oidc-spa 10.2.11 → 10.2.13

package/esm/vite-plugin/handleTanstackStartBootstrapEnv.mjs

@@ -0,0 +1,372 @@
+import { promises as fs } from "node:fs";
+import * as path from "node:path";
+import { babelParser, babelTraverse } from "../vendor/build-runtime/babel.mjs";
+/** The manifest contains names only; values are read by the server at request time. */
+export function createHandleTanstackStartBootstrapEnv(params) {
+    const { resolvedConfig } = params;
+    const virtualId = "virtual:oidc-spa/tanstack-start-public-env";
+    const resolvedId = `\0${virtualId}`;
+    const adapterId = "oidc-spa/react-tanstack-start";
+    let scanPromise;
+    const isSourceFile = (id) => /\.[cm]?[jt]sx?$/.test(id) && !/\.d\.[cm]?ts$/.test(id);
+    const scan = async (context) => {
+        const sources = new Map();
+        const excludedDirectories = new Set([
+            "node_modules",
+            "dist",
+            "build",
+            "coverage",
+            "public",
+            path.resolve(resolvedConfig.root, resolvedConfig.build.outDir),
+            path.resolve(resolvedConfig.cacheDir)
+        ]);
+        // Scan before generating the virtual module, including lazy routes. Collecting
+        // names in transform() would make authorization depend on module load order.
+        const discover = async (directory) => {
+            context.addWatchFile(directory);
+            const entries = await fs.readdir(directory, { withFileTypes: true });
+            const files = await Promise.all(entries.map(async (entry) => {
+                const id = path.join(directory, entry.name);
+                if (entry.name.startsWith(".") ||
+                    excludedDirectories.has(entry.name) ||
+                    excludedDirectories.has(id)) {
+                    return [];
+                }
+                if (entry.isDirectory())
+                    return discover(id);
+                return entry.isFile() && isSourceFile(id) ? [id] : [];
+            }));
+            return files.flat();
+        };
+        const pending = await discover(resolvedConfig.root);
+        for (let i = 0; i < pending.length; i++) {
+            const id = pending[i];
+            if (sources.has(id))
+                continue;
+            context.addWatchFile(id);
+            const code = await fs.readFile(id, "utf8");
+            const ast = babelParser.parse(code, {
+                sourceType: "unambiguous",
+                plugins: [
+                    "typescript",
+                    ...(/\.[cm]?ts$/.test(id) ? [] : ["jsx"]),
+                    "decorators-legacy"
+                ]
+            });
+            let program;
+            babelTraverse(ast, {
+                Program(p) {
+                    program = p;
+                    p.stop();
+                }
+            });
+            const source = { program, imports: new Map() };
+            sources.set(id, source);
+            for (const statement of program.get("body")) {
+                if (!statement.isImportDeclaration() &&
+                    !statement.isExportNamedDeclaration() &&
+                    !statement.isExportAllDeclaration())
+                    continue;
+                const specifier = statement.node.source?.value;
+                if (!specifier || specifier === adapterId)
+                    continue;
+                const resolved = await context.resolve(specifier, id, { skipSelf: true });
+                if (!resolved || resolved.external)
+                    continue;
+                const dependencyId = resolved.id.split("?")[0];
+                if (!path.isAbsolute(dependencyId) ||
+                    dependencyId.includes(`${path.sep}node_modules${path.sep}`) ||
+                    !isSourceFile(dependencyId))
+                    continue;
+                source.imports.set(specifier, dependencyId);
+                pending.push(dependencyId);
+            }
+        }
+        const names = new Set();
+        const fail = (id, p, reason) => {
+            const loc = p.node.loc?.start;
+            throw new Error(`oidc-spa: Cannot determine public bootstrap environment variables in ${id}${loc ? `:${loc.line}:${loc.column + 1}` : ""}. ${reason}`);
+        };
+        const propertyName = (p) => {
+            if (!p.isMemberExpression() && !p.isOptionalMemberExpression() && !p.isObjectProperty())
+                return undefined;
+            const key = (p.isObjectProperty() ? p.get("key") : p.get("property"));
+            if (key.isStringLiteral())
+                return key.node.value;
+            if (!p.node.computed && key.isIdentifier())
+                return key.node.name;
+            return undefined;
+        };
+        const unwrap = (p) => {
+            while (p.isTSAsExpression() ||
+                p.isTSSatisfiesExpression() ||
+                p.isTSNonNullExpression() ||
+                p.isParenthesizedExpression())
+                p = p.get("expression");
+            return p;
+        };
+        const memberOrigin = (origin, name) => {
+            if (origin === "namespace" && name === "oidcSpa")
+                return "builder";
+            if (origin === "utils" && name === "bootstrapOidc")
+                return "bootstrap";
+            return undefined;
+        };
+        const exportedOrigin = (id, name, seen) => {
+            if (id === adapterId)
+                return name === "oidcSpa" ? "builder" : undefined;
+            const source = sources.get(id);
+            if (!source)
+                return undefined;
+            for (const statement of source.program.get("body")) {
+                if (seen.has(statement.node))
+                    continue;
+                if (statement.isExportDefaultDeclaration() && name === "default")
+                    return origin(statement.get("declaration"), id, seen);
+                if (statement.isExportAllDeclaration()) {
+                    const result = exportedOrigin(source.imports.get(statement.node.source.value) ?? "", name, new Set([...seen, statement.node]));
+                    if (result)
+                        return result;
+                }
+                if (!statement.isExportNamedDeclaration())
+                    continue;
+                const declaration = statement.get("declaration");
+                if (declaration.node &&
+                    source.program.scope.getBinding(name)?.path.findParent(p => p === statement)) {
+                    return bindingOrigin(source.program.scope.getBinding(name).path, name, id, seen);
+                }
+                for (const specifier of statement.get("specifiers")) {
+                    if (!specifier.isExportSpecifier())
+                        continue;
+                    const exported = specifier.node.exported;
+                    if ((exported.type === "Identifier" ? exported.name : exported.value) !== name)
+                        continue;
+                    if (!statement.node.source)
+                        return origin(specifier.get("local"), id, seen);
+                    return exportedOrigin(statement.node.source.value === adapterId
+                        ? adapterId
+                        : source.imports.get(statement.node.source.value) ?? "", specifier.node.local.name, new Set([...seen, statement.node]));
+                }
+            }
+            return undefined;
+        };
+        const bindingOrigin = (p, name, id, seen) => {
+            if (seen.has(p.node))
+                return undefined;
+            seen = new Set([...seen, p.node]);
+            if (p.isImportSpecifier() ||
+                p.isImportDefaultSpecifier() ||
+                p.isImportNamespaceSpecifier()) {
+                const declaration = p.parentPath;
+                if (!declaration?.isImportDeclaration())
+                    return undefined;
+                const specifier = declaration.node.source.value;
+                if (p.isImportNamespaceSpecifier())
+                    return specifier === adapterId ? "namespace" : undefined;
+                const imported = p.isImportSpecifier() ? p.node.imported : undefined;
+                return exportedOrigin(specifier === adapterId ? adapterId : sources.get(id)?.imports.get(specifier) ?? "", imported
+                    ? imported.type === "Identifier"
+                        ? imported.name
+                        : imported.value
+                    : "default", seen);
+            }
+            if (!p.isVariableDeclarator())
+                return undefined;
+            const valueOrigin = origin(p.get("init"), id, seen);
+            const pattern = p.get("id");
+            if (pattern.isIdentifier())
+                return valueOrigin;
+            if (!pattern.isObjectPattern())
+                return undefined;
+            for (const property of pattern.get("properties")) {
+                if (property.isObjectProperty() && property.get("value").isIdentifier({ name }))
+                    return memberOrigin(valueOrigin, propertyName(property));
+            }
+            return undefined;
+        };
+        const origin = (input, id, seen = new Set()) => {
+            const p = unwrap(input);
+            if (!p.node)
+                return undefined;
+            if (p.isIdentifier()) {
+                const binding = p.scope.getBinding(p.node.name);
+                return binding?.constant
+                    ? bindingOrigin(binding.path, p.node.name, id, seen)
+                    : undefined;
+            }
+            if (p.isMemberExpression() || p.isOptionalMemberExpression())
+                return memberOrigin(origin(p.get("object"), id, seen), propertyName(p));
+            if (!p.isCallExpression())
+                return undefined;
+            const callee = p.get("callee");
+            if (!callee.isMemberExpression() || origin(callee.get("object"), id, seen) !== "builder")
+                return undefined;
+            const method = propertyName(callee);
+            if (method === "createUtils")
+                return "utils";
+            if ([
+                "withAutoLogin",
+                "withExpectedDecodedIdTokenShape",
+                "withAccessTokenValidation"
+            ].includes(method ?? ""))
+                return "builder";
+            return undefined;
+        };
+        for (const [id, source] of sources) {
+            source.program.traverse({
+                CallExpression(call) {
+                    if (origin(call.get("callee"), id) !== "bootstrap")
+                        return;
+                    let callback = call.get("arguments")[0];
+                    if (!callback)
+                        fail(id, call, "bootstrapOidc requires an argument.");
+                    callback = unwrap(callback);
+                    const seenCallbacks = new Set();
+                    while (callback.isIdentifier()) {
+                        const binding = callback.scope.getBinding(callback.node.name);
+                        if (!binding?.constant || seenCallbacks.has(binding.path.node))
+                            break;
+                        seenCallbacks.add(binding.path.node);
+                        if (binding.path.isFunctionDeclaration()) {
+                            callback = binding.path;
+                            break;
+                        }
+                        if (!binding.path.isVariableDeclarator())
+                            break;
+                        callback = unwrap(binding.path.get("init"));
+                    }
+                    // Direct configuration objects do not receive the env proxy.
+                    if (callback.isObjectExpression())
+                        return;
+                    if (!callback.isFunction())
+                        fail(id, callback, "Use an inline callback or a locally declared callback so its environment accesses can be analyzed.");
+                    if (callback.node.async || callback.node.generator)
+                        fail(id, callback, "The bootstrap callback must be synchronous.");
+                    const visited = new Set();
+                    const followPattern = (pattern, kind) => {
+                        if (pattern.isIdentifier()) {
+                            const binding = pattern.scope.getBinding(pattern.node.name);
+                            if (!binding || !binding.constant)
+                                fail(id, pattern, "Do not reassign the bootstrap environment bindings.");
+                            if (visited.has(binding))
+                                return;
+                            visited.add(binding);
+                            binding.referencePaths.forEach(reference => followReference(reference, kind));
+                            return;
+                        }
+                        if (!pattern.isObjectPattern())
+                            fail(id, pattern, "Use named properties when destructuring the bootstrap environment; rest and default bindings are unsupported.");
+                        for (const property of pattern.get("properties")) {
+                            if (!property.isObjectProperty())
+                                fail(id, property, "Do not spread the bootstrap environment.");
+                            const name = propertyName(property);
+                            if (name === undefined)
+                                fail(id, property, "Environment variable names must be literal properties.");
+                            if (kind === "env") {
+                                names.add(name);
+                                continue;
+                            }
+                            if (name !== (kind === "argument" ? "process" : "env"))
+                                fail(id, property, "Only process.env is available in the bootstrap environment.");
+                            followPattern(property.get("value"), kind === "argument" ? "process" : "env");
+                        }
+                    };
+                    const followReference = (reference, kind) => {
+                        let parent = reference.parentPath;
+                        while (parent &&
+                            (parent.isTSAsExpression() ||
+                                parent.isTSSatisfiesExpression() ||
+                                parent.isTSNonNullExpression() ||
+                                parent.isParenthesizedExpression())) {
+                            reference = parent;
+                            parent = reference.parentPath;
+                        }
+                        if (!parent)
+                            return;
+                        if (parent.isMemberExpression() || parent.isOptionalMemberExpression()) {
+                            if (parent.get("object") !== reference)
+                                fail(id, reference, "The bootstrap environment cannot be used as a property key.");
+                            const name = propertyName(parent);
+                            if (name === undefined)
+                                fail(id, parent, "Use process.env.NAME or process.env[\"NAME\"]; computed environment variable names cannot be authorized safely.");
+                            if (kind === "env") {
+                                const use = parent.parentPath;
+                                if ((use?.isAssignmentExpression() && use.get("left") === parent) ||
+                                    use?.isUpdateExpression() ||
+                                    use?.isUnaryExpression({ operator: "delete" }))
+                                    fail(id, parent, "Do not mutate the bootstrap environment.");
+                                names.add(name);
+                                return;
+                            }
+                            if (name !== (kind === "argument" ? "process" : "env"))
+                                fail(id, parent, "Only process.env is available in the bootstrap environment.");
+                            followReference(parent, kind === "argument" ? "process" : "env");
+                            return;
+                        }
+                        if (parent.isVariableDeclarator() && parent.get("init") === reference) {
+                            followPattern(parent.get("id"), kind);
+                            return;
+                        }
+                        if (kind === "env" &&
+                            parent.isBinaryExpression({ operator: "in" }) &&
+                            parent.get("right") === reference) {
+                            const name = parent.get("left");
+                            if (!name.isStringLiteral())
+                                fail(id, name, "Use a string literal for environment membership checks.");
+                            names.add(name.node.value);
+                            return;
+                        }
+                        if (parent.isTSTypeQuery())
+                            return;
+                        fail(id, reference, "Do not pass, spread, or return the bootstrap environment object. Read its literal named variables inside the callback instead.");
+                    };
+                    const parameter = callback.get("params")[0];
+                    if (parameter)
+                        followPattern(parameter, "argument");
+                }
+            });
+        }
+        return [...names].sort();
+    };
+    return {
+        resolveId: (id) => (id === virtualId ? resolvedId : null),
+        buildStart: async (context) => {
+            // Each build (including watch rebuilds) gets its own complete snapshot.
+            scanPromise = scan(context);
+            await scanPromise;
+        },
+        load: async (id, context) => {
+            if (id !== resolvedId)
+                return null;
+            const names = await (scanPromise ?? (scanPromise = scan(context)));
+            return `export const publicEnvNames = new Set(${JSON.stringify(names)});\n`;
+        },
+        configureServer: (server) => {
+            const onSourceChange = (id) => {
+                if (!isSourceFile(id) || id.includes(`${path.sep}node_modules${path.sep}`))
+                    return;
+                scanPromise = undefined;
+                // The virtual module has no real filename for Vite to invalidate.
+                // Revoke removed names as well as discovering newly added names.
+                for (const environment of Object.values(server.environments)) {
+                    const module = environment.moduleGraph.getModuleById(resolvedId);
+                    if (!module)
+                        continue;
+                    environment.moduleGraph.invalidateModule(module);
+                    environment.hot.send({ type: "full-reload" });
+                }
+            };
+            server.watcher
+                .on("add", onSourceChange)
+                .on("change", onSourceChange)
+                .on("unlink", onSourceChange);
+            server.httpServer?.once("close", () => {
+                server.watcher
+                    .off("add", onSourceChange)
+                    .off("change", onSourceChange)
+                    .off("unlink", onSourceChange);
+            });
+        }
+    };
+}
+//# sourceMappingURL=handleTanstackStartBootstrapEnv.mjs.map

