@nauth-toolkit/client 0.1.48 → 0.1.50

package/dist/angular/index.mjs

@@ -1,33 +1,23 @@
 var __defProp = Object.defineProperty;
-var __getOwnPropDesc = Object.getOwnPropertyDescriptor;
 var __defNormalProp = (obj, key, value) => key in obj ? __defProp(obj, key, { enumerable: true, configurable: true, writable: true, value }) : obj[key] = value;
 var __name = (target, value) => __defProp(target, "name", { value, configurable: true });
-var __decorateClass = (decorators, target, key, kind) => {
-  var result = kind > 1 ? void 0 : kind ? __getOwnPropDesc(target, key) : target;
-  for (var i = decorators.length - 1, decorator; i >= 0; i--)
-    if (decorator = decorators[i])
-      result = (kind ? decorator(target, key, result) : decorator(result)) || result;
-  if (kind && result) __defProp(target, key, result);
-  return result;
-};
-var __decorateParam = (index, decorator) => (target, key) => decorator(target, key, index);
 var __publicField = (obj, key, value) => __defNormalProp(obj, typeof key !== "symbol" ? key + "" : key, value);
 
-// src/angular/tokens.ts
+// tmp/ngc/angular/angular/tokens.js
 import { InjectionToken } from "@angular/core";
 var NAUTH_CLIENT_CONFIG = new InjectionToken("NAUTH_CLIENT_CONFIG");
 
-// src/angular/auth.service.ts
+// tmp/ngc/angular/angular/auth.service.js
 import { Inject, Injectable as Injectable2, Optional, inject as inject2 } from "@angular/core";
 import { BehaviorSubject, Subject } from "rxjs";
 import { filter } from "rxjs/operators";
 
-// src/angular/http-adapter.ts
+// tmp/ngc/angular/angular/http-adapter.js
 import { Injectable, inject } from "@angular/core";
 import { HttpClient, HttpErrorResponse } from "@angular/common/http";
 import { firstValueFrom } from "rxjs";
 
-// src/core/errors.ts
+// tmp/ngc/angular/core/errors.js
 var _NAuthClientError = class _NAuthClientError extends Error {
   /**
    * Create a new client error.
@@ -115,8 +105,69 @@ var _NAuthClientError = class _NAuthClientError extends Error {
 __name(_NAuthClientError, "NAuthClientError");
 var NAuthClientError = _NAuthClientError;
 
