@dereekb/dbx-components-mcp 13.12.3 → 13.12.5

package/dbx-components-mcp.js

@@ -5,7 +5,7 @@ const require = __createRequire(import.meta.url);
 // packages/dbx-components-mcp/package.json
 var package_default = {
   name: "@dereekb/dbx-components-mcp",
-  version: "13.12.3",
+  version: "13.12.5",
   type: "module",
   bin: {
     "dbx-components-mcp": "dbx-components-mcp.js"
@@ -20,20 +20,20 @@ var package_default = {
     "@angular/core": "21.2.11",
     "@angular/forms": "21.2.11",
     "@angular/material": "^21.2.9",
-    "@dereekb/dbx-cli": "13.12.3",
-    "@dereekb/dbx-core": "13.12.3",
-    "@dereekb/dbx-firebase": "13.12.3",
-    "@dereekb/dbx-form": "13.12.3",
-    "@dereekb/dbx-web": "13.12.3",
-    "@dereekb/firebase": "13.12.3",
-    "@dereekb/firebase-server": "13.12.3",
-    "@dereekb/rxjs": "13.12.3",
-    "@dereekb/util": "13.12.3",
+    "@dereekb/dbx-cli": "13.12.5",
+    "@dereekb/dbx-core": "13.12.5",
+    "@dereekb/dbx-firebase": "13.12.5",
+    "@dereekb/dbx-form": "13.12.5",
+    "@dereekb/dbx-web": "13.12.5",
+    "@dereekb/firebase": "13.12.5",
+    "@dereekb/firebase-server": "13.12.5",
+    "@dereekb/rxjs": "13.12.5",
+    "@dereekb/util": "13.12.5",
     "@uirouter/angular": "21.0.0",
     rxjs: "^7.8.2"
   },
   devDependencies: {
-    "@dereekb/model": "13.12.3"
+    "@dereekb/model": "13.12.5"
   }
 };
 
@@ -130,6 +130,89 @@ var DASH_CHARACTER_PREFIX_INSTANCE = characterPrefixSuffixInstance({
   prefix: "-"
 });
 
+// packages/util/src/lib/test/spec-file-conventions.ts
+var CANONICAL_KINDS = ["crud", "crud-subgroup", "scenario", "scenario-subgroup"];
+var SPEC_SUFFIX = ".spec.ts";
+function classifySpecFile(config) {
+  const { filename, parentFolderName } = config;
+  let result;
+  if (!filename.endsWith(SPEC_SUFFIX)) {
+    result = { filename, group: "", kind: "non-spec", subgroups: [], isCanonical: false };
+  } else {
+    const stem = filename.slice(0, -SPEC_SUFFIX.length);
+    const parts = stem.split(".");
+    const group = parts[0] ?? "";
+    if (group !== parentFolderName) {
+      result = { filename, group, kind: "non-group", subgroups: [], isCanonical: false };
+    } else {
+      const rest = parts.slice(1);
+      result = classifyRemainingSegments({ filename, group, rest });
+    }
+  }
+  return result;
+}
+function classifyRemainingSegments(config) {
+  const { filename, group, rest } = config;
+  let result;
+  const crudIdx = rest.indexOf("crud");
+  const scenarioIdx = rest.indexOf("scenario");
+  if (crudIdx === 0) {
+    if (rest.length === 1) {
+      result = { filename, group, kind: "crud", subgroups: [], isCanonical: true };
+    } else {
+      result = { filename, group, kind: "crud-subgroup", subgroups: rest.slice(1), isCanonical: true };
+    }
+  } else if (scenarioIdx === 0) {
+    if (rest.length === 1) {
+      result = { filename, group, kind: "scenario", subgroups: [], isCanonical: true };
+    } else {
+      result = { filename, group, kind: "scenario-subgroup", subgroups: rest.slice(1), isCanonical: true };
+    }
+  } else if (crudIdx > 0) {
+    const subgroups = rest.filter((_, i) => i !== crudIdx);
+    const recommendedRename = buildCanonicalFilename({ group, bucket: "crud", subgroups });
+    result = { filename, group, kind: "crud-misplaced", subgroups, isCanonical: false, recommendedRename, driftReason: "`crud` segment is not directly after the group name." };
+  } else if (scenarioIdx > 0) {
+    const subgroups = rest.filter((_, i) => i !== scenarioIdx);
+    const recommendedRename = buildCanonicalFilename({ group, bucket: "scenario", subgroups });
+    result = { filename, group, kind: "scenario-misplaced", subgroups, isCanonical: false, recommendedRename, driftReason: "`scenario` segment is not directly after the group name." };
+  } else if (rest.length === 0) {
+    const recommendedRename = buildCanonicalFilename({ group, bucket: "scenario", subgroups: [] });
+    result = { filename, group, kind: "no-bucket", subgroups: [], isCanonical: false, recommendedRename, driftReason: "Missing `crud` or `scenario` segment." };
+  } else {
+    const recommendedRename = buildCanonicalFilename({ group, bucket: "scenario", subgroups: rest });
+    result = { filename, group, kind: "no-bucket", subgroups: rest, isCanonical: false, recommendedRename, driftReason: "Missing `crud` or `scenario` segment \u2014 defaulting suggestion to `scenario`." };
+  }
+  return result;
+}
+function buildCanonicalFilename(config) {
+  const { group, bucket, subgroups } = config;
+  const tail = subgroups.length === 0 ? "" : `.${subgroups.join(".")}`;
+  return `${group}.${bucket}${tail}.spec.ts`;
+}
+function recommendSpecPath(config) {
+  const filename = buildCanonicalFilename({ group: config.group, bucket: config.bucket, subgroups: config.subgroups });
+  return `${config.apiDir}/src/app/function/${config.group}/${filename}`;
+}
+function recommendBucketsForGroup(config) {
+  const crudPath = recommendSpecPath({ apiDir: config.apiDir, group: config.group, bucket: "crud", subgroups: [] });
+  const scenarioPath = recommendSpecPath({ apiDir: config.apiDir, group: config.group, bucket: "scenario", subgroups: [] });
+  return [
+    {
+      bucket: "crud",
+      label: "CRUD",
+      canonicalPath: crudPath,
+      summary: "Non-scenario tests of the CRUD function map \u2014 create/read/update/delete + permission/error paths. Add focused buckets as `" + config.group + ".crud.<sub>.spec.ts`."
