@dereekb/firebase-server 14.8.0 → 14.9.0

package/calcom/package.json

@@ -1,18 +1,18 @@
 {
   "name": "@dereekb/firebase-server/calcom",
-  "version": "14.8.0",
+  "version": "14.9.0",
   "sideEffects": false,
   "type": "module",
   "peerDependencies": {
-    "@dereekb/analytics": "14.8.0",
-    "@dereekb/calcom": "14.8.0",
-    "@dereekb/date": "14.8.0",
-    "@dereekb/firebase": "14.8.0",
-    "@dereekb/firebase-server": "14.8.0",
-    "@dereekb/model": "14.8.0",
-    "@dereekb/nestjs": "14.8.0",
-    "@dereekb/rxjs": "14.8.0",
-    "@dereekb/util": "14.8.0",
+    "@dereekb/analytics": "14.9.0",
+    "@dereekb/calcom": "14.9.0",
+    "@dereekb/date": "14.9.0",
+    "@dereekb/firebase": "14.9.0",
+    "@dereekb/firebase-server": "14.9.0",
+    "@dereekb/model": "14.9.0",
+    "@dereekb/nestjs": "14.9.0",
+    "@dereekb/rxjs": "14.9.0",
+    "@dereekb/util": "14.9.0",
     "@nestjs/common": "^12.0.1",
     "@nestjs/config": "^12.0.0",
     "express": "^5.2.1"

package/discord/package.json

@@ -1,18 +1,18 @@
 {
   "name": "@dereekb/firebase-server/discord",
-  "version": "14.8.0",
+  "version": "14.9.0",
   "sideEffects": false,
   "type": "module",
   "peerDependencies": {
-    "@dereekb/analytics": "14.8.0",
-    "@dereekb/date": "14.8.0",
-    "@dereekb/discord": "14.8.0",
-    "@dereekb/firebase": "14.8.0",
-    "@dereekb/firebase-server": "14.8.0",
-    "@dereekb/model": "14.8.0",
-    "@dereekb/nestjs": "14.8.0",
-    "@dereekb/rxjs": "14.8.0",
-    "@dereekb/util": "14.8.0",
+    "@dereekb/analytics": "14.9.0",
+    "@dereekb/date": "14.9.0",
+    "@dereekb/discord": "14.9.0",
+    "@dereekb/firebase": "14.9.0",
+    "@dereekb/firebase-server": "14.9.0",
+    "@dereekb/model": "14.9.0",
+    "@dereekb/nestjs": "14.9.0",
+    "@dereekb/rxjs": "14.9.0",
+    "@dereekb/util": "14.9.0",
     "@nestjs/common": "^12.0.1",
     "@nestjs/config": "^12.0.0",
     "express": "^5.2.1"

package/index.esm.js

@@ -7049,6 +7049,33 @@ FirebaseServerAuthModule = __decorate([
     }
 }
 
+/**
+ * Access-token `extra` claim carrying the grant's resolved expiry as unix seconds.
+ *
+ * Baked on at issuance (`extraTokenClaims`) and read back by `verifyAccessToken` and the
+ * `GET /oidc/session` route so clients can surface the session lifetime without decoding the token.
+ *
+ * Declared in this core layer (and re-exported by `@dereekb/firebase-server/oidc`) so non-OIDC
+ * endpoints such as the direct-Firestore session can bound what they mint by the caller's own
+ * lifetime without importing the OIDC sub-package.
+ */ var DBX_FIREBASE_SERVER_OIDC_SESSION_EXPIRES_AT_CLAIM = 'dbx_session_expires_at';
+/**
+ * Reads when the CALLER's own OIDC grant expires, from the {@link DBX_FIREBASE_SERVER_OIDC_SESSION_EXPIRES_AT_CLAIM}
+ * claim baked onto the access token at issuance.
+ *
+ * Returns `undefined` when the claim is absent — a non-OIDC caller (plain Firebase ID token), or a
+ * token issued before the claim existed. Callers must treat that as "no bound", not "expired".
+ *
+ * @param auth - The request auth data, or undefined for unauthenticated requests.
+ * @returns The caller's grant expiry in unix seconds, or `undefined`.
+ */ function oidcSessionExpiresAtFromRequestAuth(auth) {
+    var _ref;
+    var _claims_oidcValidatedToken, _claims_token;
+    var claims = auth !== null && auth !== void 0 ? auth : {};
+    var raw = (_ref = (_claims_oidcValidatedToken = claims.oidcValidatedToken) === null || _claims_oidcValidatedToken === void 0 ? void 0 : _claims_oidcValidatedToken[DBX_FIREBASE_SERVER_OIDC_SESSION_EXPIRES_AT_CLAIM]) !== null && _ref !== void 0 ? _ref : (_claims_token = claims.token) === null || _claims_token === void 0 ? void 0 : _claims_token[DBX_FIREBASE_SERVER_OIDC_SESSION_EXPIRES_AT_CLAIM];
+    return typeof raw === 'number' && Number.isFinite(raw) ? raw : undefined;
+}
+
 /**
  * Header carrying the originating client address through a proxy chain, as a comma-delimited list
  * whose FIRST entry is the original caller.
@@ -9961,6 +9988,15 @@ function _define_property$l(obj, key, value) {
  * Window a Firebase Auth custom token may be exchanged for an ID token within (1 hour, fixed by
  * Firebase). The exchanged ID token then lives its own hour from sign-in.
  */ var FIREBASE_CUSTOM_TOKEN_EXCHANGE_WINDOW_MILLIS = 60 * 60 * 1000;
+/**
+ * Default grace allowed below {@link MIN_FIRESTORE_SESSION_APP_CHECK_TTL_MILLIS} when checking the
+ * caller's remaining lifetime (2 minutes).
+ *
+ * A session cannot be shorter than that App Check floor, so a caller whose own credential ends sooner
+ * is refused rather than handed a session that outlives it. The leeway covers the unavoidable delay
+ * between minting a credential and using it: a credential minted to last exactly the floor can still
+ * open a session for this long afterwards, and that session outlives it by at most this much.
+ */ var DEFAULT_FIRESTORE_SESSION_CALLER_EXPIRY_LEEWAY_MILLIS = 2 * 60 * 1000;
 /**
  * NestJS injection token for the {@link FirestoreSessionAdminPredicate} provider.
  */ var FIRESTORE_SESSION_ADMIN_PREDICATE = 'FIRESTORE_SESSION_ADMIN_PREDICATE';
@@ -9986,6 +10022,12 @@ function _define_property$l(obj, key, value) {
      *
      * Defaults to {@link DEFAULT_FIRESTORE_SESSION_APP_CHECK_TTL_MILLIS}.
      */ _define_property$l(this, "appCheckTokenTtlMillis", void 0);
+    /**
+     * Grace allowed below {@link MIN_FIRESTORE_SESSION_APP_CHECK_TTL_MILLIS} when checking an OIDC
+     * caller's remaining lifetime. A caller with less than `floor - leeway` left is refused.
+     *
+     * Defaults to {@link DEFAULT_FIRESTORE_SESSION_CALLER_EXPIRY_LEEWAY_MILLIS}.
+     */ _define_property$l(this, "callerExpiryLeewayMillis", void 0);
     /**
      * OIDC scope term an OIDC caller must hold to open a session. Defaults to
      * {@link FIRESTORE_SESSION_OIDC_SCOPE}. Pass `null` to disable scope enforcement entirely (the admin
@@ -10223,6 +10265,11 @@ var FirestoreSessionApiService_1;
 /**
  * Error code thrown when the caller is not authorized to open a direct-Firestore session.
  */ var FIRESTORE_SESSION_FORBIDDEN_ERROR_CODE = 'FIRESTORE_SESSION_FORBIDDEN_ERROR';
+/**
+ * Error code thrown when the caller's own OIDC credential expires too soon to back a session — less
+ * than {@link MIN_FIRESTORE_SESSION_APP_CHECK_TTL_MILLIS} minus the configured leeway remains. The
+ * client should re-authenticate (or mint a fresh CLI handoff) and try again.
+ */ var FIRESTORE_SESSION_CALLER_EXPIRING_ERROR_CODE = 'FIRESTORE_SESSION_CALLER_EXPIRING_ERROR';
 /**
  * Mints the direct-Firestore session credential bundle returned by `SessionApiController`.
  *
@@ -10239,6 +10286,20 @@ var FirestoreSessionApiService_1;
  *
  * The custom token is ALWAYS minted for `auth.uid`; there is no way to ask for someone else's session,
  * so a granted session is exactly as privileged as the caller already is under Firestore rules.
+ *
+ * ## Lifetime
+ *
+ * A session never outlives the OIDC credential that opened it (read from the caller's
+ * `dbx_session_expires_at` claim): the App Check TTL and the reported `expiresAt` are both capped at
+ * the caller's expiry. The App Check token cannot be shorter than
+ * {@link MIN_FIRESTORE_SESSION_APP_CHECK_TTL_MILLIS}, so a caller with less than that floor (minus
+ * {@link SessionApiModuleConfig.callerExpiryLeewayMillis}) remaining is refused with
+ * {@link FIRESTORE_SESSION_CALLER_EXPIRING_ERROR_CODE}. Inside the leeway the attestation may outlive
+ * the caller by at most the leeway.