-// src/angular/http-adapter.ts
-var AngularHttpAdapter = class {
+// tmp/ngc/angular/types/error.types.js
+var NAuthErrorCode;
+(function(NAuthErrorCode2) {
+  NAuthErrorCode2["AUTH_INVALID_CREDENTIALS"] = "AUTH_INVALID_CREDENTIALS";
+  NAuthErrorCode2["AUTH_ACCOUNT_LOCKED"] = "AUTH_ACCOUNT_LOCKED";
+  NAuthErrorCode2["AUTH_ACCOUNT_INACTIVE"] = "AUTH_ACCOUNT_INACTIVE";
+  NAuthErrorCode2["AUTH_TOKEN_EXPIRED"] = "AUTH_TOKEN_EXPIRED";
+  NAuthErrorCode2["AUTH_TOKEN_INVALID"] = "AUTH_TOKEN_INVALID";
+  NAuthErrorCode2["AUTH_BEARER_NOT_ALLOWED"] = "AUTH_BEARER_NOT_ALLOWED";
+  NAuthErrorCode2["AUTH_COOKIES_NOT_ALLOWED"] = "AUTH_COOKIES_NOT_ALLOWED";
+  NAuthErrorCode2["AUTH_CSRF_TOKEN_INVALID"] = "AUTH_CSRF_TOKEN_INVALID";
+  NAuthErrorCode2["AUTH_CSRF_TOKEN_MISSING"] = "AUTH_CSRF_TOKEN_MISSING";
+  NAuthErrorCode2["AUTH_TOKEN_REUSE_DETECTED"] = "AUTH_TOKEN_REUSE_DETECTED";
+  NAuthErrorCode2["AUTH_SESSION_NOT_FOUND"] = "AUTH_SESSION_NOT_FOUND";
+  NAuthErrorCode2["AUTH_SESSION_EXPIRED"] = "AUTH_SESSION_EXPIRED";
+  NAuthErrorCode2["SIGNUP_DISABLED"] = "SIGNUP_DISABLED";
+  NAuthErrorCode2["SIGNUP_EMAIL_EXISTS"] = "SIGNUP_EMAIL_EXISTS";
+  NAuthErrorCode2["SIGNUP_USERNAME_EXISTS"] = "SIGNUP_USERNAME_EXISTS";
+  NAuthErrorCode2["SIGNUP_PHONE_EXISTS"] = "SIGNUP_PHONE_EXISTS";
+  NAuthErrorCode2["SIGNUP_WEAK_PASSWORD"] = "SIGNUP_WEAK_PASSWORD";
+  NAuthErrorCode2["SIGNUP_PHONE_REQUIRED"] = "SIGNUP_PHONE_REQUIRED";
+  NAuthErrorCode2["SIGNUP_NOT_ALLOWED"] = "SIGNUP_NOT_ALLOWED";
+  NAuthErrorCode2["VERIFY_CODE_INVALID"] = "VERIFY_CODE_INVALID";
+  NAuthErrorCode2["VERIFY_CODE_EXPIRED"] = "VERIFY_CODE_EXPIRED";
+  NAuthErrorCode2["VERIFY_TOO_MANY_ATTEMPTS"] = "VERIFY_TOO_MANY_ATTEMPTS";
+  NAuthErrorCode2["VERIFY_ALREADY_VERIFIED"] = "VERIFY_ALREADY_VERIFIED";
+  NAuthErrorCode2["MFA_SETUP_REQUIRED"] = "MFA_SETUP_REQUIRED";
+  NAuthErrorCode2["RATE_LIMIT_SMS"] = "RATE_LIMIT_SMS";
+  NAuthErrorCode2["RATE_LIMIT_EMAIL"] = "RATE_LIMIT_EMAIL";
+  NAuthErrorCode2["RATE_LIMIT_LOGIN"] = "RATE_LIMIT_LOGIN";
+  NAuthErrorCode2["RATE_LIMIT_RESEND"] = "RATE_LIMIT_RESEND";
+  NAuthErrorCode2["SOCIAL_TOKEN_INVALID"] = "SOCIAL_TOKEN_INVALID";
+  NAuthErrorCode2["SOCIAL_ACCOUNT_LINKED"] = "SOCIAL_ACCOUNT_LINKED";
+  NAuthErrorCode2["SOCIAL_CONFIG_MISSING"] = "SOCIAL_CONFIG_MISSING";
+  NAuthErrorCode2["SOCIAL_EMAIL_REQUIRED"] = "SOCIAL_EMAIL_REQUIRED";
+  NAuthErrorCode2["SOCIAL_ACCOUNT_NOT_FOUND"] = "SOCIAL_ACCOUNT_NOT_FOUND";
+  NAuthErrorCode2["CHALLENGE_EXPIRED"] = "CHALLENGE_EXPIRED";
+  NAuthErrorCode2["CHALLENGE_INVALID"] = "CHALLENGE_INVALID";
+  NAuthErrorCode2["CHALLENGE_TYPE_MISMATCH"] = "CHALLENGE_TYPE_MISMATCH";
+  NAuthErrorCode2["CHALLENGE_MAX_ATTEMPTS"] = "CHALLENGE_MAX_ATTEMPTS";
+  NAuthErrorCode2["CHALLENGE_ALREADY_COMPLETED"] = "CHALLENGE_ALREADY_COMPLETED";
+  NAuthErrorCode2["VALIDATION_FAILED"] = "VALIDATION_FAILED";
+  NAuthErrorCode2["VALIDATION_INVALID_PHONE"] = "VALIDATION_INVALID_PHONE";
+  NAuthErrorCode2["VALIDATION_INVALID_EMAIL"] = "VALIDATION_INVALID_EMAIL";
+  NAuthErrorCode2["VALIDATION_INVALID_PASSWORD"] = "VALIDATION_INVALID_PASSWORD";
+  NAuthErrorCode2["PASSWORD_INCORRECT"] = "PASSWORD_INCORRECT";
+  NAuthErrorCode2["PASSWORD_REUSED"] = "PASSWORD_REUSED";
+  NAuthErrorCode2["PASSWORD_CHANGE_NOT_ALLOWED"] = "PASSWORD_CHANGE_NOT_ALLOWED";
+  NAuthErrorCode2["WEAK_PASSWORD"] = "SIGNUP_WEAK_PASSWORD";
+  NAuthErrorCode2["PASSWORD_RESET_CODE_INVALID"] = "PASSWORD_RESET_CODE_INVALID";
+  NAuthErrorCode2["PASSWORD_RESET_CODE_EXPIRED"] = "PASSWORD_RESET_CODE_EXPIRED";
+  NAuthErrorCode2["PASSWORD_RESET_MAX_ATTEMPTS"] = "PASSWORD_RESET_MAX_ATTEMPTS";
+  NAuthErrorCode2["RATE_LIMIT_PASSWORD_RESET"] = "RATE_LIMIT_PASSWORD_RESET";
+  NAuthErrorCode2["SIGNIN_BLOCKED_HIGH_RISK"] = "SIGNIN_BLOCKED_HIGH_RISK";
+  NAuthErrorCode2["RESOURCE_NOT_FOUND"] = "RESOURCE_NOT_FOUND";
+  NAuthErrorCode2["FORBIDDEN"] = "FORBIDDEN";
+  NAuthErrorCode2["INTERNAL_ERROR"] = "INTERNAL_ERROR";
+  NAuthErrorCode2["SERVICE_UNAVAILABLE"] = "SERVICE_UNAVAILABLE";
+})(NAuthErrorCode || (NAuthErrorCode = {}));
+
+// tmp/ngc/angular/angular/http-adapter.js
+import * as i0 from "@angular/core";
+var _AngularHttpAdapter = class _AngularHttpAdapter {
   constructor() {
     __publicField(this, "http", inject(HttpClient));
   }
@@ -129,15 +180,13 @@ var AngularHttpAdapter = class {
    */
   async request(config) {
     try {
-      const data = await firstValueFrom(
-        this.http.request(config.method, config.url, {
-          body: config.body,
-          headers: config.headers,
-          withCredentials: config.credentials === "include",
-          observe: "body"
-          // Only return body data
-        })
-      );
+      const data = await firstValueFrom(this.http.request(config.method, config.url, {
+        body: config.body,
+        headers: config.headers,
+        withCredentials: config.credentials === "include",
+        observe: "body"
+        // Only return body data
+      }));
       return {
         data,
         status: 200,
@@ -148,7 +197,7 @@ var AngularHttpAdapter = class {
     } catch (error) {
       if (error instanceof HttpErrorResponse) {
         const errorData = error.error || {};
-        const code = typeof errorData["code"] === "string" ? errorData.code : "INTERNAL_ERROR" /* INTERNAL_ERROR */;
+        const code = typeof errorData["code"] === "string" ? errorData.code : NAuthErrorCode.INTERNAL_ERROR;
         const message = typeof errorData["message"] === "string" ? errorData.message : error.message || `Request failed with status ${error.status}`;
         const timestamp = typeof errorData["timestamp"] === "string" ? errorData.timestamp : void 0;
         const details = errorData["details"];
@@ -164,12 +213,16 @@ var AngularHttpAdapter = class {
     }
   }
 };
-__name(AngularHttpAdapter, "AngularHttpAdapter");
-AngularHttpAdapter = __decorateClass([
-  Injectable({ providedIn: "root" })
-], AngularHttpAdapter);
+__name(_AngularHttpAdapter, "AngularHttpAdapter");
+__publicField(_AngularHttpAdapter, "\u0275fac", i0.\u0275\u0275ngDeclareFactory({ minVersion: "12.0.0", version: "21.0.5", ngImport: i0, type: _AngularHttpAdapter, deps: [], target: i0.\u0275\u0275FactoryTarget.Injectable }));
+__publicField(_AngularHttpAdapter, "\u0275prov", i0.\u0275\u0275ngDeclareInjectable({ minVersion: "12.0.0", version: "21.0.5", ngImport: i0, type: _AngularHttpAdapter, providedIn: "root" }));
+var AngularHttpAdapter = _AngularHttpAdapter;
+i0.\u0275\u0275ngDeclareClassMetadata({ minVersion: "12.0.0", version: "21.0.5", ngImport: i0, type: AngularHttpAdapter, decorators: [{
+  type: Injectable,
+  args: [{ providedIn: "root" }]
+}] });
 