+    },
+    {
+      bucket: "scenario",
+      label: "Scenario",
+      canonicalPath: scenarioPath,
+      summary: "Multi-step scenarios using fixture chains (mirrors real workflows). Add focused buckets as `" + config.group + ".scenario.<sub>.spec.ts` (chain subgroups freely, e.g. `.scenario.requirement.worker.spec.ts`)."
+    }
+  ];
+}
+
 // packages/firebase/src/lib/common/auth/oidc/oidc.error.ts
 var CALL_MODEL_MISSING_OIDC_SCOPE_ERROR_CODE = "CALL_MODEL_MISSING_OIDC_SCOPE";
 
@@ -27671,6 +27754,7 @@ function extractCrudEntries(source) {
           description: readJsDocSummary(member),
           paramsTypeDescription: paramsDocs?.typeDescription,
           paramsFields: paramsDocs?.fields,
+          paramsHasApiParamsTag: paramsDocs?.hasApiParamsTag,
           resultTypeDescription: resultDocs?.typeDescription,
           resultFields: resultDocs?.fields
         });
@@ -27761,6 +27845,7 @@ function collectVerbEntries(input) {
         description: readJsDocSummary(specMember),
         paramsTypeDescription: paramsDocs2?.typeDescription,
         paramsFields: paramsDocs2?.fields,
+        paramsHasApiParamsTag: paramsDocs2?.hasApiParamsTag,
         resultTypeDescription: resultDocs2?.typeDescription,
         resultFields: resultDocs2?.fields
       });
@@ -27780,6 +27865,7 @@ function collectVerbEntries(input) {
     description: fallbackDescription,
     paramsTypeDescription: paramsDocs?.typeDescription,
     paramsFields: paramsDocs?.fields,
+    paramsHasApiParamsTag: paramsDocs?.hasApiParamsTag,
     resultTypeDescription: resultDocs?.typeDescription,
     resultFields: resultDocs?.fields
   });
@@ -27815,17 +27901,28 @@ function readTypeDocs(sourceFile, typeName) {
   const interfaceDecl = sourceFile.getInterface(typeName);
   if (interfaceDecl) {
     const typeDescription = readJsDocSummary(interfaceDecl);
+    const hasApiParamsTag = hasJsDocFlag(interfaceDecl, "dbxModelApiParams");
     const fields = [];
     for (const property of interfaceDecl.getProperties()) {
       const fieldName = property.getName();
       const description = readJsDocSummary(property);
       const typeNode = property.getTypeNode();
       const typeText = typeNode?.getText().trim() ?? "";
-      const field = description ? { name: fieldName, typeText, description } : { name: fieldName, typeText };
+      const adminOnly = hasJsDocFlag(property, "dbxModelApiAdminOnly");
+      const field = {
+        name: fieldName,
+        typeText,
+        ...description ? { description } : {},
+        ...adminOnly ? { accessLevel: "adminOnly" } : {}
+      };
       fields.push(field);
     }
-    if (typeDescription || fields.length > 0) {
-      result = { typeDescription, fields: fields.length > 0 ? fields : void 0 };
+    if (typeDescription || fields.length > 0 || hasApiParamsTag) {
+      result = {
+        ...typeDescription ? { typeDescription } : {},
+        ...fields.length > 0 ? { fields } : {},
+        hasApiParamsTag
+      };
     }
   } else {
     const typeAlias = sourceFile.getTypeAlias(typeName);
@@ -27838,6 +27935,17 @@ function readTypeDocs(sourceFile, typeName) {
   }
   return result;
 }
+function hasJsDocFlag(node, tagName) {
+  let result = false;
+  for (const doc of node.getJsDocs()) {
+    for (const tag of doc.getTags()) {
+      if (tag.getTagName() === tagName) {
+        result = true;
+      }
+    }
+  }
+  return result;
+}
 function readJsDocSummary(node) {
   let result;
   const docs = node.getJsDocs();
@@ -28313,6 +28421,7 @@ function mapEntry(entry, sourceFile, actionLookup) {
     sourceFile,
     paramsJsDoc: entry.paramsTypeDescription,
     paramsFields: mapDocFields(entry.paramsFields),
+    paramsApiParamsTag: entry.paramsHasApiParamsTag,
     resultJsDoc: entry.resultTypeDescription,
     resultFields: mapDocFields(entry.resultFields),
     action,
@@ -28320,14 +28429,13 @@ function mapEntry(entry, sourceFile, actionLookup) {
   };
 }
 function mapDocFields(fields) {
-  if (!fields) {
-    return [];
-  }
-  return fields.map((field) => ({
+  const result = fields ? fields.map((field) => ({
     name: field.name,
     typeText: field.typeText,
-    jsDoc: field.description
-  }));
+    jsDoc: field.description,
+    accessLevel: field.accessLevel ?? "public"
+  })) : [];
+  return result;
 }
 async function collectApiSources(componentAbs) {
   const root = join7(componentAbs, COMPONENT_LIB_SUBPATH);
@@ -28454,7 +28562,7 @@ function formatEntry2(entry) {
   const lines = [`## ${heading}`, ""];
   if (entry.description) lines.push(entry.description, "");
   lines.push(`- Wire key: \`${wireKey}\``, `- Params: ${paramsLabel}`, `- Result: ${resultLabel}`, `- Source: \`${entry.sourceFile}:${entry.line}\``, "");
