@nauth-toolkit/client 0.1.48 → 0.1.50

package/dist/angular/index.cjs

@@ -1,7 +1,9 @@
 "use strict";
+var __create = Object.create;
 var __defProp = Object.defineProperty;
 var __getOwnPropDesc = Object.getOwnPropertyDescriptor;
 var __getOwnPropNames = Object.getOwnPropertyNames;
+var __getProtoOf = Object.getPrototypeOf;
 var __hasOwnProp = Object.prototype.hasOwnProperty;
 var __defNormalProp = (obj, key, value) => key in obj ? __defProp(obj, key, { enumerable: true, configurable: true, writable: true, value }) : obj[key] = value;
 var __name = (target, value) => __defProp(target, "name", { value, configurable: true });
@@ -17,19 +19,18 @@ var __copyProps = (to, from2, except, desc) => {
   }
   return to;
 };
+var __toESM = (mod, isNodeMode, target) => (target = mod != null ? __create(__getProtoOf(mod)) : {}, __copyProps(
+  // If the importer is in node compatibility mode or this is not an ESM
+  // file that has been converted to a CommonJS file using a Babel-
+  // compatible transform (i.e. "__esModule" has not been set), then set
+  // "default" to the CommonJS "module.exports" for node compatibility.
+  isNodeMode || !mod || !mod.__esModule ? __defProp(target, "default", { value: mod, enumerable: true }) : target,
+  mod
+));
 var __toCommonJS = (mod) => __copyProps(__defProp({}, "__esModule", { value: true }), mod);
-var __decorateClass = (decorators, target, key, kind) => {
-  var result = kind > 1 ? void 0 : kind ? __getOwnPropDesc(target, key) : target;
-  for (var i = decorators.length - 1, decorator; i >= 0; i--)
-    if (decorator = decorators[i])
-      result = (kind ? decorator(target, key, result) : decorator(result)) || result;
-  if (kind && result) __defProp(target, key, result);
-  return result;
-};
-var __decorateParam = (index, decorator) => (target, key) => decorator(target, key, index);
 var __publicField = (obj, key, value) => __defNormalProp(obj, typeof key !== "symbol" ? key + "" : key, value);
 
-// src/angular/index.ts
+// tmp/ngc/angular/angular/index.js
 var index_exports = {};
 __export(index_exports, {
   AngularHttpAdapter: () => AngularHttpAdapter,
@@ -44,21 +45,21 @@ __export(index_exports, {
 });
 module.exports = __toCommonJS(index_exports);
 
-// src/angular/tokens.ts
+// tmp/ngc/angular/angular/tokens.js
 var import_core = require("@angular/core");
 var NAUTH_CLIENT_CONFIG = new import_core.InjectionToken("NAUTH_CLIENT_CONFIG");
 
-// src/angular/auth.service.ts
+// tmp/ngc/angular/angular/auth.service.js
 var import_core3 = require("@angular/core");
 var import_rxjs2 = require("rxjs");
 var import_operators = require("rxjs/operators");
 
-// src/angular/http-adapter.ts
+// tmp/ngc/angular/angular/http-adapter.js
 var import_core2 = require("@angular/core");
 var import_http = require("@angular/common/http");
 var import_rxjs = require("rxjs");
 
-// src/core/errors.ts
+// tmp/ngc/angular/core/errors.js
 var _NAuthClientError = class _NAuthClientError extends Error {
   /**
    * Create a new client error.
@@ -146,8 +147,69 @@ var _NAuthClientError = class _NAuthClientError extends Error {
 __name(_NAuthClientError, "NAuthClientError");
 var NAuthClientError = _NAuthClientError;
 