-// src/core/config.ts
+// tmp/ngc/angular/core/config.js
 var defaultEndpoints = {
   login: "/login",
   signup: "/signup",
@@ -227,7 +280,7 @@ var resolveConfig = /* @__PURE__ */ __name((config, defaultAdapter) => {
   };
 }, "resolveConfig");
 
-// src/core/refresh.ts
+// tmp/ngc/angular/core/refresh.js
 var ACCESS_TOKEN_KEY = "nauth_access_token";
 var REFRESH_TOKEN_KEY = "nauth_refresh_token";
 var ACCESS_EXPIRES_AT_KEY = "nauth_access_token_expires_at";
@@ -313,14 +366,15 @@ var _TokenManager = class _TokenManager {
   async assertHasRefreshToken() {
     const state = await this.getTokens();
     if (!state.refreshToken) {
-      throw new NAuthClientError("AUTH_SESSION_NOT_FOUND" /* AUTH_SESSION_NOT_FOUND */, "No refresh token available");
+      throw new NAuthClientError(NAuthErrorCode.AUTH_SESSION_NOT_FOUND, "No refresh token available");
     }
   }
   /**
    * Broadcast a no-op write to trigger storage listeners in other tabs.
    */
   broadcastStorage() {
-    if (!this.isBrowser) return;
+    if (!this.isBrowser)
+      return;
     try {
       window.localStorage.setItem("nauth_sync", Date.now().toString());
     } catch {
@@ -330,7 +384,7 @@ var _TokenManager = class _TokenManager {
 __name(_TokenManager, "TokenManager");
 var TokenManager = _TokenManager;
 
