CAC7B,CAAC,sBAAsB,KAAtB,sBAAsB,GACrB,sBAAsB;QACtB,IAAI,qBAAqB,CAAC,EAAE,GAAG,IAAI,EAAE,aAAa,EAAE,CAAC,EAAC,CAAA;IAE1D,IAAI,0BAAiE,CAAA;IACrE,MAAM,qBAAqB,GAAG,GAAG,EAAE,CACjC,CAAC,0BAA0B,KAA1B,0BAA0B,GAAK,IAAI,yBAAyB,CAC3D,iBAAiB,EAAE,CACpB,EAAC,CAAA;IAEJ,IAAI,SAA4C,CAAA;IAChD,MAAM,YAAY,GAAG,GAAG,EAAE,CACxB,CAAC,SAAS,KAAT,SAAS,GAAK,eAAe,CAAC,iBAAiB,EAAE,CAAC,EAAC,CAAA;IAEtD,IAAI,cACyD,CAAA;IAC7D,MAAM,iBAAiB,GAAG,GAAG,EAAE,CAC7B,CAAC,cAAc,KAAd,cAAc,GAAK,4BAA4B,CAAC,qBAAqB,EAAE,CAAC,EAAC,CAAA;IAE5E,OAAO;QACL,GAAG,KAAK;QACR,OAAO;QACP,aAAa;QACb,WAAW;QACX,yEAAyE;QACzE,6BAA6B;QAC7B,OAAO,EAAE,GAAG,EAAE,CAAC,YAAY,EAAE,CAAC,OAAO,EAAE;QACvC,aAAa,EAAE,GAAG,EAAE,CAAC,YAAY,EAAE,CAAC,aAAa,EAAE;QACnD,gBAAgB,EAAE,GAAG,EAAE,CAAC,YAAY,EAAE,CAAC,gBAAgB,EAAE;QACzD,qBAAqB,EAAE,GAAG,EAAE,CAAC,iBAAiB,EAAE,CAAC,qBAAqB,EAAE;QACxE,IAAI,cAAc;YAChB,OAAO,iBAAiB,EAAE,CAAA;QAC5B,CAAC;QACD,IAAI,kBAAkB;YACpB,OAAO,qBAAqB,EAAE,CAAA;QAChC,CAAC;KACF,CAAA;AACH,CAAC"}

package/llms.txt

@@ -7,9 +7,15 @@ accurate integration guidance.
 
 ```bash
 pnpm add @ic-reactor/react @icp-sdk/core @tanstack/react-query
-pnpm add @icp-sdk/auth # optional auth helpers
+pnpm add @icp-sdk/auth@^8 # optional auth helpers; v8 only, v7 is not supported
 ```
 
+npm cannot resolve this set on its own: every published `@icp-sdk/auth` still
+peers `@icp-sdk/core@^5` while this package needs `^6`, so a strict
+`npm install` fails with `ERESOLVE`. Add
+`{"overrides":{"@icp-sdk/auth":{"@icp-sdk/core":"$@icp-sdk/core"}}}` to
+`package.json`. pnpm and yarn do not need it.
+
 ## Start Here
 