-// src/angular/http-adapter.ts
-var AngularHttpAdapter = class {
+// tmp/ngc/angular/types/error.types.js
+var NAuthErrorCode;
+(function(NAuthErrorCode2) {
+  NAuthErrorCode2["AUTH_INVALID_CREDENTIALS"] = "AUTH_INVALID_CREDENTIALS";
+  NAuthErrorCode2["AUTH_ACCOUNT_LOCKED"] = "AUTH_ACCOUNT_LOCKED";
+  NAuthErrorCode2["AUTH_ACCOUNT_INACTIVE"] = "AUTH_ACCOUNT_INACTIVE";
+  NAuthErrorCode2["AUTH_TOKEN_EXPIRED"] = "AUTH_TOKEN_EXPIRED";
+  NAuthErrorCode2["AUTH_TOKEN_INVALID"] = "AUTH_TOKEN_INVALID";
+  NAuthErrorCode2["AUTH_BEARER_NOT_ALLOWED"] = "AUTH_BEARER_NOT_ALLOWED";
+  NAuthErrorCode2["AUTH_COOKIES_NOT_ALLOWED"] = "AUTH_COOKIES_NOT_ALLOWED";
+  NAuthErrorCode2["AUTH_CSRF_TOKEN_INVALID"] = "AUTH_CSRF_TOKEN_INVALID";
+  NAuthErrorCode2["AUTH_CSRF_TOKEN_MISSING"] = "AUTH_CSRF_TOKEN_MISSING";
+  NAuthErrorCode2["AUTH_TOKEN_REUSE_DETECTED"] = "AUTH_TOKEN_REUSE_DETECTED";
+  NAuthErrorCode2["AUTH_SESSION_NOT_FOUND"] = "AUTH_SESSION_NOT_FOUND";
+  NAuthErrorCode2["AUTH_SESSION_EXPIRED"] = "AUTH_SESSION_EXPIRED";
+  NAuthErrorCode2["SIGNUP_DISABLED"] = "SIGNUP_DISABLED";
+  NAuthErrorCode2["SIGNUP_EMAIL_EXISTS"] = "SIGNUP_EMAIL_EXISTS";
+  NAuthErrorCode2["SIGNUP_USERNAME_EXISTS"] = "SIGNUP_USERNAME_EXISTS";
+  NAuthErrorCode2["SIGNUP_PHONE_EXISTS"] = "SIGNUP_PHONE_EXISTS";
+  NAuthErrorCode2["SIGNUP_WEAK_PASSWORD"] = "SIGNUP_WEAK_PASSWORD";
+  NAuthErrorCode2["SIGNUP_PHONE_REQUIRED"] = "SIGNUP_PHONE_REQUIRED";
+  NAuthErrorCode2["SIGNUP_NOT_ALLOWED"] = "SIGNUP_NOT_ALLOWED";
+  NAuthErrorCode2["VERIFY_CODE_INVALID"] = "VERIFY_CODE_INVALID";
+  NAuthErrorCode2["VERIFY_CODE_EXPIRED"] = "VERIFY_CODE_EXPIRED";
+  NAuthErrorCode2["VERIFY_TOO_MANY_ATTEMPTS"] = "VERIFY_TOO_MANY_ATTEMPTS";
+  NAuthErrorCode2["VERIFY_ALREADY_VERIFIED"] = "VERIFY_ALREADY_VERIFIED";
+  NAuthErrorCode2["MFA_SETUP_REQUIRED"] = "MFA_SETUP_REQUIRED";
+  NAuthErrorCode2["RATE_LIMIT_SMS"] = "RATE_LIMIT_SMS";
+  NAuthErrorCode2["RATE_LIMIT_EMAIL"] = "RATE_LIMIT_EMAIL";
+  NAuthErrorCode2["RATE_LIMIT_LOGIN"] = "RATE_LIMIT_LOGIN";
+  NAuthErrorCode2["RATE_LIMIT_RESEND"] = "RATE_LIMIT_RESEND";
+  NAuthErrorCode2["SOCIAL_TOKEN_INVALID"] = "SOCIAL_TOKEN_INVALID";
+  NAuthErrorCode2["SOCIAL_ACCOUNT_LINKED"] = "SOCIAL_ACCOUNT_LINKED";
+  NAuthErrorCode2["SOCIAL_CONFIG_MISSING"] = "SOCIAL_CONFIG_MISSING";
+  NAuthErrorCode2["SOCIAL_EMAIL_REQUIRED"] = "SOCIAL_EMAIL_REQUIRED";
+  NAuthErrorCode2["SOCIAL_ACCOUNT_NOT_FOUND"] = "SOCIAL_ACCOUNT_NOT_FOUND";
+  NAuthErrorCode2["CHALLENGE_EXPIRED"] = "CHALLENGE_EXPIRED";
+  NAuthErrorCode2["CHALLENGE_INVALID"] = "CHALLENGE_INVALID";
+  NAuthErrorCode2["CHALLENGE_TYPE_MISMATCH"] = "CHALLENGE_TYPE_MISMATCH";
+  NAuthErrorCode2["CHALLENGE_MAX_ATTEMPTS"] = "CHALLENGE_MAX_ATTEMPTS";
+  NAuthErrorCode2["CHALLENGE_ALREADY_COMPLETED"] = "CHALLENGE_ALREADY_COMPLETED";
+  NAuthErrorCode2["VALIDATION_FAILED"] = "VALIDATION_FAILED";
+  NAuthErrorCode2["VALIDATION_INVALID_PHONE"] = "VALIDATION_INVALID_PHONE";
+  NAuthErrorCode2["VALIDATION_INVALID_EMAIL"] = "VALIDATION_INVALID_EMAIL";
+  NAuthErrorCode2["VALIDATION_INVALID_PASSWORD"] = "VALIDATION_INVALID_PASSWORD";
+  NAuthErrorCode2["PASSWORD_INCORRECT"] = "PASSWORD_INCORRECT";
+  NAuthErrorCode2["PASSWORD_REUSED"] = "PASSWORD_REUSED";
+  NAuthErrorCode2["PASSWORD_CHANGE_NOT_ALLOWED"] = "PASSWORD_CHANGE_NOT_ALLOWED";
+  NAuthErrorCode2["WEAK_PASSWORD"] = "SIGNUP_WEAK_PASSWORD";