-// src/storage/browser.ts
+// tmp/ngc/angular/storage/browser.js
 var _BrowserStorage = class _BrowserStorage {
   /**
    * Create a browser storage adapter.
@@ -357,7 +411,7 @@ var _BrowserStorage = class _BrowserStorage {
 __name(_BrowserStorage, "BrowserStorage");
 var BrowserStorage = _BrowserStorage;
 
-// src/storage/memory.ts
+// tmp/ngc/angular/storage/memory.js
 var _InMemoryStorage = class _InMemoryStorage {
   constructor() {
     __publicField(this, "store", /* @__PURE__ */ new Map());
@@ -378,7 +432,7 @@ var _InMemoryStorage = class _InMemoryStorage {
 __name(_InMemoryStorage, "InMemoryStorage");
 var InMemoryStorage = _InMemoryStorage;
 
-// src/core/events.ts
+// tmp/ngc/angular/core/events.js
 var _EventEmitter = class _EventEmitter {
   constructor() {
     __publicField(this, "listeners", /* @__PURE__ */ new Map());
@@ -454,7 +508,7 @@ var _EventEmitter = class _EventEmitter {
 __name(_EventEmitter, "EventEmitter");
 var EventEmitter = _EventEmitter;
 
-// src/adapters/fetch-adapter.ts
+// tmp/ngc/angular/adapters/fetch-adapter.js
 var _FetchAdapter = class _FetchAdapter {
   /**
    * Execute HTTP request using native fetch.
@@ -477,7 +531,7 @@ var _FetchAdapter = class _FetchAdapter {
     try {
       response = await fetch(config.url, fetchOptions);
     } catch (error) {
-      throw new NAuthClientError("INTERNAL_ERROR" /* INTERNAL_ERROR */, "Network request failed", {
+      throw new NAuthClientError(NAuthErrorCode.INTERNAL_ERROR, "Network request failed", {
         isNetworkError: true,
         details: { url: config.url, message: error.message }
       });
@@ -498,7 +552,7 @@ var _FetchAdapter = class _FetchAdapter {
     });
     if (!response.ok) {
       const errorData = typeof data === "object" && data !== null ? data : {};
-      const code = typeof errorData["code"] === "string" ? errorData["code"] : "INTERNAL_ERROR" /* INTERNAL_ERROR */;
+      const code = typeof errorData["code"] === "string" ? errorData["code"] : NAuthErrorCode.INTERNAL_ERROR;
       const message = typeof errorData["message"] === "string" ? errorData["message"] : `Request failed with status ${status}`;
       const timestamp = typeof errorData["timestamp"] === "string" ? errorData["timestamp"] : void 0;
       const details = errorData["details"];
@@ -514,7 +568,17 @@ var _FetchAdapter = class _FetchAdapter {
 __name(_FetchAdapter, "FetchAdapter");
 var FetchAdapter = _FetchAdapter;
 
