@dereekb/dbx-cli 13.40.0 → 13.42.0

package/lint-cache/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@dereekb/dbx-cli-lint-cache",
-  "version": "13.40.0",
+  "version": "13.42.0",
   "private": true,
   "type": "module",
   "devDependencies": {
@@ -8,7 +8,7 @@
     "eslint": "10.4.0"
   },
   "peerDependencies": {
-    "@dereekb/util": "13.40.0",
+    "@dereekb/util": "13.42.0",
     "yargs": "^18.0.0"
   }
 }

package/manifest-extract/index.esm.js

@@ -1,4 +1,4 @@
-import { Project, Node } from 'ts-morph';
+import { Project, Node, SyntaxKind } from 'ts-morph';
 import { parseFirestoreModelIdentityArgs, resolveExtendsName } from '@dereekb/dbx-cli';
 
 function _define_property$1(obj, key, value) {
@@ -702,6 +702,14 @@ var MCP_TOOL_NAME_SEGMENT_TAG = 'dbxModelMcpToolNameSegment';
 var MODEL_TYPE_VALUE_PATTERN = /^[a-z][A-Za-z0-9_$]*$/;
 var TOOL_NAME_SEGMENT_PATTERN = /^[A-Za-z][A-Za-z0-9_$]*$/;
 var IDENTITY_FN = 'firestoreModelIdentity';
+var SINGLE_ITEM_COLLECTION_FN = 'singleItemFirestoreCollection';
+var ROOT_SINGLE_ITEM_COLLECTION_FN = 'rootSingleItemFirestoreCollection';
+var SINGLE_ITEM_COLLECTION_FN_NAMES = [
+    SINGLE_ITEM_COLLECTION_FN,
+    ROOT_SINGLE_ITEM_COLLECTION_FN
+];
+var MODEL_IDENTITY_KEY = 'modelIdentity';
+var SINGLE_ITEM_IDENTIFIER_KEY = 'singleItemIdentifier';
 var CONVERTER_FN_NAMES = [
     'snapshotConverterFunctions',
     'firestoreSubObject',
@@ -736,13 +744,17 @@ var FIRESTORE_FIELD_KEY = 'firestoreField';
     var enums = readEnums(sourceFile);
     var modelGroups = readModelGroups(sourceFile);
     var serviceFactories = readServiceFactories(sourceFile);
+    var singleItemCollections = readSingleItemCollections(sourceFile);
+    var stringConstants = readStringConstants(sourceFile);
     return {
         identities: identities,
         interfaces: interfaces,
         converters: converters,
         enums: enums,
         modelGroups: modelGroups,
-        serviceFactories: serviceFactories
+        serviceFactories: serviceFactories,
+        singleItemCollections: singleItemCollections,
+        stringConstants: stringConstants
     };
 }
 function readIdentities(sourceFile) {
@@ -1080,6 +1092,140 @@ function readServiceFactoryModelType(jsDocs) {
     }
     return result;
 }
+/**
+ * Finds every `singleItemFirestoreCollection` / `rootSingleItemFirestoreCollection` call in the
+ * file. Unlike the other artifacts these are not top-level declarations — they sit inside the
+ * `<model>FirestoreCollectionFactory` function bodies — so this needs a full descendant walk,
+ * guarded on the raw text so files declaring no single-item collection skip it entirely.
+ *
+ * @param sourceFile - The parsed source file.
+ * @returns One entry per resolvable call, in source order.
+ */ function readSingleItemCollections(sourceFile) {
+    var out = [];
+    var text = sourceFile.getFullText();
+    if (SINGLE_ITEM_COLLECTION_FN_NAMES.some(function(name) {
+        return text.includes(name);
+    })) {
+        var _iteratorNormalCompletion = true, _didIteratorError = false, _iteratorError = undefined;
+        try {
+            for(var _iterator = sourceFile.getDescendantsOfKind(SyntaxKind.CallExpression)[Symbol.iterator](), _step; !(_iteratorNormalCompletion = (_step = _iterator.next()).done); _iteratorNormalCompletion = true){
+                var call = _step.value;
+                var fnName = readCalleeName(call);
+                if (fnName !== SINGLE_ITEM_COLLECTION_FN && fnName !== ROOT_SINGLE_ITEM_COLLECTION_FN) continue;
+                var entry = buildSingleItemCollection(call, fnName === ROOT_SINGLE_ITEM_COLLECTION_FN);
+                if (entry) out.push(entry);
+            }
+        } catch (err) {
+            _didIteratorError = true;
+            _iteratorError = err;
+        } finally{
+            try {
+                if (!_iteratorNormalCompletion && _iterator.return != null) {
+                    _iterator.return();
+                }
+            } finally{
+                if (_didIteratorError) {
+                    throw _iteratorError;
+                }
+            }
+        }
+    }
+    return out;
+}
+/**
+ * Resolves a call's function name for both the bare (`singleItemFirestoreCollection(...)`) and the
