@dereekb/firebase-server 12.6.21 → 13.0.0

package/index.esm.js

@@ -0,0 +1,2775 @@
+import { DBX_FIREBASE_SERVER_NO_AUTH_ERROR_CODE, FIREBASE_AUTH_USER_NOT_FOUND_ERROR, FIREBASE_SERVER_AUTH_CLAIMS_RESET_LAST_COM_DATE_KEY, FIREBASE_SERVER_AUTH_CLAIMS_RESET_PASSWORD_KEY, FIREBASE_SERVER_AUTH_CLAIMS_SETUP_PASSWORD_KEY, FIREBASE_SERVER_AUTH_CLAIMS_SETUP_LAST_COM_DATE_KEY, FirestoreDocumentContextType, streamFromOnSnapshot, makeFirestoreQueryConstraintFunctionsDriver, FIRESTORE_END_BEFORE_QUERY_CONSTRAINT_TYPE, FIRESTORE_END_AT_VALUE_QUERY_CONSTRAINT_TYPE, FIRESTORE_END_AT_QUERY_CONSTRAINT_TYPE, FIRESTORE_START_AFTER_QUERY_CONSTRAINT_TYPE, FIRESTORE_START_AT_VALUE_QUERY_CONSTRAINT_TYPE, FIRESTORE_START_AT_QUERY_CONSTRAINT_TYPE, FIRESTORE_OFFSET_QUERY_CONSTRAINT_TYPE, FIRESTORE_WHERE_DOCUMENT_ID_QUERY_CONSTRAINT_TYPE, FIRESTORE_WHERE_QUERY_CONSTRAINT_TYPE, FIRESTORE_ORDER_BY_DOCUMENT_ID_QUERY_CONSTRAINT_TYPE, FIRESTORE_ORDER_BY_QUERY_CONSTRAINT_TYPE, FIRESTORE_LIMIT_TO_LAST_QUERY_CONSTRAINT_TYPE, FIRESTORE_LIMIT_QUERY_CONSTRAINT_TYPE, firestoreContextFactory, setIdAndKeyFromKeyIdRefOnDocumentData, SCHEDULED_FUNCTION_DEV_FUNCTION_SPECIFIER, MODEL_FUNCTION_FIREBASE_CRUD_FUNCTION_SPECIFIER_DEFAULT, storageListFilesResultFactory, assertStorageUploadOptionsStringFormat, firebaseStorageContextFactory, inContextFirebaseModelsServiceFactory, useFirebaseModelsService } from '@dereekb/firebase';
+import { partialServerError, isServerError, randomNumberFactory, cachedGetter, AUTH_ADMIN_ROLE, AUTH_TOS_SIGNED_ROLE, forEachKeyValue, KeyValueTypleValueFilter, filterNullAndUndefinedValues, asSet, filterUndefinedValues, isThrottled, mapObjectMap, batch, asArray, containsAllValues, serverError, mergeObjects, cronExpressionRepeatingEveryNMinutes, mapIdentityFunction, objectToMap, slashPathName, SLASH_PATH_SEPARATOR, toRelativeSlashPathStartType, fixMultiSlashesInSlashPath, objectHasNoKeys, makeGetter, asGetter, pushItemOrArrayItemsIntoArray, build } from '@dereekb/util';
+import { HttpsError } from 'firebase-functions/https';
+import { hoursToMs, toISODateString } from '@dereekb/date';
+import { BaseError } from 'make-error';
+import 'core-js/modules/es.iterator.constructor.js';
+import 'core-js/modules/es.iterator.for-each.js';
+import { from } from 'rxjs';
+import { FieldValue, FieldPath } from '@google-cloud/firestore';
+import { Module, Injectable, ValidationPipe, Optional, Inject, Logger, ForbiddenException, createParamDecorator } from '@nestjs/common';
+import { mergeModuleMetadata, ServerEnvironmentService, DEFAULT_BASE_WEBHOOK_PATH, DEFAULT_WEBHOOK_MIDDLEWARE_ROUTE_INFO, isTestNodeEnv, injectionTokensFromProviders, serverEnvTokenProvider } from '@dereekb/nestjs';
+import { https, scheduler } from 'firebase-functions/v2';
+import { toTransformAndValidateFunctionResultFactory, transformAndValidateObjectFactory } from '@dereekb/model';
+import admin from 'firebase-admin';
+import 'core-js/modules/es.iterator.map.js';
+import { ApiError } from '@google-cloud/storage';
+import { addMilliseconds, addHours } from 'date-fns';
+import { isUint8Array, isArrayBuffer } from 'util/types';
+import 'core-js/modules/es.map.get-or-insert.js';
+import 'core-js/modules/es.map.get-or-insert-computed.js';
+import { NestFactory } from '@nestjs/core';
+import { ExpressAdapter } from '@nestjs/platform-express';
+import express from 'express';
+
+/**
+ * @deprecated use DBX_FIREBASE_SERVER_NO_AUTH_ERROR_CODE instead
+ */
+const NO_AUTH_ERROR_CODE = DBX_FIREBASE_SERVER_NO_AUTH_ERROR_CODE;
+function unauthenticatedContextHasNoAuthData() {
+  return unauthenticatedError({
+    message: 'expected auth',
+    code: NO_AUTH_ERROR_CODE
+  });
+}
+/**
+ * @deprecated use DBX_FIREBASE_SERVER_NO_UID_ERROR_CODE instead
+ */
+const NO_UID_ERROR_CODE = DBX_FIREBASE_SERVER_NO_AUTH_ERROR_CODE;
+function unauthenticatedContextHasNoUidError() {
+  return unauthenticatedError({
+    message: 'no user uid',
+    code: NO_UID_ERROR_CODE
+  });
+}
+// MARK: General Errors
+const UNAUTHENTICATED_ERROR_CODE = 'UNAUTHENTICATED';
+function unauthenticatedError(messageOrError) {
+  const serverError = partialServerError(messageOrError);
+  return new HttpsError('unauthenticated', serverError?.message || 'unauthenticated', {
+    status: 401,
+    code: UNAUTHENTICATED_ERROR_CODE,
+    ...serverError,
+    _error: undefined
+  });
+}
+const FORBIDDEN_ERROR_CODE = 'FORBIDDEN';
+function forbiddenError(messageOrError) {
+  const serverError = partialServerError(messageOrError);
+  return new HttpsError('permission-denied', serverError?.message || 'forbidden', {
+    status: 403,
+    code: FORBIDDEN_ERROR_CODE,
+    ...serverError,
+    _error: undefined
+  });
+}
+const PERMISSION_DENIED_ERROR_CODE = 'PERMISSION_DENIED';
+function permissionDeniedError(messageOrError) {
+  const serverError = partialServerError(messageOrError);
+  return new HttpsError('permission-denied', serverError?.message || 'permission denied', {
+    status: 403,
+    code: PERMISSION_DENIED_ERROR_CODE,
+    ...serverError,
+    _error: undefined
+  });
+}
+const NOT_FOUND_ERROR_CODE = 'NOT_FOUND';
+function notFoundError(messageOrError) {
+  const serverError = partialServerError(messageOrError);
+  return new HttpsError('not-found', serverError?.message || 'not found', {
+    status: 404,
+    code: NOT_FOUND_ERROR_CODE,
+    ...serverError,
+    _error: undefined
+  });
+}
+const MODEL_NOT_AVAILABLE_ERROR_CODE = 'MODEL_NOT_AVAILABLE';
+function modelNotAvailableError(messageOrError) {
+  const serverError = partialServerError(messageOrError);
+  return new HttpsError('not-found', serverError?.message || 'model was not available', {
+    status: 404,
+    code: MODEL_NOT_AVAILABLE_ERROR_CODE,
+    ...serverError,
+    _error: undefined
+  });
+}
+const BAD_REQUEST_ERROR_CODE = 'BAD_REQUEST';
+function badRequestError(messageOrError) {
+  const serverError = partialServerError(messageOrError);
+  return new HttpsError('invalid-argument', serverError?.message || 'bad request', {
+    status: 400,
+    code: BAD_REQUEST_ERROR_CODE,
+    ...serverError,
+    _error: undefined
+  });
+}
+const CONFLICT_ERROR_CODE = 'CONFLICT';
+function preconditionConflictError(messageOrError) {
+  const serverError = partialServerError(messageOrError);
+  return new HttpsError('failed-precondition', serverError?.message || 'conflict', {
+    status: 409,
+    code: CONFLICT_ERROR_CODE,
+    ...serverError,
+    _error: undefined
+  });
+}
+const ALREADY_EXISTS_ERROR_CODE = 'ALREADY_EXISTS';
+function alreadyExistsError(messageOrError) {
+  const serverError = partialServerError(messageOrError);
+  return new HttpsError('already-exists', serverError?.message || 'already exists', {
+    status: 409,
+    code: ALREADY_EXISTS_ERROR_CODE,
+    ...serverError,
+    _error: undefined
+  });
+}
+const UNAVAILABLE_ERROR_CODE = 'UNAVAILABLE';
+function unavailableError(messageOrError) {
+  const serverError = partialServerError(messageOrError);
+  return new HttpsError('unavailable', serverError?.message || 'service unavailable', {
+    status: 503,
+    code: UNAVAILABLE_ERROR_CODE,
+    ...serverError,
+    _error: undefined
+  });
+}
+const UNAVAILABLE_OR_DEACTIVATED_FUNCTION_ERROR_CODE = 'UNAVAILABLE_OR_DEACTIVATED_FUNCTION';
+function unavailableOrDeactivatedFunctionError(messageOrError) {
+  const serverError = partialServerError(messageOrError);
+  return new HttpsError('unimplemented', serverError?.message || 'the requested function is not available or has been deactivated for use', {
+    status: 501,
+    code: UNAVAILABLE_OR_DEACTIVATED_FUNCTION_ERROR_CODE,
+    ...serverError,
+    _error: undefined
+  });
+}
+const INTERNAL_SERVER_ERROR_CODE = 'INTERNAL_ERROR';
+function internalServerError(messageOrError) {
+  const serverError = partialServerError(messageOrError);
+  return new HttpsError('internal', serverError?.message || 'internal error', {
+    status: 500,
+    code: INTERNAL_SERVER_ERROR_CODE,
+    ...serverError,
+    _error: undefined
+  });
+}
+function isFirebaseHttpsError(input) {
+  return typeof input === 'object' && input.code != null && input.httpErrorCode != null && input.toJSON != null;
+}
+function isFirebaseError(input) {
+  return typeof input === 'object' && input.code != null && input.message != null && input.toJSON != null;
+}
+/**
+ * Creates a FirebaseServerErrorInfo from the input.
+ *
+ * @param e
+ * @returns
+ */
+function firebaseServerErrorInfo(e) {
+  let type = 'unknown';
+  let httpsError;
+  let firebaseError;
+  let firebaseErrorCode;
+  let httpsErrorDetailsServerError;
+  let serverErrorCode;
+  if (e != null) {
+    if (isFirebaseHttpsError(e)) {
+      type = 'httpsError';
+      httpsError = e;
+      firebaseErrorCode = httpsError.code;
+      if (httpsError.details && isServerError(httpsError.details)) {
+        httpsErrorDetailsServerError = httpsError.details;
+        serverErrorCode = httpsErrorDetailsServerError.code;
+      }
+    } else if (isFirebaseError(e)) {
+      type = 'firebaseError';
+      firebaseError = e;
+      firebaseErrorCode = firebaseError.code;
+    }
+  }
+  return {
+    httpsError,
+    firebaseError,
+    firebaseErrorCode,
+    httpsErrorDetailsServerError,
+    serverErrorCode,
+    type,
+    e
+  };
+}
+function firebaseServerErrorInfoCodePair(e) {
+  const info = firebaseServerErrorInfo(e);
+  return [info.firebaseErrorCode, info];
+}
+function firebaseServerErrorInfoServerErrorPair(e) {
+  const info = firebaseServerErrorInfo(e);
+  return [info.httpsErrorDetailsServerError, info];
+}
+function firebaseServerErrorInfoServerErrorCodePair(e) {
+  const info = firebaseServerErrorInfo(e);
+  return [info.serverErrorCode, info];
+}
+function handleFirebaseError(e, handleFirebaseErrorFn) {
+  const firebaseError = e.code ? e : undefined;
+  if (firebaseError) {
+    handleFirebaseErrorFn(firebaseError);
+  }
+}
+
+function isContextWithAuthData(context) {
+  return Boolean(context.auth !== null && context.auth?.uid);
+}
+function assertIsContextWithAuthData(context) {
+  if (!isContextWithAuthData(context)) {
+    throw unauthenticatedContextHasNoAuthData();
+  }
+}
+
+function firebaseAuthTokenFromDecodedIdToken(token) {
+  return {
+    email: token.email,
+    emailVerified: token.email_verified,
+    phoneNumber: token.phone_number,
+    lastSignInTime: new Date(token.auth_time).toISOString(),
+    lastRefreshTime: new Date(token.iat).toISOString()
+  };
+}
+
+/**
+ * Awaits the load result from the input promise. If it encounters a FIREBASE_AUTH_USER_NOT_FOUND_ERROR, then returns undefined. Throws the error otherwise.
+ * @param promise
+ * @returns
+ */
+async function getAuthUserOrUndefined(promise) {
+  try {
+    return await promise;
+  } catch (error) {
+    if (error?.code === FIREBASE_AUTH_USER_NOT_FOUND_ERROR) {
+      return undefined;
+    } else {
+      throw error;
+    }
+  }
+}
+
+/**
+ * Thrown by sendSetupDetails() if the user has no setup configuration available, meaning they probably already have accepted their invite or is in an invalid state.