package/esm/vite-plugin/handleTanstackStartBootstrapEnv.mjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"handleTanstackStartBootstrapEnv.mjs","sourceRoot":"","sources":["../../src/vite-plugin/handleTanstackStartBootstrapEnv.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,QAAQ,IAAI,EAAE,EAAE,MAAM,SAAS,CAAC;AACzC,OAAO,KAAK,IAAI,MAAM,WAAW,CAAC;AAGlC,OAAO,EAAE,WAAW,EAAE,aAAa,EAAiB,MAAM,+BAA+B,CAAC;AAE1F,uFAAuF;AACvF,MAAM,UAAU,qCAAqC,CAAC,MAA0C;IAC5F,MAAM,EAAE,cAAc,EAAE,GAAG,MAAM,CAAC;IAClC,MAAM,SAAS,GAAG,4CAA4C,CAAC;IAC/D,MAAM,UAAU,GAAG,KAAK,SAAS,EAAE,CAAC;IACpC,MAAM,SAAS,GAAG,+BAA+B,CAAC;IAClD,IAAI,WAA0C,CAAC;IAE/C,MAAM,YAAY,GAAG,CAAC,EAAU,EAAE,EAAE,CAAC,iBAAiB,CAAC,IAAI,CAAC,EAAE,CAAC,IAAI,CAAC,eAAe,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;IAE7F,MAAM,IAAI,GAAG,KAAK,EAAE,OAAwD,EAAE,EAAE;QAK5E,MAAM,OAAO,GAAG,IAAI,GAAG,EAAkB,CAAC;QAC1C,MAAM,mBAAmB,GAAG,IAAI,GAAG,CAAC;YAChC,cAAc;YACd,MAAM;YACN,OAAO;YACP,UAAU;YACV,QAAQ;YACR,IAAI,CAAC,OAAO,CAAC,cAAc,CAAC,IAAI,EAAE,cAAc,CAAC,KAAK,CAAC,MAAM,CAAC;YAC9D,IAAI,CAAC,OAAO,CAAC,cAAc,CAAC,QAAQ,CAAC;SACxC,CAAC,CAAC;QAEH,+EAA+E;QAC/E,6EAA6E;QAC7E,MAAM,QAAQ,GAAG,KAAK,EAAE,SAAiB,EAAqB,EAAE;YAC5D,OAAO,CAAC,YAAY,CAAC,SAAS,CAAC,CAAC;YAChC,MAAM,OAAO,GAAG,MAAM,EAAE,CAAC,OAAO,CAAC,SAAS,EAAE,EAAE,aAAa,EAAE,IAAI,EAAE,CAAC,CAAC;YACrE,MAAM,KAAK,GAAG,MAAM,OAAO,CAAC,GAAG,CAC3B,OAAO,CAAC,GAAG,CAAC,KAAK,EAAC,KAAK,EAAC,EAAE;gBACtB,MAAM,EAAE,GAAG,IAAI,CAAC,IAAI,CAAC,SAAS,EAAE,KAAK,CAAC,IAAI,CAAC,CAAC;gBAC5C,IACI,KAAK,CAAC,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC;oBAC1B,mBAAmB,CAAC,GAAG,CAAC,KAAK,CAAC,IAAI,CAAC;oBACnC,mBAAmB,CAAC,GAAG,CAAC,EAAE,CAAC,EAC7B,CAAC;oBACC,OAAO,EAAE,CAAC;gBACd,CAAC;gBACD,IAAI,KAAK,CAAC,WAAW,EAAE;oBAAE,OAAO,QAAQ,CAAC,EAAE,CAAC,CAAC;gBAC7C,OAAO,KAAK,CAAC,MAAM,EAAE,IAAI,YAAY,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;YAC1D,CAAC,CAAC,CACL,CAAC;YACF,OAAO,KAAK,CAAC,IAAI,EAAE,CAAC;QACxB,CAAC,CAAC;QAEF,MAAM,OAAO,GAAG,MAAM,QAAQ,CAAC,cAAc,CAAC,IAAI,CAAC,CAAC;QACpD,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,OAAO,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE,CAAC;YACtC,MAAM,EAAE,GAAG,OAAO,CAAC,CAAC,CAAC,CAAC;YACtB,IAAI,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC;gBAAE,SAAS;YAC9B,OAAO,CAAC,YAAY,CAAC,EAAE,CAAC,CAAC;YACzB,MAAM,IAAI,GAAG,MAAM,EAAE,CAAC,QAAQ,CAAC,EAAE,EAAE,MAAM,CAAC,CAAC;YAC3C,MAAM,GAAG,GAAG,WAAW,CAAC,KAAK,CAAC,IAAI,EAAE;gBAChC,UAAU,EAAE,aAAa;gBACzB,OAAO,EAAE;oBACL,YAAY;oBACZ,GAAG,CAAC,YAAY,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,KAAc,CAAC,CAAC;oBAClD,mBAAmB;iBACtB;aACJ,CAAC,CAAC;YACH,IAAI,OAAkB,CAAC;YACvB,aAAa,CAAC,GAAG,EAAE;gBACf,OAAO,CAAC,CAAC;oBACL,OAAO,GAAG,CAAC,CAAC;oBACZ,CAAC,CAAC,IAAI,EAAE,CAAC;gBACb,CAAC;aACJ,CAAC,CAAC;YACH,MAAM,MAAM,GAAW,EAAE,OAAO,EAAE,OAAO,EAAE,IAAI,GAAG,EAAE,EAAE,CAAC;YACvD,OAAO,CAAC,GAAG,CAAC,EAAE,EAAE,MAAM,CAAC,CAAC;YACxB,KAAK,MAAM,SAAS,IAAI,OAAO,CAAC,GAAG,CAAC,MAAM,CAAe,EAAE,CAAC;gBACxD,IACI,CAAC,SAAS,CAAC,mBAAmB,EAAE;oBAChC,CAAC,SAAS,CAAC,wBAAwB,EAAE;oBACrC,CAAC,SAAS,CAAC,sBAAsB,EAAE;oBAEnC,SAAS;gBACb,MAAM,SAAS,GAAG,SAAS,CAAC,IAAI,CAAC,MAAM,EAAE,KAAK,CAAC;gBAC/C,IAAI,CAAC,SAAS,IAAI,SAAS,KAAK,SAAS;oBAAE,SAAS;gBACpD,MAAM,QAAQ,GAAG,MAAM,OAAO,CAAC,OAAO,CAAC,SAAS,EAAE,EAAE,EAAE,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAC,CAAC;gBAC1E,IAAI,CAAC,QAAQ,IAAI,QAAQ,CAAC,QAAQ;oBAAE,SAAS;gBAC7C,MAAM,YAAY,GAAG,QAAQ,CAAC,EAAE,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC;gBAC/C,IACI,CAAC,IAAI,CAAC,UAAU,CAAC,YAAY,CAAC;oBAC9B,YAAY,CAAC,QAAQ,CAAC,GAAG,IAAI,CAAC,GAAG,eAAe,IAAI,CAAC,GAAG,EAAE,CAAC;oBAC3D,CAAC,YAAY,CAAC,YAAY,CAAC;oBAE3B,SAAS;gBACb,MAAM,CAAC,OAAO,CAAC,GAAG,CAAC,SAAS,EAAE,YAAY,CAAC,CAAC;gBAC5C,OAAO,CAAC,IAAI,CAAC,YAAY,CAAC,CAAC;YAC/B,CAAC;QACL,CAAC;QAED,MAAM,KAAK,GAAG,IAAI,GAAG,EAAU,CAAC;QAChC,MAAM,IAAI,GAAuD,CAAC,EAAE,EAAE,CAAC,EAAE,MAAM,EAAE,EAAE;YAC/E,MAAM,GAAG,GAAG,CAAC,CAAC,IAAI,CAAC,GAAG,EAAE,KAAK,CAAC;YAC9B,MAAM,IAAI,KAAK,CACX,wEAAwE,EAAE,GACtE,GAAG,CAAC,CAAC,CAAC,IAAI,GAAG,CAAC,IAAI,IAAI,GAAG,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC,CAAC,CAAC,EAC7C,KAAK,MAAM,EAAE,CAChB,CAAC;QACN,CAAC,CAAC;QACF,MAAM,YAAY,GAAG,CAAC,CAAW,EAAsB,EAAE;YACrD,IAAI,CAAC,CAAC,CAAC,kBAAkB,EAAE,IAAI,CAAC,CAAC,CAAC,0BAA0B,EAAE,IAAI,CAAC,CAAC,CAAC,gBAAgB,EAAE;gBACnF,OAAO,SAAS,CAAC;YACrB,MAAM,GAAG,GAAG,CAAC,CAAC,CAAC,gBAAgB,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,UAAU,CAAC,CAAa,CAAC;YAClF,IAAI,GAAG,CAAC,eAAe,EAAE;gBAAE,OAAO,GAAG,CAAC,IAAI,CAAC,KAAK,CAAC;YACjD,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,QAAQ,IAAI,GAAG,CAAC,YAAY,EAAE;gBAAE,OAAO,GAAG,CAAC,IAAI,CAAC,IAAI,CAAC;YACjE,OAAO,SAAS,CAAC;QACrB,CAAC,CAAC;QACF,MAAM,MAAM,GAAG,CAAC,CAAW,EAAY,EAAE;YACrC,OACI,CAAC,CAAC,gBAAgB,EAAE;gBACpB,CAAC,CAAC,uBAAuB,EAAE;gBAC3B,CAAC,CAAC,qBAAqB,EAAE;gBACzB,CAAC,CAAC,yBAAyB,EAAE;gBAE7B,CAAC,GAAG,CAAC,CAAC,GAAG,CAAC,YAAY,CAAa,CAAC;YACxC,OAAO,CAAC,CAAC;QACb,CAAC,CAAC;QAEF,MAAM,YAAY,GAAG,CACjB,MAA0B,EAC1B,IAAwB,EACN,EAAE;YACpB,IAAI,MAAM,KAAK,WAAW,IAAI,IAAI,KAAK,SAAS;gBAAE,OAAO,SAAS,CAAC;YACnE,IAAI,MAAM,KAAK,OAAO,IAAI,IAAI,KAAK,eAAe;gBAAE,OAAO,WAAW,CAAC;YACvE,OAAO,SAAS,CAAC;QACrB,CAAC,CAAC;QACF,MAAM,cAAc,GAAG,CAAC,EAAU,EAAE,IAAY,EAAE,IAAiB,EAAsB,EAAE;YACvF,IAAI,EAAE,KAAK,SAAS;gBAAE,OAAO,IAAI,KAAK,SAAS,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,SAAS,CAAC;YACxE,MAAM,MAAM,GAAG,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;YAC/B,IAAI,CAAC,MAAM;gBAAE,OAAO,SAAS,CAAC;YAC9B,KAAK,MAAM,SAAS,IAAI,MAAM,CAAC,OAAO,CAAC,GAAG,CAAC,MAAM,CAAe,EAAE,CAAC;gBAC/D,IAAI,IAAI,CAAC,GAAG,CAAC,SAAS,CAAC,IAAI,CAAC;oBAAE,SAAS;gBACvC,IAAI,SAAS,CAAC,0BAA0B,EAAE,IAAI,IAAI,KAAK,SAAS;oBAC5D,OAAO,MAAM,CAAC,SAAS,CAAC,GAAG,CAAC,aAAa,CAAC,EAAE,EAAE,EAAE,IAAI,CAAC,CAAC;gBAC1D,IAAI,SAAS,CAAC,sBAAsB,EAAE,EAAE,CAAC;oBACrC,MAAM,MAAM,GAAG,cAAc,CACzB,MAAM,CAAC,OAAO,CAAC,GAAG,CAAC,SAAS,CAAC,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,IAAI,EAAE,EACrD,IAAI,EACJ,IAAI,GAAG,CAAC,CAAC,GAAG,IAAI,EAAE,SAAS,CAAC,IAAI,CAAC,CAAC,CACrC,CAAC;oBACF,IAAI,MAAM;wBAAE,OAAO,MAAM,CAAC;gBAC9B,CAAC;gBACD,IAAI,CAAC,SAAS,CAAC,wBAAwB,EAAE;oBAAE,SAAS;gBACpD,MAAM,WAAW,GAAG,SAAS,CAAC,GAAG,CAAC,aAAa,CAAC,CAAC;gBACjD,IACI,WAAW,CAAC,IAAI;oBAChB,MAAM,CAAC,OAAO,CAAC,KAAK,CAAC,UAAU,CAAC,IAAI,CAAC,EAAE,IAAI,CAAC,UAAU,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,KAAK,SAAS,CAAC,EAC9E,CAAC;oBACC,OAAO,aAAa,CAAC,MAAM,CAAC,OAAO,CAAC,KAAK,CAAC,UAAU,CAAC,IAAI,CAAE,CAAC,IAAI,EAAE,IAAI,EAAE,EAAE,EAAE,IAAI,CAAC,CAAC;gBACtF,CAAC;gBACD,KAAK,MAAM,SAAS,IAAI,SAAS,CAAC,GAAG,CAAC,YAAY,CAAC,EAAE,CAAC;oBAClD,IAAI,CAAC,SAAS,CAAC,iBAAiB,EAAE;wBAAE,SAAS;oBAC7C,MAAM,QAAQ,GAAG,SAAS,CAAC,IAAI,CAAC,QAAQ,CAAC;oBACzC,IAAI,CAAC,QAAQ,CAAC,IAAI,KAAK,YAAY,CAAC,CAAC,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC,KAAK,IAAI;wBAC1E,SAAS;oBACb,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,MAAM;wBAAE,OAAO,MAAM,CAAC,SAAS,CAAC,GAAG,CAAC,OAAO,CAAC,EAAE,EAAE,EAAE,IAAI,CAAC,CAAC;oBAC5E,OAAO,cAAc,CACjB,SAAS,CAAC,IAAI,CAAC,MAAM,CAAC,KAAK,KAAK,SAAS;wBACrC,CAAC,CAAC,SAAS;wBACX,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,GAAG,CAAC,SAAS,CAAC,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,IAAI,EAAE,EAC3D,SAAS,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,EACzB,IAAI,GAAG,CAAC,CAAC,GAAG,IAAI,EAAE,SAAS,CAAC,IAAI,CAAC,CAAC,CACrC,CAAC;gBACN,CAAC;YACL,CAAC;YACD,OAAO,SAAS,CAAC;QACrB,CAAC,CAAC;QACF,MAAM,aAAa,GAAG,CAClB,CAAW,EACX,IAAY,EACZ,EAAU,EACV,IAAiB,EACC,EAAE;YACpB,IAAI,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC;gBAAE,OAAO,SAAS,CAAC;YACvC,IAAI,GAAG,IAAI,GAAG,CAAC,CAAC,GAAG,IAAI,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC;YAClC,IACI,CAAC,CAAC,iBAAiB,EAAE;gBACrB,CAAC,CAAC,wBAAwB,EAAE;gBAC5B,CAAC,CAAC,0BAA0B,EAAE,EAChC,CAAC;gBACC,MAAM,WAAW,GAAG,CAAC,CAAC,UAAU,CAAC;gBACjC,IAAI,CAAC,WAAW,EAAE,mBAAmB,EAAE;oBAAE,OAAO,SAAS,CAAC;gBAC1D,MAAM,SAAS,GAAG,WAAW,CAAC,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC;gBAChD,IAAI,CAAC,CAAC,0BAA0B,EAAE;oBAC9B,OAAO,SAAS,KAAK,SAAS,CAAC,CAAC,CAAC,WAAW,CAAC,CAAC,CAAC,SAAS,CAAC;gBAC7D,MAAM,QAAQ,GAAG,CAAC,CAAC,iBAAiB,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC,CAAC,SAAS,CAAC;gBACrE,OAAO,cAAc,CACjB,SAAS,KAAK,SAAS,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC,EAAE,OAAO,CAAC,GAAG,CAAC,SAAS,CAAC,IAAI,EAAE,EACnF,QAAQ;oBACJ,CAAC,CAAC,QAAQ,CAAC,IAAI,KAAK,YAAY;wBAC5B,CAAC,CAAC,QAAQ,CAAC,IAAI;wBACf,CAAC,CAAC,QAAQ,CAAC,KAAK;oBACpB,CAAC,CAAC,SAAS,EACf,IAAI,CACP,CAAC;YACN,CAAC;YACD,IAAI,CAAC,CAAC,CAAC,oBAAoB,EAAE;gBAAE,OAAO,SAAS,CAAC;YAChD,MAAM,WAAW,GAAG,MAAM,CAAC,CAAC,CAAC,GAAG,CAAC,MAAM,CAAa,EAAE,EAAE,EAAE,IAAI,CAAC,CAAC;YAChE,MAAM,OAAO,GAAG,CAAC,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;YAC5B,IAAI,OAAO,CAAC,YAAY,EAAE;gBAAE,OAAO,WAAW,CAAC;YAC/C,IAAI,CAAC,OAAO,CAAC,eAAe,EAAE;gBAAE,OAAO,SAAS,CAAC;YACjD,KAAK,MAAM,QAAQ,IAAI,OAAO,CAAC,GAAG,CAAC,YAAY,CAAC,EAAE,CAAC;gBAC/C,IAAI,QAAQ,CAAC,gBAAgB,EAAE,IAAI,QAAQ,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,YAAY,CAAC,EAAE,IAAI,EAAE,CAAC;oBAC3E,OAAO,YAAY,CAAC,WAAW,EAAE,YAAY,CAAC,QAAQ,CAAC,CAAC,CAAC;YACjE,CAAC;YACD,OAAO,SAAS,CAAC;QACrB,CAAC,CAAC;QACF,MAAM,MAAM,GAAG,CAAC,KAAe,EAAE,EAAU,EAAE,OAAO,IAAI,GAAG,EAAU,EAAsB,EAAE;YACzF,MAAM,CAAC,GAAG,MAAM,CAAC,KAAK,CAAC,CAAC;YACxB,IAAI,CAAC,CAAC,CAAC,IAAI;gBAAE,OAAO,SAAS,CAAC;YAC9B,IAAI,CAAC,CAAC,YAAY,EAAE,EAAE,CAAC;gBACnB,MAAM,OAAO,GAAG,CAAC,CAAC,KAAK,CAAC,UAAU,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;gBAChD,OAAO,OAAO,EAAE,QAAQ;oBACpB,CAAC,CAAC,aAAa,CAAC,OAAO,CAAC,IAAI,EAAE,CAAC,CAAC,IAAI,CAAC,IAAI,EAAE,EAAE,EAAE,IAAI,CAAC;oBACpD,CAAC,CAAC,SAAS,CAAC;YACpB,CAAC;YACD,IAAI,CAAC,CAAC,kBAAkB,EAAE,IAAI,CAAC,CAAC,0BAA0B,EAAE;gBACxD,OAAO,YAAY,CAAC,MAAM,CAAC,CAAC,CAAC,GAAG,CAAC,QAAQ,CAAa,EAAE,EAAE,EAAE,IAAI,CAAC,EAAE,YAAY,CAAC,CAAC,CAAC,CAAC,CAAC;YACxF,IAAI,CAAC,CAAC,CAAC,gBAAgB,EAAE;gBAAE,OAAO,SAAS,CAAC;YAC5C,MAAM,MAAM,GAAG,CAAC,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC;YAC/B,IAAI,CAAC,MAAM,CAAC,kBAAkB,EAAE,IAAI,MAAM,CAAC,MAAM,CAAC,GAAG,CAAC,QAAQ,CAAC,EAAE,EAAE,EAAE,IAAI,CAAC,KAAK,SAAS;gBACpF,OAAO,SAAS,CAAC;YACrB,MAAM,MAAM,GAAG,YAAY,CAAC,MAAM,CAAC,CAAC;YACpC,IAAI,MAAM,KAAK,aAAa;gBAAE,OAAO,OAAO,CAAC;YAC7C,IACI;gBACI,eAAe;gBACf,iCAAiC;gBACjC,2BAA2B;aAC9B,CAAC,QAAQ,CAAC,MAAM,IAAI,EAAE,CAAC;gBAExB,OAAO,SAAS,CAAC;YACrB,OAAO,SAAS,CAAC;QACrB,CAAC,CAAC;QAEF,KAAK,MAAM,CAAC,EAAE,EAAE,MAAM,CAAC,IAAI,OAAO,EAAE,CAAC;YACjC,MAAM,CAAC,OAAO,CAAC,QAAQ,CAAC;gBACpB,cAAc,CAAC,IAAI;oBACf,IAAI,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,QAAQ,CAAC,EAAE,EAAE,CAAC,KAAK,WAAW;wBAAE,OAAO;oBAC3D,IAAI,QAAQ,GAAa,IAAI,CAAC,GAAG,CAAC,WAAW,CAAC,CAAC,CAAC,CAAC,CAAC;oBAClD,IAAI,CAAC,QAAQ;wBAAE,IAAI,CAAC,EAAE,EAAE,IAAI,EAAE,qCAAqC,CAAC,CAAC;oBACrE,QAAQ,GAAG,MAAM,CAAC,QAAQ,CAAC,CAAC;oBAC5B,MAAM,aAAa,GAAG,IAAI,GAAG,EAAU,CAAC;oBACxC,OAAO,QAAQ,CAAC,YAAY,EAAE,EAAE,CAAC;wBAC7B,MAAM,OAAO,GAAG,QAAQ,CAAC,KAAK,CAAC,UAAU,CAAC,QAAQ,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;wBAC9D,IAAI,CAAC,OAAO,EAAE,QAAQ,IAAI,aAAa,CAAC,GAAG,CAAC,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC;4BAAE,MAAM;wBACtE,aAAa,CAAC,GAAG,CAAC,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;wBACrC,IAAI,OAAO,CAAC,IAAI,CAAC,qBAAqB,EAAE,EAAE,CAAC;4BACvC,QAAQ,GAAG,OAAO,CAAC,IAAI,CAAC;4BACxB,MAAM;wBACV,CAAC;wBACD,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,oBAAoB,EAAE;4BAAE,MAAM;wBAChD,QAAQ,GAAG,MAAM,CAAC,OAAO,CAAC,IAAI,CAAC,GAAG,CAAC,MAAM,CAAa,CAAC,CAAC;oBAC5D,CAAC;oBACD,6DAA6D;oBAC7D,IAAI,QAAQ,CAAC,kBAAkB,EAAE;wBAAE,OAAO;oBAC1C,IAAI,CAAC,QAAQ,CAAC,UAAU,EAAE;wBACtB,IAAI,CACA,EAAE,EACF,QAAQ,EACR,oGAAoG,CACvG,CAAC;oBACN,IAAI,QAAQ,CAAC,IAAI,CAAC,KAAK,IAAI,QAAQ,CAAC,IAAI,CAAC,SAAS;wBAC9C,IAAI,CAAC,EAAE,EAAE,QAAQ,EAAE,6CAA6C,CAAC,CAAC;oBAGtE,MAAM,OAAO,GAAG,IAAI,GAAG,EAAU,CAAC;oBAClC,MAAM,aAAa,GAAG,CAAC,OAAiB,EAAE,IAAe,EAAQ,EAAE;wBAC/D,IAAI,OAAO,CAAC,YAAY,EAAE,EAAE,CAAC;4BACzB,MAAM,OAAO,GAAG,OAAO,CAAC,KAAK,CAAC,UAAU,CAAC,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;4BAC5D,IAAI,CAAC,OAAO,IAAI,CAAC,OAAO,CAAC,QAAQ;gCAC7B,IAAI,CAAC,EAAE,EAAE,OAAO,EAAE,qDAAqD,CAAC,CAAC;4BAC7E,IAAI,OAAO,CAAC,GAAG,CAAC,OAAO,CAAC;gCAAE,OAAO;4BACjC,OAAO,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC;4BACrB,OAAO,CAAC,cAAc,CAAC,OAAO,CAAC,SAAS,CAAC,EAAE,CACvC,eAAe,CAAC,SAAS,EAAE,IAAI,CAAC,CACnC,CAAC;4BACF,OAAO;wBACX,CAAC;wBACD,IAAI,CAAC,OAAO,CAAC,eAAe,EAAE;4BAC1B,IAAI,CACA,EAAE,EACF,OAAO,EACP,+GAA+G,CAClH,CAAC;wBACN,KAAK,MAAM,QAAQ,IAAI,OAAO,CAAC,GAAG,CAAC,YAAY,CAAC,EAAE,CAAC;4BAC/C,IAAI,CAAC,QAAQ,CAAC,gBAAgB,EAAE;gCAC5B,IAAI,CAAC,EAAE,EAAE,QAAQ,EAAE,0CAA0C,CAAC,CAAC;4BACnE,MAAM,IAAI,GAAG,YAAY,CAAC,QAAQ,CAAC,CAAC;4BACpC,IAAI,IAAI,KAAK,SAAS;gCAClB,IAAI,CACA,EAAE,EACF,QAAQ,EACR,wDAAwD,CAC3D,CAAC;4BACN,IAAI,IAAI,KAAK,KAAK,EAAE,CAAC;gCACjB,KAAK,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;gCAChB,SAAS;4BACb,CAAC;4BACD,IAAI,IAAI,KAAK,CAAC,IAAI,KAAK,UAAU,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,KAAK,CAAC;gCAClD,IAAI,CACA,EAAE,EACF,QAAQ,EACR,6DAA6D,CAChE,CAAC;4BACN,aAAa,CACT,QAAQ,CAAC,GAAG,CAAC,OAAO,CAAC,EACrB,IAAI,KAAK,UAAU,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,KAAK,CAC1C,CAAC;wBACN,CAAC;oBACL,CAAC,CAAC;oBACF,MAAM,eAAe,GAAG,CAAC,SAAmB,EAAE,IAAe,EAAQ,EAAE;wBACnE,IAAI,MAAM,GAAG,SAAS,CAAC,UAAU,CAAC;wBAClC,OACI,MAAM;4BACN,CAAC,MAAM,CAAC,gBAAgB,EAAE;gCACtB,MAAM,CAAC,uBAAuB,EAAE;gCAChC,MAAM,CAAC,qBAAqB,EAAE;gCAC9B,MAAM,CAAC,yBAAyB,EAAE,CAAC,EACzC,CAAC;4BACC,SAAS,GAAG,MAAM,CAAC;4BACnB,MAAM,GAAG,SAAS,CAAC,UAAU,CAAC;wBAClC,CAAC;wBACD,IAAI,CAAC,MAAM;4BAAE,OAAO;wBACpB,IAAI,MAAM,CAAC,kBAAkB,EAAE,IAAI,MAAM,CAAC,0BAA0B,EAAE,EAAE,CAAC;4BACrE,IAAI,MAAM,CAAC,GAAG,CAAC,QAAQ,CAAC,KAAK,SAAS;gCAClC,IAAI,CACA,EAAE,EACF,SAAS,EACT,6DAA6D,CAChE,CAAC;4BACN,MAAM,IAAI,GAAG,YAAY,CAAC,MAAM,CAAC,CAAC;4BAClC,IAAI,IAAI,KAAK,SAAS;gCAClB,IAAI,CACA,EAAE,EACF,MAAM,EACN,+GAA+G,CAClH,CAAC;4BACN,IAAI,IAAI,KAAK,KAAK,EAAE,CAAC;gCACjB,MAAM,GAAG,GAAG,MAAM,CAAC,UAAU,CAAC;gCAC9B,IACI,CAAC,GAAG,EAAE,sBAAsB,EAAE,IAAI,GAAG,CAAC,GAAG,CAAC,MAAM,CAAC,KAAK,MAAM,CAAC;oCAC7D,GAAG,EAAE,kBAAkB,EAAE;oCACzB,GAAG,EAAE,iBAAiB,CAAC,EAAE,QAAQ,EAAE,QAAQ,EAAE,CAAC;oCAE9C,IAAI,CAAC,EAAE,EAAE,MAAM,EAAE,0CAA0C,CAAC,CAAC;gCACjE,KAAK,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;gCAChB,OAAO;4BACX,CAAC;4BACD,IAAI,IAAI,KAAK,CAAC,IAAI,KAAK,UAAU,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,KAAK,CAAC;gCAClD,IAAI,CACA,EAAE,EACF,MAAM,EACN,6DAA6D,CAChE,CAAC;4BACN,eAAe,CAAC,MAAM,EAAE,IAAI,KAAK,UAAU,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC;4BACjE,OAAO;wBACX,CAAC;wBACD,IAAI,MAAM,CAAC,oBAAoB,EAAE,IAAI,MAAM,CAAC,GAAG,CAAC,MAAM,CAAC,KAAK,SAAS,EAAE,CAAC;4BACpE,aAAa,CAAC,MAAM,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,IAAI,CAAC,CAAC;4BACtC,OAAO;wBACX,CAAC;wBACD,IACI,IAAI,KAAK,KAAK;4BACd,MAAM,CAAC,kBAAkB,CAAC,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAC;4BAC7C,MAAM,CAAC,GAAG,CAAC,OAAO,CAAC,KAAK,SAAS,EACnC,CAAC;4BACC,MAAM,IAAI,GAAG,MAAM,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC;4BAChC,IAAI,CAAC,IAAI,CAAC,eAAe,EAAE;gCACvB,IAAI,CACA,EAAE,EACF,IAAI,EACJ,yDAAyD,CAC5D,CAAC;4BACN,KAAK,CAAC,GAAG,CAAC,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;4BAC3B,OAAO;wBACX,CAAC;wBACD,IAAI,MAAM,CAAC,aAAa,EAAE;4BAAE,OAAO;wBACnC,IAAI,CACA,EAAE,EACF,SAAS,EACT,gIAAgI,CACnI,CAAC;oBACN,CAAC,CAAC;oBACF,MAAM,SAAS,GAAG,QAAQ,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC;oBAC5C,IAAI,SAAS;wBAAE,aAAa,CAAC,SAAS,EAAE,UAAU,CAAC,CAAC;gBACxD,CAAC;aACJ,CAAC,CAAC;QACP,CAAC;QACD,OAAO,CAAC,GAAG,KAAK,CAAC,CAAC,IAAI,EAAE,CAAC;IAC7B,CAAC,CAAC;IAEF,OAAO;QACH,SAAS,EAAE,CAAC,EAAU,EAAE,EAAE,CAAC,CAAC,EAAE,KAAK,SAAS,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC,IAAI,CAAC;QACjE,UAAU,EAAE,KAAK,EAAE,OAAwD,EAAE,EAAE;YAC3E,wEAAwE;YACxE,WAAW,GAAG,IAAI,CAAC,OAAO,CAAC,CAAC;YAC5B,MAAM,WAAW,CAAC;QACtB,CAAC;QACD,IAAI,EAAE,KAAK,EAAE,EAAU,EAAE,OAAwD,EAAE,EAAE;YACjF,IAAI,EAAE,KAAK,UAAU;gBAAE,OAAO,IAAI,CAAC;YACnC,MAAM,KAAK,GAAG,MAAM,CAAC,WAAW,KAAX,WAAW,GAAK,IAAI,CAAC,OAAO,CAAC,EAAC,CAAC;YACpD,OAAO,yCAAyC,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,MAAM,CAAC;QAChF,CAAC;QACD,eAAe,EAAE,CAAC,MAAqB,EAAE,EAAE;YACvC,MAAM,cAAc,GAAG,CAAC,EAAU,EAAE,EAAE;gBAClC,IAAI,CAAC,YAAY,CAAC,EAAE,CAAC,IAAI,EAAE,CAAC,QAAQ,CAAC,GAAG,IAAI,CAAC,GAAG,eAAe,IAAI,CAAC,GAAG,EAAE,CAAC;oBAAE,OAAO;gBACnF,WAAW,GAAG,SAAS,CAAC;gBACxB,kEAAkE;gBAClE,iEAAiE;gBACjE,KAAK,MAAM,WAAW,IAAI,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,YAAY,CAAC,EAAE,CAAC;oBAC3D,MAAM,MAAM,GAAG,WAAW,CAAC,WAAW,CAAC,aAAa,CAAC,UAAU,CAAC,CAAC;oBACjE,IAAI,CAAC,MAAM;wBAAE,SAAS;oBACtB,WAAW,CAAC,WAAW,CAAC,gBAAgB,CAAC,MAAM,CAAC,CAAC;oBACjD,WAAW,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,aAAa,EAAE,CAAC,CAAC;gBAClD,CAAC;YACL,CAAC,CAAC;YACF,MAAM,CAAC,OAAO;iBACT,EAAE,CAAC,KAAK,EAAE,cAAc,CAAC;iBACzB,EAAE,CAAC,QAAQ,EAAE,cAAc,CAAC;iBAC5B,EAAE,CAAC,QAAQ,EAAE,cAAc,CAAC,CAAC;YAClC,MAAM,CAAC,UAAU,EAAE,IAAI,CAAC,OAAO,EAAE,GAAG,EAAE;gBAClC,MAAM,CAAC,OAAO;qBACT,GAAG,CAAC,KAAK,EAAE,cAAc,CAAC;qBAC1B,GAAG,CAAC,QAAQ,EAAE,cAAc,CAAC;qBAC7B,GAAG,CAAC,QAAQ,EAAE,cAAc,CAAC,CAAC;YACvC,CAAC,CAAC,CAAC;QACP,CAAC;KACJ,CAAC;AACN,CAAC"}

