@dereekb/firebase-server 14.2.0 → 14.3.0

package/oidc/package.json

@@ -1,18 +1,18 @@
 {
   "name": "@dereekb/firebase-server/oidc",
-  "version": "14.2.0",
+  "version": "14.3.0",
   "sideEffects": false,
   "type": "module",
   "peerDependencies": {
-    "@dereekb/analytics": "14.2.0",
-    "@dereekb/date": "14.2.0",
-    "@dereekb/firebase": "14.2.0",
-    "@dereekb/firebase-server": "14.2.0",
-    "@dereekb/model": "14.2.0",
-    "@dereekb/nestjs": "14.2.0",
-    "@dereekb/rxjs": "14.2.0",
-    "@dereekb/util": "14.2.0",
-    "@dereekb/zoho": "14.2.0",
+    "@dereekb/analytics": "14.3.0",
+    "@dereekb/date": "14.3.0",
+    "@dereekb/firebase": "14.3.0",
+    "@dereekb/firebase-server": "14.3.0",
+    "@dereekb/model": "14.3.0",
+    "@dereekb/nestjs": "14.3.0",
+    "@dereekb/rxjs": "14.3.0",
+    "@dereekb/util": "14.3.0",
+    "@dereekb/zoho": "14.3.0",
     "@nestjs/common": "^12.0.1",
     "@nestjs/config": "^12.0.0",
     "express": "^5.2.1",

package/oidc/src/lib/controller/oidc.interaction.controller.d.ts

@@ -86,7 +86,9 @@ export interface ResolveEffectiveSubsetInput {
      */
     readonly alwaysGranted?: readonly string[];
     /**
-     * Entries the existing Grant has previously granted or rejected. Tolerated as no-ops on re-consent.
+     * Entries the existing Grant has already decided and this consent leaves as-is. Tolerated as no-ops on
+     * re-consent. A previously-rejected entry the request names again belongs in `missing` instead — see
+     * `reconsiderRejectedValues` — or it can never be granted on that Grant.
      */
     readonly alreadyEncountered?: readonly string[];
 }

package/oidc/src/lib/service/index.d.ts

@@ -9,4 +9,5 @@ export * from './oidc.jwks.service';
 export * from './oidc.config.service';
 export * from './oidc.client.service';
 export * from './oidc.interaction.service';
+export * from './oidc.grant';
 export * from './oidc.interaction-policy';