-// src/core/client.ts
+// tmp/ngc/angular/types/auth.types.js
+var AuthChallenge;
+(function(AuthChallenge2) {
+  AuthChallenge2["VERIFY_EMAIL"] = "VERIFY_EMAIL";
+  AuthChallenge2["VERIFY_PHONE"] = "VERIFY_PHONE";
+  AuthChallenge2["MFA_REQUIRED"] = "MFA_REQUIRED";
+  AuthChallenge2["MFA_SETUP_REQUIRED"] = "MFA_SETUP_REQUIRED";
+  AuthChallenge2["FORCE_CHANGE_PASSWORD"] = "FORCE_CHANGE_PASSWORD";
+})(AuthChallenge || (AuthChallenge = {}));
+
+// tmp/ngc/angular/core/client.js
 var USER_KEY2 = "nauth_user";
 var CHALLENGE_KEY2 = "nauth_challenge_session";
 var hasWindow = /* @__PURE__ */ __name(() => typeof globalThis !== "undefined" && typeof globalThis.window !== "undefined", "hasWindow");
@@ -583,7 +647,7 @@ var _NAuthClient = class _NAuthClient {
       }
       return response;
     } catch (error) {
-      const authError = error instanceof NAuthClientError ? error : new NAuthClientError("AUTH_INVALID_CREDENTIALS" /* AUTH_INVALID_CREDENTIALS */, error.message || "Login failed");
+      const authError = error instanceof NAuthClientError ? error : new NAuthClientError(NAuthErrorCode.AUTH_INVALID_CREDENTIALS, error.message || "Login failed");
       const errorEvent = { type: "auth:error", data: authError, timestamp: Date.now() };
       this.eventEmitter.emit(errorEvent);
       throw authError;
@@ -604,7 +668,7 @@ var _NAuthClient = class _NAuthClient {
       }
       return response;
     } catch (error) {
-      const authError = error instanceof NAuthClientError ? error : new NAuthClientError("AUTH_INVALID_CREDENTIALS" /* AUTH_INVALID_CREDENTIALS */, error.message || "Signup failed");
+      const authError = error instanceof NAuthClientError ? error : new NAuthClientError(NAuthErrorCode.AUTH_INVALID_CREDENTIALS, error.message || "Signup failed");
       this.eventEmitter.emit({ type: "auth:error", data: authError, timestamp: Date.now() });
       throw authError;
     }
@@ -662,11 +726,7 @@ var _NAuthClient = class _NAuthClient {
       const payload = {
         forgetDevices: forgetDevices ?? false
       };
-      const result = await this.post(
-        this.config.endpoints.logoutAll,
-        payload,
-        true
-      );
+      const result = await this.post(this.config.endpoints.logoutAll, payload, true);
       await this.clearAuthState(forgetDevices);
       this.eventEmitter.emit({
         type: "auth:logout",
@@ -695,30 +755,18 @@ var _NAuthClient = class _NAuthClient {
    * @throws {NAuthClientError} If validation fails
    */
   async respondToChallenge(response) {
-    if (response.type === "MFA_SETUP_REQUIRED" /* MFA_SETUP_REQUIRED */ && response.method === "totp") {
+    if (response.type === AuthChallenge.MFA_SETUP_REQUIRED && response.method === "totp") {
       const setupData = response.setupData;
       if (!setupData || typeof setupData !== "object") {
-        throw new NAuthClientError(
-          "VALIDATION_FAILED" /* VALIDATION_FAILED */,
-          "TOTP setup requires setupData with both secret and code",
-          { details: { field: "setupData" } }
-        );
+        throw new NAuthClientError(NAuthErrorCode.VALIDATION_FAILED, "TOTP setup requires setupData with both secret and code", { details: { field: "setupData" } });
       }
       const secret = setupData["secret"];
       const code = setupData["code"];
       if (!secret || typeof secret !== "string") {
-        throw new NAuthClientError(
-          "VALIDATION_FAILED" /* VALIDATION_FAILED */,
-          "TOTP setup requires secret in setupData. Make sure to include the secret from getSetupData() response.",
-          { details: { field: "secret" } }
-        );
+        throw new NAuthClientError(NAuthErrorCode.VALIDATION_FAILED, "TOTP setup requires secret in setupData. Make sure to include the secret from getSetupData() response.", { details: { field: "secret" } });
       }
       if (!code || typeof code !== "string") {
-        throw new NAuthClientError(
-          "VALIDATION_FAILED" /* VALIDATION_FAILED */,
-          "TOTP setup requires code in setupData. Please enter the verification code from your authenticator app.",
-          { details: { field: "code" } }
-        );
+        throw new NAuthClientError(NAuthErrorCode.VALIDATION_FAILED, "TOTP setup requires code in setupData. Please enter the verification code from your authenticator app.", { details: { field: "code" } });
       }
     }
     try {
@@ -733,10 +781,7 @@ var _NAuthClient = class _NAuthClient {
       }
       return result;
     } catch (error) {
-      const authError = error instanceof NAuthClientError ? error : new NAuthClientError(
-        "CHALLENGE_INVALID" /* CHALLENGE_INVALID */,
-        error.message || "Challenge response failed"
-      );
+      const authError = error instanceof NAuthClientError ? error : new NAuthClientError(NAuthErrorCode.CHALLENGE_INVALID, error.message || "Challenge response failed");
       const errorEvent = { type: "auth:error", data: authError, timestamp: Date.now() };
       this.eventEmitter.emit(errorEvent);
       throw authError;
@@ -846,11 +891,7 @@ var _NAuthClient = class _NAuthClient {
    * Verify MFA setup (authenticated user).
    */
   async verifyMfaSetup(method, setupData, deviceName) {
-    return this.post(
-      this.config.endpoints.mfaVerifySetup,
-      { method, setupData, deviceName },
-      true
-    );
+    return this.post(this.config.endpoints.mfaVerifySetup, { method, setupData, deviceName }, true);
   }
   /**
    * Remove MFA method.
@@ -974,7 +1015,7 @@ var _NAuthClient = class _NAuthClient {
   async exchangeSocialRedirect(exchangeToken) {
     const token = exchangeToken?.trim();
     if (!token) {
-      throw new NAuthClientError("CHALLENGE_INVALID" /* CHALLENGE_INVALID */, "Missing exchangeToken");
+      throw new NAuthClientError(NAuthErrorCode.CHALLENGE_INVALID, "Missing exchangeToken");
     }
     const result = await this.post(this.config.endpoints.socialExchange, { exchangeToken: token });
     await this.handleAuthResponse(result);
@@ -997,10 +1038,7 @@ var _NAuthClient = class _NAuthClient {
       }
       return result;
     } catch (error) {
-      const authError = error instanceof NAuthClientError ? error : new NAuthClientError(
-        "SOCIAL_TOKEN_INVALID" /* SOCIAL_TOKEN_INVALID */,
-        error.message || "Social verification failed"
-      );
+      const authError = error instanceof NAuthClientError ? error : new NAuthClientError(NAuthErrorCode.SOCIAL_TOKEN_INVALID, error.message || "Social verification failed");
       const errorEvent = { type: "auth:error", data: authError, timestamp: Date.now() };
       this.eventEmitter.emit(errorEvent);
       throw authError;
@@ -1129,7 +1167,8 @@ var _NAuthClient = class _NAuthClient {
    */
   async getStoredChallenge() {
     const raw = await this.config.storage.getItem(CHALLENGE_KEY2);
-    if (!raw) return null;
+    if (!raw)
+      return null;
     try {
       return JSON.parse(raw);
     } catch {
@@ -1261,7 +1300,8 @@ var _NAuthClient = class _NAuthClient {
    * @private
    */
   getCsrfToken() {
-    if (!hasWindow() || typeof document === "undefined") return null;
+    if (!hasWindow() || typeof document === "undefined")
+      return null;
     const match = document.cookie.match(new RegExp(`(^| )${this.config.csrf.cookieName}=([^;]+)`));
     return match ? decodeURIComponent(match[2]) : null;
   }
@@ -1335,8 +1375,9 @@ var _NAuthClient = class _NAuthClient {
 __name(_NAuthClient, "NAuthClient");
 var NAuthClient = _NAuthClient;
 