package/esm/vite-plugin/vite-plugin.mjs

@@ -5,6 +5,7 @@ import { manageOptimizedDeps } from "./manageOptimizedDeps.mjs";
 import { transformCreateFileRoute } from "./transformTanstackRouterCreateFileRoute.mjs";
 import { getProjectType } from "./projectType.mjs";
 import { createHandleTanstackStartClientOutput } from "./handleTanstackStartClientOutput.mjs";
+import { createHandleTanstackStartBootstrapEnv } from "./handleTanstackStartBootstrapEnv.mjs";
 export function oidcSpa(params = {}) {
     let load_handleClientEntrypoint = undefined;
     let resolveId_handleTanstackStartClientOutput = undefined;
@@ -15,6 +16,7 @@ export function oidcSpa(params = {}) {
     let load_handleServerEntrypoint = undefined;
     let projectType = undefined;
     let isBuild = false;
+    let bootstrapEnvHandler;
     const plugin = {
         name: "oidc-spa",
         enforce: "pre",
@@ -34,6 +36,9 @@ export function oidcSpa(params = {}) {
             projectType = getProjectType({
                 pluginNames: resolvedConfig.plugins.map(({ name }) => name)
             });
+            if (projectType === "tanstack-start") {
+                bootstrapEnvHandler = createHandleTanstackStartBootstrapEnv({ resolvedConfig });
+            }
             const clientEntrypointHandler = createHandleClientEntrypoint({
                 oidcSpaVitePluginParams: params,
                 resolvedConfig,
@@ -73,12 +78,23 @@ export function oidcSpa(params = {}) {
             return transformed;
         },
         resolveId(id) {
-            return resolveId_handleTanstackStartClientOutput?.(id) ?? null;
+            return (bootstrapEnvHandler?.resolveId(id) ??
+                resolveId_handleTanstackStartClientOutput?.(id) ??
+                null);
         },
-        buildStart() {
+        async buildStart() {
+            await bootstrapEnvHandler?.buildStart(this);
             buildStart_handleTanstackStartClientOutput?.call(this);
         },
+        configureServer(server) {
+            bootstrapEnvHandler?.configureServer(server);
+        },
         async load(id) {
+            {
+                const r = await bootstrapEnvHandler?.load(id, this);
+                if (r !== null && r !== undefined)
+                    return r;
+            }
             {
                 const r = load_handleTanstackStartClientOutput?.(id) ?? null;
                 if (r !== null) {