+  NAuthErrorCode2["PASSWORD_RESET_CODE_INVALID"] = "PASSWORD_RESET_CODE_INVALID";
+  NAuthErrorCode2["PASSWORD_RESET_CODE_EXPIRED"] = "PASSWORD_RESET_CODE_EXPIRED";
+  NAuthErrorCode2["PASSWORD_RESET_MAX_ATTEMPTS"] = "PASSWORD_RESET_MAX_ATTEMPTS";
+  NAuthErrorCode2["RATE_LIMIT_PASSWORD_RESET"] = "RATE_LIMIT_PASSWORD_RESET";
+  NAuthErrorCode2["SIGNIN_BLOCKED_HIGH_RISK"] = "SIGNIN_BLOCKED_HIGH_RISK";
+  NAuthErrorCode2["RESOURCE_NOT_FOUND"] = "RESOURCE_NOT_FOUND";
+  NAuthErrorCode2["FORBIDDEN"] = "FORBIDDEN";
+  NAuthErrorCode2["INTERNAL_ERROR"] = "INTERNAL_ERROR";
+  NAuthErrorCode2["SERVICE_UNAVAILABLE"] = "SERVICE_UNAVAILABLE";
+})(NAuthErrorCode || (NAuthErrorCode = {}));
+
+// tmp/ngc/angular/angular/http-adapter.js
+var i0 = __toESM(require("@angular/core"));
+var _AngularHttpAdapter = class _AngularHttpAdapter {
   constructor() {
     __publicField(this, "http", (0, import_core2.inject)(import_http.HttpClient));
   }
@@ -160,15 +222,13 @@ var AngularHttpAdapter = class {
    */
   async request(config) {
     try {
-      const data = await (0, import_rxjs.firstValueFrom)(
-        this.http.request(config.method, config.url, {
-          body: config.body,
-          headers: config.headers,
-          withCredentials: config.credentials === "include",
-          observe: "body"
-          // Only return body data
-        })
-      );
+      const data = await (0, import_rxjs.firstValueFrom)(this.http.request(config.method, config.url, {
+        body: config.body,
+        headers: config.headers,
+        withCredentials: config.credentials === "include",
+        observe: "body"
+        // Only return body data
+      }));
       return {
         data,
         status: 200,
@@ -179,7 +239,7 @@ var AngularHttpAdapter = class {
     } catch (error) {
       if (error instanceof import_http.HttpErrorResponse) {
         const errorData = error.error || {};
-        const code = typeof errorData["code"] === "string" ? errorData.code : "INTERNAL_ERROR" /* INTERNAL_ERROR */;
+        const code = typeof errorData["code"] === "string" ? errorData.code : NAuthErrorCode.INTERNAL_ERROR;
         const message = typeof errorData["message"] === "string" ? errorData.message : error.message || `Request failed with status ${error.status}`;
         const timestamp = typeof errorData["timestamp"] === "string" ? errorData.timestamp : void 0;
         const details = errorData["details"];
@@ -195,12 +255,16 @@ var AngularHttpAdapter = class {
     }
   }
 };
-__name(AngularHttpAdapter, "AngularHttpAdapter");
-AngularHttpAdapter = __decorateClass([
-  (0, import_core2.Injectable)({ providedIn: "root" })
-], AngularHttpAdapter);
+__name(_AngularHttpAdapter, "AngularHttpAdapter");
+__publicField(_AngularHttpAdapter, "\u0275fac", i0.\u0275\u0275ngDeclareFactory({ minVersion: "12.0.0", version: "21.0.5", ngImport: i0, type: _AngularHttpAdapter, deps: [], target: i0.\u0275\u0275FactoryTarget.Injectable }));
+__publicField(_AngularHttpAdapter, "\u0275prov", i0.\u0275\u0275ngDeclareInjectable({ minVersion: "12.0.0", version: "21.0.5", ngImport: i0, type: _AngularHttpAdapter, providedIn: "root" }));
+var AngularHttpAdapter = _AngularHttpAdapter;
+i0.\u0275\u0275ngDeclareClassMetadata({ minVersion: "12.0.0", version: "21.0.5", ngImport: i0, type: AngularHttpAdapter, decorators: [{
+  type: import_core2.Injectable,
+  args: [{ providedIn: "root" }]
+}] });
 
