@dereekb/firebase-server 13.12.3 → 13.12.5

package/index.esm.js

@@ -1,5 +1,5 @@
 import { timingSafeEqual } from 'node:crypto';
-import { DBX_FIREBASE_SERVER_NO_AUTH_ERROR_CODE, UNAUTHENTICATED_ERROR_CODE, FORBIDDEN_ERROR_CODE, PERMISSION_DENIED_ERROR_CODE, NOT_FOUND_ERROR_CODE, MODEL_NOT_AVAILABLE_ERROR_CODE, BAD_REQUEST_ERROR_CODE, CONFLICT_ERROR_CODE, ALREADY_EXISTS_ERROR_CODE, UNAVAILABLE_ERROR_CODE, UNAVAILABLE_OR_DEACTIVATED_FUNCTION_ERROR_CODE, INTERNAL_SERVER_ERROR_CODE, FIREBASE_AUTH_USER_NOT_FOUND_ERROR, FIREBASE_SERVER_AUTH_CLAIMS_RESET_PASSWORD_KEY, FIREBASE_SERVER_AUTH_CLAIMS_RESET_LAST_COM_DATE_KEY, FIREBASE_SERVER_AUTH_CLAIMS_RESET_EXPIRES_AT_KEY, FIREBASE_SERVER_AUTH_CLAIMS_SETUP_PASSWORD_KEY, FIREBASE_AUTH_PHONE_NUMBER_ALREADY_EXISTS_ERROR, FIREBASE_AUTH_EMAIL_ALREADY_EXISTS_ERROR, FIREBASE_AUTH_INVALID_PHONE_NUMBER_ERROR, FIREBASE_SERVER_AUTH_CLAIMS_SETUP_LAST_COM_DATE_KEY, setIdAndKeyFromKeyIdRefOnDocumentData, DBX_FIREBASE_SERVER_PASSWORD_RESET_INVALID_CODE_ERROR_CODE, DBX_FIREBASE_SERVER_PASSWORD_RESET_NO_CONFIG_ERROR_CODE, DBX_FIREBASE_SERVER_PASSWORD_RESET_SEND_ONCE_ERROR_CODE, DBX_FIREBASE_SERVER_PASSWORD_RESET_THROTTLE_ERROR_CODE, FirestoreDocumentContextType, streamFromOnSnapshot, FIRESTORE_LIMIT_QUERY_CONSTRAINT_TYPE, FIRESTORE_LIMIT_TO_LAST_QUERY_CONSTRAINT_TYPE, FIRESTORE_ORDER_BY_QUERY_CONSTRAINT_TYPE, FIRESTORE_ORDER_BY_DOCUMENT_ID_QUERY_CONSTRAINT_TYPE, FIRESTORE_WHERE_QUERY_CONSTRAINT_TYPE, FIRESTORE_WHERE_DOCUMENT_ID_QUERY_CONSTRAINT_TYPE, FIRESTORE_OFFSET_QUERY_CONSTRAINT_TYPE, FIRESTORE_START_AT_QUERY_CONSTRAINT_TYPE, FIRESTORE_START_AT_VALUE_QUERY_CONSTRAINT_TYPE, FIRESTORE_START_AFTER_QUERY_CONSTRAINT_TYPE, FIRESTORE_END_AT_QUERY_CONSTRAINT_TYPE, FIRESTORE_END_AT_VALUE_QUERY_CONSTRAINT_TYPE, FIRESTORE_END_BEFORE_QUERY_CONSTRAINT_TYPE, makeFirestoreQueryConstraintFunctionsDriver, firestoreContextFactory, firestoreField, optionalFirestoreField, DEFAULT_MODEL_FUNCTION_FIREBASE_CRUD_FUNCTION_SPECIFIER, UNKNOWN_MODEL_TYPE_ERROR_CODE, BAD_DOCUMENT_QUERY_CURSOR_ERROR_CODE, limit, startAfter, DEFAULT_ON_CALL_QUERY_MODEL_LIMIT, MAX_ON_CALL_QUERY_MODEL_LIMIT, ScheduledFunctionDevelopmentFunctionTypeEnum, SCHEDULED_FUNCTION_DEV_FUNCTION_SPECIFIER, storageListFilesResultFactory, assertStorageUploadOptionsStringFormat, firebaseStorageContextFactory, inContextFirebaseModelsServiceFactory, useFirebaseModelsService } from '@dereekb/firebase';
+import { DBX_FIREBASE_SERVER_NO_AUTH_ERROR_CODE, UNAUTHENTICATED_ERROR_CODE, FORBIDDEN_ERROR_CODE, PERMISSION_DENIED_ERROR_CODE, NOT_FOUND_ERROR_CODE, MODEL_NOT_AVAILABLE_ERROR_CODE, BAD_REQUEST_ERROR_CODE, CONFLICT_ERROR_CODE, ALREADY_EXISTS_ERROR_CODE, UNAVAILABLE_ERROR_CODE, UNAVAILABLE_OR_DEACTIVATED_FUNCTION_ERROR_CODE, INTERNAL_SERVER_ERROR_CODE, FIREBASE_AUTH_USER_NOT_FOUND_ERROR, FIREBASE_SERVER_AUTH_CLAIMS_RESET_PASSWORD_KEY, FIREBASE_SERVER_AUTH_CLAIMS_RESET_LAST_COM_DATE_KEY, FIREBASE_SERVER_AUTH_CLAIMS_RESET_EXPIRES_AT_KEY, FIREBASE_AUTH_PHONE_NUMBER_ALREADY_EXISTS_ERROR, FIREBASE_AUTH_EMAIL_ALREADY_EXISTS_ERROR, FIREBASE_AUTH_INVALID_PHONE_NUMBER_ERROR, FIREBASE_SERVER_AUTH_CLAIMS_SETUP_PASSWORD_KEY, FIREBASE_SERVER_AUTH_CLAIMS_SETUP_LAST_COM_DATE_KEY, setIdAndKeyFromKeyIdRefOnDocumentData, DBX_FIREBASE_SERVER_PASSWORD_RESET_INVALID_CODE_ERROR_CODE, DBX_FIREBASE_SERVER_PASSWORD_RESET_NO_CONFIG_ERROR_CODE, DBX_FIREBASE_SERVER_PASSWORD_RESET_SEND_ONCE_ERROR_CODE, DBX_FIREBASE_SERVER_PASSWORD_RESET_THROTTLE_ERROR_CODE, FirestoreDocumentContextType, streamFromOnSnapshot, FIRESTORE_LIMIT_QUERY_CONSTRAINT_TYPE, FIRESTORE_LIMIT_TO_LAST_QUERY_CONSTRAINT_TYPE, FIRESTORE_ORDER_BY_QUERY_CONSTRAINT_TYPE, FIRESTORE_ORDER_BY_DOCUMENT_ID_QUERY_CONSTRAINT_TYPE, FIRESTORE_WHERE_QUERY_CONSTRAINT_TYPE, FIRESTORE_WHERE_DOCUMENT_ID_QUERY_CONSTRAINT_TYPE, FIRESTORE_OFFSET_QUERY_CONSTRAINT_TYPE, FIRESTORE_START_AT_QUERY_CONSTRAINT_TYPE, FIRESTORE_START_AT_VALUE_QUERY_CONSTRAINT_TYPE, FIRESTORE_START_AFTER_QUERY_CONSTRAINT_TYPE, FIRESTORE_END_AT_QUERY_CONSTRAINT_TYPE, FIRESTORE_END_AT_VALUE_QUERY_CONSTRAINT_TYPE, FIRESTORE_END_BEFORE_QUERY_CONSTRAINT_TYPE, makeFirestoreQueryConstraintFunctionsDriver, firestoreContextFactory, firestoreField, optionalFirestoreField, DEFAULT_MODEL_FUNCTION_FIREBASE_CRUD_FUNCTION_SPECIFIER, UNKNOWN_MODEL_TYPE_ERROR_CODE, BAD_DOCUMENT_QUERY_CURSOR_ERROR_CODE, limit, startAfter, DEFAULT_ON_CALL_QUERY_MODEL_LIMIT, MAX_ON_CALL_QUERY_MODEL_LIMIT, ScheduledFunctionDevelopmentFunctionTypeEnum, SCHEDULED_FUNCTION_DEV_FUNCTION_SPECIFIER, storageListFilesResultFactory, assertStorageUploadOptionsStringFormat, firebaseStorageContextFactory, inContextFirebaseModelsServiceFactory, useFirebaseModelsService } from '@dereekb/firebase';
 import { partialServerError, isServerError, randomNumberFactory, cachedGetter, filterNullAndUndefinedValues, asSet, AUTH_ADMIN_ROLE, AUTH_TOS_SIGNED_ROLE, forEachKeyValue, KeyValueTypleValueFilter, filterUndefinedValues, isThrottled, mapObjectMap, batch, objectToMap, serverError, asArray, containsAllValues, websiteUrlDetails, mergeObjects, cronExpressionRepeatingEveryNMinutes, mapIdentityFunction, slashPathName, toRelativeSlashPathStartType, fixMultiSlashesInSlashPath, SLASH_PATH_SEPARATOR, objectHasNoKeys, websiteUrlFromPaths, pushItemOrArrayItemsIntoArray, makeGetter, asGetter, build, performAsyncTasks } from '@dereekb/util';
 import { HttpsError } from 'firebase-functions/https';
 import { hoursToMs, minutesToMs, toISODateString } from '@dereekb/date';
@@ -263,6 +263,12 @@ function _type_of$7(obj) {
  *
  * @param input - The value to check.