-  appendFieldsSection({ lines, label: "Params", jsDoc: entry.paramsJsDoc, fields: entry.paramsFields });
+  appendFieldsSection({ lines, label: "Params", jsDoc: entry.paramsJsDoc, fields: entry.paramsFields, missingApiParamsTag: entry.paramsApiParamsTag === false });
   appendFieldsSection({ lines, label: "Result", jsDoc: entry.resultJsDoc, fields: entry.resultFields });
   appendActionMethodSection(lines, entry.action);
   appendActionFactorySection(lines, entry.factory);
@@ -28464,10 +28572,11 @@ function formatEntry2(entry) {
   return lines.join("\n").trimEnd();
 }
 function appendFieldsSection(input) {
-  const { lines, label, jsDoc, fields } = input;
-  if (!jsDoc && fields.length === 0) return;
+  const { lines, label, jsDoc, fields, missingApiParamsTag } = input;
+  if (!jsDoc && fields.length === 0 && !missingApiParamsTag) return;
   lines.push(`### ${label}`);
   if (jsDoc) lines.push("", jsDoc);
+  if (missingApiParamsTag) lines.push("", "_Missing `@dbxModelApiParams` marker on the params interface._");
   if (fields.length > 0) {
     lines.push("");
     for (const field of fields) lines.push(formatField(field));
@@ -28496,8 +28605,9 @@ function formatWireKey(entry) {
   return `${entry.verb}:${entry.specifier}`;
 }
 function formatField(field) {
+  const adminBadge = field.accessLevel === "adminOnly" ? " _(admin only)_" : "";
   const doc = field.jsDoc ? ` \u2014 ${field.jsDoc.split("\n")[0]}` : "";
-  return `- \`${field.name}: ${field.typeText}\`${doc}`;
+  return `- \`${field.name}: ${field.typeText}\`${adminBadge}${doc}`;
 }
 
 // packages/dbx-components-mcp/src/tools/model-api-lookup/index.ts
@@ -32590,89 +32700,6 @@ function parseDescribePath2(value) {
   return value.split(">").map((s) => s.trim().toLowerCase()).filter((s) => s.length > 0);
 }
 
-// packages/dbx-components-mcp/src/tools/model-test-shared/conventions.ts
-var CANONICAL_KINDS = ["crud", "crud-subgroup", "scenario", "scenario-subgroup"];
-var SPEC_SUFFIX = ".spec.ts";
-function classifySpecFile(config) {
-  const { filename, parentFolderName } = config;
-  let result;
-  if (!filename.endsWith(SPEC_SUFFIX)) {
-    result = { filename, group: "", kind: "non-spec", subgroups: [], isCanonical: false };
-  } else {
-    const stem = filename.slice(0, -SPEC_SUFFIX.length);
-    const parts = stem.split(".");
-    const group = parts[0] ?? "";
-    if (group !== parentFolderName) {
-      result = { filename, group, kind: "non-group", subgroups: [], isCanonical: false };
-    } else {
-      const rest = parts.slice(1);
-      result = classifyRemainingSegments({ filename, group, rest });
-    }
-  }
-  return result;
-}
-function classifyRemainingSegments(config) {
-  const { filename, group, rest } = config;
-  let result;
-  const crudIdx = rest.indexOf("crud");
-  const scenarioIdx = rest.indexOf("scenario");
-  if (crudIdx === 0) {
-    if (rest.length === 1) {
-      result = { filename, group, kind: "crud", subgroups: [], isCanonical: true };
-    } else {
-      result = { filename, group, kind: "crud-subgroup", subgroups: rest.slice(1), isCanonical: true };
-    }
-  } else if (scenarioIdx === 0) {
-    if (rest.length === 1) {
-      result = { filename, group, kind: "scenario", subgroups: [], isCanonical: true };
-    } else {
-      result = { filename, group, kind: "scenario-subgroup", subgroups: rest.slice(1), isCanonical: true };
-    }
-  } else if (crudIdx > 0) {
-    const subgroups = rest.filter((p, i) => i !== crudIdx);
-    const recommendedRename = buildCanonicalFilename({ group, bucket: "crud", subgroups });
-    result = { filename, group, kind: "crud-misplaced", subgroups, isCanonical: false, recommendedRename, driftReason: "`crud` segment is not directly after the group name." };
-  } else if (scenarioIdx > 0) {
-    const subgroups = rest.filter((p, i) => i !== scenarioIdx);
-    const recommendedRename = buildCanonicalFilename({ group, bucket: "scenario", subgroups });
-    result = { filename, group, kind: "scenario-misplaced", subgroups, isCanonical: false, recommendedRename, driftReason: "`scenario` segment is not directly after the group name." };
-  } else if (rest.length === 0) {
-    const recommendedRename = buildCanonicalFilename({ group, bucket: "scenario", subgroups: [] });
-    result = { filename, group, kind: "no-bucket", subgroups: [], isCanonical: false, recommendedRename, driftReason: "Missing `crud` or `scenario` segment." };
-  } else {
-    const recommendedRename = buildCanonicalFilename({ group, bucket: "scenario", subgroups: rest });
-    result = { filename, group, kind: "no-bucket", subgroups: rest, isCanonical: false, recommendedRename, driftReason: "Missing `crud` or `scenario` segment \u2014 defaulting suggestion to `scenario`." };
