@dereekb/firebase-server 13.11.18 → 13.12.0

package/index.esm.js

@@ -1,7 +1,8 @@
-import { DBX_FIREBASE_SERVER_NO_AUTH_ERROR_CODE, UNAUTHENTICATED_ERROR_CODE, FORBIDDEN_ERROR_CODE, PERMISSION_DENIED_ERROR_CODE, NOT_FOUND_ERROR_CODE, MODEL_NOT_AVAILABLE_ERROR_CODE, BAD_REQUEST_ERROR_CODE, CONFLICT_ERROR_CODE, ALREADY_EXISTS_ERROR_CODE, UNAVAILABLE_ERROR_CODE, UNAVAILABLE_OR_DEACTIVATED_FUNCTION_ERROR_CODE, INTERNAL_SERVER_ERROR_CODE, FIREBASE_AUTH_USER_NOT_FOUND_ERROR, FIREBASE_SERVER_AUTH_CLAIMS_RESET_PASSWORD_KEY, FIREBASE_SERVER_AUTH_CLAIMS_RESET_LAST_COM_DATE_KEY, FIREBASE_SERVER_AUTH_CLAIMS_SETUP_PASSWORD_KEY, FIREBASE_AUTH_PHONE_NUMBER_ALREADY_EXISTS_ERROR, FIREBASE_AUTH_EMAIL_ALREADY_EXISTS_ERROR, FIREBASE_AUTH_INVALID_PHONE_NUMBER_ERROR, FIREBASE_SERVER_AUTH_CLAIMS_SETUP_LAST_COM_DATE_KEY, setIdAndKeyFromKeyIdRefOnDocumentData, DBX_FIREBASE_SERVER_PASSWORD_RESET_INVALID_CODE_ERROR_CODE, DBX_FIREBASE_SERVER_PASSWORD_RESET_NO_CONFIG_ERROR_CODE, DBX_FIREBASE_SERVER_PASSWORD_RESET_SEND_ONCE_ERROR_CODE, DBX_FIREBASE_SERVER_PASSWORD_RESET_THROTTLE_ERROR_CODE, FirestoreDocumentContextType, streamFromOnSnapshot, FIRESTORE_LIMIT_QUERY_CONSTRAINT_TYPE, FIRESTORE_LIMIT_TO_LAST_QUERY_CONSTRAINT_TYPE, FIRESTORE_ORDER_BY_QUERY_CONSTRAINT_TYPE, FIRESTORE_ORDER_BY_DOCUMENT_ID_QUERY_CONSTRAINT_TYPE, FIRESTORE_WHERE_QUERY_CONSTRAINT_TYPE, FIRESTORE_WHERE_DOCUMENT_ID_QUERY_CONSTRAINT_TYPE, FIRESTORE_OFFSET_QUERY_CONSTRAINT_TYPE, FIRESTORE_START_AT_QUERY_CONSTRAINT_TYPE, FIRESTORE_START_AT_VALUE_QUERY_CONSTRAINT_TYPE, FIRESTORE_START_AFTER_QUERY_CONSTRAINT_TYPE, FIRESTORE_END_AT_QUERY_CONSTRAINT_TYPE, FIRESTORE_END_AT_VALUE_QUERY_CONSTRAINT_TYPE, FIRESTORE_END_BEFORE_QUERY_CONSTRAINT_TYPE, makeFirestoreQueryConstraintFunctionsDriver, firestoreContextFactory, firestoreField, optionalFirestoreField, DEFAULT_MODEL_FUNCTION_FIREBASE_CRUD_FUNCTION_SPECIFIER, UNKNOWN_MODEL_TYPE_ERROR_CODE, BAD_DOCUMENT_QUERY_CURSOR_ERROR_CODE, limit, startAfter, DEFAULT_ON_CALL_QUERY_MODEL_LIMIT, MAX_ON_CALL_QUERY_MODEL_LIMIT, ScheduledFunctionDevelopmentFunctionTypeEnum, SCHEDULED_FUNCTION_DEV_FUNCTION_SPECIFIER, storageListFilesResultFactory, assertStorageUploadOptionsStringFormat, firebaseStorageContextFactory, inContextFirebaseModelsServiceFactory, useFirebaseModelsService } from '@dereekb/firebase';
+import { timingSafeEqual } from 'node:crypto';
+import { DBX_FIREBASE_SERVER_NO_AUTH_ERROR_CODE, UNAUTHENTICATED_ERROR_CODE, FORBIDDEN_ERROR_CODE, PERMISSION_DENIED_ERROR_CODE, NOT_FOUND_ERROR_CODE, MODEL_NOT_AVAILABLE_ERROR_CODE, BAD_REQUEST_ERROR_CODE, CONFLICT_ERROR_CODE, ALREADY_EXISTS_ERROR_CODE, UNAVAILABLE_ERROR_CODE, UNAVAILABLE_OR_DEACTIVATED_FUNCTION_ERROR_CODE, INTERNAL_SERVER_ERROR_CODE, FIREBASE_AUTH_USER_NOT_FOUND_ERROR, FIREBASE_SERVER_AUTH_CLAIMS_RESET_PASSWORD_KEY, FIREBASE_SERVER_AUTH_CLAIMS_RESET_LAST_COM_DATE_KEY, FIREBASE_SERVER_AUTH_CLAIMS_RESET_EXPIRES_AT_KEY, FIREBASE_SERVER_AUTH_CLAIMS_SETUP_PASSWORD_KEY, FIREBASE_AUTH_PHONE_NUMBER_ALREADY_EXISTS_ERROR, FIREBASE_AUTH_EMAIL_ALREADY_EXISTS_ERROR, FIREBASE_AUTH_INVALID_PHONE_NUMBER_ERROR, FIREBASE_SERVER_AUTH_CLAIMS_SETUP_LAST_COM_DATE_KEY, setIdAndKeyFromKeyIdRefOnDocumentData, DBX_FIREBASE_SERVER_PASSWORD_RESET_INVALID_CODE_ERROR_CODE, DBX_FIREBASE_SERVER_PASSWORD_RESET_NO_CONFIG_ERROR_CODE, DBX_FIREBASE_SERVER_PASSWORD_RESET_SEND_ONCE_ERROR_CODE, DBX_FIREBASE_SERVER_PASSWORD_RESET_THROTTLE_ERROR_CODE, FirestoreDocumentContextType, streamFromOnSnapshot, FIRESTORE_LIMIT_QUERY_CONSTRAINT_TYPE, FIRESTORE_LIMIT_TO_LAST_QUERY_CONSTRAINT_TYPE, FIRESTORE_ORDER_BY_QUERY_CONSTRAINT_TYPE, FIRESTORE_ORDER_BY_DOCUMENT_ID_QUERY_CONSTRAINT_TYPE, FIRESTORE_WHERE_QUERY_CONSTRAINT_TYPE, FIRESTORE_WHERE_DOCUMENT_ID_QUERY_CONSTRAINT_TYPE, FIRESTORE_OFFSET_QUERY_CONSTRAINT_TYPE, FIRESTORE_START_AT_QUERY_CONSTRAINT_TYPE, FIRESTORE_START_AT_VALUE_QUERY_CONSTRAINT_TYPE, FIRESTORE_START_AFTER_QUERY_CONSTRAINT_TYPE, FIRESTORE_END_AT_QUERY_CONSTRAINT_TYPE, FIRESTORE_END_AT_VALUE_QUERY_CONSTRAINT_TYPE, FIRESTORE_END_BEFORE_QUERY_CONSTRAINT_TYPE, makeFirestoreQueryConstraintFunctionsDriver, firestoreContextFactory, firestoreField, optionalFirestoreField, DEFAULT_MODEL_FUNCTION_FIREBASE_CRUD_FUNCTION_SPECIFIER, UNKNOWN_MODEL_TYPE_ERROR_CODE, BAD_DOCUMENT_QUERY_CURSOR_ERROR_CODE, limit, startAfter, DEFAULT_ON_CALL_QUERY_MODEL_LIMIT, MAX_ON_CALL_QUERY_MODEL_LIMIT, ScheduledFunctionDevelopmentFunctionTypeEnum, SCHEDULED_FUNCTION_DEV_FUNCTION_SPECIFIER, storageListFilesResultFactory, assertStorageUploadOptionsStringFormat, firebaseStorageContextFactory, inContextFirebaseModelsServiceFactory, useFirebaseModelsService } from '@dereekb/firebase';