-// src/core/config.ts
+// tmp/ngc/angular/core/config.js
 var defaultEndpoints = {
   login: "/login",
   signup: "/signup",
@@ -258,7 +322,7 @@ var resolveConfig = /* @__PURE__ */ __name((config, defaultAdapter) => {
   };
 }, "resolveConfig");
 
-// src/core/refresh.ts
+// tmp/ngc/angular/core/refresh.js
 var ACCESS_TOKEN_KEY = "nauth_access_token";
 var REFRESH_TOKEN_KEY = "nauth_refresh_token";
 var ACCESS_EXPIRES_AT_KEY = "nauth_access_token_expires_at";
@@ -344,14 +408,15 @@ var _TokenManager = class _TokenManager {
   async assertHasRefreshToken() {
     const state = await this.getTokens();
     if (!state.refreshToken) {
-      throw new NAuthClientError("AUTH_SESSION_NOT_FOUND" /* AUTH_SESSION_NOT_FOUND */, "No refresh token available");
+      throw new NAuthClientError(NAuthErrorCode.AUTH_SESSION_NOT_FOUND, "No refresh token available");
     }
   }
   /**
    * Broadcast a no-op write to trigger storage listeners in other tabs.
    */
   broadcastStorage() {
-    if (!this.isBrowser) return;
+    if (!this.isBrowser)
+      return;
     try {
       window.localStorage.setItem("nauth_sync", Date.now().toString());
     } catch {
@@ -361,7 +426,7 @@ var _TokenManager = class _TokenManager {
 __name(_TokenManager, "TokenManager");
 var TokenManager = _TokenManager;
 
-// src/storage/browser.ts
+// tmp/ngc/angular/storage/browser.js
 var _BrowserStorage = class _BrowserStorage {
   /**
    * Create a browser storage adapter.
@@ -388,7 +453,7 @@ var _BrowserStorage = class _BrowserStorage {
 __name(_BrowserStorage, "BrowserStorage");
 var BrowserStorage = _BrowserStorage;
 
-// src/storage/memory.ts
+// tmp/ngc/angular/storage/memory.js
 var _InMemoryStorage = class _InMemoryStorage {
   constructor() {
     __publicField(this, "store", /* @__PURE__ */ new Map());
@@ -409,7 +474,7 @@ var _InMemoryStorage = class _InMemoryStorage {
 __name(_InMemoryStorage, "InMemoryStorage");
 var InMemoryStorage = _InMemoryStorage;
 
-// src/core/events.ts
+// tmp/ngc/angular/core/events.js
 var _EventEmitter = class _EventEmitter {
   constructor() {
     __publicField(this, "listeners", /* @__PURE__ */ new Map());
@@ -485,7 +550,7 @@ var _EventEmitter = class _EventEmitter {
 __name(_EventEmitter, "EventEmitter");
 var EventEmitter = _EventEmitter;
 
-// src/adapters/fetch-adapter.ts
+// tmp/ngc/angular/adapters/fetch-adapter.js
 var _FetchAdapter = class _FetchAdapter {
   /**
    * Execute HTTP request using native fetch.
@@ -508,7 +573,7 @@ var _FetchAdapter = class _FetchAdapter {
     try {
       response = await fetch(config.url, fetchOptions);
     } catch (error) {
-      throw new NAuthClientError("INTERNAL_ERROR" /* INTERNAL_ERROR */, "Network request failed", {
+      throw new NAuthClientError(NAuthErrorCode.INTERNAL_ERROR, "Network request failed", {
         isNetworkError: true,
         details: { url: config.url, message: error.message }
       });
@@ -529,7 +594,7 @@ var _FetchAdapter = class _FetchAdapter {
     });
     if (!response.ok) {
       const errorData = typeof data === "object" && data !== null ? data : {};
-      const code = typeof errorData["code"] === "string" ? errorData["code"] : "INTERNAL_ERROR" /* INTERNAL_ERROR */;
+      const code = typeof errorData["code"] === "string" ? errorData["code"] : NAuthErrorCode.INTERNAL_ERROR;
       const message = typeof errorData["message"] === "string" ? errorData["message"] : `Request failed with status ${status}`;
       const timestamp = typeof errorData["timestamp"] === "string" ? errorData["timestamp"] : void 0;
       const details = errorData["details"];
@@ -545,7 +610,17 @@ var _FetchAdapter = class _FetchAdapter {
 __name(_FetchAdapter, "FetchAdapter");
 var FetchAdapter = _FetchAdapter;
 