-  }
-  return result;
-}
-function buildCanonicalFilename(config) {
-  const { group, bucket, subgroups } = config;
-  const tail = subgroups.length === 0 ? "" : `.${subgroups.join(".")}`;
-  return `${group}.${bucket}${tail}.spec.ts`;
-}
-function recommendSpecPath(config) {
-  const filename = buildCanonicalFilename({ group: config.group, bucket: config.bucket, subgroups: config.subgroups });
-  return `${config.apiDir}/src/app/function/${config.group}/${filename}`;
-}
-function recommendBucketsForGroup(config) {
-  const crudPath = recommendSpecPath({ apiDir: config.apiDir, group: config.group, bucket: "crud", subgroups: [] });
-  const scenarioPath = recommendSpecPath({ apiDir: config.apiDir, group: config.group, bucket: "scenario", subgroups: [] });
-  return [
-    {
-      bucket: "crud",
-      label: "CRUD",
-      canonicalPath: crudPath,
-      summary: "Non-scenario tests of the CRUD function map \u2014 create/read/update/delete + permission/error paths. Add focused buckets as `" + config.group + ".crud.<sub>.spec.ts`."
-    },
-    {
-      bucket: "scenario",
-      label: "Scenario",
-      canonicalPath: scenarioPath,
-      summary: "Multi-step scenarios using fixture chains (mirrors real workflows). Add focused buckets as `" + config.group + ".scenario.<sub>.spec.ts` (chain subgroups freely, e.g. `.scenario.requirement.worker.spec.ts`)."
-    }
-  ];
-}
-
 // packages/dbx-components-mcp/src/tools/model-test-shared/discover.ts
 import { readdir as readdir7, stat as stat11 } from "node:fs/promises";
 import { join as join15, relative as relative13, sep as sep11 } from "node:path";

package/generated/dereekb-firebase-server.utils.mcp.generated.json

@@ -0,0 +1,272 @@
+{
+  "version": 1,
+  "source": "@dereekb/firebase-server",
+  "module": "@dereekb/firebase-server",
+  "generatedAt": "1970-01-01T00:00:00.000Z",
+  "generator": "@dereekb/dbx-components-mcp/scripts/generate-manifests.mjs",
+  "entries": [
+    {
+      "slug": "is-firebase-https-error",
+      "name": "isFirebaseHttpsError",
+      "kind": "function",
+      "category": "firebase-error",
+      "module": "@dereekb/firebase-server",
+      "subpath": "function/error",
+      "signature": "isFirebaseHttpsError(input: unknown | HttpsError): input is HttpsError",
+      "description": "Type guard for Firebase {@link HttpsError} instances.",
+      "params": [
+        {
+          "name": "input",
+          "type": "unknown | HttpsError",
+          "description": "- The value to check.",
+          "optional": false
+        }
+      ],
+      "returns": "`true` if the input is a Firebase {@link HttpsError }.",
+      "tags": [
+        "firebase",
+        "https",
+        "error",
+        "type-guard",
+        "server",
+        "callable",
+        "firebase-error",
+        "is",
+        "isfirebasehttpserror"
+      ],
+      "relatedSlugs": [
+        "is-firebase-error",
+        "firebase-server-error-info"
+      ]
+    },
+    {
+      "slug": "is-firebase-error",
+      "name": "isFirebaseError",
+      "kind": "function",
+      "category": "firebase-error",
+      "module": "@dereekb/firebase-server",
+      "subpath": "function/error",
+      "signature": "isFirebaseError(input: unknown | admin.FirebaseError): input is admin.FirebaseError",
+      "description": "Type guard for Firebase Admin {@link admin.FirebaseError} instances.",
+      "params": [
+        {
+          "name": "input",
+          "type": "unknown | admin.FirebaseError",
+          "description": "- The value to check.",
+          "optional": false
+        }
+      ],
+      "returns": "`true` if the input is a Firebase Admin {@link admin.FirebaseError }.",
+      "tags": [
+        "firebase",
+        "admin",
+        "error",
+        "type-guard",
+        "server",
+        "firebase-error",
+        "is",
+        "isfirebaseerror"
+      ],
+      "relatedSlugs": [
+        "is-firebase-https-error",
+        "firebase-server-error-info"
+      ]
+    },
+    {
+      "slug": "firebase-server-error-info",
+      "name": "firebaseServerErrorInfo",
+      "kind": "function",
+      "category": "firebase-error",
+      "module": "@dereekb/firebase-server",
+      "subpath": "function/error",
+      "signature": "firebaseServerErrorInfo(e: unknown): FirebaseServerErrorInfo",
+      "description": "Analyzes a caught error and extracts structured Firebase error information.\n\nClassifies the error as an {@link HttpsError}, {@link admin.FirebaseError}, or unknown,\nand extracts any embedded error codes and {@link ServerError} details.",
+      "params": [
+        {
+          "name": "e",
+          "type": "unknown",
+          "description": "- The caught error to analyze.",