+ */
+class FirebaseServerAuthNewUserSendSetupDetailsNoSetupConfigError extends BaseError {
+  constructor() {
+    super(`This user has no setup configuration available.`);
+  }
+}
+/**
+ * Thrown by sendSetupDetails() if the user was recently sent details.
+ */
+class FirebaseServerAuthNewUserSendSetupDetailsThrottleError extends BaseError {
+  constructor(lastSentAt) {
+    super(`This user was recently sent details. Try again later.`);
+    this.lastSentAt = void 0;
+    this.lastSentAt = lastSentAt;
+  }
+}
+/**
+ * Thrown by sendSetupDetails() if the user was recently sent details.
+ */
+class FirebaseServerAuthNewUserSendSetupDetailsSendOnceError extends BaseError {
+  constructor() {
+    super(`The user has been sent details before and the sendSetupDetailsOnce configuration was true.`);
+  }
+}
+
+const DEFAULT_FIREBASE_PASSWORD_NUMBER_GENERATOR = randomNumberFactory({
+  min: 100000,
+  max: 1000000,
+  round: 'floor'
+}); // 6 digits
+class AbstractFirebaseServerAuthUserContext {
+  constructor(service, uid) {
+    this._service = void 0;
+    this._uid = void 0;
+    this._loadRecord = cachedGetter(() => this._service.auth.getUser(this._uid));
+    this._service = service;
+    this._uid = uid;
+  }
+  get service() {
+    return this._service;
+  }
+  get uid() {
+    return this._uid;
+  }
+  async exists() {
+    return getAuthUserOrUndefined(this._loadRecord()).then(x => Boolean(x));
+  }
+  loadRecord() {
+    return this._loadRecord();
+  }
+  loadDetails() {
+    return this.loadRecord().then(record => this.service.authDetailsForRecord(record));
+  }
+  _generateResetPasswordKey() {
+    return String(DEFAULT_FIREBASE_PASSWORD_NUMBER_GENERATOR());
+  }
+  async beginResetPassword() {
+    const password = this._generateResetPasswordKey();
+    const passwordClaimsData = {
+      [FIREBASE_SERVER_AUTH_CLAIMS_RESET_PASSWORD_KEY]: password,
+      [FIREBASE_SERVER_AUTH_CLAIMS_RESET_LAST_COM_DATE_KEY]: toISODateString(new Date())
+    };
+    // set the claims
+    await this.updateClaims(passwordClaimsData);
+    // update the user
+    await this.updateUser({
+      password
+    });
+    return passwordClaimsData;
+  }
+  async loadResetPasswordClaims() {
+    const claims = await this.loadClaims();
+    if (claims.resetPassword != null) {
+      return claims;
+    } else {
+      return undefined;
+    }
+  }
+  /**
+   * Sets the user's password.
+   */
+  async setPassword(password) {
+    const record = await this.updateUser({
+      password
+    });
+    // clear password reset claims
+    await this.updateClaims({
+      [FIREBASE_SERVER_AUTH_CLAIMS_RESET_PASSWORD_KEY]: null,
+      [FIREBASE_SERVER_AUTH_CLAIMS_RESET_LAST_COM_DATE_KEY]: null
+    });
+    return record;
+  }
+  async updateUser(template) {
+    return this.service.auth.updateUser(this.uid, template);
+  }
+  async loadRoles() {
+    const claims = await this.loadClaims();
+    return this.service.readRoles(claims);
+  }
+  async addRoles(roles) {
+    const claims = this._claimsForRolesChange(roles);
+    return this.updateClaims(claims);
+  }
+  async removeRoles(roles) {
+    const baseClaims = this._claimsForRolesChange(roles);
+    const claims = {};
+    forEachKeyValue(baseClaims, {
+      forEach: ([key]) => {
+        claims[key] = null; // set null on every key
+      },
+      filter: KeyValueTypleValueFilter.NONE // don't skip any key/value
+    });
+    return this.updateClaims(claims);
+  }
+  /**
+   * Sets the claims using the input roles and roles set.
+   *
+   * All other claims are cleared.
+   *
+   * Use the claimsToRetain input to retain other claims that are outside of the roles.
+   *
+   * @param roles
+   * @param claimsToRetain
+   * @returns
+   */
+  async setRoles(roles, claimsToRetain) {
+    const claims = {
+      ...claimsToRetain,
+      ...this._claimsForRolesChange(Array.from(roles))
+    };
+    return this.setClaims(claims);
+  }
+  _claimsForRolesChange(roles) {
+    // filter null/undefined since the claims will contain null values for claims that are not related.
+    return filterNullAndUndefinedValues(this.service.claimsForRoles(asSet(roles)));
+  }
+  loadClaims() {
+    return this.loadRecord().then(x => x.customClaims ?? {});
+  }
+  async updateClaims(claims) {
+    const currentClaims = await this.loadClaims();
+    let newClaims;
+    if (currentClaims) {
+      newClaims = {
+        ...currentClaims,
+        ...filterUndefinedValues(claims, false)
+      };
+      newClaims = filterNullAndUndefinedValues(newClaims);
+    } else {
+      newClaims = claims;
+    }
+    return this.setClaims(newClaims);
+  }
+  clearClaims() {
+    return this.setClaims(null);
+  }
+  setClaims(claims) {
+    return this.service.auth.setCustomUserClaims(this.uid, claims).then(() => {
+      this._loadRecord.reset(); // reset the cache
+    });
+  }
+}
+class AbstractFirebaseServerAuthContext {
+  constructor(service, context) {
+    this._service = void 0;
+    this._context = void 0;
+    this._authRoles = cachedGetter(() => this.service.readRoles(this.claims));
+    this._isAdmin = cachedGetter(() => this.service.isAdminInRoles(this._authRoles()));
+    this._hasSignedTos = cachedGetter(() => this.service.hasSignedTosInRoles(this._authRoles()));
+    this._userContext = cachedGetter(() => this.service.userContext(this.context.auth.uid));
+    this._service = service;
+    this._context = context;
+  }
+  get service() {
+    return this._service;
+  }
+  get context() {
+    return this._context;
+  }
+  get userContext() {
+    return this._userContext();
+  }
+  get isAdmin() {
+    return this._isAdmin();
+  }
+  get hasSignedTos() {
+    return this._hasSignedTos();
+  }
+  get authRoles() {
+    return this._authRoles();
+  }
+  get token() {
+    return this.context.auth.token;
+  }
+  get claims() {
+    return this.context.auth.token;
+  }
+  // MARK: FirebaseServerAuthUserContext
+  get uid() {
+    return this.userContext.uid;
+  }
+}
+/**
+ * 1 hour
+ */
+const DEFAULT_SETUP_COM_THROTTLE_TIME = hoursToMs(1);
+function userContextFromUid(authService, userContextOrUid) {
+  const userContext = typeof userContextOrUid === 'string' ? authService.userContext(userContextOrUid) : userContextOrUid;
+  return userContext;
+}
+class AbstractFirebaseServerNewUserService {
+  constructor(authService) {
+    this._authService = void 0;
+    this.setupThrottleTime = DEFAULT_SETUP_COM_THROTTLE_TIME;
+    this._authService = authService;
+  }
+  get authService() {
+    return this._authService;
+  }
+  async initializeNewUser(input) {
+    const {
+      uid,
+      email,
+      phone,
+      sendSetupContent,
+      sendSetupContentIfUserExists,
+      sendSetupDetailsOnce,
+      sendSetupIgnoreThrottle,
+      sendSetupThrowErrors,
+      data,
+      sendDetailsInTestEnvironment
+    } = input;
+    let userRecordPromise;
+    if (uid) {
+      userRecordPromise = this.authService.auth.getUser(uid);
+    } else if (email) {
+      userRecordPromise = this.authService.auth.getUserByEmail(email);
+    } else if (phone) {
+      userRecordPromise = this.authService.auth.getUserByPhoneNumber(phone);
+    } else {
+      throw new Error('email or phone is required to initialize a new user.');
+    }
+    let userRecord = await getAuthUserOrUndefined(userRecordPromise);
+    let userRecordId;
+    let createdUser = false;
+    if (!userRecord) {
+      const createResult = await this.createNewUser(input);
+      // add the setup password to the user's credentials
+      const userContext = this.authService.userContext(createResult.user.uid);
+      await this.addNewUserSetupClaims(userContext, createResult.password);
+      createdUser = true;
+      userRecordId = userContext.uid;
+      userRecord = await userContext.loadRecord();
+    } else {
+      userRecordId = userRecord.uid;
+    }
+    // send content if necessary
+    if (createdUser && sendSetupContent === true || sendSetupContentIfUserExists) {
+      const sentEmail = await this.sendSetupContent(userRecordId, {
+        data,
+        sendSetupDetailsOnce,
+        ignoreSendThrottleTime: sendSetupIgnoreThrottle,
+        throwErrors: sendSetupThrowErrors,
+        sendDetailsInTestEnvironment
+      });
+      // reload the user record
+      if (sentEmail) {
+        const userContext = this.authService.userContext(userRecordId);
+        userRecord = await userContext.loadRecord();
+      }
+    }
+    return userRecord;
+  }
+  async addNewUserSetupClaims(userContextOrUid, setupPassword) {
+    const password = setupPassword ?? this.generateRandomSetupPassword();
+    const userContext = userContextFromUid(this.authService, userContextOrUid);
+    await userContext.updateClaims({
+      [FIREBASE_SERVER_AUTH_CLAIMS_SETUP_PASSWORD_KEY]: password
+    });
+    return userContext;
+  }
+  async sendSetupContent(userContextOrUid, config) {
+    const setupDetails = await this.loadSetupDetails(userContextOrUid, config);
+    let sentContent = false;
+    if (setupDetails) {
+      const {
+        setupCommunicationAt
+      } = setupDetails.claims;
+      const hasSentCommunication = Boolean(setupCommunicationAt);
+      if (config?.sendSetupDetailsOnce && hasSentCommunication) {
+        // do not send.
+        if (config?.throwErrors) {
+          throw new FirebaseServerAuthNewUserSendSetupDetailsSendOnceError();
+        }
+      } else {
+        const lastSentAt = setupCommunicationAt ? new Date(setupCommunicationAt) : undefined;
+        const sendIsThrottled = hasSentCommunication && !config?.ignoreSendThrottleTime && isThrottled(this.setupThrottleTime, lastSentAt);
+        if (!sendIsThrottled) {
+          await this.sendSetupContentToUser(setupDetails);
+          await this.updateSetupContentSentTime(setupDetails);
+          sentContent = true;
+        } else if (config?.throwErrors) {
+          throw new FirebaseServerAuthNewUserSendSetupDetailsThrottleError(lastSentAt);
+        }
+      }
+    } else if (config?.throwErrors) {
+      throw new FirebaseServerAuthNewUserSendSetupDetailsNoSetupConfigError();
+    }
+    return sentContent;
+  }
+  async loadSetupDetails(userContextOrUid, config) {
+    const userContext = userContextFromUid(this.authService, userContextOrUid);
+    const userExists = await userContext.exists();
+    let details;
+    if (userExists) {
+      details = await this.loadSetupDetailsForUserContext(userContext, config);
+    }
+    return details;
+  }
+  async loadSetupDetailsForUserContext(userContext, config) {
+    let details;
+    const {
+      setupPassword,
+      setupCommunicationAt
+    } = await userContext.loadClaims();
+    if (setupPassword) {
+      details = {
+        userContext,
+        claims: {
+          setupPassword,
+          setupCommunicationAt
+        },
+        data: config?.data,
+        sendDetailsInTestEnvironment: config?.sendDetailsInTestEnvironment
+      };
+    }
+    return details;
+  }
+  async updateSetupContentSentTime(details) {
+    const setupCommunicationAt = toISODateString(new Date());
+    await details.userContext.updateClaims({
+      setupCommunicationAt
+    });
+  }
+  /**
+   * Update a user's claims to clear any setup-related content.
+   *
+   * Returns true if a user was updated.
+   *
+   * @param uid
+   */
+  async markUserSetupAsComplete(uid) {
+    const userContext = this.authService.userContext(uid);
+    const userExists = await userContext.exists();
+    if (userExists) {
+      await this.updateClaimsToClearUser(userContext);
+    }
+    return userExists;
+  }
+  async createNewUser(input) {
+    const {
+      uid,
+      displayName,
+      email,
+      phone: phoneNumber,
+      setupPassword: inputPassword
+    } = input;
+    const password = inputPassword ?? this.generateRandomSetupPassword();
+    const user = await this.authService.auth.createUser({
+      uid,
+      displayName,
+      email,
+      phoneNumber,
+      password
+    });
+    return {
+      user,
+      password
+    };
+  }
+  generateRandomSetupPassword() {
+    return `${DEFAULT_FIREBASE_PASSWORD_NUMBER_GENERATOR()}`;
+  }
+  async updateClaimsToClearUser(userContext) {
+    await userContext.updateClaims({
+      [FIREBASE_SERVER_AUTH_CLAIMS_SETUP_PASSWORD_KEY]: null,
+      [FIREBASE_SERVER_AUTH_CLAIMS_SETUP_LAST_COM_DATE_KEY]: null
+    });
+  }
+}
+class NoSetupContentFirebaseServerNewUserService extends AbstractFirebaseServerNewUserService {
+  async sendSetupContentToUser(user) {
+    // send nothing.
+  }
+}
+/**
+ * FirebaseServer auth service that provides accessors to auth-related components.
+ */
+class FirebaseServerAuthService {}
+/**
+ * Abstract FirebaseServerAuthService implementation.