+ * method (`firestoreContext.singleItemFirestoreCollection(...)`) forms.
+ *
+ * @param call - The call expression.
+ * @returns The called function's name, or the verbatim callee text when it is neither shape.
+ */ function readCalleeName(call) {
+    var expression = call.getExpression();
+    return Node.isPropertyAccessExpression(expression) ? expression.getName() : expression.getText();
+}
+function buildSingleItemCollection(call, root) {
+    var result;
+    var args = call.getArguments();
+    if (args.length > 0) {
+        var config = args[0];
+        if (Node.isObjectLiteralExpression(config)) {
+            var identityNode = readPropertyValue(config, MODEL_IDENTITY_KEY);
+            if (identityNode && Node.isIdentifier(identityNode)) {
+                var identifierNode = readPropertyValue(config, SINGLE_ITEM_IDENTIFIER_KEY);
+                result = {
+                    identityConst: identityNode.getText(),
+                    root: root,
+                    documentId: readStringLiteralText(identifierNode),
+                    documentIdConstRef: identifierNode && Node.isIdentifier(identifierNode) ? identifierNode.getText() : undefined,
+                    explicitIdentifier: config.getProperty(SINGLE_ITEM_IDENTIFIER_KEY) !== undefined,
+                    line: call.getStartLineNumber()
+                };
+            }
+        }
+    }
+    return result;
+}
+function readStringConstants(sourceFile) {
+    var out = [];
+    var _iteratorNormalCompletion = true, _didIteratorError = false, _iteratorError = undefined;
+    try {
+        for(var _iterator = sourceFile.getVariableStatements()[Symbol.iterator](), _step; !(_iteratorNormalCompletion = (_step = _iterator.next()).done); _iteratorNormalCompletion = true){
+            var statement = _step.value;
+            if (!statement.isExported()) continue;
+            var _iteratorNormalCompletion1 = true, _didIteratorError1 = false, _iteratorError1 = undefined;
+            try {
+                for(var _iterator1 = statement.getDeclarations()[Symbol.iterator](), _step1; !(_iteratorNormalCompletion1 = (_step1 = _iterator1.next()).done); _iteratorNormalCompletion1 = true){
+                    var decl = _step1.value;
+                    var value = readStringLiteralText(decl.getInitializer());
+                    if (value !== undefined) {
+                        out.push({
+                            name: decl.getName(),
+                            value: value
+                        });
+                    }
+                }
+            } catch (err) {
+                _didIteratorError1 = true;
+                _iteratorError1 = err;
+            } finally{
+                try {
+                    if (!_iteratorNormalCompletion1 && _iterator1.return != null) {
+                        _iterator1.return();
+                    }
+                } finally{
+                    if (_didIteratorError1) {
+                        throw _iteratorError1;
+                    }
+                }
+            }
+        }
+    } catch (err) {
+        _didIteratorError = true;
+        _iteratorError = err;
+    } finally{
+        try {
+            if (!_iteratorNormalCompletion && _iterator.return != null) {
+                _iterator.return();
+            }
+        } finally{
+            if (_didIteratorError) {
+                throw _iteratorError;
+            }
+        }
+    }
+    return out;
+}
+/**
+ * Reads a node's string-literal text, peeling any `as const` / `as Foo` assertion.
+ *
+ * @param node - The candidate node, or `undefined`.
+ * @returns The literal text, or `undefined` when the node is not a string literal.
+ */ function readStringLiteralText(node) {
+    var current = node;
+    while(current !== undefined && Node.isAsExpression(current)){
+        current = current.getExpression();
+    }
+    return current !== undefined && (Node.isStringLiteral(current) || Node.isNoSubstitutionTemplateLiteral(current)) ? current.getLiteralText() : undefined;
+}
 function readConverters(sourceFile) {
     var out = [];
     var _iteratorNormalCompletion = true, _didIteratorError = false, _iteratorError = undefined;