  * @returns `true` if the input is a Firebase {@link HttpsError}.
+ *
+ * @dbxUtil
+ * @dbxUtilCategory firebase-error
+ * @dbxUtilKind function
+ * @dbxUtilTags firebase, https, error, type-guard, server, callable
+ * @dbxUtilRelated is-firebase-error, firebase-server-error-info
  */ function isFirebaseHttpsError(input) {
     return (typeof input === "undefined" ? "undefined" : _type_of$7(input)) === 'object' && input != null && 'code' in input && 'httpErrorCode' in input && 'toJSON' in input;
 }
@@ -271,6 +277,12 @@ function _type_of$7(obj) {
  *
  * @param input - The value to check.
  * @returns `true` if the input is a Firebase Admin {@link admin.FirebaseError}.
+ *
+ * @dbxUtil
+ * @dbxUtilCategory firebase-error
+ * @dbxUtilKind function
+ * @dbxUtilTags firebase, admin, error, type-guard, server
+ * @dbxUtilRelated is-firebase-https-error, firebase-server-error-info
  */ function isFirebaseError(input) {
     return (typeof input === "undefined" ? "undefined" : _type_of$7(input)) === 'object' && input != null && 'code' in input && 'message' in input && 'toJSON' in input;
 }
@@ -283,6 +295,12 @@ function _type_of$7(obj) {
  * @param e - The caught error to analyze.
  * @returns Structured {@link FirebaseServerErrorInfo} with classified error details.
  *
+ * @dbxUtil
+ * @dbxUtilCategory firebase-error
+ * @dbxUtilKind function
+ * @dbxUtilTags firebase, error, decode, analyze, https, admin, server, classify, server-error
+ * @dbxUtilRelated firebase-server-error-info-code-pair, firebase-server-error-info-server-error-pair, firebase-server-error-info-server-error-code-pair, is-firebase-https-error, is-firebase-error
+ *
  * @example
  * ```typescript
  * try {
@@ -329,6 +347,12 @@ function _type_of$7(obj) {
  *
  * @param e - The caught error to analyze.
  * @returns A tuple of the Firebase error code (if present) and the full error info.
+ *
+ * @dbxUtil
+ * @dbxUtilCategory firebase-error
+ * @dbxUtilKind function
+ * @dbxUtilTags firebase, error, code, pair, tuple, pattern-match, decode
+ * @dbxUtilRelated firebase-server-error-info, firebase-server-error-info-server-error-pair, firebase-server-error-info-server-error-code-pair
  */ function firebaseServerErrorInfoCodePair(e) {
     var info = firebaseServerErrorInfo(e);
     return [
@@ -341,6 +365,12 @@ function _type_of$7(obj) {
  *
  * @param e - The caught error to analyze.
  * @returns A tuple of the server error (if present) and the full error info.
+ *
+ * @dbxUtil
+ * @dbxUtilCategory firebase-error
+ * @dbxUtilKind function
+ * @dbxUtilTags firebase, error, server-error, pair, tuple, pattern-match, decode, details
+ * @dbxUtilRelated firebase-server-error-info, firebase-server-error-info-code-pair, firebase-server-error-info-server-error-code-pair
  */ function firebaseServerErrorInfoServerErrorPair(e) {
     var info = firebaseServerErrorInfo(e);
     return [
@@ -353,6 +383,12 @@ function _type_of$7(obj) {
  *
  * @param e - The caught error to analyze.
  * @returns A tuple of the server error code (if present) and the full error info.
+ *
+ * @dbxUtil
+ * @dbxUtilCategory firebase-error
+ * @dbxUtilKind function
+ * @dbxUtilTags firebase, error, server-error, code, string-code, pair, tuple, pattern-match, decode
+ * @dbxUtilRelated firebase-server-error-info, firebase-server-error-info-code-pair, firebase-server-error-info-server-error-pair
  */ function firebaseServerErrorInfoServerErrorCodePair(e) {
     var info = firebaseServerErrorInfo(e);
     return [
@@ -367,6 +403,12 @@ function _type_of$7(obj) {
  *
  * @param e - The caught error.
  * @param handleFirebaseErrorFn - Handler that receives the typed {@link admin.FirebaseError}.