package/oidc/src/lib/service/oidc.grant.d.ts

@@ -0,0 +1,103 @@
+import { type Grant } from 'oidc-provider';
+/**
+ * Removes previously-rejected OIDC scopes from a Grant's rejected set.
+ *
+ * oidc-provider exposes `rejectOIDCScope()` but no inverse, and a rejected scope is subtracted from
+ * `getOIDCScope()` on every read — so `addOIDCScope()` alone cannot put a once-rejected scope back in
+ * force. `rejected` is plain persisted data (`Pick<Grant, 'openid' | 'resources'>`), which is what
+ * makes editing it directly the supported shape of an un-reject.
+ *
+ * @param grant - The grant to edit in place.
+ * @param scopes - The scopes to un-reject. Scopes not currently rejected are ignored.
+ */
+export declare function unrejectOIDCScopes(grant: Grant, scopes: Iterable<string>): void;
+/**
+ * Removes previously-rejected OIDC claims from a Grant's rejected set.
+ *
+ * @param grant - The grant to edit in place.
+ * @param claims - The claims to un-reject. Claims not currently rejected are ignored.
+ * @see unrejectOIDCScopes
+ */
+export declare function unrejectOIDCClaims(grant: Grant, claims: Iterable<string>): void;
+/**
+ * Removes previously-rejected resource scopes for one resource indicator from a Grant's rejected set.
+ *
+ * @param grant - The grant to edit in place.
+ * @param resource - The resource indicator.
+ * @param scopes - The scopes to un-reject. Scopes not currently rejected for the resource are ignored.
+ * @see unrejectOIDCScopes
+ */
+export declare function unrejectResourceScopes(grant: Grant, resource: string, scopes: Iterable<string>): void;
+/**
+ * Input for {@link reconsiderRejectedValues}.
+ */
+export interface ReconsiderRejectedValuesInput {
+    /**
+     * Values oidc-provider reports as still undecided for this consent (e.g. `prompt.details.missingOIDCScope`).
+     */
+    readonly missing: readonly string[];
+    /**
+     * Values the existing Grant has already decided — granted or rejected.
+     */
+    readonly encountered: readonly string[];
+    /**
+     * The subset of `encountered` the existing Grant has REJECTED.
+     */
+    readonly rejected: readonly string[];
+    /**
+     * Values the current authorization request asks for. Only a rejected value the request names again is
+     * reconsidered; a rejection from an earlier, wider request stays in force.
+     */
+    readonly requested: ReadonlySet<string>;
+}
+/**
+ * Output of {@link reconsiderRejectedValues}.
+ */
+export interface ReconsiderRejectedValuesResult {
+    /**
+     * `missing` plus the reconsidered values, so a consent decides them again.
+     */
+    readonly missing: string[];
+    /**
+     * `encountered` minus the reconsidered values, so they are no longer treated as settled no-ops.
+     */
+    readonly encountered: string[];
+    /**
+     * The values moved from `encountered` back into `missing`: rejected on the Grant and named by the
+     * current request. A consent that grants one of these must un-reject it on the Grant as well.
+     */
+    readonly reconsidered: string[];
+}
+/**
+ * Moves previously-rejected values the current request asks for again from the "encountered" set back into
+ * the "missing" set, so a re-consent decides them afresh.
+ *
+ * oidc-provider counts a rejected value as encountered: it never reappears in the prompt's `missing*`
+ * details, so without this a consent that names it again is a silent no-op and the value can never be
+ * granted on that Grant — even when the user explicitly ticks it. Values the Grant has GRANTED are left in
+ * `encountered`: they are already in force and need no re-application.
+ *
+ * @param input - The missing, encountered, rejected, and requested sets.
+ * @returns The adjusted missing/encountered sets plus the reconsidered values.
+ *
+ * @__NO_SIDE_EFFECTS__
+ */
+export declare function reconsiderRejectedValues(input: ReconsiderRejectedValuesInput): ReconsiderRejectedValuesResult;
+/**
+ * Names every claim an authorization request's `claims` parameter asks for, across `id_token` and `userinfo`.
+ *
+ * @param claimsParam - The raw `claims` request parameter (a JSON string), or undefined.
+ * @returns The requested claim names; empty when the parameter is absent or malformed.
+ *
+ * @__NO_SIDE_EFFECTS__
+ */
+export declare function requestedOIDCClaimNames(claimsParam: unknown): Set<string>;
+/**
+ * Normalizes an authorization request's `resource` parameter to its list of resource indicators.
+ *
+ * @param resourceParam - The raw `resource` request parameter (a string, an array of strings, or undefined).
+ * @returns The resource indicators; empty when the parameter is absent.
+ *
+ * @__NO_SIDE_EFFECTS__
+ */
+export declare function requestedResourceIndicators(resourceParam: unknown): string[];

