@replyke/core 7.0.0-beta.98 → 7.0.0

package/dist/esm/store/slices/authThunks.js

@@ -1,39 +1,3 @@
-var __awaiter = (this && this.__awaiter) || function (thisArg, _arguments, P, generator) {
-    function adopt(value) { return value instanceof P ? value : new P(function (resolve) { resolve(value); }); }
-    return new (P || (P = Promise))(function (resolve, reject) {
-        function fulfilled(value) { try { step(generator.next(value)); } catch (e) { reject(e); } }
-        function rejected(value) { try { step(generator["throw"](value)); } catch (e) { reject(e); } }
-        function step(result) { result.done ? resolve(result.value) : adopt(result.value).then(fulfilled, rejected); }
-        step((generator = generator.apply(thisArg, _arguments || [])).next());
-    });
-};
-var __generator = (this && this.__generator) || function (thisArg, body) {
-    var _ = { label: 0, sent: function() { if (t[0] & 1) throw t[1]; return t[1]; }, trys: [], ops: [] }, f, y, t, g = Object.create((typeof Iterator === "function" ? Iterator : Object).prototype);
-    return g.next = verb(0), g["throw"] = verb(1), g["return"] = verb(2), typeof Symbol === "function" && (g[Symbol.iterator] = function() { return this; }), g;
-    function verb(n) { return function (v) { return step([n, v]); }; }
-    function step(op) {
-        if (f) throw new TypeError("Generator is already executing.");
-        while (g && (g = 0, op[0] && (_ = 0)), _) try {
-            if (f = 1, y && (t = op[0] & 2 ? y["return"] : op[0] ? y["throw"] || ((t = y["return"]) && t.call(y), 0) : y.next) && !(t = t.call(y, op[1])).done) return t;
-            if (y = 0, t) op = [op[0] & 2, t.value];
-            switch (op[0]) {
-                case 0: case 1: t = op; break;
-                case 4: _.label++; return { value: op[1], done: false };
-                case 5: _.label++; y = op[1]; op = [0]; continue;
-                case 7: op = _.ops.pop(); _.trys.pop(); continue;
-                default:
-                    if (!(t = _.trys, t = t.length > 0 && t[t.length - 1]) && (op[0] === 6 || op[0] === 2)) { _ = 0; continue; }
-                    if (op[0] === 3 && (!t || (op[1] > t[0] && op[1] < t[3]))) { _.label = op[1]; break; }
-                    if (op[0] === 6 && _.label < t[1]) { _.label = t[1]; t = op; break; }
-                    if (t && _.label < t[2]) { _.label = t[2]; _.ops.push(op); break; }
-                    if (t[2]) _.ops.pop();
-                    _.trys.pop(); continue;
-            }
-            op = body.call(thisArg, _);
-        } catch (e) { op = [6, e]; y = 0; } finally { f = t = 0; }
-        if (op[0] & 5) throw op[1]; return { value: op[0] ? op[1] : void 0, done: true };
-    }
-};
 import { createAsyncThunk } from "@reduxjs/toolkit";
 import axios from "../../config/axios";
 import { handleError } from "../../utils/handleError";
@@ -42,432 +6,280 @@ import { setUser as setUserInUserSlice, clearUser as clearUserInUserSlice, } fro
 import { removeAccount, clearAllAccounts } from "./accountsSlice";
 import { baseApi } from "../api/baseApi";
 // Auth service functions - calling existing API patterns directly
-var authService = {
-    signUpWithEmailAndPassword: function (projectId, data) {
-        return __awaiter(this, void 0, void 0, function () {
-            var formData, response_1, response;
-            var _a, _b, _c, _d, _e, _f;
-            return __generator(this, function (_g) {
-                switch (_g.label) {
-                    case 0:
-                        if (!(data.avatarFile || data.bannerFile)) return [3 /*break*/, 2];
-                        formData = new FormData();
-                        // Append regular fields
-                        formData.append("email", data.email);
-                        formData.append("password", data.password);
-                        if ((_a = data.name) === null || _a === void 0 ? void 0 : _a.trim())
-                            formData.append("name", data.name.trim());
-                        if ((_b = data.username) === null || _b === void 0 ? void 0 : _b.trim())
-                            formData.append("username", data.username.trim());
-                        if ((_c = data.bio) === null || _c === void 0 ? void 0 : _c.trim())
-                            formData.append("bio", data.bio.trim());
-                        if (data.location)
-                            formData.append("location", JSON.stringify(data.location));