+ *
+ * The Firebase custom token's one-hour exchange window is fixed by Firebase and cannot be shortened;
+ * the capped `expiresAt` is what stops a well-behaved client from reusing the session past its caller.
+ * A caller with no expiry claim (a non-OIDC Firebase ID token) is not bounded.
  */ var FirestoreSessionApiService = FirestoreSessionApiService_1 = /*#__PURE__*/ function() {
     function FirestoreSessionApiService(app, config, adminPredicate) {
         _class_call_check$e(this, FirestoreSessionApiService);
@@ -10268,7 +10329,7 @@ var FirestoreSessionApiService_1;
      * @throws {HttpsError} A `401` when the request carries no uid, or a `403` when either gate rejects the caller.
      */ function createFirestoreSession(auth) {
                 return _async_to_generator$9(function() {
-                    var _Math, _this__config, _this__config1, uid, isAllowed, _tmp, configuredScope, now, customToken, appCheckToken, appCheckTtlMillis, appCheckAppId, _created_ttlMillis, _this__config2, ttlMillis, created, expiresAtMillis;
+                    var _Math, _this__config, _this__config1, uid, isAllowed, _tmp, configuredScope, now, callerExpiresAtSeconds, callerExpiresAtMillis, _ref, _this__config2, leewayMillis, minimumRemainingMillis, remainingMillis, customToken, appCheckToken, appCheckTtlMillis, appCheckAppId, _created_ttlMillis, _this__config3, configuredTtlMillis, ttlMillis, created, expiresAtMillis;
                     return _ts_generator$9(this, function(_state) {
                         switch(_state.label){
                             case 0:
@@ -10312,6 +10373,20 @@ var FirestoreSessionApiService_1;
                                     endpoint: FIRESTORE_SESSION_API_PATH
                                 });
                                 now = Date.now();
+                                callerExpiresAtSeconds = oidcSessionExpiresAtFromRequestAuth(auth);
+                                callerExpiresAtMillis = callerExpiresAtSeconds == null ? undefined : callerExpiresAtSeconds * 1000;
+                                if (callerExpiresAtMillis != null) {
+                                    leewayMillis = (_ref = (_this__config2 = this._config) === null || _this__config2 === void 0 ? void 0 : _this__config2.callerExpiryLeewayMillis) !== null && _ref !== void 0 ? _ref : DEFAULT_FIRESTORE_SESSION_CALLER_EXPIRY_LEEWAY_MILLIS;
+                                    minimumRemainingMillis = MIN_FIRESTORE_SESSION_APP_CHECK_TTL_MILLIS - leewayMillis;
+                                    remainingMillis = callerExpiresAtMillis - now;
+                                    if (remainingMillis < minimumRemainingMillis) {
+                                        throw forbiddenError({
+                                            status: 403,
+                                            code: FIRESTORE_SESSION_CALLER_EXPIRING_ERROR_CODE,
+                                            message: "The calling credential expires in ".concat(Math.max(0, Math.floor(remainingMillis / 60000)), " minute(s), but a direct-Firestore session needs at least ").concat(Math.ceil(minimumRemainingMillis / 60000), ". Re-authenticate and try again.")
+                                        });
+                                    }
+                                }
                                 return [
                                     4,
                                     this._app.auth().createCustomToken(uid)
@@ -10323,7 +10398,9 @@ var FirestoreSessionApiService_1;
                                     3,
                                     6
                                 ];
-                                ttlMillis = firestoreSessionAppCheckTtlMillis((_this__config2 = this._config) === null || _this__config2 === void 0 ? void 0 : _this__config2.appCheckTokenTtlMillis);
+                                configuredTtlMillis = firestoreSessionAppCheckTtlMillis((_this__config3 = this._config) === null || _this__config3 === void 0 ? void 0 : _this__config3.appCheckTokenTtlMillis);
+                                // never ask for an attestation that outlives the caller; the floor clamp applies inside the leeway
+                                ttlMillis = callerExpiresAtMillis == null ? configuredTtlMillis : firestoreSessionAppCheckTtlMillis(Math.min(configuredTtlMillis, callerExpiresAtMillis - now));
                                 return [
                                     4,
                                     this._app.appCheck().createToken(appCheckAppId, {
@@ -10336,11 +10413,13 @@ var FirestoreSessionApiService_1;
                                 appCheckTtlMillis = (_created_ttlMillis = created.ttlMillis) !== null && _created_ttlMillis !== void 0 ? _created_ttlMillis : ttlMillis;
                                 _state.label = 6;
                             case 6:
-                                // the session lives only as long as its shortest-lived credential
+                                // the session lives only as long as its shortest-lived credential, and never past the caller's own
                                 expiresAtMillis = (_Math = Math).min.apply(_Math, [
                                     now + FIREBASE_CUSTOM_TOKEN_EXCHANGE_WINDOW_MILLIS
                                 ].concat(_to_consumable_array$6(appCheckTtlMillis == null ? [] : [
                                     now + appCheckTtlMillis
+                                ]), _to_consumable_array$6(callerExpiresAtMillis == null ? [] : [
+                                    callerExpiresAtMillis
                                 ])));
                                 return [
                                     2,
@@ -15209,4 +15288,4 @@ function _define_property(obj, key, value) {
 } 
 ();
 