 - Fastest setup: `defineReactor(...)`

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@ic-reactor/react",
-  "version": "3.11.0",
+  "version": "3.12.1",
   "description": "IC Reactor React library for building Internet Computer apps",
   "main": "dist/index.js",
   "module": "dist/index.js",
@@ -53,30 +53,30 @@
   "author": "Behrad Deylami",
   "license": "MIT",
   "dependencies": {
-    "@ic-reactor/core": "^3.11.0"
+    "@ic-reactor/core": "^3.12.1"
   },
   "peerDependencies": {
-    "@icp-sdk/auth": "^7.1.0 || ^8.0.0",
-    "@icp-sdk/core": "^6.0.0",
+    "@icp-sdk/auth": "^8.0.0",
+    "@icp-sdk/core": "^6.1.0",
     "@tanstack/react-query": "^5.0.0",
     "react": ">=18.0.0",
     "react-dom": ">=18.0.0"
   },
   "devDependencies": {
-    "@icp-sdk/auth": "^8.0.0",
-    "@icp-sdk/core": "^6.0.0",
-    "@size-limit/preset-small-lib": "^12.1.0",
+    "@icp-sdk/auth": "^8.0.3",
+    "@icp-sdk/core": "^6.1.0",
+    "@size-limit/preset-small-lib": "^13.0.3",
     "@tanstack/react-query": "^5.101.4",
     "@testing-library/dom": "^10.4.1",
-    "@testing-library/jest-dom": "^6.9.1",
+    "@testing-library/jest-dom": "^7.0.1",
     "@testing-library/react": "^16.3.2",
-    "@types/react": "^19.2.17",
-    "@types/react-dom": "^19.2.3",
+    "@types/react": "^19.2.18",
+    "@types/react-dom": "^19.2.4",
     "fake-indexeddb": "^6.2.5",
-    "jsdom": "^29.1.1",
+    "jsdom": "^30.0.1",
     "react": "^19.2.8",
     "react-dom": "^19.2.8",
-    "size-limit": "^12.1.0",
+    "size-limit": "^13.0.3",
     "vitest": "^4.1.10"
   },
   "size-limit": [

package/src/auth/authentication-manager.ts

@@ -6,13 +6,19 @@ import type {
   AuthenticationClientOptions,
   AuthenticationSignInOptions,
 } from "./types.js"
-import { ClientManager, isDev, isMainnetHost } from "@ic-reactor/core"
+import { ClientManager, isDev } from "@ic-reactor/core"
 
 import { Principal } from "@icp-sdk/core/principal"
 import { safeGetCanisterEnv } from "@icp-sdk/core/agent/canister-env"
+import {
+  probeLocalInternetIdentity,
+  localInternetIdentityUnavailableError,
+  type AuthorizePath,
+} from "./local-ii-probe.js"
 import {
   IC_INTERNET_IDENTITY_PROVIDER,
   INTERNET_IDENTITY_PROVIDER_ENV_KEY,
+  LOCAL_INTERNET_IDENTITY_CANISTER_ID,
   localInternetIdentityProvider,
 } from "./constants.js"
 
@@ -61,6 +67,13 @@ export class AuthenticationManager {
   }
   private readonly identityProvider?: string | URL
   private readonly internetIdentityId?: string
+  /**
+   * Which authorize path the locally deployed Internet Identity serves, once
+   * probed. `undefined` means not probed yet; `null` means it serves no sign-in
+   * UI and login should fail with an explanation rather than open a popup onto
+   * a gateway error page.
+   */
+  private localAuthorizePath?: AuthorizePath | null
   private readonly defaultClientOptions: AuthenticationClientOptions
   public readonly clientManager: ClientManager
 
@@ -86,13 +99,18 @@ export class AuthenticationManager {
           canisterEnv?.["PUBLIC_INTERNET_IDENTITY_PROVIDER"],
         clientManager
       )
+    // Same cookie, same decision. This one only ever reaches a local provider
+    // URL, but `allowEnvConfig: false` has to mean the cookie is not consulted
+    // rather than mostly not consulted.
     this.internetIdentityId =
       internetIdentityId ||
-      acceptEnvCanisterId(
-        canisterEnv?.["internet_identity"] ||
-          canisterEnv?.["PUBLIC_CANISTER_ID:internet_identity"] ||
-          canisterEnv?.["CANISTER_ID_INTERNET_IDENTITY"]
-      )
+      (clientManager.trustsEnvConfig
+        ? acceptEnvCanisterId(
+            canisterEnv?.["internet_identity"] ||
+              canisterEnv?.["PUBLIC_CANISTER_ID:internet_identity"] ||
+              canisterEnv?.["CANISTER_ID_INTERNET_IDENTITY"]
+          )
+        : undefined)
     this.defaultClientOptions = clientOptions
 
     if (authClient) {
@@ -131,6 +149,11 @@ export class AuthenticationManager {
    * what browser popup blockers and the ICRC-29 transport require.
    */
   public async prepareClient(options?: AuthenticationClientOptions) {
+    // Before resolving options, because resolving them is what picks the
+    // provider URL. This is the last async point before `login()` has to stay
+    // inside the user gesture, so the answer has to be cached by now.
+    await this.ensureLocalAuthorizePath()
+
     const clientOptions = this.resolveClientOptions(options)
 
     if (this.authClient && !this.shouldRecreateClient(clientOptions)) {
@@ -140,6 +163,40 @@ export class AuthenticationManager {
     return this.initializeClient(clientOptions)
   }
 