+ *
+ * @dbxUtil
+ * @dbxUtilCategory firebase-error
+ * @dbxUtilKind function
+ * @dbxUtilTags firebase, admin, error, handler, catch, conditional, rethrow
+ * @dbxUtilRelated is-firebase-error, firebase-server-error-info
  */ function handleFirebaseError(e, handleFirebaseErrorFn) {
     var firebaseError = e.code ? e : undefined;
     if (firebaseError) {
@@ -1254,15 +1296,6 @@ function _ts_generator$g(thisArg, body) {
                                     this.updateClaims(passwordClaimsData)
                                 ];
                             case 1:
-                                _state.sent();
-                                // update the user
-                                return [
-                                    4,
-                                    this.updateUser({
-                                        password: password
-                                    })
-                                ];
-                            case 2:
                                 _state.sent();
                                 return [
                                     2,
@@ -1344,11 +1377,43 @@ function _ts_generator$g(thisArg, body) {
             key: "updateUser",
             value: function updateUser(template) {
                 return _async_to_generator$g(function() {
+                    var e, firebaseError, errorCode, email, phoneNumber;
                     return _ts_generator$g(this, function(_state) {
-                        return [
-                            2,
-                            this.service.auth.updateUser(this.uid, template)
-                        ];
+                        switch(_state.label){
+                            case 0:
+                                _state.trys.push([
+                                    0,
+                                    2,
+                                    ,
+                                    3
+                                ]);
+                                return [
+                                    4,
+                                    this.service.auth.updateUser(this.uid, template)
+                                ];
+                            case 1:
+                                return [
+                                    2,
+                                    _state.sent()
+                                ];
+                            case 2:
+                                e = _state.sent();
+                                firebaseError = e;
+                                errorCode = firebaseError.code;
+                                email = template.email, phoneNumber = template.phoneNumber;
+                                if (errorCode === FIREBASE_AUTH_PHONE_NUMBER_ALREADY_EXISTS_ERROR && phoneNumber) {
+                                    throw new FirebaseServerAuthUserExistsError(errorCode, 'phone', phoneNumber);
+                                } else if (errorCode === FIREBASE_AUTH_EMAIL_ALREADY_EXISTS_ERROR && email) {
+                                    throw new FirebaseServerAuthUserExistsError(errorCode, 'email', email);
+                                } else if (errorCode === FIREBASE_AUTH_INVALID_PHONE_NUMBER_ERROR && phoneNumber) {
+                                    throw new FirebaseServerAuthUserBadInputError(errorCode, phoneNumber);
+                                }
+                                throw e;
+                            case 3:
+                                return [
+                                    2
+                                ];
+                        }
                     });
                 }).call(this);
             }
@@ -2121,6 +2186,50 @@ function _ts_generator$g(thisArg, body) {
     ]);
     return NoSetupContentFirebaseServerNewUserService;
 }(AbstractFirebaseServerNewUserService);
+/**
+ * Builds the composite oob code from a raw reset code (the numeric value stored in
+ * {@link FirebaseServerAuthResetUserPasswordClaims.resetPassword}) and the target user's uid.
+ *
+ * @param uid - The target user's UID.
+ * @param code - The raw reset code from the user's claims.
+ *
+ * @example
+ * ```typescript
+ * const oobCode = encodeFirebaseServerUserPasswordResetOobCode(user.uid, claims.resetPassword);
+ * // e.g. '482910-abcDEF123'
+ * ```
+ */ function encodeFirebaseServerUserPasswordResetOobCode(uid, code) {
+    return "".concat(code, "-").concat(uid);
+}
+/**
+ * Decodes a composite oob code back into its `{ uid, code }` parts. Returns `undefined`
+ * when the token is malformed (missing separator, non-numeric code, empty uid).
+ *
+ * @param token - The composite oob token, typically received from the password-reset email.
+ *
+ * @example
+ * ```typescript
+ * const decoded = decodeFirebaseServerUserPasswordResetOobCode('482910-abcDEF123');
+ * // decoded = { uid: 'abcDEF123', code: '482910' }
+ * ```
+ */ function decodeFirebaseServerUserPasswordResetOobCode(token) {
+    var result;
+    if (typeof token === 'string') {
+        var dashIndex = token.indexOf('-');
+        if (dashIndex > 0 && dashIndex < token.length - 1) {
+            var code = token.slice(0, dashIndex);
+            var uid = token.slice(dashIndex + 1);
+            // Code must be purely digits (matches DEFAULT_FIREBASE_PASSWORD_NUMBER_GENERATOR output).
+            if (/^\d+$/.test(code)) {
+                result = {
+                    uid: uid,
+                    code: code
+                };
+            }
+        }
+    }
+    return result;
+}
 /**
  * Default throttle duration (60 seconds) between reset content re-sends to prevent spam while
  * remaining responsive for legitimate users who didn't receive the first email.
@@ -2169,7 +2278,7 @@ function _ts_generator$g(thisArg, body) {
             key: "beginPasswordReset",
             value: function beginPasswordReset(input) {
                 return _async_to_generator$g(function() {
-                    var uid, email, sendResetContent, sendResetDetailsOnce, sendResetIgnoreThrottle, sendResetThrowErrors, data, sendDetailsInTestEnvironment, resolvedUid, userRecord, userContext, claims;
+                    var uid, email, sendResetContent, sendResetDetailsOnce, sendResetIgnoreThrottle, sendResetThrowErrors, data, sendDetailsInTestEnvironment, resolvedUid, userRecord, userContext, claims, oobCode;
                     return _ts_generator$g(this, function(_state) {
                         switch(_state.label){
                             case 0:
@@ -2230,9 +2339,13 @@ function _ts_generator$g(thisArg, body) {
                                 _state.sent();
                                 _state.label = 7;
                             case 7:
+                                oobCode = encodeFirebaseServerUserPasswordResetOobCode(resolvedUid, claims.resetPassword);
                                 return [
                                     2,
-                                    claims
+                                    {
+                                        claims: claims,
+                                        oobCode: oobCode
+                                    }
                                 ];
                         }
                     });
@@ -2378,6 +2491,7 @@ function _ts_generator$g(thisArg, body) {
                                             resetCommunicationAt: claims.resetCommunicationAt,
                                             resetExpiresAt: claims.resetExpiresAt
                                         },
+                                        oobCode: encodeFirebaseServerUserPasswordResetOobCode(userContext.uid, claims.resetPassword),
                                         data: config === null || config === void 0 ? void 0 : config.data,
                                         sendDetailsInTestEnvironment: config === null || config === void 0 ? void 0 : config.sendDetailsInTestEnvironment
                                     };
@@ -2420,30 +2534,56 @@ function _ts_generator$g(thisArg, body) {
         },
         {
             key: "completePasswordReset",
-            value: function completePasswordReset(uid, input) {
+            value: function completePasswordReset(input) {
                 return _async_to_generator$g(function() {
-                    var userContext, claims, storedCode, expiresAt, storedBuf, inputBuf;
+                    var decoded, userContext, claims, storedCode, expiresAt, storedBuf, inputBuf;
                     return _ts_generator$g(this, function(_state) {
                         switch(_state.label){
                             case 0:
-                                userContext = this.authService.userContext(uid);
+                                // Decode the composite token. A malformed token is treated identically to every other
+                                // failure mode below — the caller cannot distinguish between "bad encoding", "unknown uid",
+                                // "no active reset", "expired", or "wrong code".
+                                decoded = decodeFirebaseServerUserPasswordResetOobCode(input.oobCode);
+                                if (!decoded) {
+                                    throw new FirebaseServerAuthPasswordResetInvalidCodeError();
+                                }
+                                userContext = this.authService.userContext(decoded.uid);
+                                _state.label = 1;
+                            case 1:
+                                _state.trys.push([
+                                    1,
+                                    3,
+                                    ,
+                                    4
+                                ]);
                                 return [
                                     4,
                                     userContext.loadResetPasswordClaims()
                                 ];
-                            case 1:
+                            case 2:
                                 claims = _state.sent();
+                                return [
+                                    3,
+                                    4
+                                ];
+                            case 3:
+                                _state.sent();
+                                claims = undefined;
+                                return [
+                                    3,
+                                    4
+                                ];
+                            case 4:
                                 storedCode = claims === null || claims === void 0 ? void 0 : claims.resetPassword;
                                 expiresAt = claims === null || claims === void 0 ? void 0 : claims.resetExpiresAt;
                                 // Reject if no active reset OR the stored code is missing/wrong length OR the code is expired.
-                                // All failure cases throw the same opaque error so callers cannot distinguish them.
-                                if (!storedCode || !expiresAt || storedCode.length !== input.resetPassword.length || new Date(expiresAt).getTime() <= Date.now()) {
+                                if (!storedCode || !expiresAt || storedCode.length !== decoded.code.length || new Date(expiresAt).getTime() <= Date.now()) {
                                     throw new FirebaseServerAuthPasswordResetInvalidCodeError();
                                 }
                                 // Constant-time comparison to avoid leaking timing information about how many leading
                                 // characters of the provided code matched. Lengths are equal per the guard above.