 import { partialServerError, isServerError, randomNumberFactory, cachedGetter, filterNullAndUndefinedValues, asSet, AUTH_ADMIN_ROLE, AUTH_TOS_SIGNED_ROLE, forEachKeyValue, KeyValueTypleValueFilter, filterUndefinedValues, isThrottled, mapObjectMap, batch, objectToMap, serverError, asArray, containsAllValues, websiteUrlDetails, mergeObjects, cronExpressionRepeatingEveryNMinutes, mapIdentityFunction, slashPathName, toRelativeSlashPathStartType, fixMultiSlashesInSlashPath, SLASH_PATH_SEPARATOR, objectHasNoKeys, websiteUrlFromPaths, pushItemOrArrayItemsIntoArray, makeGetter, asGetter, build, performAsyncTasks } from '@dereekb/util';
 import { HttpsError } from 'firebase-functions/https';
-import { hoursToMs, toISODateString } from '@dereekb/date';
+import { hoursToMs, minutesToMs, toISODateString } from '@dereekb/date';
 import { BaseError } from 'make-error';
 import { SERVER_ENV_TOKEN, resolveEncryptionKey, encryptValue, decryptValue, mergeModuleMetadata, ServerEnvironmentService, DEFAULT_BASE_WEBHOOK_PATH, DEFAULT_WEBHOOK_MIDDLEWARE_ROUTE_INFO, isTestNodeEnv, injectionTokensFromProviders, nodeJsLocalAssetLoader } from '@dereekb/nestjs';
 import { from } from 'rxjs';
@@ -1239,12 +1240,14 @@ function _ts_generator$g(thisArg, body) {
             key: "beginResetPassword",
             value: function beginResetPassword() {
                 return _async_to_generator$g(function() {
-                    var password, _obj, passwordClaimsData;
+                    var password, now, expiresAt, _obj, passwordClaimsData;
                     return _ts_generator$g(this, function(_state) {
                         switch(_state.label){
                             case 0:
                                 password = this._generateResetPasswordKey();
-                                passwordClaimsData = (_obj = {}, _define_property$x(_obj, FIREBASE_SERVER_AUTH_CLAIMS_RESET_PASSWORD_KEY, password), _define_property$x(_obj, FIREBASE_SERVER_AUTH_CLAIMS_RESET_LAST_COM_DATE_KEY, toISODateString(new Date())), _obj);
+                                now = new Date();
+                                expiresAt = new Date(now.getTime() + this._resetCodeExpiresInMs());
+                                passwordClaimsData = (_obj = {}, _define_property$x(_obj, FIREBASE_SERVER_AUTH_CLAIMS_RESET_PASSWORD_KEY, password), _define_property$x(_obj, FIREBASE_SERVER_AUTH_CLAIMS_RESET_LAST_COM_DATE_KEY, toISODateString(now)), _define_property$x(_obj, FIREBASE_SERVER_AUTH_CLAIMS_RESET_EXPIRES_AT_KEY, toISODateString(expiresAt)), _obj);
                                 // set the claims
                                 return [
                                     4,
@@ -1270,6 +1273,17 @@ function _ts_generator$g(thisArg, body) {
                 }).call(this);
             }
         },
+        {
+            /**
+     * Returns the TTL (in milliseconds) for newly-generated reset codes. Subclasses may override
+     * to customize expiry.
+     *
+     * @returns The TTL in milliseconds for newly-generated reset codes.
+     */ key: "_resetCodeExpiresInMs",
+            value: function _resetCodeExpiresInMs() {
+                return DEFAULT_RESET_CODE_EXPIRES_IN;
+            }
+        },
         {
             key: "loadResetPasswordClaims",
             value: function loadResetPasswordClaims() {
@@ -1313,7 +1327,7 @@ function _ts_generator$g(thisArg, body) {
                                 // clear password reset claims
                                 return [
                                     4,
-                                    this.updateClaims((_obj = {}, _define_property$x(_obj, FIREBASE_SERVER_AUTH_CLAIMS_RESET_PASSWORD_KEY, null), _define_property$x(_obj, FIREBASE_SERVER_AUTH_CLAIMS_RESET_LAST_COM_DATE_KEY, null), _obj))
+                                    this.updateClaims((_obj = {}, _define_property$x(_obj, FIREBASE_SERVER_AUTH_CLAIMS_RESET_PASSWORD_KEY, null), _define_property$x(_obj, FIREBASE_SERVER_AUTH_CLAIMS_RESET_LAST_COM_DATE_KEY, null), _define_property$x(_obj, FIREBASE_SERVER_AUTH_CLAIMS_RESET_EXPIRES_AT_KEY, null), _obj))
                                 ];
                             case 2:
                                 _state.sent();
@@ -2108,10 +2122,17 @@ function _ts_generator$g(thisArg, body) {
     return NoSetupContentFirebaseServerNewUserService;
 }(AbstractFirebaseServerNewUserService);
 /**
- * Default throttle duration (1 hour) between reset content sends to prevent spam.