-// src/angular/auth.service.ts
-var AuthService = class {
+// tmp/ngc/angular/angular/auth.service.js
+import * as i02 from "@angular/core";
+var _AuthService = class _AuthService {
   /**
    * @param config - Injected client configuration
    *
@@ -2026,7 +2067,8 @@ var AuthService = class {
    * Called automatically on construction.
    */
   async initialize() {
-    if (this.initialized) return;
+    if (this.initialized)
+      return;
     this.initialized = true;
     await this.client.initialize();
     const storedChallenge = await this.client.getStoredChallenge();
@@ -2051,16 +2093,23 @@ var AuthService = class {
     return response;
   }
 };
-__name(AuthService, "AuthService");
-AuthService = __decorateClass([
-  Injectable2({
+__name(_AuthService, "AuthService");
+__publicField(_AuthService, "\u0275fac", i02.\u0275\u0275ngDeclareFactory({ minVersion: "12.0.0", version: "21.0.5", ngImport: i02, type: _AuthService, deps: [{ token: NAUTH_CLIENT_CONFIG, optional: true }], target: i02.\u0275\u0275FactoryTarget.Injectable }));
+__publicField(_AuthService, "\u0275prov", i02.\u0275\u0275ngDeclareInjectable({ minVersion: "12.0.0", version: "21.0.5", ngImport: i02, type: _AuthService, providedIn: "root" }));
+var AuthService = _AuthService;
+i02.\u0275\u0275ngDeclareClassMetadata({ minVersion: "12.0.0", version: "21.0.5", ngImport: i02, type: AuthService, decorators: [{
+  type: Injectable2,
+  args: [{
     providedIn: "root"
-  }),
-  __decorateParam(0, Optional()),
-  __decorateParam(0, Inject(NAUTH_CLIENT_CONFIG))
-], AuthService);
+  }]
+}], ctorParameters: /* @__PURE__ */ __name(() => [{ type: void 0, decorators: [{
+  type: Optional
+}, {
+  type: Inject,
+  args: [NAUTH_CLIENT_CONFIG]
+}] }], "ctorParameters") });
 