package/manifest-extract/package.json

@@ -1,11 +1,11 @@
 {
   "name": "@dereekb/dbx-cli/manifest-extract",
-  "version": "13.40.0",
+  "version": "13.42.0",
   "type": "module",
   "sideEffects": false,
   "peerDependencies": {
     "@dereekb/date": "13.15.0",
-    "@dereekb/dbx-cli": "13.40.0",
+    "@dereekb/dbx-cli": "13.42.0",
     "@dereekb/firebase": "13.15.0",
     "@dereekb/model": "13.15.0",
     "@dereekb/nestjs": "13.15.0",

package/manifest-extract/src/lib/extract-models.d.ts

@@ -2,8 +2,10 @@
  * Per-source-file walker that pulls Firestore-model metadata out of a `.ts`
  * file: identities, `@dbxModel`-tagged interfaces with their property JSDocs,
  * snapshot converters (top-level `snapshotConverterFunctions`,
- * `firestoreSubObject`, and `firestoreObjectArray` consts), enums, and
- * `@dbxModelGroup`-tagged collection containers.
+ * `firestoreSubObject`, and `firestoreObjectArray` consts), enums,
+ * `@dbxModelGroup`-tagged collection containers, single-item collection
+ * declarations (with the fixed document id they pin), and the exported
+ * string constants such an id may be declared as.
  *
  * Mirrors the per-file outputs of `dbx-components-mcp`'s `extractModels()`
  * but lives inside `@dereekb/dbx-cli/manifest-extract` so the `dbx-cli`