+ */
+class AbstractFirebaseServerAuthService {
+  constructor(auth) {
+    this._auth = void 0;
+    this._auth = auth;
+  }
+  get auth() {
+    return this._auth;
+  }
+  context(context) {
+    assertIsContextWithAuthData(context);
+    return this._context(context);
+  }
+  isAdmin(claims) {
+    return this.isAdminInRoles(this.readRoles(claims));
+  }
+  isAdminInRoles(roles) {
+    return roles.has(AUTH_ADMIN_ROLE);
+  }
+  hasSignedTos(claims) {
+    return this.hasSignedTosInRoles(this.readRoles(claims));
+  }
+  hasSignedTosInRoles(roles) {
+    return roles.has(AUTH_TOS_SIGNED_ROLE);
+  }
+  newUser() {
+    return new NoSetupContentFirebaseServerNewUserService(this);
+  }
+  authContextInfo(context) {
+    const {
+      auth
+    } = context;
+    let result;
+    if (auth) {
+      const _roles = cachedGetter(() => this.readRoles(auth.token));
+      const getClaims = () => auth.token;
+      result = {
+        uid: auth.uid,
+        isAdmin: () => this.isAdminInRoles(_roles()),
+        getClaims,
+        getAuthRoles: _roles,
+        token: firebaseAuthTokenFromDecodedIdToken(auth.token)
+      };
+    }
+    return result;
+  }
+  authDetailsForRecord(record) {
+    return {
+      uid: record.uid,
+      email: record.email,
+      emailVerified: record.emailVerified,
+      phoneNumber: record.phoneNumber,
+      disabled: record.disabled,
+      displayName: record.displayName,
+      photoURL: record.photoURL,
+      creationTime: record.metadata.creationTime ? new Date(record.metadata.creationTime).toISOString() : undefined,
+      lastSignInTime: record.metadata.lastSignInTime ? new Date(record.metadata.lastSignInTime).toISOString() : undefined,
+      lastRefreshTime: record.metadata.lastRefreshTime ? new Date(record.metadata.lastRefreshTime).toISOString() : undefined
+    };
+  }
+}
+
+class FirebaseServerEnvService {}
+
+/**
+ * Creates UpdateData corresponding to the input increment update.
+ *
+ * @param input
+ * @returns
+ */
+function firestoreServerIncrementUpdateToUpdateData(input) {
+  return mapObjectMap(input, incrementValue => {
+    return FieldValue.increment(incrementValue ?? 0);
+  });
+}
+
+/**
+ * Creates UpdateData corresponding to the input array update.
+ *
+ * @param input
+ * @returns
+ */
+function firestoreServerArrayUpdateToUpdateData(input) {
+  const union = input?.union;
+  const remove = input?.remove;
+  function createUpdatesWithArrayFunction(fieldUpdate, arrayUpdateFunction) {
+    let result;
+    if (fieldUpdate) {
+      result = mapObjectMap(fieldUpdate, arrayUpdate => {
+        let result;
+        if (arrayUpdate) {
+          result = arrayUpdateFunction(...arrayUpdate); // use spread operator to insert each value as an argument, as "nested arrays" are not allowed in the Firestore
+        }
+        return result;
+      });
+    }
+    return result;
+  }
+  const updateData = {
+    ...createUpdatesWithArrayFunction(union, FieldValue.arrayUnion),
+    ...createUpdatesWithArrayFunction(remove, FieldValue.arrayRemove)
+  };
+  return updateData;
+}
+
+// MARK: Accessor
+/**
+ * FirestoreDocumentDataAccessor implementation for a batch.
+ */
+class WriteBatchFirestoreDocumentDataAccessor {
+  constructor(batch, documentRef) {
+    this.documentRef = void 0;
+    this._batch = void 0;
+    this.documentRef = documentRef;
+    this._batch = batch;
+  }
+  get batch() {
+    return this._batch;
+  }
+  stream() {
+    return from(this.get()); // todo
+  }
+  create(data) {
+    this.batch.create(this.documentRef, data);
+    return Promise.resolve();
+  }
+  exists() {
+    return this.get().then(x => x.exists);
+  }
+  get() {
+    return this.documentRef.get();
+  }
+  getWithConverter(converter) {
+    return this.documentRef.withConverter(converter).get();
+  }
+  delete(params) {
+    this.batch.delete(this.documentRef, params?.precondition);
+    return Promise.resolve();
+  }
+  set(data) {
+    this.batch.set(this.documentRef, data);
+    return Promise.resolve();
+  }
+  increment(data, params) {
+    return this.update(firestoreServerIncrementUpdateToUpdateData(data), params);
+  }
+  arrayUpdate(data, params) {
+    return this.update(firestoreServerArrayUpdateToUpdateData(data), params);
+  }
+  update(data, params) {
+    if (params?.precondition != null) {
+      this.batch.update(this.documentRef, data, params?.precondition);
+    } else {
+      this.batch.update(this.documentRef, data);
+    }
+    return Promise.resolve();
+  }
+}
+/**
+ * Creates a new FirestoreDocumentDataAccessorFactory for a Batch.
+ *
+ * @param batch
+ * @returns
+ */
+function writeBatchAccessorFactory(writeBatch) {
+  return {
+    accessorFor: ref => new WriteBatchFirestoreDocumentDataAccessor(writeBatch, ref)
+  };
+}
+// MARK: Context
+class WriteBatchFirestoreDocumentContext {
+  constructor(batch) {
+    this._batch = void 0;
+    this.contextType = FirestoreDocumentContextType.BATCH;
+    this.accessorFactory = void 0;
+    this._batch = batch;
+    this.accessorFactory = writeBatchAccessorFactory(batch);
+  }
+  get batch() {
+    return this._batch;
+  }
+}
+function writeBatchDocumentContext(batch) {
+  return new WriteBatchFirestoreDocumentContext(batch);
+}
+
+// MARK: Accessor
+class DefaultFirestoreDocumentDataAccessor {
+  constructor(documentRef) {
+    this._documentRef = void 0;
+    this._documentRef = documentRef;
+  }
+  get documentRef() {
+    return this._documentRef;
+  }
+  stream() {
+    return streamFromOnSnapshot(({
+      next,
+      error
+    }) => this.documentRef.onSnapshot(next, error));
+  }
+  create(data) {
+    return this.documentRef.create(data);
+  }
+  exists() {
+    return this.get().then(x => x.exists);
+  }
+  get() {
+    return this.documentRef.get();
+  }
+  getWithConverter(converter) {
+    return this.documentRef.withConverter(converter).get();
+  }
+  delete(params) {
+    return this.documentRef.delete(params?.precondition);
+  }
+  set(data, options) {
+    return options ? this.documentRef.set(data, options) : this.documentRef.set(data);
+  }
+  increment(data, params) {
+    return this.update(firestoreServerIncrementUpdateToUpdateData(data), params);
+  }
+  arrayUpdate(data, params) {
+    return this.update(firestoreServerArrayUpdateToUpdateData(data), params);
+  }
+  update(data, params) {
+    return params?.precondition ? this.documentRef.update(data, params.precondition) : this.documentRef.update(data);
+  }
+}
+function defaultFirestoreAccessorFactory() {
+  return {
+    accessorFor: ref => new DefaultFirestoreDocumentDataAccessor(ref)
+  };
+}
+// MARK: Context
+function defaultFirestoreDocumentContext() {
+  return {
+    contextType: FirestoreDocumentContextType.NONE,
+    accessorFactory: defaultFirestoreAccessorFactory()
+  };
+}
+
+// MARK: Accessor
+/**
+ * FirestoreDocumentDataAccessor implementation for a transaction.
+ */
+class TransactionFirestoreDocumentDataAccessor {
+  constructor(transaction, documentRef) {
+    this._transaction = void 0;
+    this._documentRef = void 0;
+    this._transaction = transaction;
+    this._documentRef = documentRef;
+  }
+  get transaction() {
+    return this._transaction;
+  }
+  get documentRef() {
+    return this._documentRef;
+  }
+  stream() {
+    return from(this.get());
+  }
+  create(data) {
+    this.transaction.create(this.documentRef, data);
+    return Promise.resolve();
+  }
+  exists() {
+    return this.get().then(x => x.exists);
+  }
+  get() {
+    return this.transaction.get(this.documentRef);
+  }
+  getWithConverter(converter) {
+    return this.transaction.get(this.documentRef.withConverter(converter));
+  }
+  delete() {
+    this.transaction.delete(this.documentRef);
+    return Promise.resolve();
+  }
+  set(data, options) {
+    this.transaction.set(this.documentRef, data, options);
+    return Promise.resolve();
+  }
+  increment(data, params) {
+    return this.update(firestoreServerIncrementUpdateToUpdateData(data), params);
+  }
+  arrayUpdate(data, params) {
+    return this.update(firestoreServerArrayUpdateToUpdateData(data), params);
+  }
+  update(data, params) {
+    if (params?.precondition) {
+      this.transaction.update(this.documentRef, data, params?.precondition);
+    } else {
+      this.transaction.update(this.documentRef, data);
+    }
+    return Promise.resolve();
+  }
+}
+/**
+ * Creates a new FirestoreDocumentDataAccessorFactory for a Transaction.
+ *
+ * @param transaction
+ * @returns
+ */
+function transactionAccessorFactory(transaction) {
+  return {
+    accessorFor: ref => new TransactionFirestoreDocumentDataAccessor(transaction, ref)
+  };
+}
+// MARK: Context
+class TransactionFirestoreDocumentContext {
+  constructor(transaction) {
+    this._transaction = void 0;
+    this.contextType = FirestoreDocumentContextType.TRANSACTION;
+    this.accessorFactory = void 0;
+    this._transaction = transaction;
+    this.accessorFactory = transactionAccessorFactory(transaction);
+  }
+  get transaction() {
+    return this._transaction;
+  }
+}
+function transactionDocumentContext(transaction) {
+  return new TransactionFirestoreDocumentContext(transaction);
+}
+
+function collectionRefForPath(start, path, pathSegments) {
+  let ref = start.collection(path);
+  if (pathSegments?.length) {
+    if (pathSegments?.length % 2 !== 0) {
+      throw new Error(`Invalid number of path segments provided for collection. Path: "${path}" + "${pathSegments}"`);
+    }
+    const batches = batch(pathSegments, 2); // batch to tuple [string, string]
+    batches.forEach(x => {
+      const [first, second] = x;
+      ref = ref.doc(first).collection(second);
+    });
+  }
+  return ref;
+}
+function docRefForPath(start, path, pathSegments) {
+  let doc = path ? start.doc(path) : start.doc();
+  if (pathSegments?.length) {
+    const batches = batch(pathSegments, 2); // batch to tuple [string, string]
+    batches.forEach(x => {
+      const [first, second] = x;
+      const collection = doc.collection(first);
+      doc = second ? collection.doc(second) : collection.doc();
+    });
+  }
+  return doc;
+}
+function googleCloudFirestoreAccessorDriver() {
+  return {
+    doc: (collection, path, ...pathSegments) => docRefForPath(collection, path, pathSegments),
+    docAtPath: (firestore, fullPath) => firestore.doc(fullPath),
+    collectionGroup: (firestore, collectionId) => firestore.collectionGroup(collectionId),
+    collection: (firestore, path, ...pathSegments) => collectionRefForPath(firestore, path, pathSegments),
+    subcollection: (document, path, ...pathSegments) => collectionRefForPath(document, path, pathSegments),
+    transactionFactoryForFirestore: firestore => async fn => await firestore.runTransaction(fn),
+    writeBatchFactoryForFirestore: firestore => () => firestore.batch(),
+    defaultContextFactory: defaultFirestoreDocumentContext,
+    transactionContextFactory: transactionDocumentContext,
+    writeBatchContextFactory: writeBatchDocumentContext
+  };
+}
+
+const FIRESTORE_CLIENT_QUERY_CONSTRAINT_HANDLER_MAPPING = {
+  [FIRESTORE_LIMIT_QUERY_CONSTRAINT_TYPE]: (builder, data) => builder.limit(data.limit),
+  [FIRESTORE_LIMIT_TO_LAST_QUERY_CONSTRAINT_TYPE]: (builder, data) => builder.limitToLast(data.limit),
+  [FIRESTORE_ORDER_BY_QUERY_CONSTRAINT_TYPE]: (builder, data) => builder.orderBy(data.fieldPath, data.directionStr),
+  [FIRESTORE_ORDER_BY_DOCUMENT_ID_QUERY_CONSTRAINT_TYPE]: (builder, data) => builder.orderBy(FieldPath.documentId(), data.directionStr),
+  [FIRESTORE_WHERE_QUERY_CONSTRAINT_TYPE]: (builder, data) => builder.where(data.fieldPath, data.opStr, data.value),
+  [FIRESTORE_WHERE_DOCUMENT_ID_QUERY_CONSTRAINT_TYPE]: (builder, data) => builder.where(FieldPath.documentId(), data.opStr, data.value),
+  [FIRESTORE_OFFSET_QUERY_CONSTRAINT_TYPE]: (builder, data) => builder.offset(data.offset),
+  [FIRESTORE_START_AT_QUERY_CONSTRAINT_TYPE]: (builder, data) => builder.startAt(data.snapshot),
+  [FIRESTORE_START_AT_VALUE_QUERY_CONSTRAINT_TYPE]: (builder, data) => builder.startAt(...data.fieldValues),
+  [FIRESTORE_START_AFTER_QUERY_CONSTRAINT_TYPE]: (builder, data) => builder.startAfter(data.snapshot),
+  [FIRESTORE_END_AT_QUERY_CONSTRAINT_TYPE]: (builder, data) => builder.endAt(data.snapshot),
+  [FIRESTORE_END_AT_VALUE_QUERY_CONSTRAINT_TYPE]: (builder, data) => builder.endAt(...data.fieldValues),
+  [FIRESTORE_END_BEFORE_QUERY_CONSTRAINT_TYPE]: (builder, data) => builder.endBefore(data.snapshot)
+};
+function firestoreClientQueryConstraintFunctionsDriver() {
+  return makeFirestoreQueryConstraintFunctionsDriver({
+    mapping: FIRESTORE_CLIENT_QUERY_CONSTRAINT_HANDLER_MAPPING,
+    init: query => query,
+    build: query => query,
+    documentIdFieldPath: () => FieldPath.documentId()
+  });
+}
+function googleCloudFirestoreQueryDriver() {
+  return {
+    ...firestoreClientQueryConstraintFunctionsDriver(),
+    countDocs(query) {
+      return query.count().get().then(x => x.data().count);
+    },
+    getDocs(query, transaction) {
+      let result;
+      if (transaction) {
+        result = transaction.get(query);
+      } else {
+        result = query.get();
+      }
+      return result;
+    },
+    streamDocs(query) {
+      return streamFromOnSnapshot(({
+        next,
+        error
+      }) => query.onSnapshot(next, error));
+    }
+  };
+}
+
+function googleCloudFirestoreDrivers() {
+  return {
+    firestoreDriverIdentifier: '@google-cloud/firestore',
+    firestoreDriverType: 'production',
+    firestoreAccessorDriver: googleCloudFirestoreAccessorDriver(),
+    firestoreQueryDriver: googleCloudFirestoreQueryDriver()
+  };
+}
+
+/**
+ * Creates a FirestoreContextFactory that uses the @'@google-cloud/firestore package.