package/esm/vite-plugin/vite-plugin.mjs.map

@@ -1 +1 @@
-{"version":3,"file":"vite-plugin.mjs","sourceRoot":"","sources":["../../src/vite-plugin/vite-plugin.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,MAAM,EAAE,MAAM,uBAAuB,CAAC;AAE/C,OAAO,EAAE,4BAA4B,EAAE,MAAM,0BAA0B,CAAC;AACxE,OAAO,EAAE,4BAA4B,EAAE,MAAM,0BAA0B,CAAC;AACxE,OAAO,EAAE,mBAAmB,EAAE,MAAM,uBAAuB,CAAC;AAC5D,OAAO,EAAE,wBAAwB,EAAE,MAAM,0CAA0C,CAAC;AACpF,OAAO,EAAE,cAAc,EAAoB,MAAM,eAAe,CAAC;AACjE,OAAO,EAAE,qCAAqC,EAAE,MAAM,mCAAmC,CAAC;AA0D1F,MAAM,UAAU,OAAO,CAAC,SAAkC,EAAE;IACxD,IAAI,2BAA2B,GAEb,SAAS,CAAC;IAC5B,IAAI,yCAAyC,GAE3B,SAAS,CAAC;IAC5B,IAAI,oCAAoC,GAEtB,SAAS,CAAC;IAC5B,IAAI,0CAA0C,GAE5B,SAAS,CAAC;IAC5B,IAAI,8CAA8C,GAEhC,SAAS,CAAC;IAC5B,IAAI,wCAAwC,GAAuB,SAAS,CAAC;IAC7E,IAAI,2BAA2B,GAEb,SAAS,CAAC;IAE5B,IAAI,WAAW,GAA4B,SAAS,CAAC;IACrD,IAAI,OAAO,GAAG,KAAK,CAAC;IAEpB,MAAM,MAAM,GAAW;QACnB,IAAI,EAAE,UAAU;QAChB,OAAO,EAAE,KAAK;QACd,MAAM,CAAC,UAAU;YACb,MAAM,WAAW,GAAG,cAAc,CAAC;gBAC/B,WAAW,EACP,UAAU,CAAC,OAAO;oBACd,EAAE,IAAI,EAAE;qBACP,MAAM,CAAC,MAAM,CAAC,EAAE,CAAC,MAAM,YAAY,MAAM,CAAC;qBAC1C,MAAM,CAAC,MAAM,CAAC,EAAE,CAAC,MAAM,IAAI,MAAM,CAAC;qBAClC,GAAG,CAAC,MAAM,CAAC,EAAE,CAAC,MAAM,CAAC,IAAI,CAAC,IAAI,EAAE;aAC5C,CAAC,CAAC;YAEH,UAAU,GAAG,mBAAmB,CAAC,EAAE,UAAU,EAAE,WAAW,EAAE,CAAC,CAAC;YAC9D,OAAO,UAAU,CAAC;QACtB,CAAC;QACD,cAAc,CAAC,cAAc;YACzB,OAAO,GAAG,cAAc,CAAC,OAAO,KAAK,OAAO,CAAC;YAC7C,WAAW,GAAG,cAAc,CAAC;gBACzB,WAAW,EAAE,cAAc,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,EAAE,IAAI,EAAE,EAAE,EAAE,CAAC,IAAI,CAAC;aAC9D,CAAC,CAAC;YAEH,MAAM,uBAAuB,GAAG,4BAA4B,CAAC;gBACzD,uBAAuB,EAAE,MAAM;gBAC/B,cAAc;gBACd,WAAW;aACd,CAAC,CAAC;YAEH,2BAA2B,GAAG,uBAAuB,CAAC,2BAA2B,CAAC;YAElF,IAAI,WAAW,KAAK,gBAAgB,IAAI,OAAO,EAAE,CAAC;gBAC9C,MAAM,gCAAgC,GAAG,qCAAqC,CAAC;oBAC3E,cAAc;oBACd,yBAAyB,EAAE,uBAAuB,CAAC,yBAAyB;iBAC/E,CAAC,CAAC;gBAEH,yCAAyC,GAAG,gCAAgC,CAAC,SAAS,CAAC;gBACvF,oCAAoC,GAAG,gCAAgC,CAAC,IAAI,CAAC;gBAC7E,0CAA0C,GAAG,gCAAgC,CAAC,UAAU,CAAC;gBACzF,8CAA8C;oBAC1C,gCAAgC,CAAC,cAAc,CAAC;gBACpD,wCAAwC;oBACpC,gCAAgC,CAAC,2BAA2B,CAAC;YACrE,CAAC;YAED,2BAA2B,GAAG,4BAA4B,CAAC;gBACvD,cAAc;gBACd,WAAW;aACd,CAAC,CAAC,2BAA2B,CAAC;QACnC,CAAC;QACD,SAAS,CAAC,IAAI,EAAE,EAAE;YACd,IAAI,WAAW,GAA2B,IAAI,CAAC;YAE/C,MAAM,CAAC,WAAW,KAAK,SAAS,CAAC,CAAC;YAElC,uCAAuC,EAAE,CAAC;gBACtC,IAAI,WAAW,KAAK,gBAAgB,EAAE,CAAC;oBACnC,MAAM,uCAAuC,CAAC;gBAClD,CAAC;gBAED,WAAW,GAAG,wBAAwB,CAAC;oBACnC,IAAI;oBACJ,EAAE;iBACL,CAAC,CAAC;YACP,CAAC;YAED,OAAO,WAAW,CAAC;QACvB,CAAC;QACD,SAAS,CAAC,EAAE;YACR,OAAO,yCAAyC,EAAE,CAAC,EAAE,CAAC,IAAI,IAAI,CAAC;QACnE,CAAC;QACD,UAAU;YACN,0CAA0C,EAAE,IAAI,CAAC,IAAI,CAAC,CAAC;QAC3D,CAAC;QACD,KAAK,CAAC,IAAI,CAAC,EAAE;YACT,CAAC;gBACG,MAAM,CAAC,GAAG,oCAAoC,EAAE,CAAC,EAAE,CAAC,IAAI,IAAI,CAAC;gBAE7D,IAAI,CAAC,KAAK,IAAI,EAAE,CAAC;oBACb,OAAO,CAAC,CAAC;gBACb,CAAC;YACL,CAAC;YAED,CAAC;gBACG,MAAM,CAAC,2BAA2B,KAAK,SAAS,CAAC,CAAC;gBAElD,MAAM,uBAAuB,GACzB,WAAW,KAAK,gBAAgB;oBAChC,OAAO;oBACP,CAAE,IAA0D,CAAC,WAAW,EAAE,IAAI;wBAC1E,QAAQ,CAAC,KAAK,QAAQ,CAAC;gBAE/B,MAAM,CAAC,GAAG,MAAM,2BAA2B,CAAC;oBACxC,EAAE;oBACF,aAAa,EAAE,IAAI;oBACnB,uBAAuB;oBACvB,WAAW,EAAE,uBAAuB;wBAChC,CAAC,CAAC,wCAAwC;wBAC1C,CAAC,CAAC,SAAS;iBAClB,CAAC,CAAC;gBAEH,IAAI,CAAC,KAAK,IAAI,EAAE,CAAC;oBACb,OAAO,CAAC,CAAC;gBACb,CAAC;YACL,CAAC;YAED,CAAC;gBACG,MAAM,CAAC,2BAA2B,KAAK,SAAS,CAAC,CAAC;gBAElD,MAAM,CAAC,GAAG,MAAM,2BAA2B,CAAC;oBACxC,EAAE;oBACF,aAAa,EAAE,IAAI;iBACtB,CAAC,CAAC;gBAEH,IAAI,CAAC,KAAK,IAAI,EAAE,CAAC;oBACb,OAAO,CAAC,CAAC;gBACb,CAAC;YACL,CAAC;YACD,OAAO,IAAI,CAAC;QAChB,CAAC;QACD,cAAc,EAAE;YACZ,KAAK,EAAE,KAAK;YACZ,KAAK,CAAC,OAAO,CAAC,OAAO,EAAE,MAAM;gBACzB,MAAM,8CAA8C,EAAE,IAAI,CAAC,IAAI,EAAE,OAAO,EAAE,MAAM,CAAC,CAAC;YACtF,CAAC;SACJ;KACJ,CAAC;IAEF,OAAO,MAAM,CAAC;AAClB,CAAC"}