package/manifest-extract/src/lib/types.d.ts

@@ -279,6 +279,20 @@ export interface ModelExtraction {
      * manifest can surface the implementing factory alongside each model.
      */
     readonly serviceFactories: readonly ModelExtractionServiceFactory[];
+    /**
+     * `singleItemFirestoreCollection(...)` / `rootSingleItemFirestoreCollection(...)` calls found
+     * anywhere in this file (they live inside collection-factory function bodies, not at the top
+     * level). The orchestrator joins these onto matching model entries by `identityConst` so the
+     * runtime manifest can publish each singleton model's fixed document id.
+     */
+    readonly singleItemCollections: readonly ModelExtractionSingleItemCollection[];
+    /**
+     * Exported `const <NAME> = '<literal>'` string constants declared in this file. Aggregated by
+     * the orchestrator into a cross-file registry so a
+     * {@link ModelExtractionSingleItemCollection.documentIdConstRef} declared in a sibling file
+     * still resolves.
+     */
+    readonly stringConstants: readonly ModelExtractionStringConstant[];
 }
 /**
  * One `@dbxModelServiceFactory <modelType>`-tagged variable export.
@@ -294,3 +308,54 @@ export interface ModelExtractionServiceFactory {
      */
     readonly exportName: string;
 }
+/**
+ * One `firestoreContext.singleItemFirestoreCollection({ ... })` or
+ * `firestoreContext.rootSingleItemFirestoreCollection({ ... })` call — the declaration that a
+ * model's collection holds exactly one document, at a fixed id.
+ *
+ * The id is what a caller needs to build a document key and what the manifest could not express
+ * before: it defaults to `DEFAULT_SINGLE_ITEM_FIRESTORE_COLLECTION_DOCUMENT_IDENTIFIER` (`'0'`)
+ * but is frequently overridden, so `'/0'` cannot be inferred.
+ */
+export interface ModelExtractionSingleItemCollection {
+    /**
+     * Identity const named by the call's `modelIdentity` property (e.g.
+     * `billingGroupInvoiceSummaryIdentity`) — the join key back to the model entry.
+     */
+    readonly identityConst: string;
+    /**
+     * `true` for the `rootSingleItemFirestoreCollection` variant (a root collection holding one
+     * document), `false` for the `singleItemFirestoreCollection` subcollection variant.
+     */
+    readonly root: boolean;
+    /**
+     * Document id when `singleItemIdentifier` is a string literal. `undefined` when the property is
+     * absent, names a const (see {@link documentIdConstRef}), or is an unresolvable expression.
+     */
+    readonly documentId: string | undefined;
+    /**
+     * Const name when `singleItemIdentifier` is an identifier reference (e.g.
+     * `BILLING_GROUP_SUMMARY_BILLING_SINGLE_IDENTIFIER`), resolved by the orchestrator against the
+     * cross-file string-constant registry.
+     */
+    readonly documentIdConstRef: string | undefined;
+    /**
+     * `true` when the config object declares a `singleItemIdentifier` property at all. `false` means
+     * the runtime default applies; `true` with neither {@link documentId} nor
+     * {@link documentIdConstRef} means the value is an expression the walker could not read, and the
+     * id is genuinely unknown rather than defaulted.
+     */
+    readonly explicitIdentifier: boolean;
+    /**
+     * Source-line number of the call (1-based) for diagnostics.
+     */
+    readonly line: number;
+}
+/**
+ * One exported `const <NAME> = '<literal>'` string constant, captured so cross-file
+ * `singleItemIdentifier: SOME_CONST` references resolve without type-checker access.
+ */
+export interface ModelExtractionStringConstant {
+    readonly name: string;
+    readonly value: string;
+}

package/model-test/index.esm.js

@@ -438,31 +438,6 @@ function toPosix(p) {
     return p.split(sep).join('/');
 }
 
-function _array_like_to_array$6(arr, len) {
-    if (len == null || len > arr.length) len = arr.length;
-    for(var i = 0, arr2 = new Array(len); i < len; i++)arr2[i] = arr[i];
-    return arr2;
-}
-function _array_without_holes$6(arr) {
-    if (Array.isArray(arr)) return _array_like_to_array$6(arr);
-}
-function _iterable_to_array$6(iter) {
-    if (typeof Symbol !== "undefined" && iter[Symbol.iterator] != null || iter["@@iterator"] != null) return Array.from(iter);
-}
-function _non_iterable_spread$6() {
-    throw new TypeError("Invalid attempt to spread non-iterable instance.\\nIn order to be iterable, non-array objects must have a [Symbol.iterator]() method.");
-}
-function _to_consumable_array$6(arr) {
-    return _array_without_holes$6(arr) || _iterable_to_array$6(arr) || _unsupported_iterable_to_array$6(arr) || _non_iterable_spread$6();
-}
-function _unsupported_iterable_to_array$6(o, minLen) {
-    if (!o) return;
-    if (typeof o === "string") return _array_like_to_array$6(o, minLen);
-    var n = Object.prototype.toString.call(o).slice(8, -1);
-    if (n === "Object" && o.constructor) n = o.constructor.name;
-    if (n === "Map" || n === "Set") return Array.from(n);
-    if (n === "Arguments" || /^(?:Ui|I)nt(?:8|16|32)(?:Clamped)?Array$/.test(n)) return _array_like_to_array$6(o, minLen);
-}
 var SPEC_FILE_VIRTUAL_PATH = '__spec__/spec.ts';
 var FIXTURE_CONTEXT_SUFFIX = 'Context';
 var FIXTURE_FACTORY_SUFFIX = 'ContextFactory';
@@ -670,7 +645,7 @@ function isItName(name) {
             }
         }
     }
-    return _to_consumable_array$6(seen);
+    return Array.from(seen);
 }
 /**
  * `true` when the import specifier points at the conventional fixture module
@@ -730,7 +705,7 @@ function sharedPrefix(a, b) {
     return s;
 }
 function dedupedSorted(names) {
-    return _to_consumable_array$6(new Set(names)).sort(function(a, b) {
+    return Array.from(new Set(names)).sort(function(a, b) {
         return a.localeCompare(b);
     });
 }
@@ -1294,31 +1269,6 @@ var KNOWN_NON_MODEL_FIXTURE_FAMILIES = [
     });
 }
 