+ * Default throttle duration (60 seconds) between reset content re-sends to prevent spam while
+ * remaining responsive for legitimate users who didn't receive the first email.
  *
  * Used by {@link AbstractFirebaseServerUserPasswordResetService.sendResetContent} to rate-limit delivery.
- */ var DEFAULT_RESET_COM_THROTTLE_TIME = hoursToMs(1);
+ */ var DEFAULT_RESET_COM_THROTTLE_TIME = minutesToMs(1);
+/**
+ * Default lifetime (15 minutes) of a reset code before it expires.
+ *
+ * Used by {@link AbstractFirebaseServerAuthUserContext.beginResetPassword} to set
+ * `resetExpiresAt` in the user's claims.
+ */ var DEFAULT_RESET_CODE_EXPIRES_IN = minutesToMs(15);
 /**
  * Base implementation of {@link FirebaseServerUserPasswordResetService} that handles reset initiation,
  * claims management, throttled reset content delivery, and reset completion.
@@ -2192,12 +2213,15 @@ function _ts_generator$g(thisArg, body) {
                                     3,
                                     7
                                 ];
+                                // beginResetPassword() just refreshed the claims (including resetCommunicationAt = now),
+                                // so the throttle window from any previous send no longer applies — this is the first send
+                                // of the newly-rotated code and must not be self-throttled.
                                 return [
                                     4,
                                     this.sendResetContent(resolvedUid, {
                                         data: data,
                                         sendResetDetailsOnce: sendResetDetailsOnce,
-                                        ignoreSendThrottleTime: sendResetIgnoreThrottle,
+                                        ignoreSendThrottleTime: sendResetIgnoreThrottle !== null && sendResetIgnoreThrottle !== void 0 ? sendResetIgnoreThrottle : true,
                                         throwErrors: sendResetThrowErrors,
                                         sendDetailsInTestEnvironment: sendDetailsInTestEnvironment
                                     })
@@ -2351,7 +2375,8 @@ function _ts_generator$g(thisArg, body) {
                                         userContext: userContext,
                                         claims: {
                                             resetPassword: claims.resetPassword,
-                                            resetCommunicationAt: claims.resetCommunicationAt
+                                            resetCommunicationAt: claims.resetCommunicationAt,
+                                            resetExpiresAt: claims.resetExpiresAt
                                         },
                                         data: config === null || config === void 0 ? void 0 : config.data,
                                         sendDetailsInTestEnvironment: config === null || config === void 0 ? void 0 : config.sendDetailsInTestEnvironment
@@ -2397,7 +2422,7 @@ function _ts_generator$g(thisArg, body) {
             key: "completePasswordReset",
             value: function completePasswordReset(uid, input) {
                 return _async_to_generator$g(function() {
-                    var userContext, claims;
+                    var userContext, claims, storedCode, expiresAt, storedBuf, inputBuf;
                     return _ts_generator$g(this, function(_state) {
                         switch(_state.label){
                             case 0:
@@ -2408,7 +2433,18 @@ function _ts_generator$g(thisArg, body) {
                                 ];
                             case 1:
                                 claims = _state.sent();
-                                if ((claims === null || claims === void 0 ? void 0 : claims.resetPassword) !== input.resetPassword) {
+                                storedCode = claims === null || claims === void 0 ? void 0 : claims.resetPassword;
+                                expiresAt = claims === null || claims === void 0 ? void 0 : claims.resetExpiresAt;
+                                // Reject if no active reset OR the stored code is missing/wrong length OR the code is expired.
+                                // All failure cases throw the same opaque error so callers cannot distinguish them.
+                                if (!storedCode || !expiresAt || storedCode.length !== input.resetPassword.length || new Date(expiresAt).getTime() <= Date.now()) {
+                                    throw new FirebaseServerAuthPasswordResetInvalidCodeError();
+                                }
+                                // Constant-time comparison to avoid leaking timing information about how many leading
+                                // characters of the provided code matched. Lengths are equal per the guard above.
+                                storedBuf = Buffer.from(storedCode);
+                                inputBuf = Buffer.from(input.resetPassword);
+                                if (!timingSafeEqual(storedBuf, inputBuf)) {
                                     throw new FirebaseServerAuthPasswordResetInvalidCodeError();
                                 }
                                 return [
@@ -2917,7 +2953,7 @@ function _async_to_generator$e(fn) {
         });
     };
 }
-function _instanceof$2(left, right) {
+function _instanceof$3(left, right) {
     "@swc/helpers - instanceof";
     if (right != null && typeof Symbol !== "undefined" && right[Symbol.hasInstance]) {
         return !!right[Symbol.hasInstance](left);
@@ -3029,15 +3065,28 @@ function _ts_generator$e(thisArg, body) {
  * catching password-reset-specific errors and re-throwing them as appropriate {@link HttpsError} instances
  * suitable for returning to clients.
  *
- * Error mapping:
+ * Default mapping (security-hardened — enumeration-safe, for end-user callers):
+ * - {@link FirebaseServerAuthPasswordResetInvalidCodeError} → permission-denied (403)
+ * - {@link FirebaseServerAuthPasswordResetNoResetConfigError} → permission-denied (403), same opaque
+ *   response as InvalidCode so callers cannot distinguish "wrong code" from "no reset active".
+ * - {@link FirebaseServerAuthPasswordResetSendOnceError} → permission-denied (403), same opaque
+ *   response so callers cannot probe whether a reset was already initiated.
+ * - {@link FirebaseServerAuthPasswordResetThrottleError} → unavailable (503) with a generic message
+ *   (no `lastSentAt` is leaked).