-export { AbstractFirebaseNestContext, AbstractFirebaseServerActionsContext, AbstractFirebaseServerAuthContext, AbstractFirebaseServerAuthService, AbstractFirebaseServerAuthUserContext, AbstractFirebaseServerNewUserService, AbstractFirebaseServerUserPasswordResetService, AbstractNestContext, AbstractServerFirebaseNestContext, ConfigureFirebaseAppCheckMiddlewareModule, ConfigureFirebaseWebhookMiddlewareModule, DEFAULT_DOWNLOAD_CONTENT_TYPE, DEFAULT_DOWNLOAD_TOKEN_TTL_SECONDS, DEFAULT_FIREBASE_PASSWORD_NUMBER_GENERATOR, DEFAULT_FIRESTORE_SESSION_APP_CHECK_TTL_MILLIS, DEFAULT_FIRESTORE_SESSION_REQUIRED_OIDC_SCOPE, DEFAULT_RESET_CODE_EXPIRES_IN, DEFAULT_RESET_COM_THROTTLE_TIME, DEFAULT_SECURE_ASSETS_DIRECTORY, DEFAULT_SERVER_ASSETS_BASE_PATH, DEFAULT_SETUP_COM_THROTTLE_TIME, DOWNLOAD_API_ASSET_QUERY_PARAM, DOWNLOAD_API_PATH, DOWNLOAD_API_ROUTE_PREFIX, DOWNLOAD_ASSET_NOT_FOUND_ERROR_CODE, DOWNLOAD_ASSET_NOT_MINTABLE_ERROR_CODE, DOWNLOAD_CONTENT_TYPES, DOWNLOAD_INVALID_TOKEN_ERROR_CODE, DOWNLOAD_TOKEN_AUDIENCE, DOWNLOAD_TOKEN_PATH_CLAIM, DOWNLOAD_TOKEN_SIGNER, DOWNLOAD_TOKEN_SUBJECT, DOWNLOAD_TOKEN_TYP, DefaultFirebaseServerEnvService, DownloadApiController, DownloadApiModuleConfig, DownloadApiService, FIREBASE_APP_TOKEN, FIREBASE_AUTH_TOKEN, FIREBASE_CUSTOM_TOKEN_EXCHANGE_WINDOW_MILLIS, FIREBASE_FIRESTORE_CONTEXT_TOKEN, FIREBASE_FIRESTORE_TOKEN, FIREBASE_SERVER_ENV_TOKEN, FIREBASE_SERVER_SESSION_API_PROTECTED_PATH, FIREBASE_SERVER_VALIDATION_ERROR_CODE, FIREBASE_STORAGE_CONTEXT_FACTORY_CONFIG_TOKEN, FIREBASE_STORAGE_CONTEXT_TOKEN, FIREBASE_STORAGE_TOKEN, FIRESTORE_CLIENT_QUERY_CONSTRAINT_HANDLER_MAPPING, FIRESTORE_SESSION_ADMIN_PREDICATE, FIRESTORE_SESSION_API_PATH, FIRESTORE_SESSION_FORBIDDEN_ERROR_CODE, FORWARDED_FOR_REQUEST_HEADER, FirebaseAppCheckMiddleware, FirebaseAppCheckMiddlewareConfig, FirebaseNestServerRootModule, FirebaseRawBodyMiddleware, FirebaseServerAnalyticsSegmentListenerService, FirebaseServerAnalyticsSegmentModule, FirebaseServerAnalyticsService, FirebaseServerAnalyticsServiceListener, FirebaseServerAuthModule, FirebaseServerAuthNewUserSendSetupDetailsNoSetupConfigError, FirebaseServerAuthNewUserSendSetupDetailsSendOnceError, FirebaseServerAuthNewUserSendSetupDetailsThrottleError, FirebaseServerAuthPasswordResetInvalidCodeError, FirebaseServerAuthPasswordResetNoResetConfigError, FirebaseServerAuthPasswordResetSendOnceError, FirebaseServerAuthPasswordResetThrottleError, FirebaseServerAuthService, FirebaseServerAuthUserBadInputError, FirebaseServerAuthUserExistsError, FirebaseServerEnvService, FirebaseServerFirestoreContextModule, FirebaseServerFirestoreModule, FirebaseServerStorageContextModule, FirebaseServerStorageModule, FirebaseServerStorageService, FirestoreSessionApiService, GlobalRoutePrefixConfig, MAX_DOWNLOAD_TOKEN_TTL_SECONDS, MAX_FIRESTORE_SESSION_APP_CHECK_TTL_MILLIS, MAX_MODEL_ACCESS_MULTI_READ_KEYS, MIN_FIRESTORE_SESSION_APP_CHECK_TTL_MILLIS, MISSING_ENDPOINT_OIDC_SCOPE_ERROR_CODE, MODEL_API_NEST_APPLICATION_CONTEXT, MODEL_IS_SERVER_ONLY_ERROR_CODE, ModelApiCallModelDispatchService, ModelApiController, ModelApiDispatchConfig, ModelApiGetService, NO_RUN_NAME_SPECIFIED_FOR_SCHEDULED_FUNCTION_DEVELOPMENT_FUNCTION_CODE, NoContentFirebaseServerUserPasswordResetService, NoSetupContentFirebaseServerNewUserService, ON_CALL_MODEL_ANALYTICS_SERVICE, OnCallModelAnalyticsService, PHONE_NUMBER_ALREADY_EXISTS_ERROR_CODE, SESSION_API_ROUTE_PREFIX, SessionApiController, SessionApiModuleConfig, SkipAppCheck, UNKNOWN_SCHEDULED_FUNCTION_DEVELOPMENT_FUNCTION_NAME_CODE, UNKNOWN_SCHEDULED_FUNCTION_DEVELOPMENT_FUNCTION_TYPE_CODE, _onCallWithCallTypeFunction, aggregateCrudModelApiDetails, aggregateModelApiDetails, aggregateSpecifierApiDetails, alreadyExistsError, appAnalyticsModuleMetadata, appFirestoreModuleMetadata, assertContextHasAuth, assertDocumentExists, assertEndpointOidcScope, assertHasRolesInRequest, assertHasSignedTosInRequest, assertIsAdminInRequest, assertIsAdminOrTargetUserInRequestData, assertIsContextWithAuthData, assertModelApiOidcScope, assertRequestRequiresAuthForFunction, assertSnapshotData, assertSnapshotDataWithKey, authServicePasswordResetInvalidCodeError, authServicePasswordResetNoConfigError, authServicePasswordResetSendOnceError, authServicePasswordResetThrottleError, badRequestError, blockingFunctionHandlerWithNestContextFactory, buildNestServerRootModule, callWithAnalytics, catchAndThrowPasswordResetServerErrors, clientIpsMatch, cloudEventHandlerWithNestContextFactory, collectionRefForPath, createModelUnknownModelTypeError, decodeFirebaseServerUserPasswordResetOobCode, defaultFirebaseServerActionsTransformFactoryLogErrorFunction, defaultProvideFirebaseServerStorageServiceSimple, deleteModelUnknownModelTypeError, developmentUnknownSpecifierError, docRefForPath, documentModelNotAvailableError, downloadApiModuleMetadata, downloadContentTypeForPath, downloadTokenTtlSeconds, encodeFirebaseServerUserPasswordResetOobCode, executeOnCallQuery, firebaseAuthTokenFromDecodedIdToken, firebaseServerActionsContext, firebaseServerActionsTransformContext, firebaseServerActionsTransformFactory, firebaseServerAppTokenProvider, firebaseServerAuthModuleMetadata, firebaseServerDevFunctions, firebaseServerEnvTokenProvider, firebaseServerEnvTokenProviders, firebaseServerErrorInfo, firebaseServerErrorInfoCodePair, firebaseServerErrorInfoServerErrorCodePair, firebaseServerErrorInfoServerErrorPair, firebaseServerFirestoreContextModuleMetadata, firebaseServerStorageDefaultBucketIdTokenProvider, firebaseServerStorageModuleMetadata, firebaseServerValidationError, firebaseServerValidationServerError, firestoreClientQueryConstraintFunctionsDriver, firestoreEncryptedField, firestoreServerIncrementUpdateToUpdateData, firestoreSessionAppCheckTtlMillis, forbiddenError, getAuthUserOrUndefined, getModelApiDetails, googleCloudFileMetadataToStorageMetadata, googleCloudFirebaseStorageContextFactory, googleCloudFirebaseStorageDrivers, googleCloudFirestoreAccessorDriver, googleCloudFirestoreContextFactory, googleCloudFirestoreDrivers, googleCloudFirestoreQueryDriver, googleCloudStorageAccessorFile, googleCloudStorageAccessorFolder, googleCloudStorageBucketForStorageFilePath, googleCloudStorageFileForStorageFilePath, googleCloudStorageFirebaseStorageAccessorDriver, googleCloudStorageFromFirebaseAdminStorage, googleCloudStorageListFilesResultFactory, handleFirebaseAuthError, handleFirebaseError, hasAuthRolesInRequest, hasNewUserSetupPasswordInRequest, hasSignedTosInRequest, inAuthContext, injectNestApplicationContextIntoRequest, injectNestIntoRequest, internalServerError, invokeModelUnknownModelTypeError, isActualSpecifier, isAdminInRequest, isAdminOrTargetUserInRequestData, isContextWithAuthData, isFirebaseError, isFirebaseHttpsError, isOnCallCrudModelApiDetails, isOnCallHandlerApiDetails, isOnCallModelTypeApiDetails, isSafeRelativeAssetPath, makeBlockingFunctionWithHandler, makeOnScheduleHandlerWithNestApplicationRequest, makeScheduledFunctionDevelopmentFunction, modelAccessReadErrorFromUseMultipleModelsFailure, modelAccessRoleMapResultFromGrantedRoles, modelApiModuleMetadata, modelNotAvailableError, nestAppHasDevelopmentSchedulerEnabled, nestAppIsProductionEnvironment, nestFirebaseDoesNotExistError, nestFirebaseForbiddenPermissionError, nestServerInstance, noRunNameSpecifiedForScheduledFunctionDevelopmentFunction, noopFirebaseServerAnalyticsServiceListener, noopOnCallModelAnalyticsService, normalizeClientIp, notFoundError, oidcScopesFromModelApiAuth, oidcScopesFromRequestAuth, onCallAnalyticsEmitterInstance, onCallCreateModel, onCallDeleteModel, onCallDevelopmentFunction, onCallHandlerWithNestApplicationFactory, onCallHandlerWithNestContextFactory, onCallInvokeModel, onCallModel, onCallModelMissingCallTypeError, onCallModelUnknownCallTypeError