-function _array_like_to_array$5(arr, len) {
-    if (len == null || len > arr.length) len = arr.length;
-    for(var i = 0, arr2 = new Array(len); i < len; i++)arr2[i] = arr[i];
-    return arr2;
-}
-function _array_without_holes$5(arr) {
-    if (Array.isArray(arr)) return _array_like_to_array$5(arr);
-}
-function _iterable_to_array$5(iter) {
-    if (typeof Symbol !== "undefined" && iter[Symbol.iterator] != null || iter["@@iterator"] != null) return Array.from(iter);
-}
-function _non_iterable_spread$5() {
-    throw new TypeError("Invalid attempt to spread non-iterable instance.\\nIn order to be iterable, non-array objects must have a [Symbol.iterator]() method.");
-}
-function _to_consumable_array$5(arr) {
-    return _array_without_holes$5(arr) || _iterable_to_array$5(arr) || _unsupported_iterable_to_array$5(arr) || _non_iterable_spread$5();
-}
-function _unsupported_iterable_to_array$5(o, minLen) {
-    if (!o) return;
-    if (typeof o === "string") return _array_like_to_array$5(o, minLen);
-    var n = Object.prototype.toString.call(o).slice(8, -1);
-    if (n === "Object" && o.constructor) n = o.constructor.name;
-    if (n === "Map" || n === "Set") return Array.from(n);
-    if (n === "Arguments" || /^(?:Ui|I)nt(?:8|16|32)(?:Clamped)?Array$/.test(n)) return _array_like_to_array$5(o, minLen);
-}
 var FIXTURE_SUFFIX = 'TestContextFixture';
 var INSTANCE_SUFFIX = 'TestContextInstance';
 var PARAMS_SUFFIX = 'TestContextParams';
@@ -2239,7 +2189,7 @@ function readFactoryArgInfo(args) {
             }
         }
     }
-    var list = _to_consumable_array$5(all);
+    var list = Array.from(all);
     list.sort(function(a, b) {
         var _ref, _fixtures_get, _ref1, _fixtures_get1;
         var _this, _this1;
@@ -2388,7 +2338,7 @@ function readFactoryArgInfo(args) {
             }
         }
     }
-    var list = _to_consumable_array$5(out);
+    var list = Array.from(out);
     list.sort(function(a, b) {
         return a.localeCompare(b);
     });

package/model-test/package.json

@@ -1,10 +1,10 @@
 {
   "name": "@dereekb/dbx-cli/model-test",
-  "version": "13.40.0",
+  "version": "13.42.0",
   "type": "module",
   "sideEffects": false,
   "peerDependencies": {
-    "@dereekb/util": "13.40.0",
+    "@dereekb/util": "13.42.0",
     "ts-morph": "^21.0.0"
   },
   "exports": {