-// src/core/client.ts
+// tmp/ngc/angular/types/auth.types.js
+var AuthChallenge;
+(function(AuthChallenge2) {
+  AuthChallenge2["VERIFY_EMAIL"] = "VERIFY_EMAIL";
+  AuthChallenge2["VERIFY_PHONE"] = "VERIFY_PHONE";
+  AuthChallenge2["MFA_REQUIRED"] = "MFA_REQUIRED";
+  AuthChallenge2["MFA_SETUP_REQUIRED"] = "MFA_SETUP_REQUIRED";
+  AuthChallenge2["FORCE_CHANGE_PASSWORD"] = "FORCE_CHANGE_PASSWORD";
+})(AuthChallenge || (AuthChallenge = {}));
+
+// tmp/ngc/angular/core/client.js
 var USER_KEY2 = "nauth_user";
 var CHALLENGE_KEY2 = "nauth_challenge_session";
 var hasWindow = /* @__PURE__ */ __name(() => typeof globalThis !== "undefined" && typeof globalThis.window !== "undefined", "hasWindow");
@@ -614,7 +689,7 @@ var _NAuthClient = class _NAuthClient {
       }
       return response;
     } catch (error) {
-      const authError = error instanceof NAuthClientError ? error : new NAuthClientError("AUTH_INVALID_CREDENTIALS" /* AUTH_INVALID_CREDENTIALS */, error.message || "Login failed");
+      const authError = error instanceof NAuthClientError ? error : new NAuthClientError(NAuthErrorCode.AUTH_INVALID_CREDENTIALS, error.message || "Login failed");
       const errorEvent = { type: "auth:error", data: authError, timestamp: Date.now() };
       this.eventEmitter.emit(errorEvent);
       throw authError;
@@ -635,7 +710,7 @@ var _NAuthClient = class _NAuthClient {
       }
       return response;
     } catch (error) {
-      const authError = error instanceof NAuthClientError ? error : new NAuthClientError("AUTH_INVALID_CREDENTIALS" /* AUTH_INVALID_CREDENTIALS */, error.message || "Signup failed");
+      const authError = error instanceof NAuthClientError ? error : new NAuthClientError(NAuthErrorCode.AUTH_INVALID_CREDENTIALS, error.message || "Signup failed");
       this.eventEmitter.emit({ type: "auth:error", data: authError, timestamp: Date.now() });
       throw authError;
     }
@@ -693,11 +768,7 @@ var _NAuthClient = class _NAuthClient {
       const payload = {
         forgetDevices: forgetDevices ?? false
       };
-      const result = await this.post(
-        this.config.endpoints.logoutAll,
-        payload,
-        true
-      );
+      const result = await this.post(this.config.endpoints.logoutAll, payload, true);
       await this.clearAuthState(forgetDevices);
       this.eventEmitter.emit({
         type: "auth:logout",
@@ -726,30 +797,18 @@ var _NAuthClient = class _NAuthClient {
    * @throws {NAuthClientError} If validation fails
    */
   async respondToChallenge(response) {
-    if (response.type === "MFA_SETUP_REQUIRED" /* MFA_SETUP_REQUIRED */ && response.method === "totp") {
+    if (response.type === AuthChallenge.MFA_SETUP_REQUIRED && response.method === "totp") {
       const setupData = response.setupData;
       if (!setupData || typeof setupData !== "object") {
-        throw new NAuthClientError(
-          "VALIDATION_FAILED" /* VALIDATION_FAILED */,
-          "TOTP setup requires setupData with both secret and code",
-          { details: { field: "setupData" } }
-        );
+        throw new NAuthClientError(NAuthErrorCode.VALIDATION_FAILED, "TOTP setup requires setupData with both secret and code", { details: { field: "setupData" } });
       }
       const secret = setupData["secret"];
       const code = setupData["code"];
       if (!secret || typeof secret !== "string") {
-        throw new NAuthClientError(
-          "VALIDATION_FAILED" /* VALIDATION_FAILED */,
-          "TOTP setup requires secret in setupData. Make sure to include the secret from getSetupData() response.",
-          { details: { field: "secret" } }
-        );
+        throw new NAuthClientError(NAuthErrorCode.VALIDATION_FAILED, "TOTP setup requires secret in setupData. Make sure to include the secret from getSetupData() response.", { details: { field: "secret" } });
       }
       if (!code || typeof code !== "string") {
-        throw new NAuthClientError(
-          "VALIDATION_FAILED" /* VALIDATION_FAILED */,
-          "TOTP setup requires code in setupData. Please enter the verification code from your authenticator app.",
-          { details: { field: "code" } }
-        );
+        throw new NAuthClientError(NAuthErrorCode.VALIDATION_FAILED, "TOTP setup requires code in setupData. Please enter the verification code from your authenticator app.", { details: { field: "code" } });
       }
     }
     try {
@@ -764,10 +823,7 @@ var _NAuthClient = class _NAuthClient {
       }
       return result;
     } catch (error) {
-      const authError = error instanceof NAuthClientError ? error : new NAuthClientError(
-        "CHALLENGE_INVALID" /* CHALLENGE_INVALID */,
-        error.message || "Challenge response failed"
-      );
+      const authError = error instanceof NAuthClientError ? error : new NAuthClientError(NAuthErrorCode.CHALLENGE_INVALID, error.message || "Challenge response failed");
       const errorEvent = { type: "auth:error", data: authError, timestamp: Date.now() };
       this.eventEmitter.emit(errorEvent);
       throw authError;
@@ -877,11 +933,7 @@ var _NAuthClient = class _NAuthClient {
    * Verify MFA setup (authenticated user).
    */
   async verifyMfaSetup(method, setupData, deviceName) {
-    return this.post(
-      this.config.endpoints.mfaVerifySetup,
-      { method, setupData, deviceName },
-      true
-    );
+    return this.post(this.config.endpoints.mfaVerifySetup, { method, setupData, deviceName }, true);
   }
   /**
    * Remove MFA method.
@@ -1005,7 +1057,7 @@ var _NAuthClient = class _NAuthClient {
   async exchangeSocialRedirect(exchangeToken) {
     const token = exchangeToken?.trim();
     if (!token) {
-      throw new NAuthClientError("CHALLENGE_INVALID" /* CHALLENGE_INVALID */, "Missing exchangeToken");
+      throw new NAuthClientError(NAuthErrorCode.CHALLENGE_INVALID, "Missing exchangeToken");
     }
     const result = await this.post(this.config.endpoints.socialExchange, { exchangeToken: token });
     await this.handleAuthResponse(result);
@@ -1028,10 +1080,7 @@ var _NAuthClient = class _NAuthClient {
       }
       return result;
     } catch (error) {
-      const authError = error instanceof NAuthClientError ? error : new NAuthClientError(
-        "SOCIAL_TOKEN_INVALID" /* SOCIAL_TOKEN_INVALID */,
-        error.message || "Social verification failed"
-      );
+      const authError = error instanceof NAuthClientError ? error : new NAuthClientError(NAuthErrorCode.SOCIAL_TOKEN_INVALID, error.message || "Social verification failed");
       const errorEvent = { type: "auth:error", data: authError, timestamp: Date.now() };
       this.eventEmitter.emit(errorEvent);
       throw authError;
@@ -1160,7 +1209,8 @@ var _NAuthClient = class _NAuthClient {
    */
   async getStoredChallenge() {
     const raw = await this.config.storage.getItem(CHALLENGE_KEY2);
-    if (!raw) return null;
+    if (!raw)
+      return null;
     try {
       return JSON.parse(raw);
     } catch {
@@ -1292,7 +1342,8 @@ var _NAuthClient = class _NAuthClient {
    * @private
    */
   getCsrfToken() {
-    if (!hasWindow() || typeof document === "undefined") return null;
+    if (!hasWindow() || typeof document === "undefined")
+      return null;
     const match = document.cookie.match(new RegExp(`(^| )${this.config.csrf.cookieName}=([^;]+)`));
     return match ? decodeURIComponent(match[2]) : null;
   }
@@ -1366,8 +1417,9 @@ var _NAuthClient = class _NAuthClient {
 __name(_NAuthClient, "NAuthClient");
 var NAuthClient = _NAuthClient;
 