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@dereekb/firebase-server",
-  "version": "14.2.0",
+  "version": "14.3.0",
   "type": "module",
   "sideEffects": false,
   "exports": {
@@ -57,18 +57,18 @@
     }
   },
   "peerDependencies": {
-    "@cantoo/pdf-lib": "^2.6.5",
-    "@dereekb/analytics": "14.2.0",
-    "@dereekb/calcom": "14.2.0",
-    "@dereekb/date": "14.2.0",
-    "@dereekb/dbx-core": "14.2.0",
-    "@dereekb/discord": "14.2.0",
-    "@dereekb/firebase": "14.2.0",
-    "@dereekb/model": "14.2.0",
-    "@dereekb/nestjs": "14.2.0",
-    "@dereekb/rxjs": "14.2.0",
-    "@dereekb/util": "14.2.0",
-    "@dereekb/zoho": "14.2.0",
+    "@cantoo/pdf-lib": ">=2.6.5 <2.11.0",
+    "@dereekb/analytics": "14.3.0",
+    "@dereekb/calcom": "14.3.0",
+    "@dereekb/date": "14.3.0",
+    "@dereekb/dbx-core": "14.3.0",
+    "@dereekb/discord": "14.3.0",
+    "@dereekb/firebase": "14.3.0",
+    "@dereekb/model": "14.3.0",
+    "@dereekb/nestjs": "14.3.0",
+    "@dereekb/rxjs": "14.3.0",
+    "@dereekb/util": "14.3.0",
+    "@dereekb/zoho": "14.3.0",
     "@google-cloud/firestore": "^7.11.6",
     "@google-cloud/storage": "^7.22.0",
     "@modelcontextprotocol/node": "2.0.0",

package/test/index.esm.js

@@ -13,7 +13,7 @@ import { HttpsError } from 'firebase-functions/https';
 import { BaseError } from 'make-error';
 import request from 'supertest';
 import { randomBytes, createHash } from 'node:crypto';
-import { OidcClientService, JwksService, OidcAccountService } from '@dereekb/firebase-server/oidc';
+import { OidcProviderConfigService, OidcClientService, JwksService, OidcAccountService } from '@dereekb/firebase-server/oidc';
 