+ *
+ * Admin mapping (`isAdmin: true`) — preserves distinct error codes and statuses so an admin
+ * resetting on behalf of another user can see the actual reason. Used when the call originates
+ * from an authenticated admin, where enumeration is not a concern:
  * - {@link FirebaseServerAuthPasswordResetInvalidCodeError} → permission-denied (403)
- * - {@link FirebaseServerAuthPasswordResetNoResetConfigError} → bad-request (400)
- * - {@link FirebaseServerAuthPasswordResetThrottleError} → unavailable (503)
- * - {@link FirebaseServerAuthPasswordResetSendOnceError} → bad-request (400)
+ * - {@link FirebaseServerAuthPasswordResetNoResetConfigError} → bad-request (400), distinct message
+ * - {@link FirebaseServerAuthPasswordResetSendOnceError} → bad-request (400), distinct message
+ * - {@link FirebaseServerAuthPasswordResetThrottleError} → unavailable (503), same as default
  *
  * @param fn - The async function to execute.
+ * @param isAdmin - When `true`, returns distinct error codes/messages instead of the
+ *   enumeration-safe opaque response. Pass the caller's admin status here.
  * @returns The result of the function.
- */ function catchAndThrowPasswordResetServerErrors(fn) {
+ */ function catchAndThrowPasswordResetServerErrors(fn, isAdmin) {
     return _async_to_generator$e(function() {
         var result, error;
         return _ts_generator$e(this, function(_state) {
@@ -3061,14 +3110,14 @@ function _ts_generator$e(thisArg, body) {
                     ];
                 case 2:
                     error = _state.sent();
-                    if (_instanceof$2(error, FirebaseServerAuthPasswordResetInvalidCodeError)) {
+                    if (_instanceof$3(error, FirebaseServerAuthPasswordResetInvalidCodeError)) {
                         throw authServicePasswordResetInvalidCodeError();
-                    } else if (_instanceof$2(error, FirebaseServerAuthPasswordResetNoResetConfigError)) {
-                        throw authServicePasswordResetNoConfigError();
-                    } else if (_instanceof$2(error, FirebaseServerAuthPasswordResetThrottleError)) {
+                    } else if (_instanceof$3(error, FirebaseServerAuthPasswordResetNoResetConfigError)) {
+                        throw isAdmin ? authServicePasswordResetNoConfigError() : authServicePasswordResetInvalidCodeError();
+                    } else if (_instanceof$3(error, FirebaseServerAuthPasswordResetSendOnceError)) {
+                        throw isAdmin ? authServicePasswordResetSendOnceError() : authServicePasswordResetInvalidCodeError();
+                    } else if (_instanceof$3(error, FirebaseServerAuthPasswordResetThrottleError)) {
                         throw authServicePasswordResetThrottleError();
-                    } else if (_instanceof$2(error, FirebaseServerAuthPasswordResetSendOnceError)) {
-                        throw authServicePasswordResetSendOnceError();
                     }
                     throw error;
                 case 3:
@@ -3087,12 +3136,17 @@ function _ts_generator$e(thisArg, body) {
  */ function authServicePasswordResetInvalidCodeError() {
     return permissionDeniedError({
         code: DBX_FIREBASE_SERVER_PASSWORD_RESET_INVALID_CODE_ERROR_CODE,
-        message: 'Invalid or expired reset password code.'
+        message: 'Invalid or expired reset code.'
     });
 }
 /**
  * Creates a bad-request (400) server error when no active password reset exists for the user.
  *
+ * Distinct from {@link authServicePasswordResetInvalidCodeError}. Use only when the caller is
+ * trusted (e.g., an admin) and revealing "no reset active" is not an enumeration risk; for
+ * end-user callers, {@link catchAndThrowPasswordResetServerErrors} maps this case to the same
+ * opaque response as `InvalidCodeError`.
+ *
  * @returns An {@link HttpsError} with code `invalid-argument`.
  */ function authServicePasswordResetNoConfigError() {
     return badRequestError({
@@ -6181,6 +6235,49 @@ function _ts_generator$b(thisArg, body) {
     })();
 }
 
+/**
+ * Factory that creates a callable function handling model invokes for multiple model types.
+ *
+ * Dispatches to the correct handler based on the `modelType` field in the request,
+ * enforces auth requirements per handler, and aggregates API details for MCP introspection.
+ *
+ * @param map - Maps model type strings to their invoke handler functions.
+ * @param config - Optional configuration including a pre-assertion hook.
+ * @returns A callable function for the 'invoke' call operation.
+ *
+ * @example
+ * ```typescript
+ * const invokeHandler = onCallInvokeModel<DemoNestContext>({
+ *   guestbookEntry: onCallSpecifierHandler({
+ *     recomputeLikes: guestbookEntryRecomputeLikes
+ *   })
+ * });
+ * ```
+ */ function onCallInvokeModel(map) {
+    var config = arguments.length > 1 && arguments[1] !== void 0 ? arguments[1] : {};
+    var preAssert = config.preAssert;
+    return _onCallWithCallTypeFunction(map, {
+        callType: 'invoke',
+        preAssert: preAssert,
+        throwOnUnknownModelType: invokeModelUnknownModelTypeError
+    });
+}
+/**
+ * Creates a bad-request error indicating the requested model type is not valid for invoking.
+ *
+ * @param modelType - The unrecognized model type string.
+ * @returns A bad-request error with {@link UNKNOWN_MODEL_TYPE_ERROR_CODE} code.
+ */ function invokeModelUnknownModelTypeError(modelType) {
+    return badRequestError(serverError({
+        status: 400,
+        code: UNKNOWN_MODEL_TYPE_ERROR_CODE,
+        message: 'Invalid type to invoke.',
+        data: {
+            modelType: modelType
+        }
+    }));
+}
+
 function _array_like_to_array$8(arr, len) {
     if (len == null || len > arr.length) len = arr.length;
     for(var i = 0, arr2 = new Array(len); i < len; i++)arr2[i] = arr[i];
@@ -7201,6 +7298,14 @@ function _define_property$l(obj, key, value) {
     }
     return obj;
 }
+function _instanceof$2(left, right) {
+    "@swc/helpers - instanceof";
+    if (right != null && typeof Symbol !== "undefined" && right[Symbol.hasInstance]) {
+        return !!right[Symbol.hasInstance](left);
+    } else {
+        return left instanceof right;
+    }
+}
 function _object_spread$c(target) {
     for(var i = 1; i < arguments.length; i++){
         var source = arguments[i] != null ? arguments[i] : {};
@@ -7319,6 +7424,28 @@ function _ts_generator$9(thisArg, body) {
 /**
  * Maximum number of keys allowed in a multi-read request.