+          "optional": false
+        }
+      ],
+      "returns": "Structured {@link FirebaseServerErrorInfo } with classified error details.",
+      "tags": [
+        "firebase",
+        "error",
+        "decode",
+        "analyze",
+        "https",
+        "admin",
+        "server",
+        "classify",
+        "server-error",
+        "firebase-error",
+        "info",
+        "firebaseservererrorinfo"
+      ],
+      "example": "try {\n  await someFirebaseOperation();\n} catch (e) {\n  const info = firebaseServerErrorInfo(e);\n  if (info.serverErrorCode === 'MODEL_NOT_AVAILABLE') { ... }\n}",
+      "relatedSlugs": [
+        "firebase-server-error-info-code-pair",
+        "firebase-server-error-info-server-error-pair",
+        "firebase-server-error-info-server-error-code-pair",
+        "is-firebase-https-error",
+        "is-firebase-error"
+      ]
+    },
+    {
+      "slug": "firebase-server-error-info-code-pair",
+      "name": "firebaseServerErrorInfoCodePair",
+      "kind": "function",
+      "category": "firebase-error",
+      "module": "@dereekb/firebase-server",
+      "subpath": "function/error",
+      "signature": "firebaseServerErrorInfoCodePair(e: unknown): [Maybe<FirebaseErrorCode>, FirebaseServerErrorInfo]",
+      "description": "Returns a tuple of [firebaseErrorCode, errorInfo] for pattern-matching on Firebase error codes.",
+      "params": [
+        {
+          "name": "e",
+          "type": "unknown",
+          "description": "- The caught error to analyze.",
+          "optional": false
+        }
+      ],
+      "returns": "A tuple of the Firebase error code (if present) and the full error info.",
+      "tags": [
+        "firebase",
+        "error",
+        "code",
+        "pair",
+        "tuple",
+        "pattern-match",
+        "decode",
+        "firebase-error",
+        "server",
+        "info",
+        "firebaseservererrorinfocodepair"
+      ],
+      "relatedSlugs": [
+        "firebase-server-error-info",
+        "firebase-server-error-info-server-error-pair",
+        "firebase-server-error-info-server-error-code-pair"
+      ]
+    },
+    {
+      "slug": "firebase-server-error-info-server-error-pair",
+      "name": "firebaseServerErrorInfoServerErrorPair",
+      "kind": "function",
+      "category": "firebase-error",
+      "module": "@dereekb/firebase-server",
+      "subpath": "function/error",
+      "signature": "firebaseServerErrorInfoServerErrorPair(e: unknown): [Maybe<ServerError>, FirebaseServerErrorInfo]",
+      "description": "Returns a tuple of [serverError, errorInfo] for pattern-matching on embedded server error details.",
+      "params": [
+        {
+          "name": "e",
+          "type": "unknown",
+          "description": "- The caught error to analyze.",
+          "optional": false
+        }
+      ],
+      "returns": "A tuple of the server error (if present) and the full error info.",
+      "tags": [
+        "firebase",
+        "error",
+        "server-error",
+        "pair",
+        "tuple",
+        "pattern-match",
+        "decode",
+        "details",
+        "firebase-error",
+        "server",
+        "info",
+        "firebaseservererrorinfoservererrorpair"
+      ],
+      "relatedSlugs": [
+        "firebase-server-error-info",
+        "firebase-server-error-info-code-pair",
+        "firebase-server-error-info-server-error-code-pair"
+      ]
+    },
+    {
+      "slug": "firebase-server-error-info-server-error-code-pair",
+      "name": "firebaseServerErrorInfoServerErrorCodePair",
+      "kind": "function",
+      "category": "firebase-error",
+      "module": "@dereekb/firebase-server",
+      "subpath": "function/error",
+      "signature": "firebaseServerErrorInfoServerErrorCodePair(e: unknown): [Maybe<StringErrorCode>, FirebaseServerErrorInfo]",
+      "description": "Returns a tuple of [serverErrorCode, errorInfo] for pattern-matching on server error string codes.",
+      "params": [
+        {
+          "name": "e",
+          "type": "unknown",
+          "description": "- The caught error to analyze.",
+          "optional": false
+        }
+      ],
+      "returns": "A tuple of the server error code (if present) and the full error info.",
+      "tags": [
+        "firebase",
+        "error",
+        "server-error",
+        "code",
+        "string-code",
+        "pair",
+        "tuple",
+        "pattern-match",
+        "decode",
+        "firebase-error",
+        "server",
+        "info",
+        "firebaseservererrorinfoservererrorcodepair"
+      ],
+      "relatedSlugs": [
+        "firebase-server-error-info",
+        "firebase-server-error-info-code-pair",