 function _assert_this_initialized$9(self) {
     if (self === void 0) throw new ReferenceError("this hasn't been initialised - super() hasn't been called");
@@ -4767,6 +4767,16 @@ function _unsupported_iterable_to_array(o, minLen) {
     var url = location.startsWith('/') ? new URL(location, 'http://localhost') : new URL(location);
     return url.searchParams.get('uid');
 }
+/**
+ * Whether a redirect response points at the given interaction frontend URL (the login or consent screen).
+ *
+ * @param res - Supertest response to inspect.
+ * @param frontendUrl - The frontend URL to match, without its query string.
+ * @returns True when the response's `Location` header starts with `frontendUrl`.
+ */ function isRedirectTo(res, frontendUrl) {
+    var location = res.headers['location'];
+    return location != null && location.startsWith(frontendUrl);
+}
 /**
  * Cookie jar helpers for the OAuth flow.
  *
@@ -4873,15 +4883,16 @@ function _unsupported_iterable_to_array(o, minLen) {
  * @throws {Error} When the token exchange step fails (the response body and status are included in the message).
  */ function performFullOAuthFlow(input) {
     return _async_to_generator$1(function() {
-        var _ref, _ref1, _ref2, server, oidcClientService, nestApp, uid, config, _createCookieJar, collectCookies, cookieHeader, redirectUri, clientName, tokenEndpointAuthMethod, providerProfiles, scopes, _ref3, client_id, client_secret, codeVerifier, codeChallenge, authRes, loginUid, idToken, loginRes, resumeAfterLoginPath, consentRedirectRes, consentUid, consentRes, resumeAfterConsentPath, callbackRedirectRes, callbackUrl, authorizationCode, tokenRes;
+        var _ref, _ref1, _ref2, _ref3, _ref4, _config_session, _config_session1, server, oidcClientService, nestApp, uid, config, cookieJar, collectCookies, cookieHeader, redirectUri, clientName, tokenEndpointAuthMethod, providerProfiles, scopes, client, _ref5, client_id, client_secret, client_id1, client_secret1, codeVerifier, codeChallenge, authRes, idToken, providerConfigService, interactionRes, loginUid, loginRes, resumeAfterLoginPath, callbackRedirectRes, consentUid, consentRes, resumeAfterConsentPath, callbackUrl, authorizationCode, tokenRes;
         return _ts_generator$1(this, function(_state) {
             switch(_state.label){
                 case 0:
                     server = input.server, oidcClientService = input.oidcClientService, nestApp = input.nestApp, uid = input.uid, config = input.config;
-                    _createCookieJar = createCookieJar(), collectCookies = _createCookieJar.collectCookies, cookieHeader = _createCookieJar.cookieHeader;
-                    redirectUri = (_ref = config === null || config === void 0 ? void 0 : config.redirectUri) !== null && _ref !== void 0 ? _ref : 'https://example.com/callback';
-                    clientName = (_ref1 = config === null || config === void 0 ? void 0 : config.clientName) !== null && _ref1 !== void 0 ? _ref1 : 'test-oauth-context';
-                    tokenEndpointAuthMethod = (_ref2 = config === null || config === void 0 ? void 0 : config.tokenEndpointAuthMethod) !== null && _ref2 !== void 0 ? _ref2 : 'client_secret_post';
+                    cookieJar = (_ref = config === null || config === void 0 ? void 0 : (_config_session = config.session) === null || _config_session === void 0 ? void 0 : _config_session.cookieJar) !== null && _ref !== void 0 ? _ref : createCookieJar();
+                    collectCookies = cookieJar.collectCookies, cookieHeader = cookieJar.cookieHeader;
+                    redirectUri = (_ref1 = (_ref2 = config === null || config === void 0 ? void 0 : (_config_session1 = config.session) === null || _config_session1 === void 0 ? void 0 : _config_session1.client.redirectUri) !== null && _ref2 !== void 0 ? _ref2 : config === null || config === void 0 ? void 0 : config.redirectUri) !== null && _ref1 !== void 0 ? _ref1 : 'https://example.com/callback';
+                    clientName = (_ref3 = config === null || config === void 0 ? void 0 : config.clientName) !== null && _ref3 !== void 0 ? _ref3 : 'test-oauth-context';
+                    tokenEndpointAuthMethod = (_ref4 = config === null || config === void 0 ? void 0 : config.tokenEndpointAuthMethod) !== null && _ref4 !== void 0 ? _ref4 : 'client_secret_post';
                     providerProfiles = config === null || config === void 0 ? void 0 : config.providerProfiles;
                     return [
                         4,
@@ -4889,6 +4900,16 @@ function _unsupported_iterable_to_array(o, minLen) {
                     ];
                 case 1:
                     scopes = _state.sent();
+                    if (!(config === null || config === void 0 ? void 0 : config.session)) return [
+                        3,
+                        2
+                    ];
+                    client = config.session.client;
+                    return [
+                        3,
+                        4
+                    ];
+                case 2:
                     return [
                         4,
                         oidcClientService.createClient(_object_spread({
@@ -4901,15 +4922,23 @@ function _unsupported_iterable_to_array(o, minLen) {
                             dbx_provider_profiles: _to_consumable_array(providerProfiles)
                         }))
                     ];
-                case 2:
-                    _ref3 = _state.sent(), client_id = _ref3.client_id, client_secret = _ref3.client_secret;
+                case 3:
+                    _ref5 = _state.sent(), client_id = _ref5.client_id, client_secret = _ref5.client_secret;
+                    client = {
+                        client_id: client_id,
+                        client_secret: client_secret,
+                        redirectUri: redirectUri
+                    };
+                    _state.label = 4;
+                case 4:
+                    client_id1 = client.client_id, client_secret1 = client.client_secret;
                     // 2. Generate PKCE code_verifier and code_challenge
                     codeVerifier = randomBytes(32).toString('base64url');
                     codeChallenge = createHash('sha256').update(codeVerifier).digest('base64url');
                     return [
                         4,
-                        request(server).get('/oidc/auth').query({
-                            client_id: client_id,
+                        request(server).get('/oidc/auth').query(_object_spread({
+                            client_id: client_id1,
                             redirect_uri: redirectUri,
                             response_type: 'code',
                             scope: scopes,