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@dereekb/dbx-cli",
-  "version": "13.40.0",
+  "version": "13.42.0",
   "type": "module",
   "sideEffects": false,
   "bin": {
@@ -66,11 +66,11 @@
     }
   },
   "peerDependencies": {
-    "@dereekb/date": "13.40.0",
-    "@dereekb/firebase": "13.40.0",
-    "@dereekb/model": "13.40.0",
-    "@dereekb/nestjs": "13.40.0",
-    "@dereekb/util": "13.40.0",
+    "@dereekb/date": "13.42.0",
+    "@dereekb/firebase": "13.42.0",
+    "@dereekb/model": "13.42.0",
+    "@dereekb/nestjs": "13.42.0",
+    "@dereekb/util": "13.42.0",
     "@nestjs/common": "^11.1.19",
     "arktype": "^2.2.0",
     "firebase": "^12.12.1",

package/route/package.json

@@ -1,15 +1,15 @@
 {
   "name": "@dereekb/dbx-cli/route",
-  "version": "13.40.0",
+  "version": "13.42.0",
   "type": "module",
   "sideEffects": false,
   "peerDependencies": {
-    "@dereekb/date": "13.40.0",
-    "@dereekb/dbx-cli": "13.40.0",
-    "@dereekb/firebase": "13.40.0",
-    "@dereekb/model": "13.40.0",
-    "@dereekb/nestjs": "13.40.0",
-    "@dereekb/util": "13.40.0"
+    "@dereekb/date": "13.42.0",
+    "@dereekb/dbx-cli": "13.42.0",
+    "@dereekb/firebase": "13.42.0",
+    "@dereekb/model": "13.42.0",
+    "@dereekb/nestjs": "13.42.0",
+    "@dereekb/util": "13.42.0"
   },
   "exports": {
     "./package.json": "./package.json",

package/src/lib/doctor/firestore-session.check.d.ts

@@ -57,11 +57,32 @@ export interface FirestoreSessionDoctorReadRouting {
     readonly readPreference: 'firestore' | 'api';
     readonly reason: CliReadSourceReason;
     /**
-     * Query-catalog entries whose factory bound to a real runtime export, and are therefore runnable
-     * by `firestore-query`. A non-invocable entry is listed by `firestore-queries` with `INVOCABLE = no`.
+     * Query-catalog entries `firestore-query` can actually run: the factory bound to a real runtime
+     * export AND `firestore.rules` does not refuse the query at every scope.
+     *
+     * `unavailable` entries are deliberately EXCLUDED. Counting them was the bug this number had:
+     * an entry with a bound factory over a collection with no `/{path=**}/` rule reported as invocable
+     * and then failed with `permission-denied` on every call, so `invocableQueryEntries: 128/128` was
+     * a claim the CLI could not honour for about a third of the catalog.
      */
     readonly invocableQueryEntries: number;
     readonly totalQueryEntries: number;
+    /**
+     * Entries `firestore.rules` refuses at every scope (`queryMode: 'unavailable'`) — the query-level
+     * analogue of {@link serverOnlyModels}, surfaced the same way because it has the same consequence.
+     */
+    readonly unavailableQueryEntries: number;
+    /**
+     * Entries that address ONE parent document's subcollection (`queryMode: 'parent-child'`), so they
+     * run only when scoped with `--parent`.
+     */
+    readonly parentChildQueryEntries: number;
+    /**
+     * Whether the query manifest carries invocation modes at all — false when its generator ran
+     * without `--rules`, in which case the two counts above are structurally `0` rather than
+     * genuinely clean.
+     */
+    readonly queryModesScanned: boolean;
     /**
      * Models the manifest marks `@dbxModelServerOnly` — refused on every `--via` value.
      */