+ */
+const googleCloudFirestoreContextFactory = firestoreContextFactory(googleCloudFirestoreDrivers());
+
+function assertContextHasAuth(context) {
+  if (!isContextWithAuthData(context)) {
+    throw unauthenticatedContextHasNoUidError();
+  }
+}
+/**
+ * Attempts to load data from the document. A modelNotAvailableError is thrown if the snapshot data is null/undefined (the document does not exist).
+ *
+ * @param document
+ * @param message
+ * @returns
+ */
+async function assertSnapshotData(document, message) {
+  const data = await document.snapshotData();
+  if (data == null) {
+    throw modelNotAvailableError({
+      message: message ?? `The ${document.modelType} was unavailable.`
+    });
+  }
+  return data;
+}
+/**
+ * Convenience function for assertSnapshotData that also attaches the id and key of the document to the data.
+ *
+ * @param document
+ * @param message
+ * @returns
+ */
+async function assertSnapshotDataWithKey(document, message) {
+  const data = await assertSnapshotData(document, message);
+  return setIdAndKeyFromKeyIdRefOnDocumentData(data, document);
+}
+/**
+ * Asserts that the document exists. A modelNotAvailableError is thrown if the document does not exist.
+ *
+ * @param document
+ * @param message
+ * @returns
+ */
+async function assertDocumentExists(document, message) {
+  const exists = await document.exists();
+  if (!exists) {
+    throw documentModelNotAvailableError(document, message);
+  }
+}
+/**
+ * Error thrown by assertDocumentExists().
+ *
+ * @param document
+ * @param message
+ * @returns
+ */
+function documentModelNotAvailableError(document, message) {
+  return modelNotAvailableError({
+    message: message ?? `The ${document.modelType} was unavailable.`
+  });
+}
+
+const PHONE_NUMBER_ALREADY_EXISTS_ERROR_CODE = 'PHONE_NUMBER_ALREADY_EXISTS';
+function phoneNumberAlreadyExistsError() {
+  return preconditionConflictError({
+    code: PHONE_NUMBER_ALREADY_EXISTS_ERROR_CODE,
+    message: 'This phone number already exists in the system.'
+  });
+}
+function handleFirebaseAuthError(e, handleUnknownCode) {
+  handleFirebaseError(e, firebaseError => {
+    switch (firebaseError.code) {
+      case 'auth/phone-number-already-exists':
+        throw phoneNumberAlreadyExistsError();
+      default:
+        handleUnknownCode?.(firebaseError);
+        break;
+    }
+  });
+}
+
+/******************************************************************************
+Copyright (c) Microsoft Corporation.
+
+Permission to use, copy, modify, and/or distribute this software for any
+purpose with or without fee is hereby granted.
+
+THE SOFTWARE IS PROVIDED "AS IS" AND THE AUTHOR DISCLAIMS ALL WARRANTIES WITH
+REGARD TO THIS SOFTWARE INCLUDING ALL IMPLIED WARRANTIES OF MERCHANTABILITY
+AND FITNESS. IN NO EVENT SHALL THE AUTHOR BE LIABLE FOR ANY SPECIAL, DIRECT,
+INDIRECT, OR CONSEQUENTIAL DAMAGES OR ANY DAMAGES WHATSOEVER RESULTING FROM
+LOSS OF USE, DATA OR PROFITS, WHETHER IN AN ACTION OF CONTRACT, NEGLIGENCE OR
+OTHER TORTIOUS ACTION, ARISING OUT OF OR IN CONNECTION WITH THE USE OR
+PERFORMANCE OF THIS SOFTWARE.
+***************************************************************************** */
+/* global Reflect, Promise, SuppressedError, Symbol, Iterator */
+
+
+function __decorate(decorators, target, key, desc) {
+    var c = arguments.length, r = c < 3 ? target : desc === null ? desc = Object.getOwnPropertyDescriptor(target, key) : desc, d;
+    if (typeof Reflect === "object" && typeof Reflect.decorate === "function") r = Reflect.decorate(decorators, target, key, desc);
+    else for (var i = decorators.length - 1; i >= 0; i--) if (d = decorators[i]) r = (c < 3 ? d(r) : c > 3 ? d(target, key, r) : d(target, key)) || r;
+    return c > 3 && r && Object.defineProperty(target, key, r), r;
+}
+
+function __param(paramIndex, decorator) {
+    return function (target, key) { decorator(target, key, paramIndex); }
+}
+
+function __metadata(metadataKey, metadataValue) {
+    if (typeof Reflect === "object" && typeof Reflect.metadata === "function") return Reflect.metadata(metadataKey, metadataValue);
+}
+
+typeof SuppressedError === "function" ? SuppressedError : function (error, suppressed, message) {
+    var e = new Error(message);
+    return e.name = "SuppressedError", e.error = error, e.suppressed = suppressed, e;
+};
+
+// MARK: Tokens
+/**
+ * Nest Injection Token to access the
+ */
+const FIREBASE_APP_TOKEN = 'FIREBASE_APP_TOKEN';
+// MARK: Firebase Admin Provider
+function firebaseServerAppTokenProvider(useFactory) {
+  return {
+    provide: FIREBASE_APP_TOKEN,
+    useFactory
+  };
+}
+
+// MARK: Tokens
+/**
+ * Token to access the Auth for the app.
+ */
+const FIREBASE_AUTH_TOKEN = 'FIREBASE_AUTH_TOKEN';
+/**
+ * Nest provider module for Firebase that provides a firestore, etc. from the firestore token.
+ */
+let FirebaseServerAuthModule = class FirebaseServerAuthModule {};
+FirebaseServerAuthModule = __decorate([Module({
+  providers: [{
+    provide: FIREBASE_AUTH_TOKEN,
+    useFactory: app => app.auth(),
+    inject: [FIREBASE_APP_TOKEN]
+  }],
+  exports: [FIREBASE_AUTH_TOKEN]
+})], FirebaseServerAuthModule);
+function provideFirebaseServerAuthService(provider) {
+  return [{
+    ...provider,
+    inject: provider.inject ?? [FIREBASE_AUTH_TOKEN]
+  }, {
+    provide: FirebaseServerAuthService,
+    useExisting: provider.provide
+  }];
+}
+/**
+ * Convenience function used to generate ModuleMetadata for an app's Auth related modules and FirebaseServerAuthService provider.
+ *
+ * @param provide
+ * @param useFactory
+ * @returns
+ */
+function firebaseServerAuthModuleMetadata(config) {
+  return mergeModuleMetadata({
+    imports: [FirebaseServerAuthModule],
+    exports: [FirebaseServerAuthModule, config.serviceProvider.provide],
+    providers: provideFirebaseServerAuthService(config.serviceProvider)
+  }, config);
+}
+
+function assertIsAdminInRequest(request) {
+  if (!isAdminInRequest(request)) {
+    throw forbiddenError();
+  }
+}
+function isAdminInRequest(request) {
+  return request.nest.authService.context(request).isAdmin;
+}
+function assertIsAdminOrTargetUserInRequestData(request, requireUid) {
+  if (!isAdminOrTargetUserInRequestData(request, requireUid)) {
+    throw forbiddenError();
+  }
+  return request.data.uid ?? request.auth?.uid;
+}
+function isAdminOrTargetUserInRequestData(request, requireUid = false) {
+  const uid = request.data.uid;
+  const authUid = request.auth?.uid;
+  let isAdminOrTargetUser = true;
+  if (requireUid && uid == null || uid != null && uid !== authUid) {
+    isAdminOrTargetUser = request.nest.authService.context(request).isAdmin;
+  }
+  return isAdminOrTargetUser;
+}
+function assertHasSignedTosInRequest(request) {
+  if (!hasSignedTosInRequest(request)) {
+    throw forbiddenError({
+      message: 'ToS has not been signed.'
+    });
+  }
+}
+function hasSignedTosInRequest(request) {
+  return request.nest.authService.context(request).hasSignedTos;
+}
+function assertHasRolesInRequest(request, authRoles) {
+  if (!hasAuthRolesInRequest(request, authRoles)) {
+    throw forbiddenError({
+      message: 'Missing required auth roles.',
+      data: {
+        roles: asArray(authRoles)
+      }
+    });
+  }
+}
+function hasAuthRolesInRequest(request, authRoles) {
+  return containsAllValues(request.nest.authService.context(request).authRoles, authRoles);
+}
+/**
+ * Returns true if the claims have a FIREBASE_SERVER_AUTH_CLAIMS_SETUP_PASSWORD_KEY claims value, indicating they are a newly invited user.
+ *
+ * This may be used to filter out new users that were not invited from finishing their onboarding.
+ *
+ * @param request
+ */
+function hasNewUserSetupPasswordInRequest(request) {
+  const claims = request.nest.authService.context(request).claims;
+  return claims[FIREBASE_SERVER_AUTH_CLAIMS_SETUP_PASSWORD_KEY] != null;
+}
+
+/**
+ * Creates a OnCallWithAuthorizedNestContext function for creating a model.
+ *
+ * @param map
+ * @returns
+ */
+function onCallDevelopmentFunction(map, config = {}) {
+  const {
+    preAssert = () => undefined
+  } = config;
+  return request => {
+    const specifier = request.data.specifier;
+    const devFn = map[specifier];
+    if (devFn) {
+      preAssert({
+        request,
+        specifier
+      });
+      return devFn({
+        ...request,
+        specifier,
+        data: request.data.data
+      });
+    } else {
+      throw developmentUnknownSpecifierError(specifier);
+    }
+  };
+}
+function developmentUnknownSpecifierError(specifier) {
+  return badRequestError(serverError({
+    status: 400,
+    code: 'UNKNOWN_SPECIFIER_ERROR',
+    message: `Invalid specifier "${specifier}" to run.`,
+    data: {
+      specifier
+    }
+  }));
+}
+
+const NO_RUN_NAME_SPECIFIED_FOR_SCHEDULED_FUNCTION_DEVELOPMENT_FUNCTION_CODE = 'NO_RUN_NAME_SPECIFIED_FOR_SCHEDULED_FUNCTION_DEVELOPMENT_FUNCTION';
+function noRunNameSpecifiedForScheduledFunctionDevelopmentFunction() {
+  return badRequestError({
+    code: NO_RUN_NAME_SPECIFIED_FOR_SCHEDULED_FUNCTION_DEVELOPMENT_FUNCTION_CODE,
+    message: `Must specify run parameter.`
+  });
+}
+const UNKNOWN_SCHEDULED_FUNCTION_DEVELOPMENT_FUNCTION_NAME_CODE = 'UNKNOWN_SCHEDULED_FUNCTION_DEVELOPMENT_FUNCTION_NAME';
+function unknownScheduledFunctionDevelopmentFunctionName(name) {
+  return badRequestError({
+    code: UNKNOWN_SCHEDULED_FUNCTION_DEVELOPMENT_FUNCTION_NAME_CODE,
+    message: `Unknown function with name "${name}"`,
+    data: {
+      name
+    }
+  });
+}
+const UNKNOWN_SCHEDULED_FUNCTION_DEVELOPMENT_FUNCTION_TYPE_CODE = 'UNKNOWN_SCHEDULED_FUNCTION_DEVELOPMENT_FUNCTION_TYPE';
+function unknownScheduledFunctionDevelopmentFunctionType(type) {
+  return badRequestError({
+    code: UNKNOWN_SCHEDULED_FUNCTION_DEVELOPMENT_FUNCTION_TYPE_CODE,
+    message: `Unknown type "${type}"`,
+    data: {
+      type
+    }
+  });
+}
+
+function makeScheduledFunctionDevelopmentFunction(config) {
+  const {
+    allScheduledFunctions
+  } = config;
+  const getListValues = cachedGetter(() => {
+    const result = [];
+    forEachKeyValue(allScheduledFunctions, {
+      forEach: x => {
+        const [functionName, config] = x;
+        result.push({
+          name: functionName.toString()
+        });
+      }
+    });
+    return result;
+  });
+  return async request => {
+    const {
+      data
+    } = request;
+    const {
+      type
+    } = data;
+    switch (type) {
+      case 'run':
+        const targetRunName = data.run;
+        if (!targetRunName) {
+          throw noRunNameSpecifiedForScheduledFunctionDevelopmentFunction();
+        }
+        const targetFunction = allScheduledFunctions[targetRunName];
+        if (!targetFunction) {
+          throw unknownScheduledFunctionDevelopmentFunctionName(targetRunName);
+        }
+        try {
+          await targetFunction._runNow();
+        } catch (e) {
+          console.error(`Failed manually running task "${targetRunName}".`, e);
+          throw e;
+        }
+        return {
+          type: 'run',
+          success: true
+        };
+      case 'list':
+        return {
+          type: 'list',
+          list: getListValues()
+        };
+      default:
+        throw unknownScheduledFunctionDevelopmentFunctionType(type);
+    }
+  };
+}
+
+function setNestContextOnRequest(makeNestContext, request) {
+  request.nest = makeNestContext(request.nestApplication);
+  return request;
+}
+/**
+ * Wraps the input OnCallWithNestContext function to flag it as optional to have auth data.