+        "firebase-server-error-info-server-error-pair"
+      ]
+    },
+    {
+      "slug": "handle-firebase-error",
+      "name": "handleFirebaseError",
+      "kind": "function",
+      "category": "firebase-error",
+      "module": "@dereekb/firebase-server",
+      "subpath": "function/error",
+      "signature": "handleFirebaseError(e: unknown, handleFirebaseErrorFn: ThrowErrorFunction<admin.FirebaseError>): never | void",
+      "description": "Handles a caught error if it is a Firebase Admin error, passing it to the given handler function.\n\nIf the error is not a Firebase error (no `code` property), this is a no-op.",
+      "params": [
+        {
+          "name": "e",
+          "type": "unknown",
+          "description": "- The caught error.",
+          "optional": false
+        },
+        {
+          "name": "handleFirebaseErrorFn",
+          "type": "ThrowErrorFunction<admin.FirebaseError>",
+          "description": "- Handler that receives the typed {@link admin.FirebaseError }.",
+          "optional": false
+        }
+      ],
+      "returns": "never | void",
+      "tags": [
+        "firebase",
+        "admin",
+        "error",
+        "handler",
+        "catch",
+        "conditional",
+        "rethrow",
+        "firebase-error",
+        "handle",
+        "handlefirebaseerror"
+      ],
+      "relatedSlugs": [
+        "is-firebase-error",
+        "firebase-server-error-info"
+      ]
+    }
+  ]
+}

package/generated/dereekb-firebase.semantic-types.mcp.generated.json

@@ -89,6 +89,20 @@
       ],
       "notes": "A string key used to test for ownership of a particular set of objects.\n\nFor instance, a database model (or its parent) may have an ownership key associated with it that is compared with the user's current claims."
     },
+    {
+      "name": "FirebaseAuthOobCode",
+      "package": "@dereekb/firebase",
+      "module": "src/lib/common/auth/auth",
+      "kind": "semantic-type",
+      "definition": "string",
+      "baseType": "string",
+      "topics": [
+        "identifier",
+        "string",
+        "dereekb-firebase:auth"
+      ],
+      "notes": "Out-of-band (oob) code returned by Firebase Auth flows such as password reset and email verification.\n\nForwarded back to Firebase (e.g. via `confirmPasswordReset`) to complete the flow."
+    },
     {
       "name": "DevelopmentFirebaseFunctionSpecifier",
       "package": "@dereekb/firebase",

package/generated/dereekb-firebase.utils.mcp.generated.json

@@ -5,6 +5,264 @@
   "generatedAt": "1970-01-01T00:00:00.000Z",
   "generator": "@dereekb/dbx-components-mcp/scripts/generate-manifests.mjs",
   "entries": [
+    {
+      "slug": "is-client-firebase-error",
+      "name": "isClientFirebaseError",
+      "kind": "function",
+      "category": "firebase-error",
+      "module": "@dereekb/firebase",
+      "subpath": "client/error/error",
+      "signature": "isClientFirebaseError(error: unknown): error is FirebaseError",
+      "description": "Type guard that checks whether an error is a client-side {@link FirebaseError} from the `firebase/app` package.\n\nDistinguishes client Firebase errors from server-side errors or generic errors by checking\nfor the `FirebaseError` name and a string `code` property. Used by {@link convertHttpsCallableErrorToReadableError}\nto determine the appropriate error wrapping strategy.",
+      "params": [
+        {
+          "name": "error",
+          "type": "unknown",
+          "description": "- The value to check.",
+          "optional": false
+        }
+      ],
+      "returns": "`true` if the input matches the shape of a client-side `FirebaseError`",
+      "tags": [
+        "firebase",
+        "client",
+        "error",
+        "type-guard",
+        "callable",
+        "firebase-error",
+        "is",
+        "isclientfirebaseerror"
+      ],
+      "example": "try {\n  await someFirebaseOperation();\n} catch (e) {\n  if (isClientFirebaseError(e)) {\n    console.log(e.code); // e.g., 'auth/user-not-found'\n  }\n}",
+      "relatedSlugs": [
+        "convert-https-callable-error-to-readable-error",
+        "firebase-server-error"
+      ]
+    },
+    {
+      "slug": "firebase-server-error",
+      "name": "FirebaseServerError",
+      "kind": "class",
+      "category": "firebase-error",
+      "module": "@dereekb/firebase",
+      "subpath": "client/function/error",
+      "signature": "class FirebaseServerError",
+      "description": "Client-side representation of an error originating from a Firebase Cloud Function.\n\nWraps a {@link FirebaseError} with structured server error details (status, message, code)\nextracted from the error's `details` property. Extends {@link ServerErrorResponse} for\nconsistent error handling across the application.\n\nTypically created via {@link convertHttpsCallableErrorToReadableError} when an `HttpsCallable`\ninvocation fails with a server-side error that includes structured details.",