                                 storedBuf = Buffer.from(storedCode);
-                                inputBuf = Buffer.from(input.resetPassword);
+                                inputBuf = Buffer.from(decoded.code);
                                 if (!timingSafeEqual(storedBuf, inputBuf)) {
                                     throw new FirebaseServerAuthPasswordResetInvalidCodeError();
                                 }
@@ -12914,4 +13054,4 @@ function _define_property(obj, key, value) {
 } 
 ();
 
-export { AbstractFirebaseNestContext, AbstractFirebaseServerActionsContext, AbstractFirebaseServerAuthContext, AbstractFirebaseServerAuthService, AbstractFirebaseServerAuthUserContext, AbstractFirebaseServerNewUserService, AbstractFirebaseServerUserPasswordResetService, AbstractNestContext, AbstractServerFirebaseNestContext, ConfigureFirebaseAppCheckMiddlewareModule, ConfigureFirebaseWebhookMiddlewareModule, DEFAULT_FIREBASE_PASSWORD_NUMBER_GENERATOR, DEFAULT_RESET_CODE_EXPIRES_IN, DEFAULT_RESET_COM_THROTTLE_TIME, DEFAULT_SERVER_ASSETS_BASE_PATH, DEFAULT_SETUP_COM_THROTTLE_TIME, DefaultFirebaseServerEnvService, FIREBASE_APP_TOKEN, FIREBASE_AUTH_TOKEN, FIREBASE_FIRESTORE_CONTEXT_TOKEN, FIREBASE_FIRESTORE_TOKEN, FIREBASE_SERVER_ENV_TOKEN, FIREBASE_SERVER_VALIDATION_ERROR_CODE, FIREBASE_STORAGE_CONTEXT_FACTORY_CONFIG_TOKEN, FIREBASE_STORAGE_CONTEXT_TOKEN, FIREBASE_STORAGE_TOKEN, FIRESTORE_CLIENT_QUERY_CONSTRAINT_HANDLER_MAPPING, FirebaseAppCheckMiddleware, FirebaseAppCheckMiddlewareConfig, FirebaseNestServerRootModule, FirebaseRawBodyMiddleware, FirebaseServerAnalyticsSegmentListenerService, FirebaseServerAnalyticsSegmentModule, FirebaseServerAnalyticsService, FirebaseServerAnalyticsServiceListener, FirebaseServerAuthModule, FirebaseServerAuthNewUserSendSetupDetailsNoSetupConfigError, FirebaseServerAuthNewUserSendSetupDetailsSendOnceError, FirebaseServerAuthNewUserSendSetupDetailsThrottleError, FirebaseServerAuthPasswordResetInvalidCodeError, FirebaseServerAuthPasswordResetNoResetConfigError, FirebaseServerAuthPasswordResetSendOnceError, FirebaseServerAuthPasswordResetThrottleError, FirebaseServerAuthService, FirebaseServerAuthUserBadInputError, FirebaseServerAuthUserExistsError, FirebaseServerEnvService, FirebaseServerFirestoreContextModule, FirebaseServerFirestoreModule, FirebaseServerStorageContextModule, FirebaseServerStorageModule, FirebaseServerStorageService, GlobalRoutePrefixConfig, MAX_MODEL_ACCESS_MULTI_READ_KEYS, MODEL_API_NEST_APPLICATION_CONTEXT, ModelApiCallModelDispatchService, ModelApiController, ModelApiDispatchConfig, ModelApiGetService, NO_RUN_NAME_SPECIFIED_FOR_SCHEDULED_FUNCTION_DEVELOPMENT_FUNCTION_CODE, NoContentFirebaseServerUserPasswordResetService, NoSetupContentFirebaseServerNewUserService, ON_CALL_MODEL_ANALYTICS_HANDLER, ON_CALL_MODEL_ANALYTICS_SERVICE, OnCallModelAnalyticsService, PHONE_NUMBER_ALREADY_EXISTS_ERROR_CODE, SkipAppCheck, UNKNOWN_SCHEDULED_FUNCTION_DEVELOPMENT_FUNCTION_NAME_CODE, UNKNOWN_SCHEDULED_FUNCTION_DEVELOPMENT_FUNCTION_TYPE_CODE, _onCallWithCallTypeFunction, aggregateCrudModelApiDetails, aggregateModelApiDetails, aggregateSpecifierApiDetails, alreadyExistsError, appAnalyticsModuleMetadata, appFirestoreModuleMetadata, assertContextHasAuth, assertDocumentExists, assertHasRolesInRequest, assertHasSignedTosInRequest, assertIsAdminInRequest, assertIsAdminOrTargetUserInRequestData, assertIsContextWithAuthData, assertRequestRequiresAuthForFunction, assertSnapshotData, assertSnapshotDataWithKey, authServicePasswordResetInvalidCodeError, authServicePasswordResetNoConfigError, authServicePasswordResetSendOnceError, authServicePasswordResetThrottleError, badRequestError, blockingFunctionHandlerWithNestContextFactory, buildNestServerRootModule, callWithAnalytics, catchAndThrowPasswordResetServerErrors, cloudEventHandlerWithNestContextFactory, collectionRefForPath, createModelUnknownModelTypeError, defaultFirebaseServerActionsTransformFactoryLogErrorFunction, defaultProvideFirebaseServerStorageServiceSimple, deleteModelUnknownModelTypeError, developmentUnknownSpecifierError, docRefForPath, documentModelNotAvailableError, executeOnCallQuery, firebaseAuthTokenFromDecodedIdToken, firebaseServerActionsContext, firebaseServerActionsTransformContext, firebaseServerActionsTransformFactory, firebaseServerAppTokenProvider, firebaseServerAuthModuleMetadata, firebaseServerDevFunctions, firebaseServerEnvTokenProvider, firebaseServerEnvTokenProviders, firebaseServerErrorInfo, firebaseServerErrorInfoCodePair, firebaseServerErrorInfoServerErrorCodePair, firebaseServerErrorInfoServerErrorPair, firebaseServerFirestoreContextModuleMetadata, firebaseServerStorageDefaultBucketIdTokenProvider, firebaseServerStorageModuleMetadata, firebaseServerValidationError, firebaseServerValidationServerError, firestoreClientQueryConstraintFunctionsDriver, firestoreEncryptedField, firestoreServerIncrementUpdateToUpdateData, forbiddenError, getAuthUserOrUndefined, getModelApiDetails, googleCloudFileMetadataToStorageMetadata, googleCloudFirebaseStorageContextFactory, googleCloudFirebaseStorageDrivers, googleCloudFirestoreAccessorDriver, googleCloudFirestoreContextFactory, googleCloudFirestoreDrivers, googleCloudFirestoreQueryDriver, googleCloudStorageAccessorFile, googleCloudStorageAccessorFolder, googleCloudStorageBucketForStorageFilePath, googleCloudStorageFileForStorageFilePath, googleCloudStorageFirebaseStorageAccessorDriver, googleCloudStorageFromFirebaseAdminStorage, googleCloudStorageListFilesResultFactory, handleFirebaseAuthError, handleFirebaseError, hasAuthRolesInRequest, hasNewUserSetupPasswordInRequest, hasSignedTosInRequest, inAuthContext, injectNestApplicationContextIntoRequest, injectNestIntoRequest, internalServerError, invokeModelUnknownModelTypeError, isActualSpecifier, isAdminInRequest, isAdminOrTargetUserInRequestData, isContextWithAuthData, isFirebaseError, isFirebaseHttpsError, isOnCallCrudModelApiDetails, isOnCallHandlerApiDetails, isOnCallModelTypeApiDetails, isOnCallSpecifierApiDetails, makeBlockingFunctionWithHandler, makeOnScheduleHandlerWithNestApplicationRequest, makeScheduledFunctionDevelopmentFunction, modelAccessReadErrorFromUseMultipleModelsFailure, modelApiModuleMetadata, modelNotAvailableError, nestAppHasDevelopmentSchedulerEnabled, nestAppIsProductionEnvironment, nestFirebaseDoesNotExistError, nestFirebaseForbiddenPermissionError, nestServerInstance, noRunNameSpecifiedForScheduledFunctionDevelopmentFunction, noopFirebaseServerAnalyticsServiceListener, noopOnCallModelAnalyticsService, notFoundError, onCallAnalyticsEmitterInstance, onCallCreateModel, onCallDeleteModel, onCallDevelopmentFunction, onCallHandlerWithNestApplicationFactory, onCallHandlerWithNestContextFactory, onCallInvokeModel, onCallModel, onCallModelMissingCallTypeError, onCallModelUnknownCallTypeError, onCallQueryModel, onCallReadModel, onCallSpecifierHandler, onCallUpdateModel, onScheduleHandlerWithNestApplicationFactory, onScheduleHandlerWithNestContextFactory, optionalAuthContext, optionalFirestoreEncryptedField, permissionDeniedError, phoneNumberAlreadyExistsError, preconditionConflictError, provideAppFirestoreCollections, provideFirebaseServerAuthService, provideFirebaseServerStorageService, queryModelBadCursorError, queryModelUnknownModelTypeError, readApiDetails, readModelUnknownModelTypeError, resolveAdminOnlyValue, resolveAnalyticsFromApiDetails, setNestContextOnRequest, setNestContextOnScheduleRequest, taskQueueFunctionHandlerWithNestContextFactory, unauthenticatedContextHasNoAuthData, unauthenticatedContextHasNoUidError, unauthenticatedError, unavailableError, unavailableOrDeactivatedFunctionError, unknownModelCrudFunctionSpecifierError, unknownScheduledFunctionDevelopmentFunctionName, unknownScheduledFunctionDevelopmentFunctionType, updateModelUnknownModelTypeError, userContextFromUid, verifyAppCheckInRequest, withApiDetails };
+export { AbstractFirebaseNestContext, AbstractFirebaseServerActionsContext, AbstractFirebaseServerAuthContext, AbstractFirebaseServerAuthService, AbstractFirebaseServerAuthUserContext, AbstractFirebaseServerNewUserService, AbstractFirebaseServerUserPasswordResetService, AbstractNestContext, AbstractServerFirebaseNestContext, ConfigureFirebaseAppCheckMiddlewareModule, ConfigureFirebaseWebhookMiddlewareModule, DEFAULT_FIREBASE_PASSWORD_NUMBER_GENERATOR, DEFAULT_RESET_CODE_EXPIRES_IN, DEFAULT_RESET_COM_THROTTLE_TIME, DEFAULT_SERVER_ASSETS_BASE_PATH, DEFAULT_SETUP_COM_THROTTLE_TIME, DefaultFirebaseServerEnvService, FIREBASE_APP_TOKEN, FIREBASE_AUTH_TOKEN, FIREBASE_FIRESTORE_CONTEXT_TOKEN, FIREBASE_FIRESTORE_TOKEN, FIREBASE_SERVER_ENV_TOKEN, FIREBASE_SERVER_VALIDATION_ERROR_CODE, FIREBASE_STORAGE_CONTEXT_FACTORY_CONFIG_TOKEN, FIREBASE_STORAGE_CONTEXT_TOKEN, FIREBASE_STORAGE_TOKEN, FIRESTORE_CLIENT_QUERY_CONSTRAINT_HANDLER_MAPPING, FirebaseAppCheckMiddleware, FirebaseAppCheckMiddlewareConfig, FirebaseNestServerRootModule, FirebaseRawBodyMiddleware, FirebaseServerAnalyticsSegmentListenerService, FirebaseServerAnalyticsSegmentModule, FirebaseServerAnalyticsService, FirebaseServerAnalyticsServiceListener, FirebaseServerAuthModule, FirebaseServerAuthNewUserSendSetupDetailsNoSetupConfigError, FirebaseServerAuthNewUserSendSetupDetailsSendOnceError, FirebaseServerAuthNewUserSendSetupDetailsThrottleError, FirebaseServerAuthPasswordResetInvalidCodeError, FirebaseServerAuthPasswordResetNoResetConfigError, FirebaseServerAuthPasswordResetSendOnceError, FirebaseServerAuthPasswordResetThrottleError, FirebaseServerAuthService, FirebaseServerAuthUserBadInputError, FirebaseServerAuthUserExistsError, FirebaseServerEnvService, FirebaseServerFirestoreContextModule, FirebaseServerFirestoreModule, FirebaseServerStorageContextModule, FirebaseServerStorageModule, FirebaseServerStorageService, GlobalRoutePrefixConfig, MAX_MODEL_ACCESS_MULTI_READ_KEYS, MODEL_API_NEST_APPLICATION_CONTEXT, ModelApiCallModelDispatchService, ModelApiController, ModelApiDispatchConfig, ModelApiGetService, NO_RUN_NAME_SPECIFIED_FOR_SCHEDULED_FUNCTION_DEVELOPMENT_FUNCTION_CODE, NoContentFirebaseServerUserPasswordResetService, NoSetupContentFirebaseServerNewUserService, ON_CALL_MODEL_ANALYTICS_HANDLER, ON_CALL_MODEL_ANALYTICS_SERVICE, OnCallModelAnalyticsService, PHONE_NUMBER_ALREADY_EXISTS_ERROR_CODE, SkipAppCheck, UNKNOWN_SCHEDULED_FUNCTION_DEVELOPMENT_FUNCTION_NAME_CODE, UNKNOWN_SCHEDULED_FUNCTION_DEVELOPMENT_FUNCTION_TYPE_CODE, _onCallWithCallTypeFunction, aggregateCrudModelApiDetails, aggregateModelApiDetails, aggregateSpecifierApiDetails, alreadyExistsError, appAnalyticsModuleMetadata, appFirestoreModuleMetadata, assertContextHasAuth, assertDocumentExists, assertHasRolesInRequest, assertHasSignedTosInRequest, assertIsAdminInRequest, assertIsAdminOrTargetUserInRequestData, assertIsContextWithAuthData, assertRequestRequiresAuthForFunction, assertSnapshotData, assertSnapshotDataWithKey, authServicePasswordResetInvalidCodeError, authServicePasswordResetNoConfigError, authServicePasswordResetSendOnceError, authServicePasswordResetThrottleError, badRequestError, blockingFunctionHandlerWithNestContextFactory, buildNestServerRootModule, callWithAnalytics, catchAndThrowPasswordResetServerErrors, cloudEventHandlerWithNestContextFactory, collectionRefForPath, createModelUnknownModelTypeError, decodeFirebaseServerUserPasswordResetOobCode, defaultFirebaseServerActionsTransformFactoryLogErrorFunction, defaultProvideFirebaseServerStorageServiceSimple, deleteModelUnknownModelTypeError, developmentUnknownSpecifierError, docRefForPath, documentModelNotAvailableError, encodeFirebaseServerUserPasswordResetOobCode, executeOnCallQuery, firebaseAuthTokenFromDecodedIdToken, firebaseServerActionsContext, firebaseServerActionsTransformContext, firebaseServerActionsTransformFactory, firebaseServerAppTokenProvider, firebaseServerAuthModuleMetadata, firebaseServerDevFunctions, firebaseServerEnvTokenProvider, firebaseServerEnvTokenProviders, firebaseServerErrorInfo, firebaseServerErrorInfoCodePair, firebaseServerErrorInfoServerErrorCodePair, firebaseServerErrorInfoServerErrorPair, firebaseServerFirestoreContextModuleMetadata, firebaseServerStorageDefaultBucketIdTokenProvider, firebaseServerStorageModuleMetadata, firebaseServerValidationError, firebaseServerValidationServerError, firestoreClientQueryConstraintFunctionsDriver, firestoreEncryptedField, firestoreServerIncrementUpdateToUpdateData, forbiddenError, getAuthUserOrUndefined, getModelApiDetails, googleCloudFileMetadataToStorageMetadata, googleCloudFirebaseStorageContextFactory, googleCloudFirebaseStorageDrivers, googleCloudFirestoreAccessorDriver, googleCloudFirestoreContextFactory, googleCloudFirestoreDrivers, googleCloudFirestoreQueryDriver, googleCloudStorageAccessorFile, googleCloudStorageAccessorFolder, googleCloudStorageBucketForStorageFilePath, googleCloudStorageFileForStorageFilePath, googleCloudStorageFirebaseStorageAccessorDriver, googleCloudStorageFromFirebaseAdminStorage, googleCloudStorageListFilesResultFactory, handleFirebaseAuthError, handleFirebaseError, hasAuthRolesInRequest, hasNewUserSetupPasswordInRequest, hasSignedTosInRequest, inAuthContext, injectNestApplicationContextIntoRequest, injectNestIntoRequest, internalServerError, invokeModelUnknownModelTypeError, isActualSpecifier, isAdminInRequest, isAdminOrTargetUserInRequestData, isContextWithAuthData, isFirebaseError, isFirebaseHttpsError, isOnCallCrudModelApiDetails, isOnCallHandlerApiDetails, isOnCallModelTypeApiDetails, isOnCallSpecifierApiDetails, makeBlockingFunctionWithHandler, makeOnScheduleHandlerWithNestApplicationRequest, makeScheduledFunctionDevelopmentFunction, modelAccessReadErrorFromUseMultipleModelsFailure, modelApiModuleMetadata, modelNotAvailableError, nestAppHasDevelopmentSchedulerEnabled, nestAppIsProductionEnvironment, nestFirebaseDoesNotExistError, nestFirebaseForbiddenPermissionError, nestServerInstance, noRunNameSpecifiedForScheduledFunctionDevelopmentFunction, noopFirebaseServerAnalyticsServiceListener, noopOnCallModelAnalyticsService, notFoundError, onCallAnalyticsEmitterInstance, onCallCreateModel, onCallDeleteModel, onCallDevelopmentFunction, onCallHandlerWithNestApplicationFactory, onCallHandlerWithNestContextFactory, onCallInvokeModel, onCallModel, onCallModelMissingCallTypeError, onCallModelUnknownCallTypeError, onCallQueryModel, onCallReadModel, onCallSpecifierHandler, onCallUpdateModel, onScheduleHandlerWithNestApplicationFactory, onScheduleHandlerWithNestContextFactory, optionalAuthContext, optionalFirestoreEncryptedField, permissionDeniedError, phoneNumberAlreadyExistsError, preconditionConflictError, provideAppFirestoreCollections, provideFirebaseServerAuthService, provideFirebaseServerStorageService, queryModelBadCursorError, queryModelUnknownModelTypeError, readApiDetails, readModelUnknownModelTypeError, resolveAdminOnlyValue, resolveAnalyticsFromApiDetails, setNestContextOnRequest, setNestContextOnScheduleRequest, taskQueueFunctionHandlerWithNestContextFactory, unauthenticatedContextHasNoAuthData, unauthenticatedContextHasNoUidError, unauthenticatedError, unavailableError, unavailableOrDeactivatedFunctionError, unknownModelCrudFunctionSpecifierError, unknownScheduledFunctionDevelopmentFunctionName, unknownScheduledFunctionDevelopmentFunctionType, updateModelUnknownModelTypeError, userContextFromUid, verifyAppCheckInRequest, withApiDetails };

package/mailgun/index.cjs.js

@@ -374,7 +374,7 @@ function _ts_generator(thisArg, body) {
             key: "sendPasswordResetContentToUser",
             value: function sendPasswordResetContentToUser(details) {
                 return _async_to_generator(function() {
-                    var userRecord, resetPassword, uid, displayName, email, baseRequest, baseRequestTo;
+                    var userRecord, oobCode, uid, displayName, email, baseRequest, baseRequestTo;
                     return _ts_generator(this, function(_state) {
                         switch(_state.label){
                             case 0:
@@ -384,7 +384,10 @@ function _ts_generator(thisArg, body) {
                                 ];
                             case 1:
                                 userRecord = _state.sent();
-                                resetPassword = details.claims.resetPassword;
+                                // Inject the encoded oob code (carries both the raw code and the target uid) so the link
+                                // embedded in the email is self-sufficient — the recipient does not need to be signed in
+                                // to complete the reset.
+                                oobCode = details.oobCode;
                                 uid = userRecord.uid, displayName = userRecord.displayName, email = userRecord.email;
                                 if (!email) {
                                     throw new Error('Email is not present/available for the user record "'.concat(userRecord.uid, '"'));
@@ -405,7 +408,7 @@ function _ts_generator(thisArg, body) {
                                             name: baseRequestTo === null || baseRequestTo === void 0 ? void 0 : baseRequestTo.name,
                                             email: email,
                                             userVariables: _object_spread_props(_object_spread({
-                                                resetPassword: resetPassword
+                                                resetPassword: oobCode
                                             }, baseRequestTo === null || baseRequestTo === void 0 ? void 0 : baseRequestTo.userVariables), {
                                                 displayName: displayName,
                                                 uid: uid

package/mailgun/index.esm.js

@@ -372,7 +372,7 @@ function _ts_generator(thisArg, body) {
             key: "sendPasswordResetContentToUser",
             value: function sendPasswordResetContentToUser(details) {
                 return _async_to_generator(function() {
-                    var userRecord, resetPassword, uid, displayName, email, baseRequest, baseRequestTo;
+                    var userRecord, oobCode, uid, displayName, email, baseRequest, baseRequestTo;
                     return _ts_generator(this, function(_state) {
                         switch(_state.label){
                             case 0:
@@ -382,7 +382,10 @@ function _ts_generator(thisArg, body) {
                                 ];
                             case 1:
                                 userRecord = _state.sent();
-                                resetPassword = details.claims.resetPassword;
+                                // Inject the encoded oob code (carries both the raw code and the target uid) so the link
+                                // embedded in the email is self-sufficient — the recipient does not need to be signed in
+                                // to complete the reset.