+ *
+ * @param fn
+ * @returns
+ */
+function optionalAuthContext(fn) {
+  const fnWithOptionalAuth = request => fn(request);
+  fnWithOptionalAuth._requireAuth = false;
+  return fnWithOptionalAuth;
+}
+/**
+ * Asserts that the input request has auth data if the inputOnCallWithAuthAwareNestRequireAuthRef object is flagged to require auth.
+ *
+ * @param fn
+ * @param request
+ */
+function assertRequestRequiresAuthForFunction(fn, request) {
+  if (fn._requireAuth !== false) {
+    assertIsContextWithAuthData(request);
+  }
+}
+/**
+ * Creates an OnCallWithNestContext wrapper that validates the input CallableContext to assert the context has auth data before entering the function.
+ *
+ * @param fn
+ * @returns
+ */
+function inAuthContext(fn) {
+  return request => {
+    assertIsContextWithAuthData(request);
+    return fn(request);
+  };
+}
+
+function firebaseServerDevFunctions(config) {
+  const {
+    enabled,
+    secure,
+    nest,
+    developerFunctionsMap,
+    onCallFactory,
+    allScheduledFunctions,
+    disableDevelopmentScheduleFunction
+  } = config;
+  let dev;
+  if (enabled) {
+    const fullFunctionsMap = {
+      ...developerFunctionsMap
+    };
+    if (allScheduledFunctions && disableDevelopmentScheduleFunction !== false) {
+      fullFunctionsMap[SCHEDULED_FUNCTION_DEV_FUNCTION_SPECIFIER] = makeScheduledFunctionDevelopmentFunction({
+        allScheduledFunctions
+      });
+    }
+    let onCallFunction = onCallDevelopmentFunction(fullFunctionsMap);
+    if (secure != false) {
+      onCallFunction = inAuthContext(onCallFunction);
+    }
+    dev = onCallFactory(onCallFunction)(nest);
+  } else {
+    dev = onCallFactory(async x => {
+      throw unavailableError({
+        message: 'developer tools service is not enabled.'
+      });
+    })(nest);
+  }
+  return {
+    dev
+  };
+}
+
+let DefaultFirebaseServerEnvService = class DefaultFirebaseServerEnvService extends ServerEnvironmentService {
+  /**
+   * Enabled when not in production and not in a testing environment.
+   */
+  get developmentSchedulerEnabled() {
+    return !this.isProduction && !this.isTestingEnv;
+  }
+};
+DefaultFirebaseServerEnvService = __decorate([Injectable()], DefaultFirebaseServerEnvService);
+
+function nestAppIsProductionEnvironment(nest) {
+  return () => nest().then(x => x.get(FirebaseServerEnvService).isProduction);
+}
+function nestAppHasDevelopmentSchedulerEnabled(nest) {
+  return () => nest().then(x => x.get(FirebaseServerEnvService).developmentSchedulerEnabled);
+}
+
+// MARK: Tokens
+/**
+ * Token to access the Firestore.
+ */
+const FIREBASE_FIRESTORE_TOKEN = 'FIREBASE_FIRESTORE_TOKEN';
+/**
+ * Token to access the root FirestoreContext for a server.
+ */
+const FIREBASE_FIRESTORE_CONTEXT_TOKEN = 'FIREBASE_FIRESTORE_CONTEXT_TOKEN';
+/**
+ * Nest provider module for Firebase that provides a firestore, etc. from the firestore token.
+ */
+let FirebaseServerFirestoreModule = class FirebaseServerFirestoreModule {};
+FirebaseServerFirestoreModule = __decorate([Module({
+  providers: [{
+    provide: FIREBASE_FIRESTORE_TOKEN,
+    useFactory: app => app.firestore(),
+    inject: [FIREBASE_APP_TOKEN]
+  }],
+  exports: [FIREBASE_FIRESTORE_TOKEN]
+})], FirebaseServerFirestoreModule);
+/**
+ * Nest provider module for firebase that includes the FirebaseServerFirestoreModule and provides a value for FIRESTORE_CONTEXT_TOKEN using the googleCloudFirestoreContextFactory.
+ */
+let FirebaseServerFirestoreContextModule = class FirebaseServerFirestoreContextModule {};
+FirebaseServerFirestoreContextModule = __decorate([Module({
+  imports: [FirebaseServerFirestoreModule],
+  providers: [{
+    provide: FIREBASE_FIRESTORE_CONTEXT_TOKEN,
+    useFactory: googleCloudFirestoreContextFactory,
+    inject: [FIREBASE_FIRESTORE_TOKEN]
+  }],
+  exports: [FirebaseServerFirestoreModule, FIREBASE_FIRESTORE_CONTEXT_TOKEN]
+})], FirebaseServerFirestoreContextModule);
+/**
+ * Used to configure a Nestjs provider for a FirestoreCollections-type object that is initialized with a FirestoreContext.
+ *
+ * @param type
+ * @param useFactory
+ * @returns
+ */
+function provideAppFirestoreCollections({
+  provide,
+  useFactory
+}) {
+  return [{
+    provide,
+    useFactory,
+    inject: [FIREBASE_FIRESTORE_CONTEXT_TOKEN]
+  }];
+}
+/**
+ * Convenience function used to generate ModuleMetadata for an app's Firestore related modules and an appFirestoreCollection
+ *
+ * @param provide
+ * @param useFactory
+ * @returns
+ */
+function appFirestoreModuleMetadata(config) {
+  return {
+    imports: [FirebaseServerFirestoreContextModule, ...(config.imports ?? [])],
+    exports: [FirebaseServerFirestoreContextModule, config.provide, ...(config.exports ?? [])],
+    providers: [...provideAppFirestoreCollections(config), ...(config.providers ?? [])]
+  };
+}
+
+/**
+ * Creates a BlockingFunctionWithHandler from the input.
+ *
+ * @param blockingFunctionBuilder
+ * @param handler
+ * @returns
+ */
+function makeBlockingFunctionWithHandler(blockingFunctionBuilder, handler, opts) {
+  const blockingFn = opts != null ? blockingFunctionBuilder(opts, handler) : blockingFunctionBuilder(handler);
+  blockingFn.__handler = handler;
+  return blockingFn;
+}
+/**
+ * Creates a BlockingFunctionHandlerWithNestContextFactory.
+ *
+ * @param appFactory
+ * @param makeNestContext
+ * @returns
+ */
+function blockingFunctionHandlerWithNestContextFactory(makeNestContext) {
+  return fn => {
+    return nestAppPromiseGetter => {
+      const handlerBuilder = handler => {
+        const fnHandler = event => nestAppPromiseGetter().then(nestApplication => handler({
+          ...event,
+          nest: makeNestContext(nestApplication)
+        }));
+        return fnHandler;
+      };
+      return fn(handlerBuilder);
+    };
+  };
+}
+
+/**
+ * Creates a factory for generating OnCallWithNestApplication (firebase-functions v2) functions.
+ *
+ * @param opts
+ * @returns
+ */
+function onCallHandlerWithNestApplicationFactory(defaultOpts = {}) {
+  return (fn, opts) => {
+    return nestAppPromiseGetter => https.onCall({
+      ...defaultOpts,
+      ...opts
+    }, request => nestAppPromiseGetter().then(nestApplication => fn({
+      ...request,
+      nestApplication
+    })));
+  };
+}
+/**
+ * Creates a factory for generating OnCallWithNestContext functions with a nest context object that is generated by the input function.
+ *
+ * @param appFactory
+ * @param makeNestContext
+ * @returns
+ */
+function onCallHandlerWithNestContextFactory(appFactory, makeNestContext) {
+  return (fn, opts) => appFactory(request => fn(setNestContextOnRequest(makeNestContext, request)), opts);
+}
+
+/**
+ * Creates a CloudEventHandlerWithNestContextFactory.
+ *
+ * @param appFactory
+ * @param makeNestContext
+ * @returns
+ */
+function cloudEventHandlerWithNestContextFactory(makeNestContext) {
+  return fn => {
+    return nestAppPromiseGetter => {
+      const handlerBuilder = handler => {
+        const fnHandler = event => nestAppPromiseGetter().then(nestApplication => handler({
+          ...event,
+          nest: makeNestContext(nestApplication)
+        }));
+        return fnHandler;
+      };
+      return fn(handlerBuilder);
+    };
+  };
+}
+
+function setNestContextOnScheduleRequest(makeNestContext, request) {
+  request.nest = makeNestContext(request.nestApplication);
+  return request;
+}
+
+function makeOnScheduleHandlerWithNestApplicationRequest(nestApplication, scheduleContext) {
+  return {
+    nestApplication,
+    scheduleContext
+  };
+}
+/**
+ * Creates a factory for generating OnCallWithNestApplication functions.
+ *
+ * @param nestAppPromiseGetter
+ * @returns
+ */
+function onScheduleHandlerWithNestApplicationFactory(baseScheduleConfig) {
+  return (inputSchedule, fn) => {
+    const schedule = mergeObjects([baseScheduleConfig, inputSchedule]);
+    if (!schedule.schedule) {
+      if (schedule.cron) {
+        if (typeof schedule.cron === 'number') {
+          schedule.schedule = cronExpressionRepeatingEveryNMinutes(schedule.cron);
+        } else {
+          schedule.schedule = schedule.cron;
+        }
+      } else {
+        throw new Error('Missing required "cron" or "schedule" variable for configuration.');
+      }
+    }
+    return nestAppPromiseGetter => {
+      const runNow = scheduleContext => nestAppPromiseGetter().then(x => fn(makeOnScheduleHandlerWithNestApplicationRequest(x, scheduleContext)));
+      const fnn = scheduler.onSchedule(schedule, runNow);
+      fnn._schedule = schedule;
+      fnn._runNow = runNow;
+      return fnn;
+    };
+  };
+}
+/**
+ * Creates a factory for generating OnCallWithNestContext functions with a nest context object that is generated by the input function.
+ *
+ * @param appFactory
+ * @param makeNestContext
+ * @returns
+ */
+function onScheduleHandlerWithNestContextFactory(appFactory, makeNestContext) {
+  return (schedule, fn) => appFactory(schedule, request => fn(setNestContextOnScheduleRequest(makeNestContext, request)));
+}
+
+/**
+ * Creates a TaskQueueFunctionHandlerWithNestContextFactory.
+ *
+ * @param appFactory
+ * @param makeNestContext
+ * @returns
+ */
+function taskQueueFunctionHandlerWithNestContextFactory(makeNestContext) {
+  return fn => {
+    return nestAppPromiseGetter => {
+      const handlerBuilder = handler => {
+        const fnHandler = taskRequest => nestAppPromiseGetter().then(nestApplication => handler({
+          ...taskRequest,
+          nest: makeNestContext(nestApplication)
+        }));
+        return fnHandler;
+      };
+      return fn(handlerBuilder);
+    };
+  };
+}
+// TODO(FUTURE): Add factory that also adds onTaskDispatched usage, as the above is incomplete for full usage and only sets up a function for the request.
+
+class AbstractFirebaseServerActionsContext {}
+function firebaseServerActionsContext(options) {
+  return {
+    ...firebaseServerActionsTransformContext(options)
+  };
+}
+const defaultFirebaseServerActionsTransformFactoryLogErrorFunction = details => {
+  console.log('firebaseServerActionsTransformFactory() encountered validation error: ', details);
+};
+function firebaseServerActionsTransformContext(options) {
+  const firebaseServerActionTransformFactory = firebaseServerActionsTransformFactory(options);
+  const firebaseServerActionTransformFunctionFactory = toTransformAndValidateFunctionResultFactory(firebaseServerActionTransformFactory);
+  return {
+    firebaseServerActionTransformFactory,
+    firebaseServerActionTransformFunctionFactory
+  };
+}
+const FIREBASE_SERVER_VALIDATION_ERROR_CODE = 'VALIDATION_ERROR';
+/**
+ *
+ * @param validationError
+ * @returns
+ */
+function firebaseServerValidationServerError(validationError) {
+  const nestValidationExceptionFactory = new ValidationPipe({
+    forbidUnknownValues: false
+  }).createExceptionFactory();
+  const nestError = nestValidationExceptionFactory(validationError);
+  const data = nestError.getResponse();
+  return {
+    message: 'One or more data/form validation errors occurred.',
+    code: FIREBASE_SERVER_VALIDATION_ERROR_CODE,
+    data
+  };
+}
+/**
+ * Creates a new badRequestError with the validation error details as the response data.