+      "params": [
+        {
+          "name": "firebaseError",
+          "type": "FirebaseError",
+          "description": "",
+          "optional": false
+        },
+        {
+          "name": "serverError",
+          "type": "ServerError<T>",
+          "description": "",
+          "optional": false
+        }
+      ],
+      "returns": "FirebaseServerError",
+      "tags": [
+        "firebase",
+        "https",
+        "callable",
+        "error",
+        "server-error",
+        "client",
+        "response",
+        "details",
+        "firebase-error",
+        "server",
+        "firebaseservererror"
+      ],
+      "example": "try {\n  await callableFunction(data);\n} catch (e) {\n  if (e instanceof FirebaseServerError) {\n    console.log(e.code, e.message, e.firebaseError.code);\n  }\n}",
+      "relatedSlugs": [
+        "convert-https-callable-error-to-readable-error",
+        "is-client-firebase-error"
+      ]
+    },
+    {
+      "slug": "convert-https-callable-error-to-readable-error",
+      "name": "convertHttpsCallableErrorToReadableError",
+      "kind": "function",
+      "category": "firebase-error",
+      "module": "@dereekb/firebase",
+      "subpath": "client/function/function.callable",
+      "signature": "convertHttpsCallableErrorToReadableError(error: unknown): unknown",
+      "description": "Converts errors from `HttpsCallable` calls into more readable error types.\n\nIf the error is a client-side {@link FirebaseError} with `details`, wraps it as a {@link FirebaseServerError}\nto preserve server-side error context. Otherwise, converts it to a generic readable error via `toReadableError`.",
+      "params": [
+        {
+          "name": "error",
+          "type": "unknown",
+          "description": "- The caught error from an `HttpsCallable` invocation.",
+          "optional": false
+        }
+      ],
+      "returns": "A {@link FirebaseServerError } if the error has structured details, or a generic readable error otherwise.",
+      "tags": [
+        "firebase",
+        "https",
+        "callable",
+        "error",
+        "decode",
+        "convert",
+        "readable",
+        "client",
+        "server",
+        "firebase-error",
+        "to",
+        "converthttpscallableerrortoreadableerror"
+      ],
+      "relatedSlugs": [
+        "firebase-server-error",
+        "is-client-firebase-error",
+        "firebase-auth-error-to-readable-error"
+      ]
+    },
+    {
+      "slug": "firebase-auth-error-to-readable-error",
+      "name": "firebaseAuthErrorToReadableError",
+      "kind": "function",
+      "category": "firebase-auth",
+      "module": "@dereekb/firebase",
+      "subpath": "common/auth/auth.error",
+      "signature": "firebaseAuthErrorToReadableError(inputError: FirebaseAuthError): ReadableError",
+      "description": "Converts a {@link FirebaseAuthError} into a user-friendly {@link ReadableError} with a human-readable message.\n\nMaps known error codes (wrong password, user not found, network errors) to contextual messages\nsuitable for display in the UI.",
+      "params": [
+        {
+          "name": "inputError",
+          "type": "FirebaseAuthError",
+          "description": "- The Firebase Auth error to convert.",
+          "optional": false
+        }
+      ],
+      "returns": "A {@link ReadableError } with a human-readable message suitable for display.",
+      "tags": [
+        "firebase",
+        "auth",
+        "error",
+        "readable",
+        "convert",
+        "decode",
+        "message",
+        "login",
+        "signin",
+        "firebase-auth",
+        "to",
+        "firebaseautherrortoreadableerror"
+      ],
+      "example": "try {\n  await signIn(email, password);\n} catch (e) {\n  const readable = firebaseAuthErrorToReadableError(e as FirebaseAuthError);\n  showToast(readable.message);\n}",
+      "relatedSlugs": [
+        "convert-https-callable-error-to-readable-error",
+        "firebase-server-error"
+      ]
+    },
+    {
+      "slug": "firebase-auth-oob-code-data-pair-delimiter",
+      "name": "FIREBASE_AUTH_OOB_CODE_DATA_PAIR_DELIMITER",
+      "kind": "const",
+      "category": "firebase-auth",
+      "module": "@dereekb/firebase",
+      "subpath": "common/auth/auth",
+      "signature": "const FIREBASE_AUTH_OOB_CODE_DATA_PAIR_DELIMITER: \"-\"",
+      "description": "Delimiter used when encoding a {@link FirebaseAuthOobCodeDataPair} into a {@link FirebaseAuthOobCode}.\n\nThe encoded form is `${code}-${uid}` and splitting happens on the first delimiter occurrence,\nso this only requires that the generated code/password not contain `-`. The uid is unrestricted\nand may itself contain `-`.",
+      "params": [],
+      "returns": "\"-\"",
+      "tags": [
+        "firebase",
+        "auth",
+        "oob",
+        "code",
+        "delimiter",
+        "constant",
+        "firebase-auth",
+        "data",
+        "pair",
+        "firebase_auth_oob_code_data_pair_delimiter"
+      ],
+      "relatedSlugs": [
+        "encode-firebase-auth-oob-code",
+        "decode-firebase-auth-oob-code"
+      ]
+    },
+    {
+      "slug": "encode-firebase-auth-oob-code",
+      "name": "encodeFirebaseAuthOobCode",
+      "kind": "function",
+      "category": "firebase-auth",
+      "module": "@dereekb/firebase",
+      "subpath": "common/auth/auth",
+      "signature": "encodeFirebaseAuthOobCode(pair: FirebaseAuthOobCodeDataPair): FirebaseAuthOobCode",
+      "description": "Encodes a {@link FirebaseAuthOobCodeDataPair} into a URL-safe {@link FirebaseAuthOobCode}.\n\nThe encoded form is `${code}-${uid}` — code first so that splitting on the first delimiter\nstill works even when the uid itself contains `-` (Firebase uids occasionally do).",
+      "params": [
+        {
+          "name": "pair",
+          "type": "FirebaseAuthOobCodeDataPair",
+          "description": "",
+          "optional": false
+        }
+      ],
+      "returns": "FirebaseAuthOobCode",
+      "tags": [
+        "firebase",
+        "auth",
+        "oob",
+        "code",
+        "encode",
+        "uid",
+        "password",
+        "reset",
+        "setup",
+        "serialize",
+        "firebase-auth",
+        "encodefirebaseauthoobcode"
+      ],
+      "example": "encodeFirebaseAuthOobCode({ uid: 'abc-123', code: 'xyz789' });  // 'xyz789-abc-123'",
+      "relatedSlugs": [
+        "decode-firebase-auth-oob-code",
+        "firebase-auth-oob-code-data-pair-delimiter"
+      ]
+    },
+    {
+      "slug": "decode-firebase-auth-oob-code",
+      "name": "decodeFirebaseAuthOobCode",
+      "kind": "function",
+      "category": "firebase-auth",
+      "module": "@dereekb/firebase",
+      "subpath": "common/auth/auth",
+      "signature": "decodeFirebaseAuthOobCode(oobCode: FirebaseAuthOobCode): Maybe<FirebaseAuthOobCodeDataPair>",
+      "description": "Decodes a {@link FirebaseAuthOobCode} back into its {@link FirebaseAuthOobCodeDataPair}.\n\nSplits on the first `-` so uids containing additional `-` characters survive the round-trip\nintact. Returns null when the input is missing the delimiter or has empty parts.",
+      "params": [
+        {
+          "name": "oobCode",
+          "type": "FirebaseAuthOobCode",
+          "description": "",
+          "optional": false
+        }
+      ],
+      "returns": "Maybe<FirebaseAuthOobCodeDataPair>",
+      "tags": [
+        "firebase",
+        "auth",
+        "oob",
+        "code",
+        "decode",
+        "parse",
+        "uid",
+        "password",
+        "reset",
+        "setup",
+        "deserialize",
+        "firebase-auth",
+        "decodefirebaseauthoobcode"
+      ],
+      "example": "decodeFirebaseAuthOobCode('xyz789-abc-123');  // { uid: 'abc-123', code: 'xyz789' }\ndecodeFirebaseAuthOobCode('invalid');         // null",
+      "relatedSlugs": [
+        "encode-firebase-auth-oob-code",
+        "firebase-auth-oob-code-data-pair-delimiter"
+      ]
+    },
     {
       "slug": "new-documents",
       "name": "newDocuments",

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@dereekb/dbx-components-mcp",
-  "version": "13.12.3",
+  "version": "13.12.5",
   "type": "module",
   "bin": {
     "dbx-components-mcp": "dbx-components-mcp.js"
@@ -15,19 +15,19 @@
     "@angular/core": "21.2.11",
     "@angular/forms": "21.2.11",
     "@angular/material": "^21.2.9",
-    "@dereekb/dbx-cli": "13.12.3",
-    "@dereekb/dbx-core": "13.12.3",
-    "@dereekb/dbx-firebase": "13.12.3",
-    "@dereekb/dbx-form": "13.12.3",
-    "@dereekb/dbx-web": "13.12.3",
-    "@dereekb/firebase": "13.12.3",
-    "@dereekb/firebase-server": "13.12.3",
-    "@dereekb/rxjs": "13.12.3",
-    "@dereekb/util": "13.12.3",
+    "@dereekb/dbx-cli": "13.12.5",
+    "@dereekb/dbx-core": "13.12.5",
+    "@dereekb/dbx-firebase": "13.12.5",
+    "@dereekb/dbx-form": "13.12.5",
+    "@dereekb/dbx-web": "13.12.5",
+    "@dereekb/firebase": "13.12.5",
+    "@dereekb/firebase-server": "13.12.5",
+    "@dereekb/rxjs": "13.12.5",
+    "@dereekb/util": "13.12.5",
     "@uirouter/angular": "21.0.0",
     "rxjs": "^7.8.2"
   },
   "devDependencies": {
-    "@dereekb/model": "13.12.3"
+    "@dereekb/model": "13.12.5"
   }
 }