, onCallQueryModel, onCallReadModel, onCallSpecifierHandler, onCallUpdateModel, onScheduleHandlerWithNestApplicationFactory, onScheduleHandlerWithNestContextFactory, optionalAuthContext, optionalFirestoreEncryptedField, permissionDeniedError, phoneNumberAlreadyExistsError, preconditionConflictError, provideAppFirestoreCollections, provideFirebaseServerAuthService, provideFirebaseServerStorageService, queryModelBadCursorError, queryModelUnknownModelTypeError, readApiDetails, readModelUnknownModelTypeError, requestClientIp, resolveAdminOnlyValue, resolveAnalyticsFromApiDetails, resolveRequiredScopeFromApiDetails, resolveSecureAssetPath, sessionApiModuleMetadata, setNestContextOnRequest, setNestContextOnScheduleRequest, sha256ForFile, taskQueueFunctionHandlerWithNestContextFactory, unauthenticatedContextHasNoAuthData, unauthenticatedContextHasNoUidError, unauthenticatedError, unavailableError, unavailableOrDeactivatedFunctionError, unknownModelCrudFunctionSpecifierError, unknownScheduledFunctionDevelopmentFunctionName, unknownScheduledFunctionDevelopmentFunctionType, updateModelUnknownModelTypeError, userContextFromUid, verifyAppCheckInRequest, withApiDetails };
+export { AbstractFirebaseNestContext, AbstractFirebaseServerActionsContext, AbstractFirebaseServerAuthContext, AbstractFirebaseServerAuthService, AbstractFirebaseServerAuthUserContext, AbstractFirebaseServerNewUserService, AbstractFirebaseServerUserPasswordResetService, AbstractNestContext, AbstractServerFirebaseNestContext, ConfigureFirebaseAppCheckMiddlewareModule, ConfigureFirebaseWebhookMiddlewareModule, DBX_FIREBASE_SERVER_OIDC_SESSION_EXPIRES_AT_CLAIM, DEFAULT_DOWNLOAD_CONTENT_TYPE, DEFAULT_DOWNLOAD_TOKEN_TTL_SECONDS, DEFAULT_FIREBASE_PASSWORD_NUMBER_GENERATOR, DEFAULT_FIRESTORE_SESSION_APP_CHECK_TTL_MILLIS, DEFAULT_FIRESTORE_SESSION_CALLER_EXPIRY_LEEWAY_MILLIS, DEFAULT_FIRESTORE_SESSION_REQUIRED_OIDC_SCOPE, DEFAULT_RESET_CODE_EXPIRES_IN, DEFAULT_RESET_COM_THROTTLE_TIME, DEFAULT_SECURE_ASSETS_DIRECTORY, DEFAULT_SERVER_ASSETS_BASE_PATH, DEFAULT_SETUP_COM_THROTTLE_TIME, DOWNLOAD_API_ASSET_QUERY_PARAM, DOWNLOAD_API_PATH, DOWNLOAD_API_ROUTE_PREFIX, DOWNLOAD_ASSET_NOT_FOUND_ERROR_CODE, DOWNLOAD_ASSET_NOT_MINTABLE_ERROR_CODE, DOWNLOAD_CONTENT_TYPES, DOWNLOAD_INVALID_TOKEN_ERROR_CODE, DOWNLOAD_TOKEN_AUDIENCE, DOWNLOAD_TOKEN_PATH_CLAIM, DOWNLOAD_TOKEN_SIGNER, DOWNLOAD_TOKEN_SUBJECT, DOWNLOAD_TOKEN_TYP, DefaultFirebaseServerEnvService, DownloadApiController, DownloadApiModuleConfig, DownloadApiService, FIREBASE_APP_TOKEN, FIREBASE_AUTH_TOKEN, FIREBASE_CUSTOM_TOKEN_EXCHANGE_WINDOW_MILLIS, FIREBASE_FIRESTORE_CONTEXT_TOKEN, FIREBASE_FIRESTORE_TOKEN, FIREBASE_SERVER_ENV_TOKEN, FIREBASE_SERVER_SESSION_API_PROTECTED_PATH, FIREBASE_SERVER_VALIDATION_ERROR_CODE, FIREBASE_STORAGE_CONTEXT_FACTORY_CONFIG_TOKEN, FIREBASE_STORAGE_CONTEXT_TOKEN, FIREBASE_STORAGE_TOKEN, FIRESTORE_CLIENT_QUERY_CONSTRAINT_HANDLER_MAPPING, FIRESTORE_SESSION_ADMIN_PREDICATE, FIRESTORE_SESSION_API_PATH, FIRESTORE_SESSION_CALLER_EXPIRING_ERROR_CODE, FIRESTORE_SESSION_FORBIDDEN_ERROR_CODE, FORWARDED_FOR_REQUEST_HEADER, FirebaseAppCheckMiddleware, FirebaseAppCheckMiddlewareConfig, FirebaseNestServerRootModule, FirebaseRawBodyMiddleware, FirebaseServerAnalyticsSegmentListenerService, FirebaseServerAnalyticsSegmentModule, FirebaseServerAnalyticsService, FirebaseServerAnalyticsServiceListener, FirebaseServerAuthModule, FirebaseServerAuthNewUserSendSetupDetailsNoSetupConfigError, FirebaseServerAuthNewUserSendSetupDetailsSendOnceError, FirebaseServerAuthNewUserSendSetupDetailsThrottleError, FirebaseServerAuthPasswordResetInvalidCodeError, FirebaseServerAuthPasswordResetNoResetConfigError, FirebaseServerAuthPasswordResetSendOnceError, FirebaseServerAuthPasswordResetThrottleError, FirebaseServerAuthService, FirebaseServerAuthUserBadInputError, FirebaseServerAuthUserExistsError, FirebaseServerEnvService, FirebaseServerFirestoreContextModule, FirebaseServerFirestoreModule, FirebaseServerStorageContextModule, FirebaseServerStorageModule, FirebaseServerStorageService, FirestoreSessionApiService, GlobalRoutePrefixConfig, MAX_DOWNLOAD_TOKEN_TTL_SECONDS, MAX_FIRESTORE_SESSION_APP_CHECK_TTL_MILLIS, MAX_MODEL_ACCESS_MULTI_READ_KEYS, MIN_FIRESTORE_SESSION_APP_CHECK_TTL_MILLIS, MISSING_ENDPOINT_OIDC_SCOPE_ERROR_CODE, MODEL_API_NEST_APPLICATION_CONTEXT, MODEL_IS_SERVER_ONLY_ERROR_CODE, ModelApiCallModelDispatchService, ModelApiController, ModelApiDispatchConfig, ModelApiGetService, NO_RUN_NAME_SPECIFIED_FOR_SCHEDULED_FUNCTION_DEVELOPMENT_FUNCTION_CODE, NoContentFirebaseServerUserPasswordResetService, NoSetupContentFirebaseServerNewUserService, ON_CALL_MODEL_ANALYTICS_SERVICE, OnCallModelAnalyticsService, PHONE_NUMBER_ALREADY_EXISTS_ERROR_CODE, SESSION_API_ROUTE_PREFIX, SessionApiController, SessionApiModuleConfig, SkipAppCheck, UNKNOWN_SCHEDULED_FUNCTION_DEVELOPMENT_FUNCTION_NAME_CODE, UNKNOWN_SCHEDULED_FUNCTION_DEVELOPMENT_FUNCTION_TYPE_CODE, _onCallWithCallTypeFunction, aggregateCrudModelApiDetails, aggregateModelApiDetails, aggregateSpecifierApiDetails, alreadyExistsError, appAnalyticsModuleMetadata, appFirestoreModuleMetadata, assertContextHasAuth, assertDocumentExists, assertEndpointOidcScope, assertHasRolesInRequest, assertHasSignedTosInRequest, assertIsAdminInRequest, assertIsAdminOrTargetUserInRequestData, assertIsContextWithAuthData, assertModelApiOidcScope, assertRequestRequiresAuthForFunction, assertSnapshotData, assertSnapshotDataWithKey, authServicePasswordResetInvalidCodeError, authServicePasswordResetNoConfigError, authServicePasswordResetSendOnceError, authServicePasswordResetThrottleError, badRequestError, blockingFunctionHandlerWithNestContextFactory, buildNestServerRootModule, callWithAnalytics, catchAndThrowPasswordResetServerErrors, clientIpsMatch, cloudEventHandlerWithNestContextFactory, collectionRefForPath, createModelUnknownModelTypeError, decodeFirebaseServerUserPasswordResetOobCode, defaultFirebaseServerActionsTransformFactoryLogErrorFunction, defaultProvideFirebaseServerStorageServiceSimple, deleteModelUnknownModelTypeError, developmentUnknownSpecifierError, docRefForPath, documentModelNotAvailableError, downloadApiModuleMetadata, downloadContentTypeForPath, downloadTokenTtlSeconds, encodeFirebaseServerUserPasswordResetOobCode, executeOnCallQuery, firebaseAuthTokenFromDecodedIdToken, firebaseServerActionsContext, firebaseServerActionsTransformContext, firebaseServerActionsTransformFactory, firebaseServerAppTokenProvider, firebaseServerAuthModuleMetadata, firebaseServerDevFunctions, firebaseServerEnvTokenProvider, firebaseServerEnvTokenProviders, firebaseServerErrorInfo, firebaseServerErrorInfoCodePair, firebaseServerErrorInfoServerErrorCodePair, firebaseServerErrorInfoServerErrorPair, firebaseServerFirestoreContextModuleMetadata, firebaseServerStorageDefaultBucketIdTokenProvider, firebaseServerStorageModuleMetadata, firebaseServerValidationError, firebaseServerValidationServerError, firestoreClientQueryConstraintFunctionsDriver, firestoreEncryptedField, firestoreServerIncrementUpdateToUpdateData, firestoreSessionAppCheckTtlMillis, forbiddenError, getAuthUserOrUndefined, getModelApiDetails, googleCloudFileMetadataToStorageMetadata, googleCloudFirebaseStorageContextFactory, googleCloudFirebaseStorageDrivers, googleCloudFirestoreAccessorDriver, googleCloudFirestoreContextFactory, googleCloudFirestoreDrivers, googleCloudFirestoreQueryDriver, googleCloudStorageAccessorFile, googleCloudStorageAccessorFolder, googleCloudStorageBucketForStorageFilePath, googleCloudStorageFileForStorageFilePath, googleCloudStorageFirebaseStorageAccessorDriver, googleCloudStorageFromFirebaseAdminStorage, googleCloudStorageListFilesResultFactory, handleFirebaseAuthError, handleFirebaseError, hasAuthRolesInRequest, hasNewUserSetupPasswordInRequest, hasSignedTosInRequest, inAuthContext, injectNestApplicationContextIntoRequest, injectNestIntoRequest, internalServerError, invokeModelUnknownModelTypeError, isActualSpecifier, isAdminInRequest, isAdminOrTargetUserInRequestData, isContextWithAuthData, isFirebaseError, isFirebaseHttpsError, isOnCallCrudModelApiDetails, isOnCallHandlerApiDetails, isOnCallModelTypeApiDetails, isSafeRelativeAssetPath, makeBlockingFunctionWithHandler, makeOnScheduleHandlerWithNestApplicationRequest, makeScheduledFunctionDevelopmentFunction, modelAccessReadErrorFromUseMultipleModelsFailure, modelAccessRoleMapResultFromGrantedRoles, modelApiModuleMetadata, modelNotAvailableError, nestAppHasDevelopmentSchedulerEnabled, nestAppIsProductionEnvironment, nestFirebaseDoesNotExistError, nestFirebaseForbiddenPermissionError, nestServerInstance, noRunNameSpecifiedForScheduledFunctionDevelopmentFunction, noopFirebaseServerAnalyticsServiceListener, noopOnCallModelAnalyticsService, normalizeClientIp, notFoundError, oidcScopesFromModelApiAuth, oidcScopesFromRequestAuth, oidcSessionExpiresAtFromRequestAuth, onCallAnalyticsEmitterInstance, onCallCreateModel, onCallDeleteModel, onCallDevelopmentFunction, onCallHandlerWithNestApplicationFactory, onCallHandlerWithNestContextFactory, onCallInvokeModel, onCallModel, onCallModelMissingCallTypeError, onCallModelUnknownCallTypeError, onCallQueryModel, onCallReadModel, onCallSpecifierHandler, onCallUpdateModel, onScheduleHandlerWithNestApplicationFactory, onScheduleHandlerWithNestContextFactory, optionalAuthContext, optionalFirestoreEncryptedField, permissionDeniedError, phoneNumberAlreadyExistsError, preconditionConflictError, provideAppFirestoreCollections, provideFirebaseServerAuthService, provideFirebaseServerStorageService, queryModelBadCursorError, queryModelUnknownModelTypeError, readApiDetails, readModelUnknownModelTypeError, requestClientIp, resolveAdminOnlyValue, resolveAnalyticsFromApiDetails, resolveRequiredScopeFromApiDetails, resolveSecureAssetPath, sessionApiModuleMetadata, setNestContextOnRequest, setNestContextOnScheduleRequest, sha256ForFile, taskQueueFunctionHandlerWithNestContextFactory, unauthenticatedContextHasNoAuthData, unauthenticatedContextHasNoUidError, unauthenticatedError, unavailableError, unavailableOrDeactivatedFunctionError, unknownModelCrudFunctionSpecifierError, unknownScheduledFunctionDevelopmentFunctionName, unknownScheduledFunctionDevelopmentFunctionType, updateModelUnknownModelTypeError, userContextFromUid, verifyAppCheckInRequest, withApiDetails };

package/mailgun/package.json

@@ -1,17 +1,17 @@
 {
   "name": "@dereekb/firebase-server/mailgun",
-  "version": "14.8.0",
+  "version": "14.9.0",
   "sideEffects": false,
   "type": "module",
   "peerDependencies": {
-    "@dereekb/analytics": "14.8.0",
-    "@dereekb/firebase": "14.8.0",
-    "@dereekb/firebase-server": "14.8.0",
-    "@dereekb/date": "14.8.0",
-    "@dereekb/nestjs": "14.8.0",
-    "@dereekb/model": "14.8.0",
-    "@dereekb/rxjs": "14.8.0",
-    "@dereekb/util": "14.8.0"
+    "@dereekb/analytics": "14.9.0",
+    "@dereekb/firebase": "14.9.0",
+    "@dereekb/firebase-server": "14.9.0",
+    "@dereekb/date": "14.9.0",
+    "@dereekb/nestjs": "14.9.0",
+    "@dereekb/model": "14.9.0",
+    "@dereekb/rxjs": "14.9.0",
+    "@dereekb/util": "14.9.0"
   },
   "exports": {
     "./package.json": "./package.json",

package/mcp/package.json

@@ -1,20 +1,20 @@
 {
   "name": "@dereekb/firebase-server/mcp",
-  "version": "14.8.0",
+  "version": "14.9.0",
   "sideEffects": false,
   "type": "module",
   "peerDependencies": {
-    "@dereekb/analytics": "14.8.0",
-    "@dereekb/date": "14.8.0",
-    "@dereekb/firebase": "14.8.0",
-    "@dereekb/firebase-server": "14.8.0",
-    "@dereekb/firebase-server/oidc": "14.8.0",
-    "@dereekb/model": "14.8.0",
-    "@dereekb/nestjs": "14.8.0",
-    "@dereekb/oauth-resource": "14.8.0",
-    "@dereekb/rxjs": "14.8.0",
-    "@dereekb/util": "14.8.0",
-    "@dereekb/zoho": "14.8.0",
+    "@dereekb/analytics": "14.9.0",
+    "@dereekb/date": "14.9.0",
+    "@dereekb/firebase": "14.9.0",
+    "@dereekb/firebase-server": "14.9.0",
+    "@dereekb/firebase-server/oidc": "14.9.0",
+    "@dereekb/model": "14.9.0",
+    "@dereekb/nestjs": "14.9.0",
+    "@dereekb/oauth-resource": "14.9.0",
+    "@dereekb/rxjs": "14.9.0",
+    "@dereekb/util": "14.9.0",
+    "@dereekb/zoho": "14.9.0",
     "@modelcontextprotocol/node": "2.0.0",
     "@modelcontextprotocol/server": "2.0.0",
     "@nestjs/common": "^12.0.1",

package/model/index.esm.js

@@ -1,4 +1,4 @@
-import { STORAGE_FILE_MODEL_ALREADY_INITIALIZED_ERROR_CODE, STORAGE_FILE_NOT_FLAGGED_FOR_GROUPS_SYNC_ERROR_CODE, UPLOADED_FILE_DOES_NOT_EXIST_ERROR_CODE, UPLOADED_FILE_NOT_ALLOWED_TO_BE_INITIALIZED_ERROR_CODE, UPLOADED_FILE_INITIALIZATION_FAILED_ERROR_CODE, UPLOADED_FILE_INITIALIZATION_DISCARDED_ERROR_CODE, STORAGE_FILE_PROCESSING_NOT_ALLOWED_FOR_INVALID_STATE_ERROR_CODE, STORAGE_FILE_PROCESSING_NOT_QUEUED_FOR_PROCESSING_ERROR_CODE, STORAGE_FILE_PROCESSING_NOT_AVAILABLE_FOR_TYPE_ERROR_CODE, STORAGE_FILE_ALREADY_PROCESSED_ERROR_CODE, STORAGE_FILE_NOT_FLAGGED_FOR_DELETION_ERROR_CODE, STORAGE_FILE_CANNOT_BE_DELETED_YET_ERROR_CODE, STORAGE_FILE_GROUP_QUEUED_FOR_INITIALIZATION_ERROR_CODE, STORAGE_FILE_GROUP_CREATE_INPUT_ERROR_CODE, createStorageFileParamsType, createStorageFileGroupParamsType, createStorageFileSignedUploadUrlParamsType, deleteAllQueuedStorageFilesParamsType, deleteStorageFileParamsType, downloadMultipleStorageFilesParamsType, downloadStorageFileParamsType, initializeAllStorageFilesFromUploadsParamsType, initializeStorageFileFromUploadParamsType, processAllQueuedStorageFilesParamsType, processStorageFileParamsType, readMultipleStorageFilesMetadataParamsType, readStorageFileMetadataParamsType, regenerateAllFlaggedStorageFileGroupsContentParamsType, regenerateStorageFileGroupContentParamsType, syncAllFlaggedStorageFilesWithGroupsParamsType, syncStorageFileWithGroupsParamsType, updateStorageFileParamsType, updateStorageFileGroupParamsType, UPLOADS_FOLDER_PATH, iterateStorageListFilesByEachFile, StorageFileProcessingState, iterateFirestoreDocumentSnapshotPairs, storageFilesQueuedForProcessingQuery, firestoreDummyKey, STORAGE_FILE_PROCESSING_STUCK_THROTTLE_CHECK_MS, StorageFileState, createNotificationDocument, storageFileProcessingNotificationTaskTemplate, storageFilesQueuedForDeleteQuery, storageFileDisplayFileName, loadStorageFileGroupDocumentForReferencePair, inferKeyFromTwoWayFlatFirestoreModelKey, calculateStorageFileGroupEmbeddedFileUpdate, loadDocumentsForIds, getDocumentSnapshotDataPairs, iterateFirestoreDocumentSnapshotPairBatches, storageFileFlaggedForSyncWithGroupsQuery, createStorageFileDocumentPairFactory, StorageFileCreationType, storageFileGroupZipFileStoragePath, STORAGE_FILE_GROUP_ZIP_STORAGE_FILE_PURPOSE, calculateStorageFileGroupRegeneration, getDocumentSnapshotDataPair, storageFileGroupsFlaggedForContentRegenerationQuery, DEFAULT_CREATE_STORAGE_FILE_SIGNED_UPLOAD_URL_EXPIRES_IN_MS, CREATE_STORAGE_FILE_SIGNED_UPLOAD_URL_MIN_EXPIRES_IN_MS, CREATE_STORAGE_FILE_SIGNED_UPLOAD_URL_MAX_EXPIRES_IN_MS, CREATE_STORAGE_FILE_SIGNED_UPLOAD_URL_MAX_FILENAME_LENGTH, CALENDAR_ICS_DOMAIN_NOT_CONFIGURED_ERROR_CODE, CALENDAR_ICS_ROTATE_THROTTLED_ERROR_CODE, CALENDAR_ICS_STORAGE_FILE_UNAVAILABLE_ERROR_CODE, flagStaleCalendarsForSyncParamsType, rotateCalendarIcsParamsType, syncAllFlaggedCalendarsParamsType, syncCalendarParamsType, CALENDAR_ICS_STORAGE_FILE_PURPOSE, calendarIcsFileStoragePath, pruneCalendarEvents, calendarNextIcsRotateAt, isCalendarIcsRotateThrottled, calendarsFlaggedForSyncQuery, DEFAULT_CALENDAR_RESYNC_INTERVAL, calendarsDueForResyncQuery, AppCalendarTypeConfigService, appCalendarTypeConfigService, calendarTypeConfigRecord, CALENDAR_ICS_STORAGE_FILE_PURPOSE_GENERATE_ICS_SUBTASK, notificationSubtaskComplete, calendarToIcsString, calendarTypeConfigIcsExpansionRange, calendarTypeConfigIcsConfig, notificationTaskComplete, _createNotificationDocumentFromPair, createNotificationDocumentPair, FORM_SPACE_ALREADY_EXISTS_ERROR_CODE, FORM_SPACE_FILE_ACCESS_DENIED_ERROR_CODE, FORM_SPACE_FILE_NOT_FOUND_ERROR_CODE, FORM_SPACE_HAS_INVALID_FILES_ERROR_CODE, FORM_SPACE_NOT_EDITABLE_ERROR_CODE, FORM_SPACE_NOT_FOUND_ERROR_CODE, FORM_SPACE_NOT_REOPENABLE_ERROR_CODE, FORM_SPACE_NOT_SUBMITTED_ERROR_CODE, FORM_SPACE_PROCESSING_IN_PROGRESS_ERROR_CODE, FORM_SPACE_REQUIRED_SLOT_MISSING_ERROR_CODE, FORM_SPACE_TYPE_MISMATCH_ERROR_CODE, FORM_SPACE_TYPE_NOT_REGISTERED_ERROR_CODE, FORM_SPACE_UPLOAD_NOT_ALLOWED_ERROR_CODE, FORM_SPACE_UPLOAD_USER_MISMATCH_ERROR_CODE, FORM_SPACE_VALIDATION_PENDING_ERROR_CODE, createFormSpaceParamsType, deleteFormSpaceParamsType, expireAllExpiredFormSpacesParamsType, lockFormSpaceParamsType, processAllQueuedFormSpacesParamsType, removeFormSpaceFileParamsType, reopenFormSpaceParamsType, submitFormSpaceParamsType, updateFormSpaceParamsType, formSpaceTemplate, resolveFormSpaceExpiresAt, isFormSpaceEditable, formSpaceSubmitBlockers, submitFormSpaceTemplate, isFormSpaceReopenable, FormSpaceProcessingState, reopenFormSpaceTemplate, lockFormSpaceTemplate, formSpaceFilesInSlot, isFormSpaceFileAccessibleByUser, formSpaceSubmissionNotificationTaskTemplate, storageFilesForFormSpaceQuery, formSpacesQueuedForProcessingQuery, expireFormSpaceTemplate, formSpacesDueForExpirationQuery, AppFormSpaceTypeConfigService, appFormSpaceTypeConfigService, formSpaceTypeConfigRecord, NOTIFICATION_TASK_SUBTASK_CHECKPOINT_PROCESSING, NOTIFICATION_TASK_SUBTASK_CHECKPOINT_CLEANUP, completeSubtaskProcessingAndScheduleCleanupTaskResult, delayCompletion, notificationTaskDelayRetry, DEFAULT_NOTIFICATION_TASK_SUBTASK_CLEANUP_RETRY_DELAY, DEFAULT_NOTIFICATION_TASK_SUBTASK_CLEANUP_RETRY_ATTEMPTS, FORM_SPACE_SUBMISSION_NOTIFICATION_TASK_TYPE, FormSpaceState, getDocumentSnapshotData, storedFileReaderFactory, limitUploadFileTypeDeterminer, combineUploadFileTypeDeterminers, STORAGEFILE_RELATED_FILE_METADATA_KEY, copyStoragePath, storageFilePurposeAndUserQuery, determineUserByUserUploadsFolderWrapperFunction, determineByFilePath, FORM_SPACE_UPLOADED_FILE_TYPE_IDENTIFIER, FORM_SPACE_UPLOADS_FOLDER_NAME, ALL_USER_UPLOADS_FOLDER_PATH, FormSpaceFileValidationState, formSpaceFileSlotConfig, formSpaceSlotMaxFiles, FORM_SPACE_PURPOSE, formSpaceStorageFileGroupId, formSpaceFileStoragePath, formSpaceUploadFileNameDetails, parseFormSpaceUploadPath, assertFormSpaceUploadAllowed, FORM_SPACE_PURPOSE_REGISTER_SUBTASK, FORM_SPACE_PURPOSE_VALIDATE_SUBTASK, inferStorageFileGroupRelatedModelKey, notificationHealthCheckIssue, KnownNotificationHealthCheckIssueCode, NotificationHealthCheckStatus, MailgunNotificationHealthCheckIssueCode, untrackableNotificationHealthCheckProbe, DEFAULT_NOTIFICATION_MESSAGE_CALENDAR_ATTACHMENT_FILENAME, CREATE_NOTIFICATION_ID_REQUIRED_ERROR_CODE, NOTIFICATION_BOX_DOES_NOT_EXIST_ERROR_CODE, NOTIFICATION_BOX_EXCLUSION_TARGET_INVALID_ERROR_CODE, NOTIFICATION_BOX_EXISTS_FOR_MODEL_ERROR_CODE, NOTIFICATION_BOX_RECIPIENT_DOES_NOT_EXIST_ERROR_CODE, NOTIFICATION_MODEL_ALREADY_INITIALIZED_ERROR_CODE, NOTIFICATION_USER_BLOCKED_FROM_BEING_ADD_TO_RECIPIENTS_ERROR_CODE, NOTIFICATION_USER_HEALTH_CHECK_PROBE_THROTTLED_ERROR_CODE, NOTIFICATION_USER_HEALTH_CHECK_THROTTLED_ERROR_CODE, NOTIFICATION_USER_HEALTH_CHECK_VERIFY_THROTTLED_ERROR_CODE, NOTIFICATION_USER_INVALID_UID_FOR_CREATE_ERROR_CODE, NOTIFICATION_USER_LOCKED_CONFIG_FROM_BEING_UPDATED_ERROR_CODE, notificationUserHealthCheckParamsType, rollupNotificationHealthCheckResultStatus, rollupNotificationDeliveryHealthCheckResultStatus, isPendingNotificationHealthCheckProbe, notificationUserHealthCheckNextProbeAt, notificationUserHealthCheckNextVerifyAt, notificationUserHealthCheckNextRunAt, DEFAULT_NOTIFICATION_TEMPLATE_TYPE, NotificationDeliveryMethod, NotificationBoxRecipientFlag, effectiveNotificationBoxRecipientTemplateConfig, mergeNotificationBoxRecipients, mergeNotificationUserNotificationBoxRecipientConfigs, applyExclusionsToNotificationUserNotificationBoxRecipientConfigs, mergeNotificationBoxRecipientTemplateConfigs, notificationSendExclusionCanSendFunction, mergeNotificationUserDefaultNotificationBoxRecipientConfig, NotificationRecipientSendFlag, allowedNotificationRecipients, getDocumentSnapshotDataPairsWithData, cleanupOldNotificationLoggedEventDaysParamsType, cleanupSentNotificationsParamsType, createNotificationBoxParamsType, createNotificationSummaryParamsType, createNotificationUserParamsType, resyncNotificationUserParamsType, sendNotificationParamsType, sendQueuedNotificationsParamsType, updateNotificationBoxParamsType, updateNotificationBoxRecipientParamsType, updateNotificationSummaryParamsType, updateNotificationUserParamsType, updateNotificationUserDefaultNotificationBoxRecipientConfig, effectiveNotificationBoxRecipientConfig, updateNotificationUserNotificationBoxRecipientConfigs, calculateNsForNotificationUserNotificationBoxRecipientConfigs, notificationUsersFlaggedForNeedsSyncQuery, notificationSummaryIdForModel, loadNotificationBoxDocumentForReferencePair, updateNotificationUserNotificationSendExclusions, notificationBoxRecipientTemplateConfigArrayToRecord, updateNotificationRecipient, setIdAndKeyFromKeyIdRefOnDocumentData, NotificationSendType, notificationSendFlagsImplyIsComplete, NotificationSendState, mergeNotificationSendMessagesResult, notificationsPastSendAtTimeQuery, loadDocumentsForDocumentReferencesFromValues, notificationLoggedEventDayId, shouldSaveNotificationToNotificationWeek, notificationsReadyForCleanupQuery, notificationLoggedEventDaysOlderThanQuery, initializeAllApplicableNotificationBoxesParamsType, initializeAllApplicableNotificationSummariesParamsType, initializeNotificationModelParamsType, firestoreModelKeyCollectionName, notificationBoxesFlaggedForNeedsInitializationQuery, notificationSummariesFlaggedForNeedsInitializationQuery, noContentNotificationMessageFunctionFactory, NOTIFICATION_SUMMARY_EMBEDDED_NOTIFICATION_ITEM_SUBJECT_MAX_LENGTH, NOTIFICATION_SUMMARY_EMBEDDED_NOTIFICATION_ITEM_MESSAGE_MAX_LENGTH, sortNotificationItemsFunction, NOTIFICATION_SUMMARY_ITEM_LIMIT, initializeAllApplicableStorageFileGroupsParamsType, initializeStorageFileModelParamsType, storageFileGroupsFlaggedForNeedsInitializationQuery, STORAGE_FILE_GROUP_ZIP_STORAGE_FILE_PURPOSE_CREATE_ZIP_SUBTASK, STORAGE_FILE_PROCESSING_NOTIFICATION_TASK_TYPE, STORAGE_FILE_GROUP_ZIP_INFO_JSON_FILE_NAME, firestoreModelIdentity, systemStateConverter, systemStateStoredDataConverterFactory, AbstractFirestoreDocument, schedulerSystemStateRead, loadSchedulerSystemState, SCHEDULER_SYSTEM_STATE_TYPE, USER_EXTERNAL_CONNECTION_ALREADY_EXISTS_ERROR_CODE, USER_EXTERNAL_CONNECTION_CREDENTIALS_EXPIRED_ERROR_CODE, USER_EXTERNAL_CONNECTION_EXTERNAL_ACCOUNT_IN_USE_ERROR_CODE, USER_EXTERNAL_CONNECTION_LINK_NOT_ENABLED_ERROR_CODE, USER_EXTERNAL_CONNECTION_PROVIDER_NOT_ALLOWED_ERROR_CODE, USER_EXTERNAL_CONNECTION_PROVIDER_NOT_CONNECTED_ERROR_CODE, USER_EXTERNAL_CONNECTION_SIGN_IN_DENIED_ERROR_CODE, USER_EXTERNAL_CONNECTION_SIGN_IN_EMAIL_CONFLICT_ERROR_CODE, USER_EXTERNAL_CONNECTION_SIGN_IN_REPORTABLE_ERROR_CODES, USER_EXTERNAL_CONNECTION_SIGN_IN_IDENTITY_UNAVAILABLE_ERROR_CODE, USER_EXTERNAL_CONNECTION_SIGN_IN_NOT_ENABLED_ERROR_CODE, USER_EXTERNAL_CONNECTION_SIGN_IN_USER_MISSING_ERROR_CODE, USER_EXTERNAL_CONNECTION_UNLINK_LAST_LOGIN_METHOD_ERROR_CODE, copyUserRelatedDataAccessorFactoryFunction, snapshotConverterFunctions, firestoreDate, firestoreUID, emptyUserExternalConnection, applyUserExternalConnectionEntry, userExternalConnectionEntryForOutcome, applyUserExternalConnectionLogin, userExternalConnectionsWithExternalAccountQuery, userExternalConnectionLoginForIdentity, userExternalConnectionExternalAccountKeys, userExternalConnectionValue } from '@dereekb/firebase';
+import { STORAGE_FILE_MODEL_ALREADY_INITIALIZED_ERROR_CODE, STORAGE_FILE_NOT_FLAGGED_FOR_GROUPS_SYNC_ERROR_CODE, UPLOADED_FILE_DOES_NOT_EXIST_ERROR_CODE, UPLOADED_FILE_NOT_ALLOWED_TO_BE_INITIALIZED_ERROR_CODE, UPLOADED_FILE_INITIALIZATION_FAILED_ERROR_CODE, UPLOADED_FILE_INITIALIZATION_DISCARDED_ERROR_CODE, STORAGE_FILE_PROCESSING_NOT_ALLOWED_FOR_INVALID_STATE_ERROR_CODE, STORAGE_FILE_PROCESSING_NOT_QUEUED_FOR_PROCESSING_ERROR_CODE, STORAGE_FILE_PROCESSING_NOT_AVAILABLE_FOR_TYPE_ERROR_CODE, STORAGE_FILE_ALREADY_PROCESSED_ERROR_CODE, STORAGE_FILE_NOT_FLAGGED_FOR_DELETION_ERROR_CODE, STORAGE_FILE_CANNOT_BE_DELETED_YET_ERROR_CODE, STORAGE_FILE_GROUP_QUEUED_FOR_INITIALIZATION_ERROR_CODE, STORAGE_FILE_GROUP_CREATE_INPUT_ERROR_CODE, createStorageFileParamsType, createStorageFileGroupParamsType, createStorageFileSignedUploadUrlParamsType, deleteAllQueuedStorageFilesParamsType, deleteStorageFileParamsType, downloadMultipleStorageFilesParamsType, downloadStorageFileParamsType, initializeAllStorageFilesFromUploadsParamsType, initializeStorageFileFromUploadParamsType, processAllQueuedStorageFilesParamsType, processStorageFileParamsType, readMultipleStorageFilesMetadataParamsType, readStorageFileMetadataParamsType, regenerateAllFlaggedStorageFileGroupsContentParamsType, regenerateStorageFileGroupContentParamsType, syncAllFlaggedStorageFilesWithGroupsParamsType, syncStorageFileWithGroupsParamsType, updateStorageFileParamsType, updateStorageFileGroupParamsType, UPLOADS_FOLDER_PATH, iterateStorageListFilesByEachFile, StorageFileProcessingState, iterateFirestoreDocumentSnapshotPairs, storageFilesQueuedForProcessingQuery, firestoreDummyKey, STORAGE_FILE_PROCESSING_STUCK_THROTTLE_CHECK_MS, StorageFileState, createNotificationDocument, storageFileProcessingNotificationTaskTemplate, storageFilesQueuedForDeleteQuery, storageFileDisplayFileName, loadStorageFileGroupDocumentForReferencePair, inferKeyFromTwoWayFlatFirestoreModelKey, calculateStorageFileGroupEmbeddedFileUpdate, loadDocumentsForIds, getDocumentSnapshotDataPairs, iterateFirestoreDocumentSnapshotPairBatches, storageFileFlaggedForSyncWithGroupsQuery, createStorageFileDocumentPairFactory, StorageFileCreationType, storageFileGroupZipFileStoragePath, STORAGE_FILE_GROUP_ZIP_STORAGE_FILE_PURPOSE, calculateStorageFileGroupRegeneration, getDocumentSnapshotDataPair, storageFileGroupsFlaggedForContentRegenerationQuery, DEFAULT_CREATE_STORAGE_FILE_SIGNED_UPLOAD_URL_EXPIRES_IN_MS, CREATE_STORAGE_FILE_SIGNED_UPLOAD_URL_MIN_EXPIRES_IN_MS, CREATE_STORAGE_FILE_SIGNED_UPLOAD_URL_MAX_EXPIRES_IN_MS, CREATE_STORAGE_FILE_SIGNED_UPLOAD_URL_MAX_FILENAME_LENGTH, CALENDAR_ICS_DOMAIN_NOT_CONFIGURED_ERROR_CODE, CALENDAR_ICS_ROTATE_THROTTLED_ERROR_CODE, CALENDAR_ICS_STORAGE_FILE_UNAVAILABLE_ERROR_CODE, flagStaleCalendarsForSyncParamsType, rotateCalendarIcsParamsType, syncAllFlaggedCalendarsParamsType, syncCalendarParamsType, CALENDAR_ICS_STORAGE_FILE_PURPOSE, calendarIcsFileStoragePath, pruneCalendarEvents, calendarNextIcsRotateAt, isCalendarIcsRotateThrottled, calendarsFlaggedForSyncQuery, DEFAULT_CALENDAR_RESYNC_INTERVAL, calendarsDueForResyncQuery, AppCalendarTypeConfigService, appCalendarTypeConfigService, calendarTypeConfigRecord, CALENDAR_ICS_STORAGE_FILE_PURPOSE_GENERATE_ICS_SUBTASK, notificationSubtaskComplete, calendarToIcsString, calendarTypeConfigIcsExpansionRange, calendarTypeConfigIcsConfig, notificationTaskComplete, _createNotificationDocumentFromPair, createNotificationDocumentPair, FORM_SPACE_ALREADY_EXISTS_ERROR_CODE, FORM_SPACE_FILE_ACCESS_DENIED_ERROR_CODE, FORM_SPACE_FILE_NOT_FOUND_ERROR_CODE, FORM_SPACE_HAS_INVALID