+ *
+ * @param validationError
+ * @returns
+ */
+function firebaseServerValidationError(validationError) {
+  const serverError = firebaseServerValidationServerError(validationError);
+  return badRequestError(serverError);
+}
+function firebaseServerActionsTransformFactory(options) {
+  const {
+    logError,
+    defaultValidationOptions
+  } = options ?? {};
+  const logErrorFunction = logError !== false ? typeof logError === 'function' ? logError : defaultFirebaseServerActionsTransformFactoryLogErrorFunction : mapIdentityFunction;
+  return transformAndValidateObjectFactory({
+    handleValidationError: validationError => {
+      const serverError = firebaseServerValidationServerError(validationError);
+      const {
+        data
+      } = serverError;
+      logErrorFunction(data);
+      throw badRequestError(serverError);
+    },
+    defaultValidationOptions
+  });
+}
+
+function injectNestIntoRequest(nest, request) {
+  return {
+    ...request,
+    nest
+  };
+}
+function injectNestApplicationContextIntoRequest(nestContext, request) {
+  return {
+    ...request,
+    nestApplication: nestContext
+  };
+}
+
+/**
+ * Can be injected to retrieve information about the global prefix configured for the app.
+ */
+class GlobalRoutePrefixConfig {
+  constructor() {
+    this.globalApiRoutePrefix = void 0;
+  }
+}
+
+/**
+ * Middleware that verifies the X-Firebase-AppCheck header using admin.
+ *
+ * It ignores all webhook paths by default.
+ */
+let FirebaseAppCheckMiddleware = class FirebaseAppCheckMiddleware {
+  constructor(globalRoutePrefixConfig) {
+    this.globalRoutePrefixConfig = void 0;
+    this.logger = new Logger('FirebaseAppCheckMiddleware');
+    this._ignoredWebhookPath = void 0;
+    this.globalRoutePrefixConfig = globalRoutePrefixConfig;
+    this._ignoredWebhookPath = this.globalRoutePrefixConfig?.globalApiRoutePrefix ? `${this.globalRoutePrefixConfig.globalApiRoutePrefix}${DEFAULT_BASE_WEBHOOK_PATH}` : DEFAULT_BASE_WEBHOOK_PATH;
+  }
+  async use(req, res, next) {
+    const isIgnoredRoute = this.isIgnoredRequest(req);
+    let error;
+    if (!isIgnoredRoute) {
+      error = await verifyAppCheckInRequest(req);
+      if (error) {
+        this.logger.error('app check token failed verify');
+      }
+    }
+    next(error);
+  }
+  isIgnoredRequest(req) {
+    const isIgnoredRoute = req.skipAppCheck || this.isIgnoredPath(req.baseUrl);
+    return isIgnoredRoute;
+  }
+  isIgnoredPath(path) {
+    return path.startsWith(this._ignoredWebhookPath);
+  }
+};
+FirebaseAppCheckMiddleware = __decorate([Injectable(), __param(0, Optional()), __param(0, Inject(GlobalRoutePrefixConfig)), __metadata("design:paramtypes", [Object])], FirebaseAppCheckMiddleware);
+/**
+ * Verifies the AppCheck parameter. If it fails, a value is returned.
+ *
+ * @param req
+ * @param res
+ * @param next
+ * @returns
+ */
+async function verifyAppCheckInRequest(req) {
+  const appCheckToken = req.header('X-Firebase-AppCheck');
+  let error;
+  if (!appCheckToken) {
+    error = new ForbiddenException();
+  } else {
+    // verify the token
+    try {
+      await admin.appCheck().verifyToken(appCheckToken);
+    } catch (e) {
+      error = new ForbiddenException();
+    }
+  }
+  return error;
+}
+
+/**
+ * Convenience class that mirrors the ConfigureAppCheckMiddlewareModule class in @dereekb/nestjs, but for Firebase apps.
+ */
+let ConfigureFirebaseAppCheckMiddlewareModule = class ConfigureFirebaseAppCheckMiddlewareModule {
+  constructor() {
+    this.logger = new Logger('ConfigureFirebaseAppCheckMiddlewareModule');
+  }
+  configure(consumer) {
+    consumer.apply(FirebaseAppCheckMiddleware).forRoutes('*');
+    this.logger.debug('Configured firebase webhook routes with proper middleware.');
+  }
+};
+ConfigureFirebaseAppCheckMiddlewareModule = __decorate([Module({})], ConfigureFirebaseAppCheckMiddlewareModule);
+
+/**
+ * nestjs decorator that will instruct FirebaseAppCheckMiddleware to skip AppCheck for related requests.
+ */
+const SkipAppCheck = createParamDecorator(async (_, context) => {
+  const req = context.switchToHttp().getRequest();
+  req.skipAppCheck = true;
+});
+
+let FirebaseRawBodyMiddleware = class FirebaseRawBodyMiddleware {
+  use(req, res, next) {
+    req.body = req.rawBody;
+    next();
+  }
+};
+FirebaseRawBodyMiddleware = __decorate([Injectable()], FirebaseRawBodyMiddleware);
+
+/**
+ * Convenience class that mirrors the ConfigureWebhookMiddlewareModule class in @dereekb/nestjs, but for Firebase apps.
+ *
+ * Requests to /webhook/* have their request.body value set to the rawBody.
+ */
+let ConfigureFirebaseWebhookMiddlewareModule = class ConfigureFirebaseWebhookMiddlewareModule {
+  constructor() {
+    this.logger = new Logger('ConfigureFirebaseWebhookMiddlewareModule');
+  }
+  configure(consumer) {
+    consumer.apply(FirebaseRawBodyMiddleware).forRoutes(DEFAULT_WEBHOOK_MIDDLEWARE_ROUTE_INFO);
+    this.logger.debug('Configured firebase webhook routes with proper middleware.');
+  }
+};
+ConfigureFirebaseWebhookMiddlewareModule = __decorate([Module({})], ConfigureFirebaseWebhookMiddlewareModule);
+
+const nestFirebaseDoesNotExistError = firebaseContextGrantedModelRoles => {
+  return modelNotAvailableError({
+    data: {
+      id: firebaseContextGrantedModelRoles.data?.document.key,
+      type: firebaseContextGrantedModelRoles.data?.document.modelType
+    }
+  });
+};
+const nestFirebaseForbiddenPermissionError = (firebaseContextGrantedModelRoles, roles) => {
+  return forbiddenError({
+    data: {
+      id: firebaseContextGrantedModelRoles.data?.document.key,
+      type: firebaseContextGrantedModelRoles.data?.document.modelType,
+      roles
+    }
+  });
+};
+
+function onCallSpecifierHandler(config) {
+  const map = objectToMap(config);
+  const fn = request => {
+    const {
+      specifier = MODEL_FUNCTION_FIREBASE_CRUD_FUNCTION_SPECIFIER_DEFAULT
+    } = request;
+    const handler = map.get(specifier);
+    if (handler != null) {
+      assertRequestRequiresAuthForFunction(handler, request);
+      return handler(request);
+    } else {
+      throw unknownModelCrudFunctionSpecifierError(specifier);
+    }
+  };
+  fn._requireAuth = false;
+  return fn;
+}
+function unknownModelCrudFunctionSpecifierError(specifier) {
+  return badRequestError(serverError({
+    status: 400,
+    code: 'UNKNOWN_SPECIFIER_ERROR',
+    message: 'Invalid/unknown specifier for this function.',
+    data: {
+      specifier
+    }
+  }));
+}
+
+/**
+ * Creates a OnCallWithAuthorizedNestContext function for creating a model.
+ *
+ * @param map
+ * @returns
+ */
+function onCallModel(map, config = {}) {
+  const {
+    preAssert = () => undefined
+  } = config;
+  return request => {
+    const call = request.data?.call;
+    if (call) {
+      const callFn = map[call];
+      if (callFn) {
+        const {
+          specifier,
+          modelType
+        } = request.data;
+        preAssert({
+          call,
+          request,
+          modelType,
+          specifier
+        });
+        return callFn(request);
+      } else {
+        throw onCallModelUnknownCallTypeError(call);
+      }
+    } else {
+      throw onCallModelMissingCallTypeError();
+    }
+  };
+}
+function onCallModelMissingCallTypeError() {
+  return badRequestError(serverError({
+    status: 400,
+    code: 'CALL_TYPE_MISSING_ERROR',
+    message: `The call type was missing from the request.`
+  }));
+}
+function onCallModelUnknownCallTypeError(call) {
+  return badRequestError(serverError({
+    status: 400,
+    code: 'UNKNOWN_CALL_TYPE_ERROR',
+    message: `Unknown call type "${call}".`,
+    data: {
+      call
+    }
+  }));
+}
+function _onCallWithCallTypeFunction(map, config) {
+  const {
+    callType,
+    crudType,
+    preAssert = () => undefined,
+    throwOnUnknownModelType
+  } = config;
+  return request => {
+    const modelType = request.data?.modelType;
+    const crudFn = map[modelType];
+    if (crudFn) {
+      const specifier = request.data.specifier;
+      assertRequestRequiresAuthForFunction(crudFn, request);
+      preAssert({
+        call: callType,
+        request,
+        modelType,
+        specifier
+      });
+      return crudFn({
+        ...request,
+        specifier,
+        data: request.data.data
+      });
+    } else {
+      throw throwOnUnknownModelType(modelType);
+    }
+  };
+}
+
+function onCallCreateModel(map, config = {}) {
+  const {
+    preAssert
+  } = config;
+  return _onCallWithCallTypeFunction(map, {
+    callType: 'create',
+    crudType: 'create',
+    preAssert,
+    throwOnUnknownModelType: createModelUnknownModelTypeError
+  });
+}
+function createModelUnknownModelTypeError(modelType) {
+  return badRequestError(serverError({
+    status: 400,
+    code: 'UNKNOWN_TYPE_ERROR',
+    message: `Invalid type "${modelType}" to create.`,
+    data: {
+      modelType
+    }
+  }));
+}
+
+function onCallReadModel(map, config = {}) {
+  const {
+    preAssert
+  } = config;
+  return _onCallWithCallTypeFunction(map, {
+    callType: 'read',
+    crudType: 'read',
+    preAssert,
+    throwOnUnknownModelType: readModelUnknownModelTypeError
+  });
+}
+function readModelUnknownModelTypeError(modelType) {
+  return badRequestError(serverError({
+    status: 400,
+    code: 'UNKNOWN_TYPE_ERROR',
+    message: 'Invalid type to read.',
+    data: {
+      modelType
+    }
+  }));
+}
+
+function onCallUpdateModel(map, config = {}) {
+  const {
+    preAssert
+  } = config;
+  return _onCallWithCallTypeFunction(map, {
+    callType: 'update',
+    crudType: 'update',
+    preAssert,
+    throwOnUnknownModelType: updateModelUnknownModelTypeError
+  });
+}
+function updateModelUnknownModelTypeError(modelType) {
+  return badRequestError(serverError({
+    status: 400,
+    code: 'UNKNOWN_TYPE_ERROR',
+    message: 'Invalid type to update.',
+    data: {
+      modelType
+    }
+  }));
+}
+
+function onCallDeleteModel(map, config = {}) {
+  const {
+    preAssert
+  } = config;
+  return _onCallWithCallTypeFunction(map, {
+    callType: 'delete',
+    crudType: 'delete',
+    preAssert,
+    throwOnUnknownModelType: deleteModelUnknownModelTypeError
+  });
+}
+function deleteModelUnknownModelTypeError(modelType) {
+  return badRequestError(serverError({
+    status: 400,
+    code: 'UNKNOWN_TYPE_ERROR',
+    message: 'Invalid type to delete.',
+    data: {
+      modelType
+    }
+  }));
+}
+
+function googleCloudStorageBucketForStorageFilePath(storage, path) {
+  return storage.bucket(path.bucketId);
+}
+function googleCloudStorageFileForStorageFilePath(storage, path) {
+  return googleCloudStorageBucketForStorageFilePath(storage, path).file(path.pathString);
+}
+function googleCloudFileMetadataToStorageMetadata(file, metadata) {
+  const fullPath = file.name;
+  const generation = String(metadata.generation ?? file.generation);
+  const metageneration = String(metadata.metageneration);
+  const size = Number(metadata.size);
+  const customMetadata = metadata.metadata;
+  return {
+    bucket: file.bucket.name,
+    fullPath,
+    generation,
+    metageneration,
+    name: file.name,
+    size,
+    timeCreated: metadata.timeCreated,
+    updated: metadata.updated,
+    md5Hash: metadata.md5Hash,
+    cacheControl: metadata.cacheControl,
+    contentDisposition: metadata.contentDisposition,
+    contentEncoding: metadata.contentEncoding,
+    contentLanguage: metadata.contentLanguage,
+    contentType: metadata.contentType,
+    customMetadata
+  };
+}
+function googleCloudStorageAccessorFile(storage, storagePath) {
+  const file = googleCloudStorageFileForStorageFilePath(storage, storagePath);
+  function makeDownloadOptions(maxDownloadSizeBytes) {
+    return {
+      ...(maxDownloadSizeBytes ? {
+        // end is inclusive
+        end: maxDownloadSizeBytes - 1
+      } : undefined)
+    };
+  }
+  function _configureMetadata(options) {
+    const customMetadata = filterUndefinedValues({
+      ...options.metadata?.customMetadata,
+      ...options?.customMetadata
+    });
+    return filterUndefinedValues({
+      cacheControl: options.metadata?.cacheControl,
+      contentDisposition: options.metadata?.contentDisposition,
+      contentEncoding: options.metadata?.contentEncoding,
+      contentLanguage: options.metadata?.contentLanguage,
+      contentType: options.metadata?.contentType,
+      metadata: !objectHasNoKeys(customMetadata) ? customMetadata : undefined
+    });
+  }
+  function makeUploadOptions(options) {
+    let metadata;
+    if (options != null) {
+      metadata = _configureMetadata({
+        metadata: {
+          ...options.metadata,
+          contentType: options.contentType ?? options.metadata?.contentType
+        },
+        customMetadata: options.customMetadata
+      });
+    }
+    return {
+      // non-resumable
+      resumable: false,
+      // add content type and other custom metadata
+      ...(metadata ? {
+        metadata
+      } : undefined)
+    };
+  }
+  function asFileMetadata(metadata) {
+    return _configureMetadata({
+      metadata
+    });
+  }
+  function makeStoragePathForPath(newPath) {
+    let path;
+    if (typeof newPath === 'string') {
+      path = {
+        bucketId: file.bucket.name,
+        pathString: newPath
+      };
+    } else {
+      path = newPath;
+    }
+    return path;
+  }
+  async function copy(newPath, options) {
+    const newStoragePath = makeStoragePathForPath(newPath);
+    const newFile = googleCloudStorageAccessorFile(storage, newStoragePath);
+    return _copyWithFile(newFile, options);
+  }
+  async function _copyWithFile(newFile, options) {
+    const copyOptions = {
+      ...options
+    };
+    await file.copy(newFile.reference, copyOptions);
+    return newFile;
+  }
+  /**
+   * Configuration for the public ACL.