@@ -4917,25 +4946,33 @@ function _unsupported_iterable_to_array(o, minLen) {
                             code_challenge_method: 'S256',
                             state: 'test-state',
                             nonce: 'test-nonce'
-                        }).redirects(0)
+                        }, (config === null || config === void 0 ? void 0 : config.prompt) == null ? {} : {
+                            prompt: config.prompt
+                        })).redirects(0)
                     ];
-                case 3:
+                case 5:
                     authRes = _state.sent();
                     collectCookies(authRes);
-                    loginUid = extractInteractionUid(authRes);
                     return [
                         4,
                         createTestIdToken(nestApp, uid)
                     ];
-                case 4:
+                case 6:
                     idToken = _state.sent();
+                    providerConfigService = nestApp.get(OidcProviderConfigService);
+                    interactionRes = authRes;
+                    if (!isRedirectTo(authRes, providerConfigService.appLoginUrl)) return [
+                        3,
+                        9
+                    ];
+                    loginUid = extractInteractionUid(authRes);
                     return [
                         4,
                         request(server).post("/interaction/".concat(loginUid, "/login")).set('Cookie', cookieHeader()).send({
                             idToken: idToken
                         })
                     ];
-                case 5:
+                case 7:
                     loginRes = _state.sent();
                     // 5. Resume after login → consent redirect
                     resumeAfterLoginPath = new URL(loginRes.body.redirectTo).pathname + new URL(loginRes.body.redirectTo).search;
@@ -4943,18 +4980,28 @@ function _unsupported_iterable_to_array(o, minLen) {
                         4,
                         request(server).get(resumeAfterLoginPath).set('Cookie', cookieHeader()).redirects(0)
                     ];
-                case 6:
-                    consentRedirectRes = _state.sent();
-                    collectCookies(consentRedirectRes);
-                    consentUid = extractInteractionUid(consentRedirectRes);
+                case 8:
+                    interactionRes = _state.sent();
+                    collectCookies(interactionRes);
+                    _state.label = 9;
+                case 9:
+                    // 6. Approve consent — unless nothing needed consenting and the provider went straight to the callback
+                    callbackRedirectRes = interactionRes;
+                    if (!isRedirectTo(interactionRes, providerConfigService.appConsentUrl)) return [
+                        3,
+                        12
+                    ];
+                    consentUid = extractInteractionUid(interactionRes);
                     return [
                         4,
-                        request(server).post("/interaction/".concat(consentUid, "/consent")).set('Cookie', cookieHeader()).send({
+                        request(server).post("/interaction/".concat(consentUid, "/consent")).set('Cookie', cookieHeader()).send(_object_spread({
                             idToken: idToken,
                             approved: true
-                        })
+                        }, (config === null || config === void 0 ? void 0 : config.grantedOIDCScopes) == null ? {} : {
+                            grantedOIDCScopes: _to_consumable_array(config.grantedOIDCScopes)
+                        }))
                     ];
-                case 7:
+                case 10:
                     consentRes = _state.sent();
                     // 7. Follow resume redirect → callback with authorization code
                     resumeAfterConsentPath = new URL(consentRes.body.redirectTo).pathname + new URL(consentRes.body.redirectTo).search;
@@ -4962,9 +5009,11 @@ function _unsupported_iterable_to_array(o, minLen) {
                         4,
                         request(server).get(resumeAfterConsentPath).set('Cookie', cookieHeader()).redirects(0)
                     ];
-                case 8:
+                case 11:
                     callbackRedirectRes = _state.sent();
                     collectCookies(callbackRedirectRes);
+                    _state.label = 12;
+                case 12:
                     callbackUrl = new URL(callbackRedirectRes.headers['location']);
                     authorizationCode = callbackUrl.searchParams.get('code');
                     return [
@@ -4973,12 +5022,12 @@ function _unsupported_iterable_to_array(o, minLen) {
                             grant_type: 'authorization_code',
                             code: authorizationCode,
                             redirect_uri: redirectUri,
-                            client_id: client_id,
-                            client_secret: client_secret,
+                            client_id: client_id1,
+                            client_secret: client_secret1,
                             code_verifier: codeVerifier
                         })
                     ];
-                case 9:
+                case 13:
                     tokenRes = _state.sent();
                     if (!tokenRes.body.access_token) {
                         throw new Error("OAuth token exchange failed (status ".concat(tokenRes.status, "): ").concat(JSON.stringify(tokenRes.body)));
@@ -4987,7 +5036,12 @@ function _unsupported_iterable_to_array(o, minLen) {
                         2,
                         {
                             accessToken: tokenRes.body.access_token,
-                            idToken: tokenRes.body.id_token
+                            idToken: tokenRes.body.id_token,
+                            scope: tokenRes.body.scope,
+                            session: {
+                                client: client,
+                                cookieJar: cookieJar
+                            }
                         }
                     ];
             }
@@ -5425,7 +5479,9 @@ function _type_of(obj) {
         "makeFixture",
         "makeInstance"
     ]);
-    var flowConfig = flowConfigOverrides.scopes || flowConfigOverrides.redirectUri || flowConfigOverrides.clientName || flowConfigOverrides.providerProfiles ? flowConfigOverrides : undefined;
+    var flowConfig = Object.values(flowConfigOverrides).some(function(value) {
+        return value != null;
+    }) ? flowConfigOverrides : undefined;
     return function(params, buildTests) {
         var f = params.f, u = params.u;
         describe('(oauth)', function() {