-// src/angular/auth.service.ts
-var AuthService = class {
+// tmp/ngc/angular/angular/auth.service.js
+var i02 = __toESM(require("@angular/core"));
+var _AuthService = class _AuthService {
   /**
    * @param config - Injected client configuration
    *
@@ -2057,7 +2109,8 @@ var AuthService = class {
    * Called automatically on construction.
    */
   async initialize() {
-    if (this.initialized) return;
+    if (this.initialized)
+      return;
     this.initialized = true;
     await this.client.initialize();
     const storedChallenge = await this.client.getStoredChallenge();
@@ -2082,16 +2135,23 @@ var AuthService = class {
     return response;
   }
 };
-__name(AuthService, "AuthService");
-AuthService = __decorateClass([
-  (0, import_core3.Injectable)({
+__name(_AuthService, "AuthService");
+__publicField(_AuthService, "\u0275fac", i02.\u0275\u0275ngDeclareFactory({ minVersion: "12.0.0", version: "21.0.5", ngImport: i02, type: _AuthService, deps: [{ token: NAUTH_CLIENT_CONFIG, optional: true }], target: i02.\u0275\u0275FactoryTarget.Injectable }));
+__publicField(_AuthService, "\u0275prov", i02.\u0275\u0275ngDeclareInjectable({ minVersion: "12.0.0", version: "21.0.5", ngImport: i02, type: _AuthService, providedIn: "root" }));
+var AuthService = _AuthService;
+i02.\u0275\u0275ngDeclareClassMetadata({ minVersion: "12.0.0", version: "21.0.5", ngImport: i02, type: AuthService, decorators: [{
+  type: import_core3.Injectable,
+  args: [{
     providedIn: "root"
-  }),
-  __decorateParam(0, (0, import_core3.Optional)()),
-  __decorateParam(0, (0, import_core3.Inject)(NAUTH_CLIENT_CONFIG))
-], AuthService);
+  }]
+}], ctorParameters: /* @__PURE__ */ __name(() => [{ type: void 0, decorators: [{
+  type: import_core3.Optional
+}, {
+  type: import_core3.Inject,
+  args: [NAUTH_CLIENT_CONFIG]
+}] }], "ctorParameters") });
 