+   */
+  const PUBLIC_ACL = {
+    entity: 'allUsers',
+    role: 'READER'
+  };
+  const accessorFile = {
+    reference: file,
+    storagePath,
+    exists: () => file.exists().then(x => x[0]),
+    getDownloadUrl: () => file.getMetadata().then(() => file.publicUrl()),
+    getSignedUrl: async input => {
+      const expires = input?.expiresAt ?? (input?.expiresIn != null ? addMilliseconds(new Date(), input.expiresIn) // use expiresIn if provided
+      : addHours(new Date(), 1)); // default expiration in 1 hour
+      const config = {
+        ...input,
+        action: input?.action ?? 'read',
+        expires,
+        expiresIn: undefined,
+        // clear from input
+        expiresAt: undefined
+      };
+      return file.getSignedUrl(config).then(x => x[0]).catch(e => {
+        let publicUrlBackup;
+        if (e && e.name === 'SigningError' && (isTestNodeEnv() || process.env.FIREBASE_STORAGE_EMULATOR_HOST)) {
+          // NOTE: Signing does not behave properly in the emulator as it is not supported.
+          // https://github.com/firebase/firebase-tools/issues/3400
+          // we can return the public url instead.
+          // This is fine, as in production this file url is protected by ACLs anyways.
+          publicUrlBackup = file.publicUrl();
+        } else {
+          throw e;
+        }
+        return publicUrlBackup;
+      });
+    },
+    getMetadata: () => file.getMetadata().then(x => googleCloudFileMetadataToStorageMetadata(file, x[0])),
+    setMetadata: metadata => file.setMetadata(asFileMetadata(metadata)).then(x => googleCloudFileMetadataToStorageMetadata(file, x[0])),
+    getBytes: maxDownloadSizeBytes => file.download(makeDownloadOptions(maxDownloadSizeBytes)).then(x => x[0]),
+    getStream: maxDownloadSizeBytes => file.createReadStream(makeDownloadOptions(maxDownloadSizeBytes)),
+    upload: async (input, options) => {
+      let dataToUpload;
+      if (typeof input === 'string') {
+        const parsedStringFormat = assertStorageUploadOptionsStringFormat(options);
+        const stringFormat = parsedStringFormat === 'raw' ? 'utf-8' : parsedStringFormat;
+        if (stringFormat === 'data_url') {
+          // TODO(FUTURE): support this later if necessary. Server should really never see this type.
+          throw new Error('"data_url" is unsupported.');
+        }
+        dataToUpload = Buffer.from(input, stringFormat);
+      } else {
+        if (Buffer.isBuffer(input)) {
+          dataToUpload = input;
+        } else if (isUint8Array(input)) {
+          dataToUpload = Buffer.from(input);
+        } else {
+          // NOTE: these values shouldn't ever be encountered in the NodeJS environment. May remove later.
+          if (isArrayBuffer(input)) {
+            dataToUpload = Buffer.from(input);
+          } else {
+            dataToUpload = input.arrayBuffer().then(x => Buffer.from(x));
+          }
+        }
+      }
+      const data = await dataToUpload;
+      return file.save(data, makeUploadOptions(options));
+    },
+    uploadStream: options => file.createWriteStream(makeUploadOptions(options)),
+    move: async (newPath, options) => {
+      const newStoragePath = makeStoragePathForPath(newPath);
+      const newFile = googleCloudStorageAccessorFile(storage, newStoragePath);
+      const moveOptions = {
+        ...options
+      };
+      await file.moveFileAtomic(newFile.reference, moveOptions).catch(async e => {
+        if (e instanceof ApiError && e.response?.statusMessage === 'Not Implemented') {
+          // NOTE: This is not implemented in storage emulator, so it will fail with this error in testing.
+          // https://github.com/firebase/firebase-tools/issues/3751
+          // we can perform the same task using copy and then deleting this file.
+          await copy(newPath, moveOptions);
+          await accessorFile.delete();
+        } else {
+          throw e;
+        }
+      });
+      return newFile;
+    },
+    copy,
+    delete: options => file.delete(options).then(x => undefined),
+    isPublic: () => file.isPublic().then(x => x[0]),
+    makePublic: setPublic => (setPublic !== false ? file.acl.add(PUBLIC_ACL) : file.acl.delete({
+      entity: PUBLIC_ACL.entity
+    })).then(() => undefined),
+    makePrivate: options => file.makePrivate(options).then(() => undefined),
+    getAcls: options => file.acl.get(options).then(x => ({
+      acls: x[0],
+      metadata: x[1]
+    }))
+  };
+  return accessorFile;
+}
+const googleCloudStorageListFilesResultFactory = storageListFilesResultFactory({
+  hasItems(result) {
+    return Boolean(result.apiResponse.items || result.apiResponse.prefixes);
+  },
+  hasNext: result => {
+    return result.nextQuery != null;
+  },
+  nextPageTokenFromResult(result) {
+    return result.nextQuery?.pageToken;
+  },
+  next(storage, options, folder, result) {
+    return folder.list({
+      ...options,
+      ...result.nextQuery
+    });
+  },
+  file(storage, fileResult) {
+    return googleCloudStorageAccessorFile(storage, fileResult.storagePath);
+  },
+  folder(storage, folderResult) {
+    return googleCloudStorageAccessorFolder(storage, folderResult.storagePath);
+  },
+  filesFromResult(result) {
+    const items = result.apiResponse?.items ?? [];
+    return items.map(x => ({
+      raw: x,
+      name: slashPathName(x.name),
+      storagePath: {
+        bucketId: x.bucket,
+        pathString: x.name
+      }
+    }));
+  },
+  foldersFromResult(result, folder) {
+    const items = result.apiResponse?.prefixes ?? [];
+    return items.map(prefix => ({
+      raw: prefix,
+      name: slashPathName(prefix),
+      storagePath: {
+        bucketId: folder.storagePath.bucketId,
+        pathString: prefix
+      }
+    }));
+  }
+});
+function googleCloudStorageAccessorFolder(storage, storagePath) {
+  const bucket = googleCloudStorageBucketForStorageFilePath(storage, storagePath);
+  const file = bucket.file(storagePath.pathString);
+  const folder = {
+    reference: file,
+    storagePath,
+    exists: async () => folder.list({
+      maxResults: 1
+    }).then(x => x.hasItems()),
+    list: options => {
+      const {
+        maxResults,
+        pageToken,
+        includeNestedResults: listAll
+      } = options ?? {};
+      const listOptions = {
+        maxResults,
+        pageToken,
+        autoPaginate: false,
+        versions: false,
+        ...(listAll ? {
+          prefix: toRelativeSlashPathStartType(fixMultiSlashesInSlashPath(storagePath.pathString + '/'))
+        } : {
+          // includeTrailingDelimiter: true,
+          delimiter: SLASH_PATH_SEPARATOR,
+          prefix: toRelativeSlashPathStartType(fixMultiSlashesInSlashPath(storagePath.pathString + '/')) // make sure the folder always ends with a slash
+        })
+      };
+      return bucket.getFiles(listOptions).then(x => {
+        const files = x[0];
+        const nextQuery = x[1];
+        const apiResponse = x[2];
+        const result = {
+          files: files,
+          nextQuery,
+          apiResponse: apiResponse
+        };
+        return googleCloudStorageListFilesResultFactory(storage, folder, options, result);
+      });
+    }
+  };
+  return folder;
+}
+function googleCloudStorageFirebaseStorageAccessorDriver() {
+  return {
+    type: 'server',
+    file: (storage, path) => googleCloudStorageAccessorFile(storage, path),
+    folder: (storage, path) => googleCloudStorageAccessorFolder(storage, path)
+  };
+}
+
+function googleCloudFirebaseStorageDrivers() {
+  return {
+    storageDriverIdentifier: '@google-cloud/storage',
+    storageDriverType: 'production',
+    storageAccessorDriver: googleCloudStorageFirebaseStorageAccessorDriver()
+  };
+}
+
+/**
+ * Basic service that implements FirebaseStorageAccessor and provides a FirebaseStorageContext.
+ */
+class FirebaseServerStorageService {
+  constructor(storageContext) {
+    this._storageContext = void 0;
+    this._storageContext = storageContext;
+  }
+  get storageContext() {
+    return this._storageContext;
+  }
+  defaultBucket() {
+    return this.storageContext.defaultBucket();
+  }
+  file(path) {
+    return this.storageContext.file(path);
+  }
+  folder(path) {
+    return this.storageContext.folder(path);
+  }
+}
+
+/**
+ * Creates a FirestoreContextFactory that uses the @google-cloud/storage package.
+ */
+const googleCloudFirebaseStorageContextFactory = firebaseStorageContextFactory(googleCloudFirebaseStorageDrivers());
+/**
+ * Retrieves the GoogleCloudStorage object from the input FirebaseAdmin Storage type.
+ *
+ * @param storage
+ * @returns
+ */
+function googleCloudStorageFromFirebaseAdminStorage(storage) {
+  return storage.storageClient;
+}
+
+// MARK: Tokens
+/**
+ * Token to access the Storage.
+ */
+const FIREBASE_STORAGE_TOKEN = 'FIREBASE_STORAGE_TOKEN';
+/**
+ * Token to access the root StorageContext for a server.
+ */
+const FIREBASE_STORAGE_CONTEXT_TOKEN = 'FIREBASE_STORAGE_CONTEXT_TOKEN';
+/**
+ * Token to the default bucket id string
+ */
+const FIREBASE_STORAGE_CONTEXT_FACTORY_CONFIG_TOKEN = 'FIREBASE_STORAGE_CONTEXT_FACTORY_CONFIG_TOKEN';
+/**
+ * Nest provider module for Firebase that provides a firestore, etc. from the firestore token.
+ */
+let FirebaseServerStorageModule = class FirebaseServerStorageModule {};
+FirebaseServerStorageModule = __decorate([Module({
+  providers: [{
+    provide: FIREBASE_STORAGE_TOKEN,
+    useFactory: app => googleCloudStorageFromFirebaseAdminStorage(app.storage()),
+    inject: [FIREBASE_APP_TOKEN]
+  }],
+  exports: [FIREBASE_STORAGE_TOKEN]
+})], FirebaseServerStorageModule);
+/**
+ * Nest provider module for firebase that includes the FirebaseServerStorageModule and provides a value for STORAGE_CONTEXT_TOKEN using the googleCloudStorageContextFactory.
+ */
+let FirebaseServerStorageContextModule = class FirebaseServerStorageContextModule {};
+FirebaseServerStorageContextModule = __decorate([Module({
+  imports: [FirebaseServerStorageModule],
+  providers: [{
+    provide: FIREBASE_STORAGE_CONTEXT_TOKEN,
+    useFactory: googleCloudFirebaseStorageContextFactory,
+    inject: [FIREBASE_STORAGE_TOKEN, FIREBASE_STORAGE_CONTEXT_FACTORY_CONFIG_TOKEN]
+  }],
+  exports: [FirebaseServerStorageModule, FIREBASE_STORAGE_CONTEXT_TOKEN]
+})], FirebaseServerStorageContextModule);
+// MARK: Token Configuration
+function firebaseServerStorageDefaultBucketIdTokenProvider(input) {
+  const config = typeof input === 'string' ? {
+    defaultBucketId: input
+  } : input;
+  if (!config.defaultBucketId) {
+    throw new Error('Non-empty defaultBucketId is required.');
+  }
+  return {
+    provide: FIREBASE_STORAGE_CONTEXT_FACTORY_CONFIG_TOKEN,
+    useValue: config
+  };
+}
+function defaultProvideFirebaseServerStorageServiceSimple() {
+  return {
+    provide: FirebaseServerStorageService,
+    useFactory: context => new FirebaseServerStorageService(context)
+  };
+}
+function provideFirebaseServerStorageService(provider) {
+  const providers = [{
+    ...provider,
+    inject: provider.inject ?? [FIREBASE_STORAGE_CONTEXT_TOKEN]
+  }];
+  if (provider.provide !== FirebaseServerStorageService) {
+    providers.push({
+      provide: FirebaseServerStorageService,
+      useExisting: provider.provide
+    });
+  }
+  return providers;
+}
+/**
+ * Convenience function used to generate ModuleMetadata for an app's Auth related modules and FirebaseServerStorageService provider.