package/test/package.json

@@ -1,18 +1,18 @@
 {
   "name": "@dereekb/firebase-server/test",
-  "version": "14.2.0",
+  "version": "14.3.0",
   "sideEffects": false,
   "type": "module",
   "peerDependencies": {
-    "@dereekb/analytics": "14.2.0",
-    "@dereekb/date": "14.2.0",
-    "@dereekb/firebase": "14.2.0",
-    "@dereekb/firebase-server": "14.2.0",
-    "@dereekb/firebase-server/oidc": "14.2.0",
-    "@dereekb/model": "14.2.0",
-    "@dereekb/nestjs": "14.2.0",
-    "@dereekb/rxjs": "14.2.0",
-    "@dereekb/util": "14.2.0",
+    "@dereekb/analytics": "14.3.0",
+    "@dereekb/date": "14.3.0",
+    "@dereekb/firebase": "14.3.0",
+    "@dereekb/firebase-server": "14.3.0",
+    "@dereekb/firebase-server/oidc": "14.3.0",
+    "@dereekb/model": "14.3.0",
+    "@dereekb/nestjs": "14.3.0",
+    "@dereekb/rxjs": "14.3.0",
+    "@dereekb/util": "14.3.0",
     "@google-cloud/firestore": "^7.11.6",
     "@google-cloud/storage": "^7.22.0",
     "@nestjs/common": "^12.0.1",
@@ -25,7 +25,7 @@
     "supertest": "^7.2.2"
   },
   "devDependencies": {
-    "@dereekb/nestjs": "14.2.0"
+    "@dereekb/nestjs": "14.3.0"
   },
   "exports": {
     "./package.json": "./package.json",