+{"version":3,"file":"vite-plugin.mjs","sourceRoot":"","sources":["../../src/vite-plugin/vite-plugin.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,MAAM,EAAE,MAAM,uBAAuB,CAAC;AAE/C,OAAO,EAAE,4BAA4B,EAAE,MAAM,0BAA0B,CAAC;AACxE,OAAO,EAAE,4BAA4B,EAAE,MAAM,0BAA0B,CAAC;AACxE,OAAO,EAAE,mBAAmB,EAAE,MAAM,uBAAuB,CAAC;AAC5D,OAAO,EAAE,wBAAwB,EAAE,MAAM,0CAA0C,CAAC;AACpF,OAAO,EAAE,cAAc,EAAoB,MAAM,eAAe,CAAC;AACjE,OAAO,EAAE,qCAAqC,EAAE,MAAM,mCAAmC,CAAC;AAC1F,OAAO,EAAE,qCAAqC,EAAE,MAAM,mCAAmC,CAAC;AA0D1F,MAAM,UAAU,OAAO,CAAC,SAAkC,EAAE;IACxD,IAAI,2BAA2B,GAEb,SAAS,CAAC;IAC5B,IAAI,yCAAyC,GAE3B,SAAS,CAAC;IAC5B,IAAI,oCAAoC,GAEtB,SAAS,CAAC;IAC5B,IAAI,0CAA0C,GAE5B,SAAS,CAAC;IAC5B,IAAI,8CAA8C,GAEhC,SAAS,CAAC;IAC5B,IAAI,wCAAwC,GAAuB,SAAS,CAAC;IAC7E,IAAI,2BAA2B,GAEb,SAAS,CAAC;IAE5B,IAAI,WAAW,GAA4B,SAAS,CAAC;IACrD,IAAI,OAAO,GAAG,KAAK,CAAC;IACpB,IAAI,mBAAyF,CAAC;IAE9F,MAAM,MAAM,GAAW;QACnB,IAAI,EAAE,UAAU;QAChB,OAAO,EAAE,KAAK;QACd,MAAM,CAAC,UAAU;YACb,MAAM,WAAW,GAAG,cAAc,CAAC;gBAC/B,WAAW,EACP,UAAU,CAAC,OAAO;oBACd,EAAE,IAAI,EAAE;qBACP,MAAM,CAAC,MAAM,CAAC,EAAE,CAAC,MAAM,YAAY,MAAM,CAAC;qBAC1C,MAAM,CAAC,MAAM,CAAC,EAAE,CAAC,MAAM,IAAI,MAAM,CAAC;qBAClC,GAAG,CAAC,MAAM,CAAC,EAAE,CAAC,MAAM,CAAC,IAAI,CAAC,IAAI,EAAE;aAC5C,CAAC,CAAC;YAEH,UAAU,GAAG,mBAAmB,CAAC,EAAE,UAAU,EAAE,WAAW,EAAE,CAAC,CAAC;YAC9D,OAAO,UAAU,CAAC;QACtB,CAAC;QACD,cAAc,CAAC,cAAc;YACzB,OAAO,GAAG,cAAc,CAAC,OAAO,KAAK,OAAO,CAAC;YAC7C,WAAW,GAAG,cAAc,CAAC;gBACzB,WAAW,EAAE,cAAc,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,EAAE,IAAI,EAAE,EAAE,EAAE,CAAC,IAAI,CAAC;aAC9D,CAAC,CAAC;YAEH,IAAI,WAAW,KAAK,gBAAgB,EAAE,CAAC;gBACnC,mBAAmB,GAAG,qCAAqC,CAAC,EAAE,cAAc,EAAE,CAAC,CAAC;YACpF,CAAC;YAED,MAAM,uBAAuB,GAAG,4BAA4B,CAAC;gBACzD,uBAAuB,EAAE,MAAM;gBAC/B,cAAc;gBACd,WAAW;aACd,CAAC,CAAC;YAEH,2BAA2B,GAAG,uBAAuB,CAAC,2BAA2B,CAAC;YAElF,IAAI,WAAW,KAAK,gBAAgB,IAAI,OAAO,EAAE,CAAC;gBAC9C,MAAM,gCAAgC,GAAG,qCAAqC,CAAC;oBAC3E,cAAc;oBACd,yBAAyB,EAAE,uBAAuB,CAAC,yBAAyB;iBAC/E,CAAC,CAAC;gBAEH,yCAAyC,GAAG,gCAAgC,CAAC,SAAS,CAAC;gBACvF,oCAAoC,GAAG,gCAAgC,CAAC,IAAI,CAAC;gBAC7E,0CAA0C,GAAG,gCAAgC,CAAC,UAAU,CAAC;gBACzF,8CAA8C;oBAC1C,gCAAgC,CAAC,cAAc,CAAC;gBACpD,wCAAwC;oBACpC,gCAAgC,CAAC,2BAA2B,CAAC;YACrE,CAAC;YAED,2BAA2B,GAAG,4BAA4B,CAAC;gBACvD,cAAc;gBACd,WAAW;aACd,CAAC,CAAC,2BAA2B,CAAC;QACnC,CAAC;QACD,SAAS,CAAC,IAAI,EAAE,EAAE;YACd,IAAI,WAAW,GAA2B,IAAI,CAAC;YAE/C,MAAM,CAAC,WAAW,KAAK,SAAS,CAAC,CAAC;YAElC,uCAAuC,EAAE,CAAC;gBACtC,IAAI,WAAW,KAAK,gBAAgB,EAAE,CAAC;oBACnC,MAAM,uCAAuC,CAAC;gBAClD,CAAC;gBAED,WAAW,GAAG,wBAAwB,CAAC;oBACnC,IAAI;oBACJ,EAAE;iBACL,CAAC,CAAC;YACP,CAAC;YAED,OAAO,WAAW,CAAC;QACvB,CAAC;QACD,SAAS,CAAC,EAAE;YACR,OAAO,CACH,mBAAmB,EAAE,SAAS,CAAC,EAAE,CAAC;gBAClC,yCAAyC,EAAE,CAAC,EAAE,CAAC;gBAC/C,IAAI,CACP,CAAC;QACN,CAAC;QACD,KAAK,CAAC,UAAU;YACZ,MAAM,mBAAmB,EAAE,UAAU,CAAC,IAAI,CAAC,CAAC;YAC5C,0CAA0C,EAAE,IAAI,CAAC,IAAI,CAAC,CAAC;QAC3D,CAAC;QACD,eAAe,CAAC,MAAM;YAClB,mBAAmB,EAAE,eAAe,CAAC,MAAM,CAAC,CAAC;QACjD,CAAC;QACD,KAAK,CAAC,IAAI,CAAC,EAAE;YACT,CAAC;gBACG,MAAM,CAAC,GAAG,MAAM,mBAAmB,EAAE,IAAI,CAAC,EAAE,EAAE,IAAI,CAAC,CAAC;gBACpD,IAAI,CAAC,KAAK,IAAI,IAAI,CAAC,KAAK,SAAS;oBAAE,OAAO,CAAC,CAAC;YAChD,CAAC;YACD,CAAC;gBACG,MAAM,CAAC,GAAG,oCAAoC,EAAE,CAAC,EAAE,CAAC,IAAI,IAAI,CAAC;gBAE7D,IAAI,CAAC,KAAK,IAAI,EAAE,CAAC;oBACb,OAAO,CAAC,CAAC;gBACb,CAAC;YACL,CAAC;YAED,CAAC;gBACG,MAAM,CAAC,2BAA2B,KAAK,SAAS,CAAC,CAAC;gBAElD,MAAM,uBAAuB,GACzB,WAAW,KAAK,gBAAgB;oBAChC,OAAO;oBACP,CAAE,IAA0D,CAAC,WAAW,EAAE,IAAI;wBAC1E,QAAQ,CAAC,KAAK,QAAQ,CAAC;gBAE/B,MAAM,CAAC,GAAG,MAAM,2BAA2B,CAAC;oBACxC,EAAE;oBACF,aAAa,EAAE,IAAI;oBACnB,uBAAuB;oBACvB,WAAW,EAAE,uBAAuB;wBAChC,CAAC,CAAC,wCAAwC;wBAC1C,CAAC,CAAC,SAAS;iBAClB,CAAC,CAAC;gBAEH,IAAI,CAAC,KAAK,IAAI,EAAE,CAAC;oBACb,OAAO,CAAC,CAAC;gBACb,CAAC;YACL,CAAC;YAED,CAAC;gBACG,MAAM,CAAC,2BAA2B,KAAK,SAAS,CAAC,CAAC;gBAElD,MAAM,CAAC,GAAG,MAAM,2BAA2B,CAAC;oBACxC,EAAE;oBACF,aAAa,EAAE,IAAI;iBACtB,CAAC,CAAC;gBAEH,IAAI,CAAC,KAAK,IAAI,EAAE,CAAC;oBACb,OAAO,CAAC,CAAC;gBACb,CAAC;YACL,CAAC;YACD,OAAO,IAAI,CAAC;QAChB,CAAC;QACD,cAAc,EAAE;YACZ,KAAK,EAAE,KAAK;YACZ,KAAK,CAAC,OAAO,CAAC,OAAO,EAAE,MAAM;gBACzB,MAAM,8CAA8C,EAAE,IAAI,CAAC,IAAI,EAAE,OAAO,EAAE,MAAM,CAAC,CAAC;YACtF,CAAC;SACJ;KACJ,CAAC;IAEF,OAAO,MAAM,CAAC;AAClB,CAAC"}