package/src/lib/firestore/firestore.collection.d.ts

@@ -20,6 +20,12 @@ export interface CliFirestoreCollectionForQueryInput {
      * The parent document key to narrow to, from `--parent`.
      */
     readonly parentKey?: FirestoreModelKey;
+    /**
+     * The parent-document path templates the rules declare for this collection, from
+     * `CliFirestoreQueryReachability.parentPaths` (e.g. `jl/{jobLocation}/jlj/{job}`). When supplied,
+     * a `--parent` whose collection chain does not match one of them is rejected locally.
+     */
+    readonly parentPaths?: readonly string[];
 }
 /**
  * Resolves the collection a catalog entry should execute against, applying `--parent` scoping.
@@ -42,3 +48,26 @@ export interface CliFirestoreCollectionForQueryInput {
  * @throws {CliError} When `--parent` is missing where required, supplied where rejected, or the registered collection cannot be scoped.
  */
 export declare function cliFirestoreCollectionForQuery(input: CliFirestoreCollectionForQueryInput): FirestoreCollectionLike<unknown>;
+/**
+ * Validates a `--parent` value before it is turned into a document reference.
+ *
+ * Both checks exist because the failure they prevent is otherwise unreadable. An odd-segment
+ * `--parent` (a COLLECTION path, e.g. `jl/abc/jlj`) reaches `docAtPath` and comes back as a raw
+ * Firestore path assertion; a well-formed key for the WRONG ancestor chain (e.g. `gb/abc` for a
+ * collection that lives under `jl/{loc}/jlj/{job}`) silently produces an empty result set, which is
+ * indistinguishable from "no matching documents".
+ *
+ * The chain comparison is on COLLECTION NAMES only — document ids are the caller's data, and the
+ * rules templates carry `{wildcard}` placeholders there.
+ *
+ * @param input - The model type, the supplied parent key, and the rules-declared parent templates.
+ * @param input.modelType - The model being queried, for the message.
+ * @param input.parentKey - The raw `--parent` value.
+ * @param input.parentPaths - The rules-declared parent path templates, when known.
+ * @throws {CliError} `INVALID_ARGUMENT` when the key is not a document path, or names a chain the rules do not declare.
+ */
+export declare function assertCliFirestoreQueryParentKey(input: {
+    readonly modelType: FirestoreModelType;
+    readonly parentKey: FirestoreModelKey;
+    readonly parentPaths?: readonly string[];
+}): void;

package/src/lib/firestore/firestore.query.d.ts

@@ -74,6 +74,6 @@ export declare function cliFirestoreQueryConstraints(input: {
  *
  * @param input - The models view, the entry, and the run options.
  * @returns The query result envelope.
- * @throws {CliError} On an argument, scoping, or invocability failure. Firestore's own errors (rules, missing index) surface via `cliFirestoreErrorMapper`.
+ * @throws {CliError} On an argument, scoping, mode, or invocability failure. Firestore's own errors (rules, missing index) surface via `cliFirestoreErrorMapper`.
  */
 export declare function runCliFirestoreQuery(input: RunCliFirestoreQueryInput): Promise<CliFirestoreQueryResult>;

package/src/lib/firestore/index.d.ts

@@ -10,4 +10,5 @@ export * from './firestore.query-params';
 export * from './firestore.read';
 export * from './firestore.session';
 export * from './query-info-utils';
+export * from './query-mode';
 export * from './query-registry';

package/src/lib/firestore/query-info-utils.d.ts

@@ -17,9 +17,14 @@ export interface CliFirestoreQueryListFilter {
     readonly model?: string;
     readonly category?: string;
     readonly tag?: string;
+    /**
+     * Drop the entries this CLI cannot run — an unbound factory, or a query `firestore.rules` refuses
+     * at every scope. A `parent-child` entry is KEPT: `--parent` runs it.
+     */
+    readonly invocableOnly?: boolean;
 }
 /**
- * Applies the `--model` / `--category` / `--tag` filters to the catalog.
+ * Applies the `--model` / `--category` / `--tag` / `--invocable-only` filters to the catalog.
  *
  * @param registry - The query catalog.
  * @param filter - The active filters.