package/test/src/lib/oidc/oidc.test.flow.d.ts

@@ -1,3 +1,4 @@
+import request from 'supertest';
 import { type INestApplication } from '@nestjs/common';
 import { type OidcProviderProfileKey, type OidcTokenEndpointAuthMethod } from '@dereekb/firebase';
 import { OidcClientService } from '@dereekb/firebase-server/oidc';
@@ -33,10 +34,60 @@ export interface OAuthTestFlowConfig {
      * "all registered scopes" resolution deliberately drops assignment-only scopes.
      */
     readonly providerProfiles?: readonly OidcProviderProfileKey[];
+    /**
+     * OAuth `prompt` parameter for the authorization request (e.g. `'consent'` to force the consent screen
+     * on a session that has already authorized the client). Omitted by default.
+     */
+    readonly prompt?: string;
+    /**
+     * Explicit subset of the requested OIDC scopes to grant at consent (the consent request's
+     * `grantedOIDCScopes`). Omitted by default, which grants every requested scope.
+     */
+    readonly grantedOIDCScopes?: readonly string[];
+    /**
+     * A prior flow's client and cookies to run this flow against — the same OAuth client, the same
+     * provider session, and therefore the same Grant. Omitted by default, which creates a fresh client
+     * and starts a fresh session.
+     *
+     * When the session is still logged in, the provider skips the login prompt and the flow goes straight
+     * to consent (or straight to the callback when nothing new needs consenting and `prompt` is unset).
+     */
+    readonly session?: OAuthTestFlowSession;
+}
+/**
+ * The client and cookies a flow ran with, for chaining a second flow onto the same provider session.
+ */
+export interface OAuthTestFlowSession {
+    readonly client: OAuthTestFlowClient;
+    readonly cookieJar: OAuthTestFlowCookieJar;
+}
+/**
+ * The OAuth client a flow created (or reused).
+ */
+export interface OAuthTestFlowClient {
+    readonly client_id: string;
+    readonly client_secret?: string;
+    readonly redirectUri: string;
+}
+/**
+ * Cookie jar helpers for the OAuth flow. See {@link createCookieJar}.
+ */
+export interface OAuthTestFlowCookieJar {
+    readonly collectCookies: (res: request.Response) => void;
+    readonly cookieHeader: () => string;
 }
 export interface PerformFullOAuthFlowResult {
     readonly accessToken: string;
     readonly idToken: string;
+    /**
+     * The space-separated scope the token endpoint reported for the access token.
+     */
+    readonly scope: string;
+    /**
+     * The client and cookies this flow ran with, for chaining another flow onto the same session via
+     * {@link OAuthTestFlowConfig.session}.
+     */
+    readonly session: OAuthTestFlowSession;
 }
 /**
  * Input for {@link performFullOAuthFlow}.

package/twilio/package.json

@@ -1,16 +1,16 @@
 {
   "name": "@dereekb/firebase-server/twilio",
-  "version": "14.2.0",
+  "version": "14.3.0",
   "sideEffects": false,
   "type": "module",
   "peerDependencies": {
-    "@dereekb/date": "14.2.0",
-    "@dereekb/firebase": "14.2.0",
-    "@dereekb/firebase-server": "14.2.0",
-    "@dereekb/model": "14.2.0",
-    "@dereekb/nestjs": "14.2.0",
-    "@dereekb/rxjs": "14.2.0",
-    "@dereekb/util": "14.2.0"
+    "@dereekb/date": "14.3.0",
+    "@dereekb/firebase": "14.3.0",
+    "@dereekb/firebase-server": "14.3.0",
+    "@dereekb/model": "14.3.0",
+    "@dereekb/nestjs": "14.3.0",
+    "@dereekb/rxjs": "14.3.0",
+    "@dereekb/util": "14.3.0"
   },
   "exports": {
     "./package.json": "./package.json",

package/zoho/package.json

@@ -1,18 +1,18 @@
 {
   "name": "@dereekb/firebase-server/zoho",
-  "version": "14.2.0",
+  "version": "14.3.0",
   "sideEffects": false,
   "type": "module",
   "peerDependencies": {
-    "@dereekb/analytics": "14.2.0",
-    "@dereekb/date": "14.2.0",
-    "@dereekb/model": "14.2.0",
-    "@dereekb/nestjs": "14.2.0",
-    "@dereekb/rxjs": "14.2.0",
-    "@dereekb/firebase": "14.2.0",
-    "@dereekb/firebase-server": "14.2.0",
-    "@dereekb/util": "14.2.0",
-    "@dereekb/zoho": "14.2.0",
+    "@dereekb/analytics": "14.3.0",
+    "@dereekb/date": "14.3.0",
+    "@dereekb/model": "14.3.0",
+    "@dereekb/nestjs": "14.3.0",
+    "@dereekb/rxjs": "14.3.0",
+    "@dereekb/firebase": "14.3.0",
+    "@dereekb/firebase-server": "14.3.0",
+    "@dereekb/util": "14.3.0",
+    "@dereekb/zoho": "14.3.0",
     "@nestjs/common": "^12.0.1",
     "@nestjs/config": "^12.0.0",
     "express": "^5.2.1"