  */ var MAX_MODEL_ACCESS_MULTI_READ_KEYS = 50;
+/**
+ * Maps a single `useMultipleModels` failure entry into the public {@link ModelAccessReadError}
+ * shape. Unwraps the typical Firebase error shapes via {@link firebaseServerErrorInfo} so
+ * permission-denied / not-found errors surface a real message + code instead of the generic
+ * `"Unknown error"` fallback the inline mapping used previously.
+ *
+ * @param entry - A failed-key entry from the underlying multi-read.
+ * @returns A `{ key, message, code? }` triple safe to return to API/MCP callers.
+ */ function modelAccessReadErrorFromUseMultipleModelsFailure(entry) {
+    var _info_serverErrorCode, _ref, _ref1;
+    var _info_httpsErrorDetailsServerError, _info_httpsError;
+    var info = firebaseServerErrorInfo(entry.error);
+    var serverMessage = (_info_httpsErrorDetailsServerError = info.httpsErrorDetailsServerError) === null || _info_httpsErrorDetailsServerError === void 0 ? void 0 : _info_httpsErrorDetailsServerError.message;
+    var httpsMessage = (_info_httpsError = info.httpsError) === null || _info_httpsError === void 0 ? void 0 : _info_httpsError.message;
+    var plainMessage = _instanceof$2(entry.error, Error) ? entry.error.message : undefined;
+    var code = (_info_serverErrorCode = info.serverErrorCode) !== null && _info_serverErrorCode !== void 0 ? _info_serverErrorCode : info.firebaseErrorCode;
+    return {
+        key: entry.key,
+        message: (_ref = (_ref1 = serverMessage !== null && serverMessage !== void 0 ? serverMessage : httpsMessage) !== null && _ref1 !== void 0 ? _ref1 : plainMessage) !== null && _ref !== void 0 ? _ref : 'permission denied or not found',
+        code: code
+    };
+}
 // MARK: Service
 /**
  * Service for direct document reads using the `useModel()` permission-checking pattern.
@@ -7330,9 +7457,67 @@ function _ts_generator$9(thisArg, body) {
     function ModelApiGetService(config, nestApplication) {
         _class_call_check$e(this, ModelApiGetService);
         _define_property$l(this, "_nestContext", void 0);
+        _define_property$l(this, "_identityByModelType", void 0);
         this._nestContext = config.makeNestContext(nestApplication);
     }
     _create_class$9(ModelApiGetService, [
+        {
+            /**
+     * Returns the registered {@link FirestoreModelIdentity} for the given `modelType` string, or
+     * `undefined` when no model of that type is registered.
+     *
+     * Identities are read from `firebaseModelsService` and cached on first successful call. The
+     * lookup uses the provided `auth` to build a real model context — `getFirestoreCollection(ctx)`
+     * is context-dependent (calls `ctx.collection(...)` or similar), so a synthetic empty context
+     * is not sufficient.
+     *
+     * @param modelType - The Firestore model type string (e.g., 'guestbook', 'profile').
+     * @param auth - The request's auth data; used to build a context for the (one-time) lookup.
+     * @returns The matching identity or `undefined`.
+     */ key: "getModelIdentity",
+            value: function getModelIdentity(modelType, auth) {
+                var _this__identityByModelType;
+                (_this__identityByModelType = this._identityByModelType) !== null && _this__identityByModelType !== void 0 ? _this__identityByModelType : this._identityByModelType = this._buildIdentityMap(auth);
+                return this._identityByModelType.get(modelType);
+            }
+        },
+        {
+            key: "_buildIdentityMap",
+            value: function _buildIdentityMap(auth) {
+                var map = new Map();
+                var authRef = this._makeAuthRef(auth);
+                var inContextService = this._nestContext.model(authRef);
+                var allTypes = inContextService.allTypes();
+                var _iteratorNormalCompletion = true, _didIteratorError = false, _iteratorError = undefined;
+                try {
+                    for(var _iterator = allTypes[Symbol.iterator](), _step; !(_iteratorNormalCompletion = (_step = _iterator.next()).done); _iteratorNormalCompletion = true){
+                        var type = _step.value;
+                        try {
+                            var modelService = inContextService(type);
+                            var identity = modelService.getFirestoreCollection().modelIdentity;
+                            map.set(type, identity);
+                        } catch (unused) {
+                        // identity unavailable for this type — skipped silently. A subsequent get attempt for a
+                        // missing type surfaces a user-visible "Unknown modelType" error at the tool layer.
+                        }
+                    }
+                } catch (err) {
+                    _didIteratorError = true;
+                    _iteratorError = err;
+                } finally{
+                    try {
+                        if (!_iteratorNormalCompletion && _iterator.return != null) {
+                            _iterator.return();
+                        }
+                    } finally{
+                        if (_didIteratorError) {
+                            throw _iteratorError;
+                        }
+                    }
+                }
+                return map;
+            }
+        },
         {
             key: "readDocument",
             value: /**
@@ -7439,15 +7624,7 @@ function _ts_generator$9(thisArg, body) {
                                                     ];
                                                 case 1:
                                                     results = _state.sent();