-                        if (data.birthdate)
-                            formData.append("birthdate", data.birthdate.toISOString());
-                        if (data.metadata)
-                            formData.append("metadata", JSON.stringify(data.metadata));
-                        if (data.secureMetadata)
-                            formData.append("secureMetadata", JSON.stringify(data.secureMetadata));
-                        // Append avatar file and options
-                        if (data.avatarFile) {
-                            formData.append("avatarFile", data.avatarFile);
-                            if (data.avatarOptions) {
-                                formData.append("avatarFile.options", JSON.stringify(data.avatarOptions));
-                            }
-                        }
-                        // Append banner file and options
-                        if (data.bannerFile) {
-                            formData.append("bannerFile", data.bannerFile);
-                            if (data.bannerOptions) {
-                                formData.append("bannerFile.options", JSON.stringify(data.bannerOptions));
-                            }
-                        }
-                        return [4 /*yield*/, axios.post("/".concat(projectId, "/auth/sign-up"), formData, {
-                                headers: { "Content-Type": "multipart/form-data" },
-                            })];
-                    case 1:
-                        response_1 = _g.sent();
-                        return [2 /*return*/, response_1.data];
-                    case 2: return [4 /*yield*/, axios.post("/".concat(projectId, "/auth/sign-up"), {
-                            email: data.email,
-                            password: data.password,
-                            name: (_d = data.name) === null || _d === void 0 ? void 0 : _d.trim(),
-                            username: (_e = data.username) === null || _e === void 0 ? void 0 : _e.trim(),
-                            avatar: data.avatar,
-                            bio: (_f = data.bio) === null || _f === void 0 ? void 0 : _f.trim(),
-                            location: data.location,
-                            birthdate: data.birthdate,
-                            metadata: data.metadata,
-                            secureMetadata: data.secureMetadata,
-                        })];
-                    case 3:
-                        response = _g.sent();
-                        return [2 /*return*/, response.data];
+const authService = {
+    async signUpWithEmailAndPassword(projectId, data) {
+        // Check if we need to use FormData (when files are present)
+        if (data.avatarFile || data.bannerFile) {
+            const formData = new FormData();
+            // Append regular fields
+            formData.append("email", data.email);
+            formData.append("password", data.password);
+            if (data.name?.trim())
+                formData.append("name", data.name.trim());
+            if (data.username?.trim())
+                formData.append("username", data.username.trim());
+            if (data.bio?.trim())
+                formData.append("bio", data.bio.trim());
+            if (data.location)
+                formData.append("location", JSON.stringify(data.location));
+            if (data.birthdate)
+                formData.append("birthdate", data.birthdate.toISOString());
+            if (data.metadata)
+                formData.append("metadata", JSON.stringify(data.metadata));
+            if (data.secureMetadata)
+                formData.append("secureMetadata", JSON.stringify(data.secureMetadata));
+            // Append avatar file and options
+            if (data.avatarFile) {
+                formData.append("avatarFile", data.avatarFile);
+                if (data.avatarOptions) {
+                    formData.append("avatarFile.options", JSON.stringify(data.avatarOptions));
                 }
-            });
-        });
-    },
-    signInWithEmailAndPassword: function (projectId, data) {
-        return __awaiter(this, void 0, void 0, function () {
-            var response;
-            return __generator(this, function (_a) {
-                switch (_a.label) {
-                    case 0: return [4 /*yield*/, axios.post("/".concat(projectId, "/auth/sign-in"), data)];
-                    case 1:
-                        response = _a.sent();
-                        return [2 /*return*/, response.data];
+            }
+            // Append banner file and options
+            if (data.bannerFile) {
+                formData.append("bannerFile", data.bannerFile);
+                if (data.bannerOptions) {
+                    formData.append("bannerFile.options", JSON.stringify(data.bannerOptions));
                 }
+            }
+            const response = await axios.post(`/${projectId}/auth/sign-up`, formData, {
+                headers: { "Content-Type": "multipart/form-data" },
             });
+            return response.data;
+        }
+        // Fallback to regular JSON request (backward compatibility)
+        const response = await axios.post(`/${projectId}/auth/sign-up`, {
+            email: data.email,
+            password: data.password,
+            name: data.name?.trim(),
+            username: data.username?.trim(),
+            avatar: data.avatar,
+            bio: data.bio?.trim(),
+            location: data.location,
+            birthdate: data.birthdate,
+            metadata: data.metadata,
+            secureMetadata: data.secureMetadata,
         });
+        return response.data;
     },
-    signOut: function (projectId, refreshToken) {
-        return __awaiter(this, void 0, void 0, function () {
-            var payload;
-            return __generator(this, function (_a) {
-                switch (_a.label) {
-                    case 0:
-                        payload = refreshToken ? { refreshToken: refreshToken } : {};
-                        return [4 /*yield*/, axios.post("/".concat(projectId, "/auth/sign-out"), payload)];
-                    case 1:
-                        _a.sent();
-                        return [2 /*return*/];
-                }
-            });
-        });
+    async signInWithEmailAndPassword(projectId, data) {
+        const response = await axios.post(`/${projectId}/auth/sign-in`, data);
+        return response.data;
     },
-    requestNewAccessToken: function (projectId, refreshToken) {
-        return __awaiter(this, void 0, void 0, function () {
-            var payload, response;
-            return __generator(this, function (_a) {
-                switch (_a.label) {
-                    case 0:
-                        payload = refreshToken ? { refreshToken: refreshToken } : {};
-                        return [4 /*yield*/, axios.post("/".concat(projectId, "/auth/request-new-access-token"), payload)];
-                    case 1:
-                        response = _a.sent();
-                        return [2 /*return*/, response.data];
-                }
-            });
-        });
+    async signOut(projectId, refreshToken) {
+        const payload = refreshToken ? { refreshToken } : {};
+        await axios.post(`/${projectId}/auth/sign-out`, payload);
     },
-    verifyExternalUser: function (projectId, userJwt) {
-        return __awaiter(this, void 0, void 0, function () {
-            var response;
-            return __generator(this, function (_a) {
-                switch (_a.label) {
-                    case 0: return [4 /*yield*/, axios.post("/".concat(projectId, "/auth/verify-external-user"), { userJwt: userJwt })];
-                    case 1:
-                        response = _a.sent();
-                        return [2 /*return*/, response.data];
-                }
-            });
-        });
+    async requestNewAccessToken(projectId, refreshToken) {
+        const payload = refreshToken ? { refreshToken } : {};
+        const response = await axios.post(`/${projectId}/auth/request-new-access-token`, payload);
+        return response.data;
     },
-    changePassword: function (projectId, data) {
-        return __awaiter(this, void 0, void 0, function () {
-            return __generator(this, function (_a) {
-                switch (_a.label) {
-                    case 0: return [4 /*yield*/, axios.post("/".concat(projectId, "/auth/change-password"), data)];
-                    case 1:
-                        _a.sent();
-                        return [2 /*return*/];
-                }
-            });
-        });
+    async verifyExternalUser(projectId, userJwt) {
+        const response = await axios.post(`/${projectId}/auth/verify-external-user`, { userJwt });
+        return response.data;
+    },
+    async changePassword(projectId, data) {