+                                oobCode = details.oobCode;
                                 uid = userRecord.uid, displayName = userRecord.displayName, email = userRecord.email;
                                 if (!email) {
                                     throw new Error('Email is not present/available for the user record "'.concat(userRecord.uid, '"'));
@@ -403,7 +406,7 @@ function _ts_generator(thisArg, body) {
                                             name: baseRequestTo === null || baseRequestTo === void 0 ? void 0 : baseRequestTo.name,
                                             email: email,
                                             userVariables: _object_spread_props(_object_spread({
-                                                resetPassword: resetPassword
+                                                resetPassword: oobCode
                                             }, baseRequestTo === null || baseRequestTo === void 0 ? void 0 : baseRequestTo.userVariables), {
                                                 displayName: displayName,
                                                 uid: uid

package/mailgun/package.json

@@ -1,15 +1,15 @@
 {
   "name": "@dereekb/firebase-server/mailgun",
-  "version": "13.12.3",
+  "version": "13.12.5",
   "peerDependencies": {
-    "@dereekb/analytics": "13.12.3",
-    "@dereekb/firebase": "13.12.3",
-    "@dereekb/firebase-server": "13.12.3",
-    "@dereekb/date": "13.12.3",
-    "@dereekb/nestjs": "13.12.3",
-    "@dereekb/model": "13.12.3",
-    "@dereekb/rxjs": "13.12.3",
-    "@dereekb/util": "13.12.3"
+    "@dereekb/analytics": "13.12.5",
+    "@dereekb/firebase": "13.12.5",
+    "@dereekb/firebase-server": "13.12.5",
+    "@dereekb/date": "13.12.5",
+    "@dereekb/nestjs": "13.12.5",
+    "@dereekb/model": "13.12.5",
+    "@dereekb/rxjs": "13.12.5",
+    "@dereekb/util": "13.12.5"
   },
   "exports": {
     "./package.json": "./package.json",

package/mcp/index.cjs.js

@@ -4056,13 +4056,13 @@ function _unsupported_iterable_to_array$1(o, minLen) {
 /**
  * Default analytics event name used by {@link FirebaseServerMcpAnalyticsService} when
  * forwarding a completed MCP tool call to the downstream analytics pipeline.
- */ var DEFAULT_MCP_ANALYTICS_EVENT_NAME = 'mcp-tool';
+ */ var DEFAULT_MCP_ANALYTICS_EVENT_NAME = 'Mcp Tool Call';
 /**
  * NestJS injection token for the optional {@link FirebaseServerMcpAnalyticsConfig} provider.
  *
  * @example
  * ```typescript
- * @Module(appMcpAnalyticsModuleMetadata({ mcpAnalyticsConfig: { eventName: 'mcp-tool', logEvents: true } }))
+ * @Module(appMcpAnalyticsModuleMetadata({ mcpAnalyticsConfig: { eventName: 'Mcp Tool Call', logEvents: true } }))
  * export class AppMcpAnalyticsModule {}
  * ```
  */ var FIREBASE_SERVER_MCP_ANALYTICS_CONFIG = 'FIREBASE_SERVER_MCP_ANALYTICS_CONFIG';
@@ -4163,14 +4163,15 @@ var FirebaseServerMcpAnalyticsService_1;
  * no-op aside from the optional log line.
  */ exports.FirebaseServerMcpAnalyticsService = FirebaseServerMcpAnalyticsService_1 = /*#__PURE__*/ function(McpAnalyticsService) {
     _inherits(FirebaseServerMcpAnalyticsService, McpAnalyticsService);
-    function FirebaseServerMcpAnalyticsService(analyticsService, config) {
+    function FirebaseServerMcpAnalyticsService(firebaseServerEnvService, analyticsService, config) {
         _class_call_check(this, FirebaseServerMcpAnalyticsService);
         var _this;
         var _ref, _ref1;
-        _this = _call_super(this, FirebaseServerMcpAnalyticsService), _define_property(_this, "analyticsService", void 0), _define_property(_this, "_logger", new common.Logger(FirebaseServerMcpAnalyticsService_1.name)), _define_property(_this, "_eventName", void 0), _define_property(_this, "_logEvents", void 0);
+        _this = _call_super(this, FirebaseServerMcpAnalyticsService), _define_property(_this, "firebaseServerEnvService", void 0), _define_property(_this, "analyticsService", void 0), _define_property(_this, "_logger", new common.Logger(FirebaseServerMcpAnalyticsService_1.name)), _define_property(_this, "_eventName", void 0), _define_property(_this, "_logEvents", void 0);
+        _this.firebaseServerEnvService = firebaseServerEnvService;
         _this.analyticsService = analyticsService;
         _this._eventName = (_ref = config === null || config === void 0 ? void 0 : config.eventName) !== null && _ref !== void 0 ? _ref : DEFAULT_MCP_ANALYTICS_EVENT_NAME;
-        _this._logEvents = (_ref1 = config === null || config === void 0 ? void 0 : config.logEvents) !== null && _ref1 !== void 0 ? _ref1 : true;
+        _this._logEvents = (_ref1 = config === null || config === void 0 ? void 0 : config.logEvents) !== null && _ref1 !== void 0 ? _ref1 : !_this.firebaseServerEnvService.isProduction;
         return _this;
     }
     _create_class(FirebaseServerMcpAnalyticsService, [
@@ -4201,10 +4202,11 @@ var FirebaseServerMcpAnalyticsService_1;
 }(McpAnalyticsService);
 exports.FirebaseServerMcpAnalyticsService = FirebaseServerMcpAnalyticsService_1 = __decorate([
     common.Injectable(),
-    __param(0, common.Optional()),
-    __param(0, common.Inject(firebaseServer.FirebaseServerAnalyticsService)),
+    __param(0, common.Inject(firebaseServer.FirebaseServerEnvService)),
     __param(1, common.Optional()),
-    __param(1, common.Inject(FIREBASE_SERVER_MCP_ANALYTICS_CONFIG))
+    __param(1, common.Inject(firebaseServer.FirebaseServerAnalyticsService)),
+    __param(2, common.Optional()),
+    __param(2, common.Inject(FIREBASE_SERVER_MCP_ANALYTICS_CONFIG))
 ], exports.FirebaseServerMcpAnalyticsService);
 
 function _array_like_to_array(arr, len) {

package/mcp/index.esm.js

@@ -4,7 +4,7 @@ import { McpServer } from '@modelcontextprotocol/sdk/server/mcp.js';
 import { ListToolsRequestSchema, CallToolRequestSchema } from '@modelcontextprotocol/sdk/types.js';
 import { getOidcScopesFromRequest } from '@dereekb/firebase-server/oidc';
 import { makeValuesGroupMap, authRolesSetHasRoles } from '@dereekb/util';
-import { ModelApiCallModelDispatchService, ModelApiGetService, FirebaseServerAnalyticsService } from '@dereekb/firebase-server';
+import { ModelApiCallModelDispatchService, ModelApiGetService, FirebaseServerEnvService, FirebaseServerAnalyticsService } from '@dereekb/firebase-server';
 import { inspect } from 'node:util';
 import { arktypeToJsonSchemaForExport } from '@dereekb/model';
 import { callModelOidcScopeForCallType } from '@dereekb/firebase';
@@ -4054,13 +4054,13 @@ function _unsupported_iterable_to_array$1(o, minLen) {
 /**
  * Default analytics event name used by {@link FirebaseServerMcpAnalyticsService} when
  * forwarding a completed MCP tool call to the downstream analytics pipeline.
- */ var DEFAULT_MCP_ANALYTICS_EVENT_NAME = 'mcp-tool';
+ */ var DEFAULT_MCP_ANALYTICS_EVENT_NAME = 'Mcp Tool Call';
 /**
  * NestJS injection token for the optional {@link FirebaseServerMcpAnalyticsConfig} provider.
  *
  * @example
  * ```typescript
- * @Module(appMcpAnalyticsModuleMetadata({ mcpAnalyticsConfig: { eventName: 'mcp-tool', logEvents: true } }))
+ * @Module(appMcpAnalyticsModuleMetadata({ mcpAnalyticsConfig: { eventName: 'Mcp Tool Call', logEvents: true } }))
  * export class AppMcpAnalyticsModule {}
  * ```
  */ var FIREBASE_SERVER_MCP_ANALYTICS_CONFIG = 'FIREBASE_SERVER_MCP_ANALYTICS_CONFIG';
@@ -4161,14 +4161,15 @@ var FirebaseServerMcpAnalyticsService_1;
  * no-op aside from the optional log line.