-                                                    errors = failure.errors.map(function(e) {
-                                                        var _ref;
-                                                        var _e_error, _e_error1;
-                                                        return {
-                                                            key: e.key,
-                                                            message: (_ref = (_e_error = e.error) === null || _e_error === void 0 ? void 0 : _e_error.message) !== null && _ref !== void 0 ? _ref : 'Unknown error',
-                                                            code: (_e_error1 = e.error) === null || _e_error1 === void 0 ? void 0 : _e_error1.code
-                                                        };
-                                                    });
+                                                    errors = failure.errors.map(modelAccessReadErrorFromUseMultipleModelsFailure);
                                                     return [
                                                         2,
                                                         {
@@ -8909,6 +9086,12 @@ function _is_native_reflect_construct$1() {
                 return this._appUrlDetails();
             }
         },
+        {
+            key: "appMcpUrl",
+            get: function get() {
+                return this.env.appMcpUrl;
+            }
+        },
         {
             key: "appWebhookUrl",
             get: function get() {
@@ -12731,4 +12914,4 @@ function _define_property(obj, key, value) {
 } 
 ();
 
-export { AbstractFirebaseNestContext, AbstractFirebaseServerActionsContext, AbstractFirebaseServerAuthContext, AbstractFirebaseServerAuthService, AbstractFirebaseServerAuthUserContext, AbstractFirebaseServerNewUserService, AbstractFirebaseServerUserPasswordResetService, AbstractNestContext, AbstractServerFirebaseNestContext, ConfigureFirebaseAppCheckMiddlewareModule, ConfigureFirebaseWebhookMiddlewareModule, DEFAULT_FIREBASE_PASSWORD_NUMBER_GENERATOR, DEFAULT_RESET_COM_THROTTLE_TIME, DEFAULT_SERVER_ASSETS_BASE_PATH, DEFAULT_SETUP_COM_THROTTLE_TIME, DefaultFirebaseServerEnvService, FIREBASE_APP_TOKEN, FIREBASE_AUTH_TOKEN, FIREBASE_FIRESTORE_CONTEXT_TOKEN, FIREBASE_FIRESTORE_TOKEN, FIREBASE_SERVER_ENV_TOKEN, FIREBASE_SERVER_VALIDATION_ERROR_CODE, FIREBASE_STORAGE_CONTEXT_FACTORY_CONFIG_TOKEN, FIREBASE_STORAGE_CONTEXT_TOKEN, FIREBASE_STORAGE_TOKEN, FIRESTORE_CLIENT_QUERY_CONSTRAINT_HANDLER_MAPPING, FirebaseAppCheckMiddleware, FirebaseAppCheckMiddlewareConfig, FirebaseNestServerRootModule, FirebaseRawBodyMiddleware, FirebaseServerAnalyticsSegmentListenerService, FirebaseServerAnalyticsSegmentModule, FirebaseServerAnalyticsService, FirebaseServerAnalyticsServiceListener, FirebaseServerAuthModule, FirebaseServerAuthNewUserSendSetupDetailsNoSetupConfigError, FirebaseServerAuthNewUserSendSetupDetailsSendOnceError, FirebaseServerAuthNewUserSendSetupDetailsThrottleError, FirebaseServerAuthPasswordResetInvalidCodeError, FirebaseServerAuthPasswordResetNoResetConfigError, FirebaseServerAuthPasswordResetSendOnceError, FirebaseServerAuthPasswordResetThrottleError, FirebaseServerAuthService, FirebaseServerAuthUserBadInputError, FirebaseServerAuthUserExistsError, FirebaseServerEnvService, FirebaseServerFirestoreContextModule, FirebaseServerFirestoreModule, FirebaseServerStorageContextModule, FirebaseServerStorageModule, FirebaseServerStorageService, GlobalRoutePrefixConfig, MAX_MODEL_ACCESS_MULTI_READ_KEYS, MODEL_API_NEST_APPLICATION_CONTEXT, ModelApiCallModelDispatchService, ModelApiController, ModelApiDispatchConfig, ModelApiGetService, NO_RUN_NAME_SPECIFIED_FOR_SCHEDULED_FUNCTION_DEVELOPMENT_FUNCTION_CODE, NoContentFirebaseServerUserPasswordResetService, NoSetupContentFirebaseServerNewUserService, ON_CALL_MODEL_ANALYTICS_HANDLER, ON_CALL_MODEL_ANALYTICS_SERVICE, OnCallModelAnalyticsService, PHONE_NUMBER_ALREADY_EXISTS_ERROR_CODE, SkipAppCheck, UNKNOWN_SCHEDULED_FUNCTION_DEVELOPMENT_FUNCTION_NAME_CODE, UNKNOWN_SCHEDULED_FUNCTION_DEVELOPMENT_FUNCTION_TYPE_CODE, _onCallWithCallTypeFunction, aggregateCrudModelApiDetails, aggregateModelApiDetails, aggregateSpecifierApiDetails, alreadyExistsError, appAnalyticsModuleMetadata, appFirestoreModuleMetadata, assertContextHasAuth, assertDocumentExists, assertHasRolesInRequest, assertHasSignedTosInRequest, assertIsAdminInRequest, assertIsAdminOrTargetUserInRequestData, assertIsContextWithAuthData, assertRequestRequiresAuthForFunction, assertSnapshotData, assertSnapshotDataWithKey, authServicePasswordResetInvalidCodeError, authServicePasswordResetNoConfigError, authServicePasswordResetSendOnceError, authServicePasswordResetThrottleError, badRequestError, blockingFunctionHandlerWithNestContextFactory, buildNestServerRootModule, callWithAnalytics, catchAndThrowPasswordResetServerErrors, cloudEventHandlerWithNestContextFactory, collectionRefForPath, createModelUnknownModelTypeError, defaultFirebaseServerActionsTransformFactoryLogErrorFunction, defaultProvideFirebaseServerStorageServiceSimple, deleteModelUnknownModelTypeError, developmentUnknownSpecifierError, docRefForPath, documentModelNotAvailableError, executeOnCallQuery, firebaseAuthTokenFromDecodedIdToken, firebaseServerActionsContext, firebaseServerActionsTransformContext, firebaseServerActionsTransformFactory, firebaseServerAppTokenProvider, firebaseServerAuthModuleMetadata, firebaseServerDevFunctions, firebaseServerEnvTokenProvider, firebaseServerEnvTokenProviders, firebaseServerErrorInfo, firebaseServerErrorInfoCodePair, firebaseServerErrorInfoServerErrorCodePair, firebaseServerErrorInfoServerErrorPair, firebaseServerFirestoreContextModuleMetadata, firebaseServerStorageDefaultBucketIdTokenProvider, firebaseServerStorageModuleMetadata, firebaseServerValidationError, firebaseServerValidationServerError, firestoreClientQueryConstraintFunctionsDriver, firestoreEncryptedField, firestoreServerIncrementUpdateToUpdateData, forbiddenError, getAuthUserOrUndefined, getModelApiDetails, googleCloudFileMetadataToStorageMetadata, googleCloudFirebaseStorageContextFactory, googleCloudFirebaseStorageDrivers, googleCloudFirestoreAccessorDriver, googleCloudFirestoreContextFactory, googleCloudFirestoreDrivers, googleCloudFirestoreQueryDriver, googleCloudStorageAccessorFile, googleCloudStorageAccessorFolder, googleCloudStorageBucketForStorageFilePath, googleCloudStorageFileForStorageFilePath, googleCloudStorageFirebaseStorageAccessorDriver, googleCloudStorageFromFirebaseAdminStorage, googleCloudStorageListFilesResultFactory, handleFirebaseAuthError, handleFirebaseError, hasAuthRolesInRequest, hasNewUserSetupPasswordInRequest, hasSignedTosInRequest, inAuthContext, injectNestApplicationContextIntoRequest, injectNestIntoRequest, internalServerError, isActualSpecifier, isAdminInRequest, isAdminOrTargetUserInRequestData, isContextWithAuthData, isFirebaseError, isFirebaseHttpsError, isOnCallCrudModelApiDetails, isOnCallHandlerApiDetails, isOnCallModelTypeApiDetails, isOnCallSpecifierApiDetails, makeBlockingFunctionWithHandler, makeOnScheduleHandlerWithNestApplicationRequest, makeScheduledFunctionDevelopmentFunction, modelApiModuleMetadata, modelNotAvailableError, nestAppHasDevelopmentSchedulerEnabled, nestAppIsProductionEnvironment, nestFirebaseDoesNotExistError, nestFirebaseForbiddenPermissionError, nestServerInstance, noRunNameSpecifiedForScheduledFunctionDevelopmentFunction, noopFirebaseServerAnalyticsServiceListener, noopOnCallModelAnalyticsService, notFoundError, onCallAnalyticsEmitterInstance, onCallCreateModel, onCallDeleteModel, onCallDevelopmentFunction, onCallHandlerWithNestApplicationFactory, onCallHandlerWithNestContextFactory, onCallModel, onCallModelMissingCallTypeError, onCallModelUnknownCallTypeError, onCallQueryModel, onCallReadModel, onCallSpecifierHandler, onCallUpdateModel, onScheduleHandlerWithNestApplicationFactory, onScheduleHandlerWithNestContextFactory, optionalAuthContext, optionalFirestoreEncryptedField, permissionDeniedError, phoneNumberAlreadyExistsError, preconditionConflictError, provideAppFirestoreCollections, provideFirebaseServerAuthService, provideFirebaseServerStorageService, queryModelBadCursorError, queryModelUnknownModelTypeError, readApiDetails, readModelUnknownModelTypeError, resolveAdminOnlyValue, resolveAnalyticsFromApiDetails, setNestContextOnRequest, setNestContextOnScheduleRequest, taskQueueFunctionHandlerWithNestContextFactory, unauthenticatedContextHasNoAuthData, unauthenticatedContextHasNoUidError, unauthenticatedError, unavailableError, unavailableOrDeactivatedFunctionError, unknownModelCrudFunctionSpecifierError, unknownScheduledFunctionDevelopmentFunctionName, unknownScheduledFunctionDevelopmentFunctionType, updateModelUnknownModelTypeError, userContextFromUid, verifyAppCheckInRequest, withApiDetails };
+export { AbstractFirebaseNestContext, AbstractFirebaseServerActionsContext, AbstractFirebaseServerAuthContext, AbstractFirebaseServerAuthService, AbstractFirebaseServerAuthUserContext, AbstractFirebaseServerNewUserService, AbstractFirebaseServerUserPasswordResetService, AbstractNestContext, AbstractServerFirebaseNestContext, ConfigureFirebaseAppCheckMiddlewareModule, ConfigureFirebaseWebhookMiddlewareModule, DEFAULT_FIREBASE_PASSWORD_NUMBER_GENERATOR, DEFAULT_RESET_CODE_EXPIRES_IN, DEFAULT_RESET_COM_THROTTLE_TIME, DEFAULT_SERVER_ASSETS_BASE_PATH, DEFAULT_SETUP_COM_THROTTLE_TIME, DefaultFirebaseServerEnvService, FIREBASE_APP_TOKEN, FIREBASE_AUTH_TOKEN, FIREBASE_FIRESTORE_CONTEXT_TOKEN, FIREBASE_FIRESTORE_TOKEN, FIREBASE_SERVER_ENV_TOKEN, FIREBASE_SERVER_VALIDATION_ERROR_CODE, FIREBASE_STORAGE_CONTEXT_FACTORY_CONFIG_TOKEN, FIREBASE_STORAGE_CONTEXT_TOKEN, FIREBASE_STORAGE_TOKEN, FIRESTORE_CLIENT_QUERY_CONSTRAINT_HANDLER_MAPPING, FirebaseAppCheckMiddleware, FirebaseAppCheckMiddlewareConfig, FirebaseNestServerRootModule, FirebaseRawBodyMiddleware, FirebaseServerAnalyticsSegmentListenerService, FirebaseServerAnalyticsSegmentModule, FirebaseServerAnalyticsService, FirebaseServerAnalyticsServiceListener, FirebaseServerAuthModule, FirebaseServerAuthNewUserSendSetupDetailsNoSetupConfigError, FirebaseServerAuthNewUserSendSetupDetailsSendOnceError, FirebaseServerAuthNewUserSendSetupDetailsThrottleError, FirebaseServerAuthPasswordResetInvalidCodeError, FirebaseServerAuthPasswordResetNoResetConfigError, FirebaseServerAuthPasswordResetSendOnceError, FirebaseServerAuthPasswordResetThrottleError, FirebaseServerAuthService, FirebaseServerAuthUserBadInputError, FirebaseServerAuthUserExistsError, FirebaseServerEnvService, FirebaseServerFirestoreContextModule, FirebaseServerFirestoreModule, FirebaseServerStorageContextModule, FirebaseServerStorageModule, FirebaseServerStorageService, GlobalRoutePrefixConfig, MAX_MODEL_ACCESS_MULTI_READ_KEYS, MODEL_API_NEST_APPLICATION_CONTEXT, ModelApiCallModelDispatchService, ModelApiController, ModelApiDispatchConfig, ModelApiGetService, NO_RUN_NAME_SPECIFIED_FOR_SCHEDULED_FUNCTION_DEVELOPMENT_FUNCTION_CODE, NoContentFirebaseServerUserPasswordResetService, NoSetupContentFirebaseServerNewUserService, ON_CALL_MODEL_ANALYTICS_HANDLER, ON_CALL_MODEL_ANALYTICS_SERVICE, OnCallModelAnalyticsService, PHONE_NUMBER_ALREADY_EXISTS_ERROR_CODE, SkipAppCheck, UNKNOWN_SCHEDULED_FUNCTION_DEVELOPMENT_FUNCTION_NAME_CODE, UNKNOWN_SCHEDULED_FUNCTION_DEVELOPMENT_FUNCTION_TYPE_CODE, _onCallWithCallTypeFunction, aggregateCrudModelApiDetails, aggregateModelApiDetails, aggregateSpecifierApiDetails, alreadyExistsError, appAnalyticsModuleMetadata, appFirestoreModuleMetadata, assertContextHasAuth, assertDocumentExists, assertHasRolesInRequest, assertHasSignedTosInRequest, assertIsAdminInRequest, assertIsAdminOrTargetUserInRequestData, assertIsContextWithAuthData, assertRequestRequiresAuthForFunction, assertSnapshotData, assertSnapshotDataWithKey, authServicePasswordResetInvalidCodeError, authServicePasswordResetNoConfigError, authServicePasswordResetSendOnceError, authServicePasswordResetThrottleError, badRequestError, blockingFunctionHandlerWithNestContextFactory, buildNestServerRootModule, callWithAnalytics, catchAndThrowPasswordResetServerErrors, cloudEventHandlerWithNestContextFactory, collectionRefForPath, createModelUnknownModelTypeError, defaultFirebaseServerActionsTransformFactoryLogErrorFunction, defaultProvideFirebaseServerStorageServiceSimple, deleteModelUnknownModelTypeError, developmentUnknownSpecifierError, docRefForPath, documentModelNotAvailableError, executeOnCallQuery, firebaseAuthTokenFromDecodedIdToken, firebaseServerActionsContext, firebaseServerActionsTransformContext, firebaseServerActionsTransformFactory, firebaseServerAppTokenProvider, firebaseServerAuthModuleMetadata, firebaseServerDevFunctions, firebaseServerEnvTokenProvider, firebaseServerEnvTokenProviders, firebaseServerErrorInfo, firebaseServerErrorInfoCodePair, firebaseServerErrorInfoServerErrorCodePair, firebaseServerErrorInfoServerErrorPair, firebaseServerFirestoreContextModuleMetadata, firebaseServerStorageDefaultBucketIdTokenProvider, firebaseServerStorageModuleMetadata, firebaseServerValidationError, firebaseServerValidationServerError, firestoreClientQueryConstraintFunctionsDriver, firestoreEncryptedField, firestoreServerIncrementUpdateToUpdateData, forbiddenError, getAuthUserOrUndefined, getModelApiDetails, googleCloudFileMetadataToStorageMetadata, googleCloudFirebaseStorageContextFactory, googleCloudFirebaseStorageDrivers, googleCloudFirestoreAccessorDriver, googleCloudFirestoreContextFactory, googleCloudFirestoreDrivers, googleCloudFirestoreQueryDriver, googleCloudStorageAccessorFile, googleCloudStorageAccessorFolder, googleCloudStorageBucketForStorageFilePath, googleCloudStorageFileForStorageFilePath, googleCloudStorageFirebaseStorageAccessorDriver, googleCloudStorageFromFirebaseAdminStorage, googleCloudStorageListFilesResultFactory, handleFirebaseAuthError, handleFirebaseError, hasAuthRolesInRequest, hasNewUserSetupPasswordInRequest, hasSignedTosInRequest, inAuthContext, injectNestApplicationContextIntoRequest, injectNestIntoRequest, internalServerError, invokeModelUnknownModelTypeError, isActualSpecifier, isAdminInRequest, isAdminOrTargetUserInRequestData, isContextWithAuthData, isFirebaseError, isFirebaseHttpsError, isOnCallCrudModelApiDetails, isOnCallHandlerApiDetails, isOnCallModelTypeApiDetails, isOnCallSpecifierApiDetails, makeBlockingFunctionWithHandler, makeOnScheduleHandlerWithNestApplicationRequest, makeScheduledFunctionDevelopmentFunction, modelAccessReadErrorFromUseMultipleModelsFailure, modelApiModuleMetadata, modelNotAvailableError, nestAppHasDevelopmentSchedulerEnabled, nestAppIsProductionEnvironment, nestFirebaseDoesNotExistError, nestFirebaseForbiddenPermissionError, nestServerInstance, noRunNameSpecifiedForScheduledFunctionDevelopmentFunction, noopFirebaseServerAnalyticsServiceListener, noopOnCallModelAnalyticsService, notFoundError, onCallAnalyticsEmitterInstance, onCallCreateModel, onCallDeleteModel, onCallDevelopmentFunction, onCallHandlerWithNestApplicationFactory, onCallHandlerWithNestContextFactory, onCallInvokeModel, onCallModel, onCallModelMissingCallTypeError, onCallModelUnknownCallTypeError, onCallQueryModel, onCallReadModel, onCallSpecifierHandler, onCallUpdateModel, onScheduleHandlerWithNestApplicationFactory, onScheduleHandlerWithNestContextFactory, optionalAuthContext, optionalFirestoreEncryptedField, permissionDeniedError, phoneNumberAlreadyExistsError, preconditionConflictError, provideAppFirestoreCollections, provideFirebaseServerAuthService, provideFirebaseServerStorageService, queryModelBadCursorError, queryModelUnknownModelTypeError, readApiDetails, readModelUnknownModelTypeError, resolveAdminOnlyValue, resolveAnalyticsFromApiDetails, setNestContextOnRequest, setNestContextOnScheduleRequest, taskQueueFunctionHandlerWithNestContextFactory, unauthenticatedContextHasNoAuthData, unauthenticatedContextHasNoUidError, unauthenticatedError, unavailableError, unavailableOrDeactivatedFunctionError, unknownModelCrudFunctionSpecifierError, unknownScheduledFunctionDevelopmentFunctionName, unknownScheduledFunctionDevelopmentFunctionType, updateModelUnknownModelTypeError, userContextFromUid, verifyAppCheckInRequest, withApiDetails };

package/mailgun/package.json

@@ -1,15 +1,15 @@
 {
   "name": "@dereekb/firebase-server/mailgun",
-  "version": "13.11.18",
+  "version": "13.12.0",
   "peerDependencies": {
-    "@dereekb/analytics": "13.11.18",
-    "@dereekb/firebase": "13.11.18",
-    "@dereekb/firebase-server": "13.11.18",
-    "@dereekb/date": "13.11.18",
-    "@dereekb/nestjs": "13.11.18",
-    "@dereekb/model": "13.11.18",
-    "@dereekb/rxjs": "13.11.18",
-    "@dereekb/util": "13.11.18"
+    "@dereekb/analytics": "13.12.0",
+    "@dereekb/firebase": "13.12.0",
+    "@dereekb/firebase-server": "13.12.0",
+    "@dereekb/date": "13.12.0",
+    "@dereekb/nestjs": "13.12.0",
+    "@dereekb/model": "13.12.0",
+    "@dereekb/rxjs": "13.12.0",
+    "@dereekb/util": "13.12.0"
   },
   "exports": {
     "./package.json": "./package.json",

package/mcp/index.cjs.default.js

@@ -0,0 +1 @@
+exports._default = require('./index.cjs.js').default;