+        await axios.post(`/${projectId}/auth/change-password`, data);
     },
 };
 // Async Thunks
-export var signUpWithEmailAndPasswordThunk = createAsyncThunk("auth/signUpWithEmailAndPassword", function (data_1, _a) { return __awaiter(void 0, [data_1, _a], void 0, function (data, _b) {
-    var result, error_1;
-    var dispatch = _b.dispatch, rejectWithValue = _b.rejectWithValue;
-    return __generator(this, function (_c) {
-        switch (_c.label) {
-            case 0:
-                _c.trys.push([0, 2, 3, 4]);
-                dispatch(setAuthenticating(true));
-                return [4 /*yield*/, authService.signUpWithEmailAndPassword(data.projectId, data)];
-            case 1:
-                result = _c.sent();
-                // Update auth state
-                dispatch(setTokens({
-                    accessToken: result.accessToken,
-                    refreshToken: result.refreshToken,
-                }));
-                dispatch(setUser(result.user));
-                dispatch(setUserInUserSlice(result.user)); // Sync user to user slice
-                return [2 /*return*/, result];
-            case 2:
-                error_1 = _c.sent();
-                handleError(error_1, "Failed to register user with email and password:");
-                return [2 /*return*/, rejectWithValue(error_1 instanceof Error ? error_1.message : "Unknown error")];
-            case 3:
-                dispatch(setAuthenticating(false));
-                return [7 /*endfinally*/];
-            case 4: return [2 /*return*/];
-        }
-    });
-}); });
-export var signInWithEmailAndPasswordThunk = createAsyncThunk("auth/signInWithEmailAndPassword", function (data_1, _a) { return __awaiter(void 0, [data_1, _a], void 0, function (data, _b) {
-    var result, error_2;
-    var dispatch = _b.dispatch, rejectWithValue = _b.rejectWithValue;
-    return __generator(this, function (_c) {
-        switch (_c.label) {
-            case 0:
-                _c.trys.push([0, 2, 3, 4]);
-                dispatch(setAuthenticating(true));
-                return [4 /*yield*/, authService.signInWithEmailAndPassword(data.projectId, data)];
-            case 1:
-                result = _c.sent();
-                // Update auth state
-                dispatch(setTokens({
-                    accessToken: result.accessToken,
-                    refreshToken: result.refreshToken,
-                }));
-                dispatch(setUser(result.user));
-                dispatch(setUserInUserSlice(result.user)); // Sync user to user slice
-                return [2 /*return*/, result];
-            case 2:
-                error_2 = _c.sent();
-                handleError(error_2, "Failed to log user in:");
-                return [2 /*return*/, rejectWithValue(error_2 instanceof Error ? error_2.message : "Unknown error")];
-            case 3:
-                dispatch(setAuthenticating(false));
-                return [7 /*endfinally*/];
-            case 4: return [2 /*return*/];
-        }
-    });
-}); });
-export var signOutThunk = createAsyncThunk("auth/signOut", function (data_1, _a) { return __awaiter(void 0, [data_1, _a], void 0, function (data, _b) {
-    var state, refreshToken, activeAccountId, accounts, remainingIds, nextId, nextAccount, error_3;
-    var dispatch = _b.dispatch, getState = _b.getState, rejectWithValue = _b.rejectWithValue;
-    return __generator(this, function (_c) {
-        switch (_c.label) {
-            case 0:
-                state = getState();
-                refreshToken = state.replyke.auth.refreshToken;
-                activeAccountId = state.replyke.accounts.activeAccountId;
-                accounts = state.replyke.accounts.accounts;
-                if (!refreshToken) {
-                    throw new Error("No refresh token");
-                }
-                _c.label = 1;
-            case 1:
-                _c.trys.push([1, 6, 7, 8]);
-                dispatch(setAuthenticating(true));
-                return [4 /*yield*/, authService.signOut(data.projectId, refreshToken)];
-            case 2:
-                _c.sent();
-                // Remove current account from the multi-account map
-                if (activeAccountId) {
-                    dispatch(removeAccount(activeAccountId));
-                }
-                remainingIds = Object.keys(accounts).filter(function (id) { return id !== activeAccountId; });