  */ var FirebaseServerMcpAnalyticsService = FirebaseServerMcpAnalyticsService_1 = /*#__PURE__*/ function(McpAnalyticsService) {
     _inherits(FirebaseServerMcpAnalyticsService, McpAnalyticsService);
-    function FirebaseServerMcpAnalyticsService(analyticsService, config) {
+    function FirebaseServerMcpAnalyticsService(firebaseServerEnvService, analyticsService, config) {
         _class_call_check(this, FirebaseServerMcpAnalyticsService);
         var _this;
         var _ref, _ref1;
-        _this = _call_super(this, FirebaseServerMcpAnalyticsService), _define_property(_this, "analyticsService", void 0), _define_property(_this, "_logger", new Logger(FirebaseServerMcpAnalyticsService_1.name)), _define_property(_this, "_eventName", void 0), _define_property(_this, "_logEvents", void 0);
+        _this = _call_super(this, FirebaseServerMcpAnalyticsService), _define_property(_this, "firebaseServerEnvService", void 0), _define_property(_this, "analyticsService", void 0), _define_property(_this, "_logger", new Logger(FirebaseServerMcpAnalyticsService_1.name)), _define_property(_this, "_eventName", void 0), _define_property(_this, "_logEvents", void 0);
+        _this.firebaseServerEnvService = firebaseServerEnvService;
         _this.analyticsService = analyticsService;
         _this._eventName = (_ref = config === null || config === void 0 ? void 0 : config.eventName) !== null && _ref !== void 0 ? _ref : DEFAULT_MCP_ANALYTICS_EVENT_NAME;
-        _this._logEvents = (_ref1 = config === null || config === void 0 ? void 0 : config.logEvents) !== null && _ref1 !== void 0 ? _ref1 : true;
+        _this._logEvents = (_ref1 = config === null || config === void 0 ? void 0 : config.logEvents) !== null && _ref1 !== void 0 ? _ref1 : !_this.firebaseServerEnvService.isProduction;
         return _this;
     }
     _create_class(FirebaseServerMcpAnalyticsService, [
@@ -4199,10 +4200,11 @@ var FirebaseServerMcpAnalyticsService_1;
 }(McpAnalyticsService);
 FirebaseServerMcpAnalyticsService = FirebaseServerMcpAnalyticsService_1 = __decorate([
     Injectable(),
-    __param(0, Optional()),
-    __param(0, Inject(FirebaseServerAnalyticsService)),
+    __param(0, Inject(FirebaseServerEnvService)),
     __param(1, Optional()),
-    __param(1, Inject(FIREBASE_SERVER_MCP_ANALYTICS_CONFIG))
+    __param(1, Inject(FirebaseServerAnalyticsService)),
+    __param(2, Optional()),
+    __param(2, Inject(FIREBASE_SERVER_MCP_ANALYTICS_CONFIG))
 ], FirebaseServerMcpAnalyticsService);
 
 function _array_like_to_array(arr, len) {

package/mcp/package.json

@@ -1,17 +1,17 @@
 {
   "name": "@dereekb/firebase-server/mcp",
-  "version": "13.12.3",
+  "version": "13.12.5",
   "peerDependencies": {
-    "@dereekb/analytics": "13.12.3",
-    "@dereekb/date": "13.12.3",
-    "@dereekb/firebase": "13.12.3",
-    "@dereekb/firebase-server": "13.12.3",
-    "@dereekb/firebase-server/oidc": "13.12.3",
-    "@dereekb/model": "13.12.3",
-    "@dereekb/nestjs": "13.12.3",
-    "@dereekb/rxjs": "13.12.3",
-    "@dereekb/util": "13.12.3",
-    "@dereekb/zoho": "13.12.3",
+    "@dereekb/analytics": "13.12.5",
+    "@dereekb/date": "13.12.5",
+    "@dereekb/firebase": "13.12.5",
+    "@dereekb/firebase-server": "13.12.5",
+    "@dereekb/firebase-server/oidc": "13.12.5",
+    "@dereekb/model": "13.12.5",
+    "@dereekb/nestjs": "13.12.5",
+    "@dereekb/rxjs": "13.12.5",
+    "@dereekb/util": "13.12.5",
+    "@dereekb/zoho": "13.12.5",
     "@modelcontextprotocol/sdk": "1.29.0",
     "@nestjs/common": "^11.1.19",
     "@nestjs/core": "^11.1.19",

package/mcp/src/lib/service/analytics/mcp.analytics.config.d.ts

@@ -3,7 +3,7 @@ import { type InjectionToken } from '@nestjs/common';
  * Default analytics event name used by {@link FirebaseServerMcpAnalyticsService} when
  * forwarding a completed MCP tool call to the downstream analytics pipeline.
  */
-export declare const DEFAULT_MCP_ANALYTICS_EVENT_NAME = "mcp-tool";
+export declare const DEFAULT_MCP_ANALYTICS_EVENT_NAME = "Mcp Tool Call";
 /**
  * Configuration for {@link FirebaseServerMcpAnalyticsService}.
  *
@@ -18,7 +18,9 @@ export interface FirebaseServerMcpAnalyticsConfig {
      */
     readonly eventName?: string;
     /**
-     * Whether to emit a per-call `Logger` line for each completed tool call. Defaults to `true`.
+     * Whether to emit a per-call `Logger` line for each completed tool call.
+     *
+     * Defaults to `true` on non-production environments.
      */
     readonly logEvents?: boolean;
 }
@@ -27,7 +29,7 @@ export interface FirebaseServerMcpAnalyticsConfig {
  *
  * @example
  * ```typescript
- * @Module(appMcpAnalyticsModuleMetadata({ mcpAnalyticsConfig: { eventName: 'mcp-tool', logEvents: true } }))
+ * @Module(appMcpAnalyticsModuleMetadata({ mcpAnalyticsConfig: { eventName: 'Mcp Tool Call', logEvents: true } }))
  * export class AppMcpAnalyticsModule {}
  * ```
  */

package/mcp/src/lib/service/analytics/mcp.analytics.service.d.ts

@@ -1,4 +1,4 @@
-import { FirebaseServerAnalyticsService } from '@dereekb/firebase-server';
+import { FirebaseServerAnalyticsService, FirebaseServerEnvService } from '@dereekb/firebase-server';
 import { McpAnalyticsService, type McpAnalyticsEvent } from './mcp.analytics.handler';
 import { type FirebaseServerMcpAnalyticsConfig } from './mcp.analytics.config';
 /**
@@ -11,10 +11,11 @@ import { type FirebaseServerMcpAnalyticsConfig } from './mcp.analytics.config';
  * no-op aside from the optional log line.
  */
 export declare class FirebaseServerMcpAnalyticsService extends McpAnalyticsService {
+    private readonly firebaseServerEnvService;
     private readonly analyticsService?;
     private readonly _logger;
     private readonly _eventName;
     private readonly _logEvents;
-    constructor(analyticsService?: FirebaseServerAnalyticsService | undefined, config?: FirebaseServerMcpAnalyticsConfig);
+    constructor(firebaseServerEnvService: FirebaseServerEnvService, analyticsService?: FirebaseServerAnalyticsService | undefined, config?: FirebaseServerMcpAnalyticsConfig);
     handleMcpAnalyticsEvent(event: McpAnalyticsEvent): void;
 }