package/package.json

@@ -1,6 +1,6 @@
 {
     "name": "oidc-spa",
-    "version": "10.2.11",
+    "version": "10.2.13",
     "description": "OpenID Connect / OAuth2 solution for client-first Web Applications",
     "repository": {
         "type": "git",

package/src/core/createOidc.ts

@@ -40,6 +40,7 @@ import {
 } from "./ongoingLoginOrRefreshProcesses";
 import { createGetIsNewBrowserSession } from "./isNewBrowserSession";
 import { getIsOnline } from "../tools/getIsOnline";
+import { isNetworkError } from "../tools/isNetworkError";
 import { isKeycloak } from "../keycloak/isKeycloak";
 import { INFINITY_TIME } from "../tools/INFINITY_TIME";
 import { getRootRelativeOriginalLocationHref_earlyInit } from "./earlyInit_rootRelativeOriginalLocationHref";
@@ -990,7 +991,7 @@ export async function createOidc_nonMemoized<
                         } catch (error) {
                             assert(error instanceof Error, "741947");
 
-                            if (error.message === "Failed to fetch") {
+                            if (isNetworkError(error)) {
                                 return (
                                     await import("./diagnostic")
                                 ).createFailedToFetchTokenEndpointInitializationError({
@@ -1196,7 +1197,7 @@ export async function createOidc_nonMemoized<
                 } catch (error) {
                     assert(error instanceof Error, "433344");
 
-                    if (error.message === "Failed to fetch") {
+                    if (isNetworkError(error)) {
                         return (
                             await import("./diagnostic")
                         ).createFailedToFetchTokenEndpointInitializationError({

package/src/core/loginOrGoToAuthServer.ts

@@ -8,6 +8,8 @@ import { createStatefulEvt } from "../tools/StatefulEvt";
 import { Deferred } from "../tools/Deferred";
 import { addOrUpdateSearchParam, getAllSearchParams } from "../tools/urlSearchParams";
 import { getIsOnline } from "../tools/getIsOnline";
+import { isNetworkError } from "../tools/isNetworkError";
+import { OidcInitializationError } from "./OidcInitializationError";
 import { setStateDataCookieIfEnabled } from "./StateDataCookie";
 
 const globalContext = {
@@ -356,6 +358,23 @@ export function createLoginOrGoToAuthServer(params: {
                 error => {
                     assert(error instanceof Error, "393430");
 
+                    // Reaching the auth server can fail for reasons that are not a defect of
+                    // this library: the network dropped mid-redirect, or the browser refused
+                    // the request outright. Firefox's Local Network Access, for one, blocks a
+                    // public page from reaching an auth server that resolves to a private or
+                    // CGNAT address, which is what a VPN split-DNS setup hands out. Reporting
+                    // those as "please report a bug" sends users chasing the wrong thing.
+                    if (isNetworkError(error)) {
+                        throw new OidcInitializationError({
+                            isAuthServerLikelyDown: getIsOnline().isOnline,
+                            messageOrCause: [
+                                `Could not reach the authorization server: ${error.message}.`,
+                                "The server may be down, or the browser may have blocked the request",
+                                "(check the console for a CSP, CORS or Local Network Access message)."
+                            ].join(" ")
+                        });
+                    }
+
                     assert(
                         false,
                         `This is a bug in oidc-spa (loginOrGoToAuthServer), please report: ${error.message}`