-                if (!(remainingIds.length > 0)) return [3 /*break*/, 4];
-                nextId = remainingIds[0];
-                nextAccount = accounts[nextId];
-                dispatch(resetAuth());
-                dispatch(clearUserInUserSlice());
-                dispatch(baseApi.util.resetApiState());
-                dispatch(setTokens({
-                    accessToken: null,
-                    refreshToken: nextAccount.refreshToken,
-                }));
-                dispatch(setInitialized(false));
-                return [4 /*yield*/, dispatch(requestNewAccessTokenThunk({ projectId: data.projectId }))];
-            case 3:
-                _c.sent();
-                dispatch(setInitialized(true));
-                return [3 /*break*/, 5];
-            case 4:
-                // No remaining accounts — standard sign-out
-                dispatch(resetAuth());
-                dispatch(clearUserInUserSlice());
-                dispatch(baseApi.util.resetApiState());
-                _c.label = 5;
-            case 5: return [2 /*return*/];
-            case 6:
-                error_3 = _c.sent();
-                handleError(error_3, "Failed to log user out:");
-                return [2 /*return*/, rejectWithValue(error_3 instanceof Error ? error_3.message : "Unknown error")];
-            case 7:
-                dispatch(setAuthenticating(false));
-                return [7 /*endfinally*/];
-            case 8: return [2 /*return*/];
-        }
-    });
-}); });
-export var requestNewAccessTokenThunk = createAsyncThunk("auth/requestNewAccessToken", function (data_1, _a) { return __awaiter(void 0, [data_1, _a], void 0, function (data, _b) {
-    var state, refreshToken, result, error_4;
-    var dispatch = _b.dispatch, getState = _b.getState, rejectWithValue = _b.rejectWithValue;
-    return __generator(this, function (_c) {
-        switch (_c.label) {
-            case 0:
-                state = getState();
-                refreshToken = state.replyke.auth.refreshToken;
-                if (!refreshToken) {
-                    return [2 /*return*/];
-                }
-                _c.label = 1;
-            case 1:
-                _c.trys.push([1, 3, , 4]);
-                return [4 /*yield*/, authService.requestNewAccessToken(data.projectId, refreshToken)];
-            case 2:
-                result = _c.sent();
-                // Update auth state (store rotated refresh token from server)
-                dispatch(setTokens({
-                    accessToken: result.accessToken,
-                    refreshToken: result.refreshToken,
-                }));
-                dispatch(setUser(result.user));
-                dispatch(setUserInUserSlice(result.user)); // Sync user to user slice
-                return [2 /*return*/, result.accessToken];
-            case 3:
-                error_4 = _c.sent();
-                handleError(error_4, "Request new access token error:");
-                return [2 /*return*/, rejectWithValue(error_4 instanceof Error ? error_4.message : "Unknown error")];
-            case 4: return [2 /*return*/];
-        }
-    });
-}); });
-export var verifyExternalUserThunk = createAsyncThunk("auth/verifyExternalUser", function (data_1, _a) { return __awaiter(void 0, [data_1, _a], void 0, function (data, _b) {
-    var result, error_5;
-    var dispatch = _b.dispatch, rejectWithValue = _b.rejectWithValue;
-    return __generator(this, function (_c) {
-        switch (_c.label) {
-            case 0:
-                _c.trys.push([0, 2, , 3]);
-                return [4 /*yield*/, authService.verifyExternalUser(data.projectId, data.userJwt)];
-            case 1:
-                result = _c.sent();
-                // Update auth state
-                dispatch(setTokens({
-                    accessToken: result.accessToken,
-                    refreshToken: result.refreshToken,
-                }));
-                dispatch(setUser(result.user));
-                dispatch(setUserInUserSlice(result.user)); // Sync user to user slice
-                return [2 /*return*/, result];
-            case 2:
-                error_5 = _c.sent();
-                handleError(error_5, "Verify external user error:");
-                return [2 /*return*/, rejectWithValue(error_5 instanceof Error ? error_5.message : "Unknown error")];
-            case 3: return [2 /*return*/];