-// src/angular/auth.interceptor.ts
+// tmp/ngc/angular/angular/auth.interceptor.js
 import { inject as inject3, PLATFORM_ID } from "@angular/core";
 import { isPlatformBrowser } from "@angular/common";
 import { HttpClient as HttpClient2, HttpErrorResponse as HttpErrorResponse2 } from "@angular/common/http";
@@ -2070,7 +2119,8 @@ var isRefreshing = false;
 var refreshTokenSubject = new BehaviorSubject2(null);
 var retriedRequests = /* @__PURE__ */ new WeakSet();
 function getCsrfToken(cookieName) {
-  if (typeof document === "undefined") return null;
+  if (typeof document === "undefined")
+    return null;
   const match = document.cookie.match(new RegExp(`(^| )${cookieName}=([^;]+)`));
   return match ? decodeURIComponent(match[2]) : null;
 }
@@ -2108,72 +2158,63 @@ var authInterceptor = /* @__PURE__ */ __name((req, next) => {
       }
     }
   }
-  return next(authReq).pipe(
-    catchError((error) => {
-      const shouldHandle = error instanceof HttpErrorResponse2 && error.status === 401 && isAuthApiRequest && !isRefreshEndpoint && !isPublicEndpoint && !retriedRequests.has(req);
-      if (!shouldHandle) {
-        return throwError(() => error);
-      }
+  return next(authReq).pipe(catchError((error) => {
+    const shouldHandle = error instanceof HttpErrorResponse2 && error.status === 401 && isAuthApiRequest && !isRefreshEndpoint && !isPublicEndpoint && !retriedRequests.has(req);
+    if (!shouldHandle) {
+      return throwError(() => error);
+    }
+    if (config.debug) {
+      console.warn("[nauth-interceptor] 401 detected:", req.url);
+    }
+    if (!isRefreshing) {
+      isRefreshing = true;
+      refreshTokenSubject.next(null);
       if (config.debug) {
-        console.warn("[nauth-interceptor] 401 detected:", req.url);
+        console.warn("[nauth-interceptor] Starting refresh...");
       }
-      if (!isRefreshing) {
-        isRefreshing = true;
-        refreshTokenSubject.next(null);
+      const refresh$ = tokenDelivery === "cookies" ? http.post(refreshUrl, {}, { withCredentials: true }) : from(authService.refresh());
+      return refresh$.pipe(switchMap((response) => {
         if (config.debug) {
-          console.warn("[nauth-interceptor] Starting refresh...");
+          console.warn("[nauth-interceptor] Refresh successful");
         }
-        const refresh$ = tokenDelivery === "cookies" ? http.post(refreshUrl, {}, { withCredentials: true }) : from(authService.refresh());
-        return refresh$.pipe(
-          switchMap((response) => {
-            if (config.debug) {
-              console.warn("[nauth-interceptor] Refresh successful");
-            }
-            isRefreshing = false;
-            const newToken = "accessToken" in response ? response.accessToken : "success";
-            refreshTokenSubject.next(newToken ?? "success");
-            const retryReq = buildRetryRequest(authReq, tokenDelivery, newToken);
-            retriedRequests.add(retryReq);
-            if (config.debug) {
-              console.warn("[nauth-interceptor] Retrying:", req.url);
-            }
-            return next(retryReq);
-          }),
-          catchError((err) => {
-            if (config.debug) {
-              console.error("[nauth-interceptor] Refresh failed:", err);
-            }
-            isRefreshing = false;
-            refreshTokenSubject.next(null);
-            if (config.redirects?.sessionExpired) {
-              router.navigateByUrl(config.redirects.sessionExpired).catch((navError) => {
-                if (config.debug) {
-                  console.error("[nauth-interceptor] Navigation failed:", navError);
-                }
-              });
-            }
-            return throwError(() => err);
-          })
-        );
-      } else {
+        isRefreshing = false;
+        const newToken = "accessToken" in response ? response.accessToken : "success";
+        refreshTokenSubject.next(newToken ?? "success");
+        const retryReq = buildRetryRequest(authReq, tokenDelivery, newToken);
+        retriedRequests.add(retryReq);
+        if (config.debug) {
+          console.warn("[nauth-interceptor] Retrying:", req.url);
+        }
+        return next(retryReq);
+      }), catchError((err) => {
         if (config.debug) {
-          console.warn("[nauth-interceptor] Waiting for refresh...");
+          console.error("[nauth-interceptor] Refresh failed:", err);
         }
-        return refreshTokenSubject.pipe(
-          filter2((token) => token !== null),
-          take(1),
-          switchMap((token) => {
+        isRefreshing = false;
+        refreshTokenSubject.next(null);
+        if (config.redirects?.sessionExpired) {
+          router.navigateByUrl(config.redirects.sessionExpired).catch((navError) => {
             if (config.debug) {
-              console.warn("[nauth-interceptor] Refresh done, retrying:", req.url);
+              console.error("[nauth-interceptor] Navigation failed:", navError);
             }
-            const retryReq = buildRetryRequest(authReq, tokenDelivery, token);
-            retriedRequests.add(retryReq);
-            return next(retryReq);
-          })
-        );
+          });
+        }
+        return throwError(() => err);
+      }));
+    } else {
+      if (config.debug) {
+        console.warn("[nauth-interceptor] Waiting for refresh...");
       }
-    })
-  );
+      return refreshTokenSubject.pipe(filter2((token) => token !== null), take(1), switchMap((token) => {
+        if (config.debug) {
+          console.warn("[nauth-interceptor] Refresh done, retrying:", req.url);
+        }
+        const retryReq = buildRetryRequest(authReq, tokenDelivery, token);
+        retriedRequests.add(retryReq);
+        return next(retryReq);
+      }));
+    }
+  }));
 }, "authInterceptor");
 function buildRetryRequest(originalReq, tokenDelivery, newToken) {
   if (tokenDelivery === "json" && newToken && newToken !== "success") {
@@ -2192,7 +2233,7 @@ var _AuthInterceptor = class _AuthInterceptor {
 __name(_AuthInterceptor, "AuthInterceptor");
 var AuthInterceptor = _AuthInterceptor;
 