+  /**
+   * Probe the local Internet Identity canister once, and remember what it
+   * serves.
+   *
+   * Only for the derived local provider: an explicitly configured
+   * `identityProvider` is the caller's business, and mainnet is fixed.
+   */
+  private async ensureLocalAuthorizePath(): Promise<void> {
+    if (this.localAuthorizePath !== undefined) return
+    if (this.identityProvider) return
+    if (!this.clientManager.isLocal) return
+
+    const canisterId =
+      this.internetIdentityId ?? LOCAL_INTERNET_IDENTITY_CANISTER_ID
+
+    const { path, inconclusive } = await probeLocalInternetIdentity(
+      this.clientManager.agent,
+      canisterId
+    )
+
+    // An inconclusive probe must not change behaviour: the canister may be
+    // fine and merely unreachable from here, and a diagnostic that blocks a
+    // working login is worse than the failure it explains.
+    this.localAuthorizePath = inconclusive ? "/authorize" : path
+
+    if (path === "/#authorize" && !inconclusive) {
+      console.warn(
+        `[ic-reactor] Internet Identity canister ${canisterId} serves its sign-in UI at ` +
+          `"/" rather than "/authorize" — using the legacy #authorize flow. This is a ` +
+          `pre-2026 build; newer ones through release-2026-03-16 serve /authorize directly.`
+      )
+    }
+  }
+
   /**
    * Returns an AuthClient without awaiting, or `undefined` when the auth
    * module has not been loaded yet.
@@ -467,12 +524,26 @@ export class AuthenticationManager {
     if (this.identityProvider) {
       return this.identityProvider
     }
-    return this.clientManager.isLocal
-      ? localInternetIdentityProvider(
-          Number(this.clientManager.agentHost?.port) || 4943,
-          this.internetIdentityId
-        )
-      : IC_INTERNET_IDENTITY_PROVIDER
+    if (!this.clientManager.isLocal) {
+      return IC_INTERNET_IDENTITY_PROVIDER
+    }
+
+    const canisterId =
+      this.internetIdentityId ?? LOCAL_INTERNET_IDENTITY_CANISTER_ID
+
+    // `null` is the probe's positive finding that this build serves no sign-in
+    // UI. Throwing here surfaces an actionable message where the caller can see
+    // it, instead of opening a popup onto the gateway's verification-error page
+    // and leaving the app waiting until the user closes it.
+    if (this.localAuthorizePath === null) {
+      throw localInternetIdentityUnavailableError(canisterId)
+    }
+
+    return localInternetIdentityProvider(
+      Number(this.clientManager.agentHost?.port) || 4943,
+      this.internetIdentityId,
+      this.localAuthorizePath
+    )
   }
 
   private updateState(newState: Partial<AuthState>) {
@@ -651,16 +722,27 @@ function acceptEnvIdentityProvider(
     return url.toString()
   }
 