+export const signUpWithEmailAndPasswordThunk = createAsyncThunk("auth/signUpWithEmailAndPassword", async (data, { dispatch, rejectWithValue }) => {
+    try {
+        dispatch(setAuthenticating(true));
+        const result = await authService.signUpWithEmailAndPassword(data.projectId, data);
+        // Update auth state
+        dispatch(setTokens({
+            accessToken: result.accessToken,
+            refreshToken: result.refreshToken,
+        }));
+        dispatch(setUser(result.user));
+        dispatch(setUserInUserSlice(result.user)); // Sync user to user slice
+        return result;
+    }
+    catch (error) {
+        handleError(error, "Failed to register user with email and password:");
+        return rejectWithValue(error instanceof Error ? error.message : "Unknown error");
+    }
+    finally {
+        dispatch(setAuthenticating(false));
+    }
+});
+export const signInWithEmailAndPasswordThunk = createAsyncThunk("auth/signInWithEmailAndPassword", async (data, { dispatch, rejectWithValue }) => {
+    try {
+        dispatch(setAuthenticating(true));
+        const result = await authService.signInWithEmailAndPassword(data.projectId, data);
+        // Update auth state
+        dispatch(setTokens({
+            accessToken: result.accessToken,
+            refreshToken: result.refreshToken,
+        }));
+        dispatch(setUser(result.user));
+        dispatch(setUserInUserSlice(result.user)); // Sync user to user slice
+        return result;
+    }
+    catch (error) {
+        handleError(error, "Failed to log user in:");
+        return rejectWithValue(error instanceof Error ? error.message : "Unknown error");
+    }
+    finally {
+        dispatch(setAuthenticating(false));
+    }
+});
+export const signOutThunk = createAsyncThunk("auth/signOut", async (data, { dispatch, getState, rejectWithValue }) => {
+    const state = getState();
+    const refreshToken = state.replyke.auth.refreshToken;
+    const activeAccountId = state.replyke.accounts.activeAccountId;
+    const accounts = state.replyke.accounts.accounts;
+    if (!refreshToken) {
+        throw new Error("No refresh token");
+    }
+    try {
+        dispatch(setAuthenticating(true));
+        await authService.signOut(data.projectId, refreshToken);
+        // Remove current account from the multi-account map
+        if (activeAccountId) {
+            dispatch(removeAccount(activeAccountId));
         }
-    });
-}); });
-export var changePasswordThunk = createAsyncThunk("auth/changePassword", function (data_1, _a) { return __awaiter(void 0, [data_1, _a], void 0, function (data, _b) {
-    var state, error_6;
-    var dispatch = _b.dispatch, getState = _b.getState, rejectWithValue = _b.rejectWithValue;
-    return __generator(this, function (_c) {
-        switch (_c.label) {
-            case 0:
-                state = getState();
-                if (!state.replyke.auth.user) {
-                    throw new Error("No user is authenticated");
-                }
-                _c.label = 1;
-            case 1:
-                _c.trys.push([1, 3, 4, 5]);
-                dispatch(setAuthenticating(true));
-                return [4 /*yield*/, authService.changePassword(data.projectId, data)];
-            case 2:
-                _c.sent();
-                return [2 /*return*/];
-            case 3:
-                error_6 = _c.sent();
-                handleError(error_6, "Failed to change password:");
-                return [2 /*return*/, rejectWithValue(error_6 instanceof Error ? error_6.message : "Unknown error")];
-            case 4:
-                dispatch(setAuthenticating(false));
-                return [7 /*endfinally*/];
-            case 5: return [2 /*return*/];
+        // Check for remaining accounts
+        const remainingIds = Object.keys(accounts).filter((id) => id !== activeAccountId);
+        if (remainingIds.length > 0) {
+            // Switch to the first remaining account
+            const nextId = remainingIds[0];
+            const nextAccount = accounts[nextId];
+            dispatch(resetAuth());
+            dispatch(clearUserInUserSlice());
+            dispatch(baseApi.util.resetApiState());
+            dispatch(setTokens({
+                accessToken: null,
+                refreshToken: nextAccount.refreshToken,
+            }));
+            dispatch(setInitialized(false));
+            await dispatch(requestNewAccessTokenThunk({ projectId: data.projectId }));