-// src/angular/auth.interceptor.ts
+// tmp/ngc/angular/angular/auth.interceptor.js
 var import_core4 = require("@angular/core");
 var import_common = require("@angular/common");
 var import_http2 = require("@angular/common/http");
@@ -2101,7 +2161,8 @@ var isRefreshing = false;
 var refreshTokenSubject = new import_rxjs3.BehaviorSubject(null);
 var retriedRequests = /* @__PURE__ */ new WeakSet();
 function getCsrfToken(cookieName) {
-  if (typeof document === "undefined") return null;
+  if (typeof document === "undefined")
+    return null;
   const match = document.cookie.match(new RegExp(`(^| )${cookieName}=([^;]+)`));
   return match ? decodeURIComponent(match[2]) : null;
 }
@@ -2139,72 +2200,63 @@ var authInterceptor = /* @__PURE__ */ __name((req, next) => {
       }
     }
   }
-  return next(authReq).pipe(
-    (0, import_rxjs3.catchError)((error) => {
-      const shouldHandle = error instanceof import_http2.HttpErrorResponse && error.status === 401 && isAuthApiRequest && !isRefreshEndpoint && !isPublicEndpoint && !retriedRequests.has(req);
-      if (!shouldHandle) {
-        return (0, import_rxjs3.throwError)(() => error);
-      }
+  return next(authReq).pipe((0, import_rxjs3.catchError)((error) => {
+    const shouldHandle = error instanceof import_http2.HttpErrorResponse && error.status === 401 && isAuthApiRequest && !isRefreshEndpoint && !isPublicEndpoint && !retriedRequests.has(req);
+    if (!shouldHandle) {
+      return (0, import_rxjs3.throwError)(() => error);
+    }
+    if (config.debug) {
+      console.warn("[nauth-interceptor] 401 detected:", req.url);
+    }
+    if (!isRefreshing) {
+      isRefreshing = true;
+      refreshTokenSubject.next(null);
       if (config.debug) {
-        console.warn("[nauth-interceptor] 401 detected:", req.url);
+        console.warn("[nauth-interceptor] Starting refresh...");
       }
-      if (!isRefreshing) {
-        isRefreshing = true;
-        refreshTokenSubject.next(null);
+      const refresh$ = tokenDelivery === "cookies" ? http.post(refreshUrl, {}, { withCredentials: true }) : (0, import_rxjs3.from)(authService.refresh());
+      return refresh$.pipe((0, import_rxjs3.switchMap)((response) => {
         if (config.debug) {
-          console.warn("[nauth-interceptor] Starting refresh...");
+          console.warn("[nauth-interceptor] Refresh successful");
         }
-        const refresh$ = tokenDelivery === "cookies" ? http.post(refreshUrl, {}, { withCredentials: true }) : (0, import_rxjs3.from)(authService.refresh());
-        return refresh$.pipe(
-          (0, import_rxjs3.switchMap)((response) => {
-            if (config.debug) {
-              console.warn("[nauth-interceptor] Refresh successful");
-            }
-            isRefreshing = false;
-            const newToken = "accessToken" in response ? response.accessToken : "success";
-            refreshTokenSubject.next(newToken ?? "success");
-            const retryReq = buildRetryRequest(authReq, tokenDelivery, newToken);
-            retriedRequests.add(retryReq);
-            if (config.debug) {
-              console.warn("[nauth-interceptor] Retrying:", req.url);
-            }
-            return next(retryReq);
-          }),
-          (0, import_rxjs3.catchError)((err) => {
-            if (config.debug) {
-              console.error("[nauth-interceptor] Refresh failed:", err);
-            }
-            isRefreshing = false;
-            refreshTokenSubject.next(null);
-            if (config.redirects?.sessionExpired) {
-              router.navigateByUrl(config.redirects.sessionExpired).catch((navError) => {
-                if (config.debug) {
-                  console.error("[nauth-interceptor] Navigation failed:", navError);
-                }
-              });
-            }
-            return (0, import_rxjs3.throwError)(() => err);
-          })
-        );
-      } else {
+        isRefreshing = false;
+        const newToken = "accessToken" in response ? response.accessToken : "success";
+        refreshTokenSubject.next(newToken ?? "success");
+        const retryReq = buildRetryRequest(authReq, tokenDelivery, newToken);
+        retriedRequests.add(retryReq);
+        if (config.debug) {
+          console.warn("[nauth-interceptor] Retrying:", req.url);
+        }
+        return next(retryReq);
+      }), (0, import_rxjs3.catchError)((err) => {
         if (config.debug) {
-          console.warn("[nauth-interceptor] Waiting for refresh...");
+          console.error("[nauth-interceptor] Refresh failed:", err);
         }
-        return refreshTokenSubject.pipe(
-          (0, import_rxjs3.filter)((token) => token !== null),
-          (0, import_rxjs3.take)(1),
-          (0, import_rxjs3.switchMap)((token) => {
+        isRefreshing = false;
+        refreshTokenSubject.next(null);
+        if (config.redirects?.sessionExpired) {
+          router.navigateByUrl(config.redirects.sessionExpired).catch((navError) => {
             if (config.debug) {
-              console.warn("[nauth-interceptor] Refresh done, retrying:", req.url);
+              console.error("[nauth-interceptor] Navigation failed:", navError);
             }
-            const retryReq = buildRetryRequest(authReq, tokenDelivery, token);
-            retriedRequests.add(retryReq);
-            return next(retryReq);
-          })
-        );
+          });
+        }
+        return (0, import_rxjs3.throwError)(() => err);
+      }));
+    } else {
+      if (config.debug) {
+        console.warn("[nauth-interceptor] Waiting for refresh...");
       }
-    })
-  );
+      return refreshTokenSubject.pipe((0, import_rxjs3.filter)((token) => token !== null), (0, import_rxjs3.take)(1), (0, import_rxjs3.switchMap)((token) => {
+        if (config.debug) {
+          console.warn("[nauth-interceptor] Refresh done, retrying:", req.url);
+        }
+        const retryReq = buildRetryRequest(authReq, tokenDelivery, token);
+        retriedRequests.add(retryReq);
+        return next(retryReq);
+      }));
+    }
+  }));
 }, "authInterceptor");
 function buildRetryRequest(originalReq, tokenDelivery, newToken) {
   if (tokenDelivery === "json" && newToken && newToken !== "success") {
@@ -2223,7 +2275,7 @@ var _AuthInterceptor = class _AuthInterceptor {
 __name(_AuthInterceptor, "AuthInterceptor");
 var AuthInterceptor = _AuthInterceptor;
 