-  // `isMainnetHost` matches only the real boundary domains and defaults to true
-  // for an unknown host, so custom testnets keep working while anything that
-  // looks like mainnet fails closed. `clientManager.isLocal` would be wrong
-  // here: it treats every unrecognized hostname as "ic".
-  if (isMainnetHost(clientManager.agentHost?.toString())) {
+  // Positive allowlist, not `!isMainnetHost(...)`.
+  //
+  // The old comment here claimed this defaulted to true for an unknown host so
+  // that "anything that looks like mainnet fails closed". It did not:
+  // isMainnetHost defaults to true only for `undefined`, and returns false for
+  // every unrecognised host — so a dapp on a custom domain accepted an identity
+  // provider chosen by a cookie, and the ic_env cookie is writable by any
+  // sibling subdomain. Redirecting the Internet Identity flow is as severe as
+  // substituting the root key, so both now use the same test.
+  //
+  // That test is the ClientManager's single resolved decision rather than a
+  // recomputed host test, which silently ignored a caller
+  // who had opted in: `allowEnvConfig: true` accepted the cookie's root key and
+  // then discarded its identity provider, from the same cookie, on the same
+  // host.
+  if (!clientManager.trustsEnvConfig) {
     console.warn(
       `[ic-reactor] Ignoring the Internet Identity provider from the ic_env cookie ` +
-        `("${url.origin}") because this reactor targets mainnet, where the provider ` +
-        `is taken from configuration rather than the environment. Pass ` +
-        `\`identityProvider\` to AuthenticationManager to use a custom provider on mainnet.`
+        `("${url.origin}") because this reactor does not target a local replica, where ` +
+        `the provider is taken from configuration rather than the environment. Pass ` +
+        `\`identityProvider\` to AuthenticationManager to use a custom provider.`
     )
     return undefined
   }

package/src/auth/constants.ts

@@ -12,11 +12,18 @@ export const LOCAL_INTERNET_IDENTITY_CANISTER_ID = "rdmx6-jaaaa-aaaaa-aaadq-cai"
 
 /**
  * Builds the local Internet Identity provider URL for the given replica port.
+ *
+ * `authorizePath` selects the shape the installed build understands: modern
+ * builds serve `/authorize` as a real asset, while pre-2026 ones serve the SPA
+ * at `/` and drive the flow from a `#authorize` fragment. `AuthenticationManager`
+ * probes the canister and passes the right one; the default keeps the previous
+ * behaviour for direct callers.
  */
 export const localInternetIdentityProvider = (
   port: number,
-  canisterId: string = LOCAL_INTERNET_IDENTITY_CANISTER_ID
-) => `http://${canisterId}.localhost:${port}/authorize`
+  canisterId: string = LOCAL_INTERNET_IDENTITY_CANISTER_ID,
+  authorizePath: "/authorize" | "/#authorize" = "/authorize"
+) => `http://${canisterId}.localhost:${port}${authorizePath}`
 
 /**
  * Legacy default URL for local Internet Identity, using port `4943`.

package/src/auth/identity-attributes-manager.ts

@@ -1,5 +1,4 @@
 import type {
-  AuthClientLike,
   IdentityAttributeNonce,
   IdentityAttributeResult,
   RequestIdentityAttributesParameters,
@@ -51,7 +50,7 @@ export class IdentityAttributesManager {
 
     if (!authClient) {
       throw new Error(
-        "Authentication module is missing or failed to initialize. To request identity attributes, please install @icp-sdk/auth v7 or later, or provide a compatible authClient."
+        "Authentication module is missing or failed to initialize. To request identity attributes, please install @icp-sdk/auth v8, or provide a compatible authClient."
       )
     }
 
@@ -68,7 +67,7 @@ export class IdentityAttributesManager {
         : Promise.resolve(authClient.getIdentity())
       const requestPromise = authClient.requestAttributes({
         keys,
-        nonce: toAuthClientNonce(authClient, nonce),
+        nonce: toAuthClientNonce(nonce),
       })
 
       const [signedAttributes, identity] = await Promise.all([
@@ -114,23 +113,19 @@ export class IdentityAttributesManager {
 }
 