+            dispatch(setInitialized(true));
         }
-    });
-}); });
-export var signOutAllThunk = createAsyncThunk("auth/signOutAll", function (data_1, _a) { return __awaiter(void 0, [data_1, _a], void 0, function (data, _b) {
-    var state, accounts, signOutPromises, error_7;
-    var dispatch = _b.dispatch, getState = _b.getState, rejectWithValue = _b.rejectWithValue;
-    return __generator(this, function (_c) {
-        switch (_c.label) {
-            case 0:
-                state = getState();
-                accounts = state.replyke.accounts.accounts;
-                _c.label = 1;
-            case 1:
-                _c.trys.push([1, 3, 4, 5]);
-                dispatch(setAuthenticating(true));
-                signOutPromises = Object.values(accounts).map(function (account) { return __awaiter(void 0, void 0, void 0, function () {
-                    var err_1;
-                    return __generator(this, function (_a) {
-                        switch (_a.label) {
-                            case 0:
-                                _a.trys.push([0, 2, , 3]);
-                                return [4 /*yield*/, authService.signOut(data.projectId, account.refreshToken)];
-                            case 1:
-                                _a.sent();
-                                return [3 /*break*/, 3];
-                            case 2:
-                                err_1 = _a.sent();
-                                // Best-effort: log but don't fail the entire operation
-                                handleError(err_1, "Failed to sign out account on server:");
-                                return [3 /*break*/, 3];
-                            case 3: return [2 /*return*/];
-                        }
-                    });
-                }); });
-                return [4 /*yield*/, Promise.all(signOutPromises)];
-            case 2:
-                _c.sent();
-                // Clear all local state
-                dispatch(clearAllAccounts());
-                dispatch(resetAuth());
-                dispatch(clearUserInUserSlice());
-                dispatch(baseApi.util.resetApiState());
-                return [2 /*return*/];
-            case 3:
-                error_7 = _c.sent();
-                handleError(error_7, "Failed to sign out all accounts:");
-                return [2 /*return*/, rejectWithValue(error_7 instanceof Error ? error_7.message : "Unknown error")];
-            case 4:
-                dispatch(setAuthenticating(false));
-                return [7 /*endfinally*/];
-            case 5: return [2 /*return*/];
+        else {
+            // No remaining accounts — standard sign-out
+            dispatch(resetAuth());
+            dispatch(clearUserInUserSlice());
+            dispatch(baseApi.util.resetApiState());
         }
-    });
-}); });
+        return;
+    }
+    catch (error) {
+        handleError(error, "Failed to log user out:");
+        return rejectWithValue(error instanceof Error ? error.message : "Unknown error");
+    }
+    finally {
+        dispatch(setAuthenticating(false));
+    }
+});
+export const requestNewAccessTokenThunk = createAsyncThunk("auth/requestNewAccessToken", async (data, { dispatch, getState, rejectWithValue }) => {
+    const state = getState();
+    const refreshToken = state.replyke.auth.refreshToken;
+    if (!refreshToken) {
+        return;
+    }
+    try {
+        const result = await authService.requestNewAccessToken(data.projectId, refreshToken);
+        // Update auth state (store rotated refresh token from server)
+        dispatch(setTokens({
+            accessToken: result.accessToken,
+            refreshToken: result.refreshToken,
+        }));
+        dispatch(setUser(result.user));
+        dispatch(setUserInUserSlice(result.user)); // Sync user to user slice
+        return result.accessToken;
+    }
+    catch (error) {
+        handleError(error, "Request new access token error:");
+        return rejectWithValue(error instanceof Error ? error.message : "Unknown error");
+    }
+});
+export const verifyExternalUserThunk = createAsyncThunk("auth/verifyExternalUser", async (data, { dispatch, rejectWithValue }) => {
+    try {
+        const result = await authService.verifyExternalUser(data.projectId, data.userJwt);
+        // Update auth state
+        dispatch(setTokens({
+            accessToken: result.accessToken,