-// src/angular/auth.guard.ts
+// tmp/ngc/angular/angular/auth.guard.js
 var import_core5 = require("@angular/core");
 var import_router2 = require("@angular/router");
 function authGuard(redirectTo = "/login") {
@@ -2243,6 +2295,8 @@ var _AuthGuard = class _AuthGuard {
    * @param router - Angular router
    */
   constructor(auth, router) {
+    __publicField(this, "auth");
+    __publicField(this, "router");
     this.auth = auth;
     this.router = router;
   }
@@ -2261,7 +2315,7 @@ var _AuthGuard = class _AuthGuard {
 __name(_AuthGuard, "AuthGuard");
 var AuthGuard = _AuthGuard;
 
-// src/angular/social-redirect-callback.guard.ts
+// tmp/ngc/angular/angular/social-redirect-callback.guard.js
 var import_core6 = require("@angular/core");
 var import_common2 = require("@angular/common");
 var socialRedirectCallbackGuard = /* @__PURE__ */ __name(async () => {
@@ -2304,10 +2358,11 @@ var socialRedirectCallbackGuard = /* @__PURE__ */ __name(async () => {
   return false;
 }, "socialRedirectCallbackGuard");
 
-// src/angular/auth.module.ts
+// tmp/ngc/angular/angular/auth.module.js
 var import_core7 = require("@angular/core");
 var import_http3 = require("@angular/common/http");
-var NAuthModule = class {
+var i03 = __toESM(require("@angular/core"));
+var _NAuthModule = class _NAuthModule {
   /**
    * Configure the module with client settings.
    *
@@ -2315,7 +2370,7 @@ var NAuthModule = class {
    */
   static forRoot(config) {
     return {
-      ngModule: NAuthModule,
+      ngModule: _NAuthModule,
       providers: [
         { provide: NAUTH_CLIENT_CONFIG, useValue: config },
         { provide: import_http3.HTTP_INTERCEPTORS, useClass: AuthInterceptor, multi: true }
@@ -2323,10 +2378,15 @@ var NAuthModule = class {
     };
   }
 };
-__name(NAuthModule, "NAuthModule");
-NAuthModule = __decorateClass([
-  (0, import_core7.NgModule)({})
-], NAuthModule);
+__name(_NAuthModule, "NAuthModule");
+__publicField(_NAuthModule, "\u0275fac", i03.\u0275\u0275ngDeclareFactory({ minVersion: "12.0.0", version: "21.0.5", ngImport: i03, type: _NAuthModule, deps: [], target: i03.\u0275\u0275FactoryTarget.NgModule }));
+__publicField(_NAuthModule, "\u0275mod", i03.\u0275\u0275ngDeclareNgModule({ minVersion: "14.0.0", version: "21.0.5", ngImport: i03, type: _NAuthModule }));
+__publicField(_NAuthModule, "\u0275inj", i03.\u0275\u0275ngDeclareInjector({ minVersion: "12.0.0", version: "21.0.5", ngImport: i03, type: _NAuthModule }));
+var NAuthModule = _NAuthModule;
+i03.\u0275\u0275ngDeclareClassMetadata({ minVersion: "12.0.0", version: "21.0.5", ngImport: i03, type: NAuthModule, decorators: [{
+  type: import_core7.NgModule,
+  args: [{}]
+}] });
 // Annotate the CommonJS export names for ESM import in node:
 0 && (module.exports = {
   AngularHttpAdapter,