@dereekb/firebase-server 13.16.0 → 13.18.0

package/index.cjs.js

@@ -7577,6 +7577,11 @@ function _ts_generator$9(thisArg, body) {
  * permission-denied / not-found errors surface a real message + code instead of the generic
  * `"Unknown error"` fallback the inline mapping used previously.
  *
+ * When no real message survives, the fallback is derived from the resolved error `code` so the two
+ * distinct outcomes stay distinguishable — a not-found read no longer reads as "permission denied"
+ * (and vice-versa). Only when neither a message nor a recognizable code is present does it fall back
+ * to a generic message.
+ *
  * @param entry - A failed-key entry from the underlying multi-read.
  * @returns A `{ key, message, code? }` triple safe to return to API/MCP callers.
  */ function modelAccessReadErrorFromUseMultipleModelsFailure(entry) {
@@ -7589,10 +7594,28 @@ function _ts_generator$9(thisArg, body) {
     var code = (_info_serverErrorCode = info.serverErrorCode) !== null && _info_serverErrorCode !== void 0 ? _info_serverErrorCode : info.firebaseErrorCode;
     return {
         key: entry.key,
-        message: (_ref = (_ref1 = serverMessage !== null && serverMessage !== void 0 ? serverMessage : httpsMessage) !== null && _ref1 !== void 0 ? _ref1 : plainMessage) !== null && _ref !== void 0 ? _ref : 'permission denied or not found',
+        message: (_ref = (_ref1 = serverMessage !== null && serverMessage !== void 0 ? serverMessage : httpsMessage) !== null && _ref1 !== void 0 ? _ref1 : plainMessage) !== null && _ref !== void 0 ? _ref : modelAccessReadErrorMessageFromCode(code),
         code: code
     };
 }
+/**
+ * Derives a fallback read-error message from a resolved error code, distinguishing not-found from
+ * permission-denied. Accepts both the server-error form (`NOT_FOUND` / `PERMISSION_DENIED` /
+ * `FORBIDDEN`) and the Firebase HttpsError form (`not-found` / `permission-denied`).
+ *
+ * @param code - The resolved error code (`serverErrorCode ?? firebaseErrorCode`), if any.
+ * @returns `'not found'`, `'permission denied'`, or a generic `'unknown error'` fallback.
+ */ function modelAccessReadErrorMessageFromCode(code) {
+    var message;
+    if (code === firebase.NOT_FOUND_ERROR_CODE || code === 'not-found') {
+        message = 'not found';
+    } else if (code === firebase.PERMISSION_DENIED_ERROR_CODE || code === firebase.FORBIDDEN_ERROR_CODE || code === 'permission-denied') {
+        message = 'permission denied';
+    } else {
+        message = 'unknown error';
+    }
+    return message;
+}
 // MARK: Service
 /**
  * Service for direct document reads using the `useModel()` permission-checking pattern.

package/index.esm.js

@@ -7575,6 +7575,11 @@ function _ts_generator$9(thisArg, body) {
  * permission-denied / not-found errors surface a real message + code instead of the generic
  * `"Unknown error"` fallback the inline mapping used previously.
  *
+ * When no real message survives, the fallback is derived from the resolved error `code` so the two
+ * distinct outcomes stay distinguishable — a not-found read no longer reads as "permission denied"
+ * (and vice-versa). Only when neither a message nor a recognizable code is present does it fall back
+ * to a generic message.
+ *
  * @param entry - A failed-key entry from the underlying multi-read.
  * @returns A `{ key, message, code? }` triple safe to return to API/MCP callers.
  */ function modelAccessReadErrorFromUseMultipleModelsFailure(entry) {
@@ -7587,10 +7592,28 @@ function _ts_generator$9(thisArg, body) {
     var code = (_info_serverErrorCode = info.serverErrorCode) !== null && _info_serverErrorCode !== void 0 ? _info_serverErrorCode : info.firebaseErrorCode;
     return {
         key: entry.key,
-        message: (_ref = (_ref1 = serverMessage !== null && serverMessage !== void 0 ? serverMessage : httpsMessage) !== null && _ref1 !== void 0 ? _ref1 : plainMessage) !== null && _ref !== void 0 ? _ref : 'permission denied or not found',
+        message: (_ref = (_ref1 = serverMessage !== null && serverMessage !== void 0 ? serverMessage : httpsMessage) !== null && _ref1 !== void 0 ? _ref1 : plainMessage) !== null && _ref !== void 0 ? _ref : modelAccessReadErrorMessageFromCode(code),
         code: code
     };
 }
+/**
+ * Derives a fallback read-error message from a resolved error code, distinguishing not-found from
+ * permission-denied. Accepts both the server-error form (`NOT_FOUND` / `PERMISSION_DENIED` /
+ * `FORBIDDEN`) and the Firebase HttpsError form (`not-found` / `permission-denied`).
+ *
+ * @param code - The resolved error code (`serverErrorCode ?? firebaseErrorCode`), if any.
+ * @returns `'not found'`, `'permission denied'`, or a generic `'unknown error'` fallback.
+ */ function modelAccessReadErrorMessageFromCode(code) {
+    var message;
+    if (code === NOT_FOUND_ERROR_CODE || code === 'not-found') {
+        message = 'not found';
+    } else if (code === PERMISSION_DENIED_ERROR_CODE || code === FORBIDDEN_ERROR_CODE || code === 'permission-denied') {
+        message = 'permission denied';
+    } else {
+        message = 'unknown error';
+    }
+    return message;
+}
 // MARK: Service
 /**
  * Service for direct document reads using the `useModel()` permission-checking pattern.

package/mailgun/package.json

@@ -1,15 +1,15 @@
 {
   "name": "@dereekb/firebase-server/mailgun",
-  "version": "13.16.0",
+  "version": "13.18.0",
   "peerDependencies": {
-    "@dereekb/analytics": "13.16.0",
-    "@dereekb/firebase": "13.16.0",
-    "@dereekb/firebase-server": "13.16.0",
-    "@dereekb/date": "13.16.0",
-    "@dereekb/nestjs": "13.16.0",
-    "@dereekb/model": "13.16.0",
-    "@dereekb/rxjs": "13.16.0",
-    "@dereekb/util": "13.16.0"
+    "@dereekb/analytics": "13.18.0",
+    "@dereekb/firebase": "13.18.0",
+    "@dereekb/firebase-server": "13.18.0",
+    "@dereekb/date": "13.18.0",
+    "@dereekb/nestjs": "13.18.0",
+    "@dereekb/model": "13.18.0",
+    "@dereekb/rxjs": "13.18.0",
+    "@dereekb/util": "13.18.0"
   },
   "exports": {
     "./package.json": "./package.json",