-// src/angular/auth.guard.ts
+// tmp/ngc/angular/angular/auth.guard.js
 import { inject as inject4 } from "@angular/core";
 import { Router as Router2 } from "@angular/router";
 function authGuard(redirectTo = "/login") {
@@ -2212,6 +2253,8 @@ var _AuthGuard = class _AuthGuard {
    * @param router - Angular router
    */
   constructor(auth, router) {
+    __publicField(this, "auth");
+    __publicField(this, "router");
     this.auth = auth;
     this.router = router;
   }
@@ -2230,7 +2273,7 @@ var _AuthGuard = class _AuthGuard {
 __name(_AuthGuard, "AuthGuard");
 var AuthGuard = _AuthGuard;
 
-// src/angular/social-redirect-callback.guard.ts
+// tmp/ngc/angular/angular/social-redirect-callback.guard.js
 import { inject as inject5, PLATFORM_ID as PLATFORM_ID2 } from "@angular/core";
 import { isPlatformBrowser as isPlatformBrowser2 } from "@angular/common";
 var socialRedirectCallbackGuard = /* @__PURE__ */ __name(async () => {
@@ -2273,10 +2316,11 @@ var socialRedirectCallbackGuard = /* @__PURE__ */ __name(async () => {
   return false;
 }, "socialRedirectCallbackGuard");
 
-// src/angular/auth.module.ts
+// tmp/ngc/angular/angular/auth.module.js
 import { NgModule } from "@angular/core";
 import { HTTP_INTERCEPTORS } from "@angular/common/http";
-var NAuthModule = class {
+import * as i03 from "@angular/core";
+var _NAuthModule = class _NAuthModule {
   /**
    * Configure the module with client settings.
    *
@@ -2284,7 +2328,7 @@ var NAuthModule = class {
    */
   static forRoot(config) {
     return {
-      ngModule: NAuthModule,
+      ngModule: _NAuthModule,
       providers: [
         { provide: NAUTH_CLIENT_CONFIG, useValue: config },
         { provide: HTTP_INTERCEPTORS, useClass: AuthInterceptor, multi: true }
@@ -2292,10 +2336,15 @@ var NAuthModule = class {
     };
   }
 };
-__name(NAuthModule, "NAuthModule");
-NAuthModule = __decorateClass([
-  NgModule({})
-], NAuthModule);
+__name(_NAuthModule, "NAuthModule");
+__publicField(_NAuthModule, "\u0275fac", i03.\u0275\u0275ngDeclareFactory({ minVersion: "12.0.0", version: "21.0.5", ngImport: i03, type: _NAuthModule, deps: [], target: i03.\u0275\u0275FactoryTarget.NgModule }));
+__publicField(_NAuthModule, "\u0275mod", i03.\u0275\u0275ngDeclareNgModule({ minVersion: "14.0.0", version: "21.0.5", ngImport: i03, type: _NAuthModule }));
+__publicField(_NAuthModule, "\u0275inj", i03.\u0275\u0275ngDeclareInjector({ minVersion: "12.0.0", version: "21.0.5", ngImport: i03, type: _NAuthModule }));
+var NAuthModule = _NAuthModule;
+i03.\u0275\u0275ngDeclareClassMetadata({ minVersion: "12.0.0", version: "21.0.5", ngImport: i03, type: NAuthModule, decorators: [{
+  type: NgModule,
+  args: [{}]
+}] });
 export {
   AngularHttpAdapter,
   AuthGuard,