+            refreshToken: result.refreshToken,
+        }));
+        dispatch(setUser(result.user));
+        dispatch(setUserInUserSlice(result.user)); // Sync user to user slice
+        return result;
+    }
+    catch (error) {
+        handleError(error, "Verify external user error:");
+        return rejectWithValue(error instanceof Error ? error.message : "Unknown error");
+    }
+});
+export const changePasswordThunk = createAsyncThunk("auth/changePassword", async (data, { dispatch, getState, rejectWithValue }) => {
+    const state = getState();
+    if (!state.replyke.auth.user) {
+        throw new Error("No user is authenticated");
+    }
+    try {
+        dispatch(setAuthenticating(true));
+        await authService.changePassword(data.projectId, data);
+        return;
+    }
+    catch (error) {
+        handleError(error, "Failed to change password:");
+        return rejectWithValue(error instanceof Error ? error.message : "Unknown error");
+    }
+    finally {
+        dispatch(setAuthenticating(false));
+    }
+});
+export const signOutAllThunk = createAsyncThunk("auth/signOutAll", async (data, { dispatch, getState, rejectWithValue }) => {
+    const state = getState();
+    const accounts = state.replyke.accounts.accounts;
+    try {
+        dispatch(setAuthenticating(true));
+        // Sign out from each account on the server (best-effort)
+        const signOutPromises = Object.values(accounts).map(async (account) => {
+            try {
+                await authService.signOut(data.projectId, account.refreshToken);
+            }
+            catch (err) {
+                // Best-effort: log but don't fail the entire operation
+                handleError(err, `Failed to sign out account on server:`);
+            }
+        });
+        await Promise.all(signOutPromises);
+        // Clear all local state
+        dispatch(clearAllAccounts());
+        dispatch(resetAuth());
+        dispatch(clearUserInUserSlice());
+        dispatch(baseApi.util.resetApiState());
+        return;
+    }
+    catch (error) {
+        handleError(error, "Failed to sign out all accounts:");
+        return rejectWithValue(error instanceof Error ? error.message : "Unknown error");
+    }
+    finally {
+        dispatch(setAuthenticating(false));
+    }
+});
 // Initialize auth - handles the startup flow
-export var initializeAuthThunk = createAsyncThunk("auth/initialize", function (data_1, _a) { return __awaiter(void 0, [data_1, _a], void 0, function (data, _b) {
-    var error_8;
-    var dispatch = _b.dispatch;
-    return __generator(this, function (_c) {
-        switch (_c.label) {
-            case 0:
-                _c.trys.push([0, 4, 5, 6]);
-                if (!data.signedToken) return [3 /*break*/, 2];
-                return [4 /*yield*/, dispatch(verifyExternalUserThunk({
-                        projectId: data.projectId,
-                        userJwt: data.signedToken,
-                    }))];
-            case 1:
-                _c.sent();
-                _c.label = 2;
-            case 2: 
-            // Step 2: Try to refresh access token
-            return [4 /*yield*/, dispatch(requestNewAccessTokenThunk({ projectId: data.projectId }))];
-            case 3:
-                // Step 2: Try to refresh access token
-                _c.sent();
-                return [3 /*break*/, 6];
-            case 4:
-                error_8 = _c.sent();
-                handleError(error_8, "Auth initialization failed:");
-                return [3 /*break*/, 6];
-            case 5:
-                dispatch(setInitialized(true));
-                return [7 /*endfinally*/];
-            case 6: return [2 /*return*/];
+export const initializeAuthThunk = createAsyncThunk("auth/initialize", async (data, { dispatch }) => {
+    try {
+        // Step 1: If we have a signed token, verify external user
+        if (data.signedToken) {
+            await dispatch(verifyExternalUserThunk({
+                projectId: data.projectId,
+                userJwt: data.signedToken,
+            }));
         }
-    });
-}); });
+        // Step 2: Try to refresh access token
+        await dispatch(requestNewAccessTokenThunk({ projectId: data.projectId }));
+    }
+    catch (error) {
+        handleError(error, "Auth initialization failed:");
+    }
+    finally {
+        dispatch(setInitialized(true));
+    }
+});
 //# sourceMappingURL=authThunks.js.map