+ *
+ * @param provide
+ * @param useFactory
+ * @returns
+ */
+function firebaseServerStorageModuleMetadata(config) {
+  const serviceProvider = config && config.serviceProvider ? config.serviceProvider : defaultProvideFirebaseServerStorageServiceSimple();
+  const providers = provideFirebaseServerStorageService(serviceProvider);
+  const tokensToExport = injectionTokensFromProviders(providers);
+  return mergeModuleMetadata({
+    imports: [FirebaseServerStorageContextModule],
+    exports: [FirebaseServerStorageContextModule, ...tokensToExport],
+    providers
+  }, config);
+}
+
+class FirebaseNestServerRootModule {}
+function nestServerInstance(config) {
+  const {
+    moduleClass,
+    providers: additionalProviders,
+    defaultStorageBucket: inputDefaultStorageBucket,
+    forceStorageBucket,
+    globalApiRoutePrefix,
+    configureNestServerInstance
+  } = config;
+  const serversCache = new Map();
+  const initNestServer = (firebaseApp, env) => {
+    const appName = firebaseApp.name;
+    const defaultStorageBucket = inputDefaultStorageBucket ?? firebaseApp.options.storageBucket;
+    let nestServer = serversCache.get(appName);
+    if (!nestServer) {
+      const server = express();
+      const createNestServer = async expressInstance => {
+        const providers = [firebaseServerAppTokenProvider(asGetter(firebaseApp))];
+        // configure environment providers
+        if (env?.environment != null) {
+          providers.push(serverEnvTokenProvider(env.environment));
+          if (config.configureEnvService !== false) {
+            providers.push({
+              provide: FirebaseServerEnvService,
+              useClass: DefaultFirebaseServerEnvService
+            }, {
+              provide: ServerEnvironmentService,
+              useExisting: FirebaseServerEnvService
+            });
+          }
+        }
+        if (additionalProviders) {
+          pushItemOrArrayItemsIntoArray(providers, additionalProviders);
+        }
+        const imports = [moduleClass];
+        // NOTE: https://cloud.google.com/functions/docs/writing/http#parsing_http_requests
+        const options = {
+          bodyParser: false
+        }; // firebase already parses the requests
+        if (config.configureWebhooks) {
+          imports.push(ConfigureFirebaseWebhookMiddlewareModule);
+        }
+        if (config.appCheckEnabled != false) {
+          imports.push(ConfigureFirebaseAppCheckMiddlewareModule);
+        }
+        if (defaultStorageBucket) {
+          providers.push(firebaseServerStorageDefaultBucketIdTokenProvider({
+            defaultBucketId: defaultStorageBucket,
+            forceBucket: forceStorageBucket
+          }));
+        }
+        // provide the global prefix config to the app
+        providers.push({
+          provide: GlobalRoutePrefixConfig,
+          useValue: {
+            globalApiRoutePrefix
+          }
+        });
+        const providersModule = {
+          module: FirebaseNestServerRootModule,
+          imports,
+          providers,
+          exports: providers,
+          global: true
+        };
+        let nestApp = await NestFactory.create(providersModule, new ExpressAdapter(expressInstance), options);
+        if (globalApiRoutePrefix) {
+          nestApp = nestApp.setGlobalPrefix(globalApiRoutePrefix);
+        }
+        if (configureNestServerInstance) {
+          nestApp = configureNestServerInstance(nestApp) || nestApp;
+        }
+        return nestApp.init();
+      };
+      const nest = createNestServer(server).catch(err => {
+        console.error('Nest failed startup.', err);
+        throw err;
+      });
+      nestServer = {
+        server,
+        nest: makeGetter(nest)
+      };
+      serversCache.set(appName, nestServer);
+    }
+    return nestServer;
+  };
+  const removeNestServer = async firebaseApp => {
+    const appName = firebaseApp.name;
+    const nestServer = serversCache.get(appName);
+    let removed;
+    if (nestServer) {
+      removed = nestServer.nest().then(x => {
+        serversCache.delete(appName);
+        return x.close().then(() => true);
+      });
+    } else {
+      removed = Promise.resolve(false);
+    }
+    return removed;
+  };
+  return {
+    moduleClass,
+    initNestServer,
+    removeNestServer
+  };
+}
+
+/**
+ * Abstract class that wraps an INestApplicationContext value.
+ */
+class AbstractNestContext {
+  constructor(nest) {
+    this._nest = void 0;
+    this._nest = nest;
+  }
+  get nest() {
+    return this._nest;
+  }
+}
+class AbstractFirebaseNestContext extends AbstractNestContext {
+  constructor(...args) {
+    super(...args);
+    /**
+     * FirebasePermissionErrorContextErrorFunction to use with makeModelContext().
+     *
+     * Defaults to nestFirebaseForbiddenPermissionError().
+     */
+    this.makePermissionError = nestFirebaseForbiddenPermissionError;
+    /**
+     * FirebaseDoesNotExistErrorContextErrorFunction to use with makeModelContext().
+     *
+     * Defaults to nestFirebaseDoesNotExistError().
+     *
+     * Some configurations may prefer to use nestFirebaseForbiddenPermissionError instead, which returns a forbidden error instead.
+     * This prevents the leaking of information about the existence of an object.
+     */
+    this.makeDoesNotExistError = nestFirebaseDoesNotExistError;
+  }
+  get envService() {
+    return this.nest.get(FirebaseServerEnvService);
+  }
+  get storageService() {
+    return this.nest.get(FirebaseServerStorageService);
+  }
+  /**
+   * Creates a FirebaseAppModelContext instance.
+   *
+   * @param auth
+   * @param buildFn
+   * @returns
+   */
+  makeModelContext(auth, buildFn) {
+    const base = {
+      auth: this.authService.authContextInfo(auth),
+      app: this.app,
+      makePermissionError: this.makePermissionError,
+      makeDoesNotExistError: this.makeDoesNotExistError
+    };
+    return buildFn ? build({
+      base,
+      build: buildFn
+    }) : base;
+  }
+  /**
+   * Creates a InContextFirebaseModelsService given the input context and parameters.
+   *
+   * @param context
+   * @param buildFn
+   * @returns
+   */
+  model(context, buildFn) {
+    const firebaseModelContext = this.makeModelContext(context, buildFn);
+    return inContextFirebaseModelsServiceFactory(this.firebaseModelsService)(firebaseModelContext);
+  }
+  async useModel(type, select) {
+    const context = this.makeModelContext(select.request, select.buildFn);
+    const usePromise = useFirebaseModelsService(this.firebaseModelsService, type, {
+      context,
+      key: select.key,
+      roles: select.roles,
+      rolesSetIncludes: select.rolesSetIncludes
+    });
+    const use = select.use ?? (x => x);
+    return usePromise(use);
+  }
+}
+
+export { ALREADY_EXISTS_ERROR_CODE, AbstractFirebaseNestContext, AbstractFirebaseServerActionsContext, AbstractFirebaseServerAuthContext, AbstractFirebaseServerAuthService, AbstractFirebaseServerAuthUserContext, AbstractFirebaseServerNewUserService, AbstractNestContext, BAD_REQUEST_ERROR_CODE, CONFLICT_ERROR_CODE, ConfigureFirebaseAppCheckMiddlewareModule, ConfigureFirebaseWebhookMiddlewareModule, DEFAULT_FIREBASE_PASSWORD_NUMBER_GENERATOR, DEFAULT_SETUP_COM_THROTTLE_TIME, DefaultFirebaseServerEnvService, FIREBASE_APP_TOKEN, FIREBASE_AUTH_TOKEN, FIREBASE_FIRESTORE_CONTEXT_TOKEN, FIREBASE_FIRESTORE_TOKEN, FIREBASE_SERVER_VALIDATION_ERROR_CODE, FIREBASE_STORAGE_CONTEXT_FACTORY_CONFIG_TOKEN, FIREBASE_STORAGE_CONTEXT_TOKEN, FIREBASE_STORAGE_TOKEN, FIRESTORE_CLIENT_QUERY_CONSTRAINT_HANDLER_MAPPING, FORBIDDEN_ERROR_CODE, FirebaseAppCheckMiddleware, FirebaseNestServerRootModule, FirebaseRawBodyMiddleware, FirebaseServerAuthModule, FirebaseServerAuthNewUserSendSetupDetailsNoSetupConfigError, FirebaseServerAuthNewUserSendSetupDetailsSendOnceError, FirebaseServerAuthNewUserSendSetupDetailsThrottleError, FirebaseServerAuthService, FirebaseServerEnvService, FirebaseServerFirestoreContextModule, FirebaseServerFirestoreModule, FirebaseServerStorageContextModule, FirebaseServerStorageModule, FirebaseServerStorageService, INTERNAL_SERVER_ERROR_CODE, MODEL_NOT_AVAILABLE_ERROR_CODE, NOT_FOUND_ERROR_CODE, NO_AUTH_ERROR_CODE, NO_RUN_NAME_SPECIFIED_FOR_SCHEDULED_FUNCTION_DEVELOPMENT_FUNCTION_CODE, NO_UID_ERROR_CODE, NoSetupContentFirebaseServerNewUserService, PERMISSION_DENIED_ERROR_CODE, PHONE_NUMBER_ALREADY_EXISTS_ERROR_CODE, SkipAppCheck, UNAUTHENTICATED_ERROR_CODE, UNAVAILABLE_ERROR_CODE, UNAVAILABLE_OR_DEACTIVATED_FUNCTION_ERROR_CODE, UNKNOWN_SCHEDULED_FUNCTION_DEVELOPMENT_FUNCTION_NAME_CODE, UNKNOWN_SCHEDULED_FUNCTION_DEVELOPMENT_FUNCTION_TYPE_CODE, _onCallWithCallTypeFunction, alreadyExistsError, appFirestoreModuleMetadata, assertContextHasAuth, assertDocumentExists, assertHasRolesInRequest, assertHasSignedTosInRequest, assertIsAdminInRequest, assertIsAdminOrTargetUserInRequestData, assertIsContextWithAuthData, assertRequestRequiresAuthForFunction, assertSnapshotData, assertSnapshotDataWithKey, badRequestError, blockingFunctionHandlerWithNestContextFactory, cloudEventHandlerWithNestContextFactory, collectionRefForPath, createModelUnknownModelTypeError, defaultFirebaseServerActionsTransformFactoryLogErrorFunction, defaultProvideFirebaseServerStorageServiceSimple, deleteModelUnknownModelTypeError, developmentUnknownSpecifierError, docRefForPath, documentModelNotAvailableError, firebaseAuthTokenFromDecodedIdToken, firebaseServerActionsContext, firebaseServerActionsTransformContext, firebaseServerActionsTransformFactory, firebaseServerAppTokenProvider, firebaseServerAuthModuleMetadata, firebaseServerDevFunctions, firebaseServerErrorInfo, firebaseServerErrorInfoCodePair, firebaseServerErrorInfoServerErrorCodePair, firebaseServerErrorInfoServerErrorPair, firebaseServerStorageDefaultBucketIdTokenProvider, firebaseServerStorageModuleMetadata, firebaseServerValidationError, firebaseServerValidationServerError, firestoreClientQueryConstraintFunctionsDriver, firestoreServerIncrementUpdateToUpdateData, forbiddenError, getAuthUserOrUndefined, googleCloudFileMetadataToStorageMetadata, googleCloudFirebaseStorageContextFactory, googleCloudFirebaseStorageDrivers, googleCloudFirestoreAccessorDriver, googleCloudFirestoreContextFactory, googleCloudFirestoreDrivers, googleCloudFirestoreQueryDriver, googleCloudStorageAccessorFile, googleCloudStorageAccessorFolder, googleCloudStorageBucketForStorageFilePath, googleCloudStorageFileForStorageFilePath, googleCloudStorageFirebaseStorageAccessorDriver, googleCloudStorageFromFirebaseAdminStorage, googleCloudStorageListFilesResultFactory, handleFirebaseAuthError, handleFirebaseError, hasAuthRolesInRequest, hasNewUserSetupPasswordInRequest, hasSignedTosInRequest, inAuthContext, injectNestApplicationContextIntoRequest, injectNestIntoRequest, internalServerError, isAdminInRequest, isAdminOrTargetUserInRequestData, isContextWithAuthData, isFirebaseError, isFirebaseHttpsError, makeBlockingFunctionWithHandler, makeOnScheduleHandlerWithNestApplicationRequest, makeScheduledFunctionDevelopmentFunction, modelNotAvailableError, nestAppHasDevelopmentSchedulerEnabled, nestAppIsProductionEnvironment, nestFirebaseDoesNotExistError, nestFirebaseForbiddenPermissionError, nestServerInstance, noRunNameSpecifiedForScheduledFunctionDevelopmentFunction, notFoundError, onCallCreateModel, onCallDeleteModel, onCallDevelopmentFunction, onCallHandlerWithNestApplicationFactory, onCallHandlerWithNestContextFactory, onCallModel, onCallModelMissingCallTypeError, onCallModelUnknownCallTypeError, onCallReadModel, onCallSpecifierHandler, onCallUpdateModel, onScheduleHandlerWithNestApplicationFactory, onScheduleHandlerWithNestContextFactory, optionalAuthContext, permissionDeniedError, phoneNumberAlreadyExistsError, preconditionConflictError, provideAppFirestoreCollections, provideFirebaseServerAuthService, provideFirebaseServerStorageService, readModelUnknownModelTypeError, setNestContextOnRequest, setNestContextOnScheduleRequest, taskQueueFunctionHandlerWithNestContextFactory, unauthenticatedContextHasNoAuthData, unauthenticatedContextHasNoUidError, unauthenticatedError, unavailableError, unavailableOrDeactivatedFunctionError, unknownModelCrudFunctionSpecifierError, unknownScheduledFunctionDevelopmentFunctionName, unknownScheduledFunctionDevelopmentFunctionType, updateModelUnknownModelTypeError, userContextFromUid, verifyAppCheckInRequest };