 /**
- * Bridges the two `@icp-sdk/auth` nonce contracts.
+ * Adapts our nonce input to the `@icp-sdk/auth` nonce contract.
  *
- * v8 takes `() => Promise<Uint8Array>` (it journals the value so a redirect
- * flow replays the same bytes); v7 takes `Uint8Array | Promise<Uint8Array>`.
- * Both open the transport channel synchronously for the deferred forms, so we
- * always hand over the deferred shape the installed client understands.
- * `memoize` only exists from v8 onwards, which makes it a reliable marker.
+ * v8 takes `() => Promise<Uint8Array>` — a thunk, so it can journal the value
+ * and replay the same bytes through a redirect flow. The thunk form also opens
+ * the transport channel synchronously, which is what preserves the user
+ * gesture.
+ *
+ * Until 3.12.0 this probed `typeof authClient.memoize === "function"` to detect
+ * v8 and fell back to a bare promise for v7. The peer range is now `^8.0.0`, so
+ * the probe would only ever take one branch.
  */
 function toAuthClientNonce(
-  authClient: AuthClientLike,
   nonce: IdentityAttributeNonce
-): Uint8Array | Promise<Uint8Array> | (() => Promise<Uint8Array>) {
-  const supportsNonceThunk = typeof authClient.memoize === "function"
-
-  if (supportsNonceThunk) {
-    return () => Promise.resolve(typeof nonce === "function" ? nonce() : nonce)
-  }
-
-  return Promise.resolve(typeof nonce === "function" ? nonce() : nonce)
+): () => Promise<Uint8Array> {
+  return () => Promise.resolve(typeof nonce === "function" ? nonce() : nonce)
 }

package/src/auth/local-ii-probe.ts

@@ -0,0 +1,147 @@
+/**
+ * Ask a locally deployed Internet Identity canister what it actually serves.
+ *
+ * `localInternetIdentityProvider` builds `http://<id>.localhost:<port>/authorize`,
+ * the id.ai-era path. Whether that works depends on which Internet Identity
+ * build is installed, and the window is narrow:
+ *
+ * - up to `release-2025-03-07`, the SPA lived at `/` and used a `#authorize`
+ *   fragment; `/authorize` is not an asset
+ * - `release-2026-01-05` through `release-2026-03-16` serve `/authorize`
+ * - from `release-2026-03-23` the frontend left the canister entirely (the id.ai
+ *   split), so `/authorize` 404s even on `.raw`
+ *
+ * Outside that window the login popup renders the gateway's
+ * "Response Verification Error" page and the app simply waits until the user
+ * closes it. Nothing points at the cause.
+ *
+ * Asking the canister over the agent avoids the gateway, so the answer is about
+ * the canister's assets rather than about how the gateway felt about them.
+ */
+
+import { Actor, type HttpAgent } from "@icp-sdk/core/agent"
+import { IDL } from "@icp-sdk/core/candid"
+
+/** The `http_request` query every asset-serving canister exposes. */
+const httpInterface: IDL.InterfaceFactory = ({ IDL }) => {
+  const HeaderField = IDL.Tuple(IDL.Text, IDL.Text)
+  return IDL.Service({
+    http_request: IDL.Func(
+      [
+        IDL.Record({
+          method: IDL.Text,
+          url: IDL.Text,
+          headers: IDL.Vec(HeaderField),
+          body: IDL.Vec(IDL.Nat8),
+        }),
+      ],
+      [
+        IDL.Record({
+          status_code: IDL.Nat16,
+          headers: IDL.Vec(HeaderField),
+          body: IDL.Vec(IDL.Nat8),
+        }),
+      ],
+      ["query"]
+    ),
+  })
+}
+
+interface HttpCapableActor {
+  http_request: (request: {
+    method: string
+    url: string
+    headers: [string, string][]
+    body: Uint8Array
+  }) => Promise<{ status_code: number }>
+}
+
+/** Where a given Internet Identity build expects the sign-in flow to start. */
+export type AuthorizePath = "/authorize" | "/#authorize"
+
+export interface LocalIiProbe {
+  /** The path that works, or `null` when the canister serves no sign-in UI. */
+  path: AuthorizePath | null
+  /**
+   * The probe could not reach a conclusion — the canister was unreachable, or
+   * it does not expose `http_request` at all. Callers keep their existing
+   * behaviour rather than blocking a login that might well work.
+   */
+  inconclusive: boolean
+}
+
+async function statusOf(
+  actor: HttpCapableActor,
+  url: string
+): Promise<number | undefined> {
+  try {
+    const response = await actor.http_request({
+      method: "GET",
+      url,
+      headers: [],
+      body: new Uint8Array(),
+    })
+    return response.status_code
+  } catch {
+    return undefined
+  }
+}
+
+/**
+ * Determine which authorize path a locally deployed Internet Identity serves.
+ *
+ * Never throws. A probe that cannot answer returns `inconclusive`, because a
+ * diagnostic that blocks a working setup is worse than the failure it explains.
+ */
+export async function probeLocalInternetIdentity(
+  agent: HttpAgent,
+  canisterId: string
+): Promise<LocalIiProbe> {
+  let actor: HttpCapableActor
+  try {
+    actor = Actor.createActor<HttpCapableActor>(httpInterface, {
+      agent,
+      canisterId,
+    })
+  } catch {
+    return { path: "/authorize", inconclusive: true }
+  }
+
+  const authorize = await statusOf(actor, "/authorize")
+
+  // The canister does not answer http_request at all — not an asset canister,
+  // not deployed, or the replica is down. Not our call to make.
+  if (authorize === undefined) {
+    return { path: "/authorize", inconclusive: true }
+  }
+
+  if (authorize >= 200 && authorize < 300) {
+    return { path: "/authorize", inconclusive: false }
+  }
+
+  // Pre-2026 builds serve the SPA at the root and drive the flow from a
+  // `#authorize` fragment, which is a path the gateway never sees.
+  const root = await statusOf(actor, "/")
+  if (root !== undefined && root >= 200 && root < 300) {
+    return { path: "/#authorize", inconclusive: false }
+  }
+
+  return { path: null, inconclusive: false }
+}
+
+/**
+ * The error a login gets when the installed build serves no sign-in UI, in
+ * place of a 503 page inside a popup the app cannot see.
+ */
+export function localInternetIdentityUnavailableError(
+  canisterId: string
+): Error {
+  return new Error(
+    `[ic-reactor] The Internet Identity canister ${canisterId} does not serve a sign-in UI: ` +
+      `neither /authorize nor / returned a page. Internet Identity builds from ` +
+      `release-2026-03-23 onward moved their frontend out of the canister (the id.ai split) ` +
+      `and cannot be used locally. Install internet_identity_dev.wasm from release-2026-03-16, ` +
+      `the newest build that still self-serves /authorize, or point \`identityProvider\` at a ` +
+      `provider you host yourself.`
+  )
+}

package/src/auth/types.ts

@@ -12,9 +12,8 @@ export interface SignedIdentityAttributes {
  *
  * A function (or promise) lets the Internet Identity window open while the
  * nonce is still being fetched, so the popup is opened inside the user gesture
- * instead of after it. `@icp-sdk/auth` v8 requires the function form; v7
- * accepts the promise form. IC Reactor normalizes whichever you pass to the
- * shape the installed client expects.
+ * instead of after it. `@icp-sdk/auth` v8 requires the function form, and
+ * IC Reactor normalizes whichever of these you pass into that thunk.
  */
 export type IdentityAttributeNonce =
   Uint8Array | Promise<Uint8Array> | (() => Uint8Array | Promise<Uint8Array>)
@@ -187,13 +186,10 @@ export interface AuthClientLike {
   signOut(options?: { returnTo?: string }): Promise<void>
   requestAttributes(params: {
     keys: string[]
-    // Widened across `@icp-sdk/auth` v7 (value or promise) and v8 (thunk).
-    // Method-shorthand parameters are bivariant, so both real signatures are
-    // assignable to this one.
-    nonce: Uint8Array | Promise<Uint8Array> | (() => Promise<Uint8Array>)
+    // `@icp-sdk/auth` v8 takes a thunk, so it can journal the value and replay
+    // the same bytes through a redirect flow.
+    nonce: () => Promise<Uint8Array>
   }): Promise<SignedIdentityAttributes>
-  /** Present from `@icp-sdk/auth` v8; used to detect the nonce contract. */
-  memoize?<T>(produce: () => T | Promise<T>): Promise<T>
 }
 
 export interface AuthState {