_FILES_ERROR_CODE, FORM_SPACE_NOT_EDITABLE_ERROR_CODE, FORM_SPACE_NOT_FOUND_ERROR_CODE, FORM_SPACE_NOT_REOPENABLE_ERROR_CODE, FORM_SPACE_NOT_SUBMITTED_ERROR_CODE, FORM_SPACE_PROCESSING_IN_PROGRESS_ERROR_CODE, FORM_SPACE_REQUIRED_SLOT_MISSING_ERROR_CODE, FORM_SPACE_TYPE_MISMATCH_ERROR_CODE, FORM_SPACE_TYPE_NOT_REGISTERED_ERROR_CODE, FORM_SPACE_UPLOAD_NOT_ALLOWED_ERROR_CODE, FORM_SPACE_UPLOAD_USER_MISMATCH_ERROR_CODE, FORM_SPACE_VALIDATION_PENDING_ERROR_CODE, createFormSpaceParamsType, deleteFormSpaceParamsType, expireAllExpiredFormSpacesParamsType, lockFormSpaceParamsType, processAllQueuedFormSpacesParamsType, removeFormSpaceFileParamsType, reopenFormSpaceParamsType, submitFormSpaceParamsType, updateFormSpaceParamsType, formSpaceTemplate, resolveFormSpaceExpiresAt, isFormSpaceEditable, formSpaceSubmitBlockers, submitFormSpaceTemplate, isFormSpaceReopenable, FormSpaceProcessingState, reopenFormSpaceTemplate, lockFormSpaceTemplate, formSpaceFilesInSlot, isFormSpaceFileAccessibleByUser, formSpaceSubmissionNotificationTaskTemplate, storageFilesForFormSpaceQuery, formSpacesQueuedForProcessingQuery, expireFormSpaceTemplate, formSpacesDueForExpirationQuery, limit, AppFormSpaceTypeConfigService, appFormSpaceTypeConfigService, formSpaceTypeConfigRecord, NOTIFICATION_TASK_SUBTASK_CHECKPOINT_PROCESSING, NOTIFICATION_TASK_SUBTASK_CHECKPOINT_CLEANUP, completeSubtaskProcessingAndScheduleCleanupTaskResult, delayCompletion, notificationTaskDelayRetry, DEFAULT_NOTIFICATION_TASK_SUBTASK_CLEANUP_RETRY_DELAY, DEFAULT_NOTIFICATION_TASK_SUBTASK_CLEANUP_RETRY_ATTEMPTS, FORM_SPACE_SUBMISSION_NOTIFICATION_TASK_TYPE, FormSpaceState, getDocumentSnapshotData, storedFileReaderFactory, limitUploadFileTypeDeterminer, combineUploadFileTypeDeterminers, STORAGEFILE_RELATED_FILE_METADATA_KEY, copyStoragePath, storageFilePurposeAndUserQuery, determineUserByUserUploadsFolderWrapperFunction, determineByFilePath, FORM_SPACE_UPLOADED_FILE_TYPE_IDENTIFIER, FORM_SPACE_UPLOADS_FOLDER_NAME, ALL_USER_UPLOADS_FOLDER_PATH, FormSpaceFileValidationState, formSpaceFileSlotConfig, formSpaceSlotMaxFiles, FORM_SPACE_PURPOSE, formSpaceStorageFileGroupId, formSpaceFileStoragePath, formSpaceUploadFileNameDetails, parseFormSpaceUploadPath, assertFormSpaceUploadAllowed, FORM_SPACE_PURPOSE_REGISTER_SUBTASK, FORM_SPACE_PURPOSE_VALIDATE_SUBTASK, inferStorageFileGroupRelatedModelKey, notificationHealthCheckIssue, KnownNotificationHealthCheckIssueCode, NotificationHealthCheckStatus, MailgunNotificationHealthCheckIssueCode, untrackableNotificationHealthCheckProbe, DEFAULT_NOTIFICATION_MESSAGE_CALENDAR_ATTACHMENT_FILENAME, CREATE_NOTIFICATION_ID_REQUIRED_ERROR_CODE, NOTIFICATION_BOX_DOES_NOT_EXIST_ERROR_CODE, NOTIFICATION_BOX_EXCLUSION_TARGET_INVALID_ERROR_CODE, NOTIFICATION_BOX_EXISTS_FOR_MODEL_ERROR_CODE, NOTIFICATION_BOX_RECIPIENT_DOES_NOT_EXIST_ERROR_CODE, NOTIFICATION_MODEL_ALREADY_INITIALIZED_ERROR_CODE, NOTIFICATION_USER_BLOCKED_FROM_BEING_ADD_TO_RECIPIENTS_ERROR_CODE, NOTIFICATION_USER_HEALTH_CHECK_PROBE_THROTTLED_ERROR_CODE, NOTIFICATION_USER_HEALTH_CHECK_THROTTLED_ERROR_CODE, NOTIFICATION_USER_HEALTH_CHECK_VERIFY_THROTTLED_ERROR_CODE, NOTIFICATION_USER_INVALID_UID_FOR_CREATE_ERROR_CODE, NOTIFICATION_USER_LOCKED_CONFIG_FROM_BEING_UPDATED_ERROR_CODE, notificationUserHealthCheckParamsType, rollupNotificationHealthCheckResultStatus, rollupNotificationDeliveryHealthCheckResultStatus, isPendingNotificationHealthCheckProbe, notificationUserHealthCheckNextProbeAt, notificationUserHealthCheckNextVerifyAt, notificationUserHealthCheckNextRunAt, DEFAULT_NOTIFICATION_TEMPLATE_TYPE, NotificationDeliveryMethod, NotificationBoxRecipientFlag, effectiveNotificationBoxRecipientTemplateConfig, mergeNotificationBoxRecipients, mergeNotificationUserNotificationBoxRecipientConfigs, applyExclusionsToNotificationUserNotificationBoxRecipientConfigs, mergeNotificationBoxRecipientTemplateConfigs, notificationSendExclusionCanSendFunction, mergeNotificationUserDefaultNotificationBoxRecipientConfig, NotificationRecipientSendFlag, allowedNotificationRecipients, getDocumentSnapshotDataPairsWithData, cleanupOldNotificationLoggedEventDaysParamsType, cleanupSentNotificationsParamsType, createNotificationBoxParamsType, createNotificationSummaryParamsType, createNotificationUserParamsType, resyncNotificationUserParamsType, sendNotificationParamsType, sendQueuedNotificationsParamsType, updateNotificationBoxParamsType, updateNotificationBoxRecipientParamsType, updateNotificationSummaryParamsType, updateNotificationUserParamsType, updateNotificationUserDefaultNotificationBoxRecipientConfig, effectiveNotificationBoxRecipientConfig, updateNotificationUserNotificationBoxRecipientConfigs, calculateNsForNotificationUserNotificationBoxRecipientConfigs, notificationUsersFlaggedForNeedsSyncQuery, notificationSummaryIdForModel, loadNotificationBoxDocumentForReferencePair, updateNotificationUserNotificationSendExclusions, notificationBoxRecipientTemplateConfigArrayToRecord, updateNotificationRecipient, setIdAndKeyFromKeyIdRefOnDocumentData, NotificationSendType, notificationSendFlagsImplyIsComplete, NotificationSendState, mergeNotificationSendMessagesResult, notificationsPastSendAtTimeQuery, loadDocumentsForDocumentReferencesFromValues, notificationLoggedEventDayId, shouldSaveNotificationToNotificationWeek, notificationsReadyForCleanupQuery, notificationLoggedEventDaysOlderThanQuery, initializeAllApplicableNotificationBoxesParamsType, initializeAllApplicableNotificationSummariesParamsType, initializeNotificationModelParamsType, firestoreModelKeyCollectionName, notificationBoxesFlaggedForNeedsInitializationQuery, notificationSummariesFlaggedForNeedsInitializationQuery, noContentNotificationMessageFunctionFactory, NOTIFICATION_SUMMARY_EMBEDDED_NOTIFICATION_ITEM_SUBJECT_MAX_LENGTH, NOTIFICATION_SUMMARY_EMBEDDED_NOTIFICATION_ITEM_MESSAGE_MAX_LENGTH, sortNotificationItemsFunction, NOTIFICATION_SUMMARY_ITEM_LIMIT, initializeAllApplicableStorageFileGroupsParamsType, initializeStorageFileModelParamsType, storageFileGroupsFlaggedForNeedsInitializationQuery, STORAGE_FILE_GROUP_ZIP_STORAGE_FILE_PURPOSE_CREATE_ZIP_SUBTASK, STORAGE_FILE_PROCESSING_NOTIFICATION_TASK_TYPE, STORAGE_FILE_GROUP_ZIP_INFO_JSON_FILE_NAME, firestoreModelIdentity, systemStateConverter, systemStateStoredDataConverterFactory, AbstractFirestoreDocument, schedulerSystemStateRead, loadSchedulerSystemState, SCHEDULER_SYSTEM_STATE_TYPE, USER_EXTERNAL_CONNECTION_ALREADY_EXISTS_ERROR_CODE, USER_EXTERNAL_CONNECTION_CREDENTIALS_EXPIRED_ERROR_CODE, USER_EXTERNAL_CONNECTION_EXTERNAL_ACCOUNT_IN_USE_ERROR_CODE, USER_EXTERNAL_CONNECTION_LINK_NOT_ENABLED_ERROR_CODE, USER_EXTERNAL_CONNECTION_PROVIDER_NOT_ALLOWED_ERROR_CODE, USER_EXTERNAL_CONNECTION_PROVIDER_NOT_CONNECTED_ERROR_CODE, USER_EXTERNAL_CONNECTION_SIGN_IN_DENIED_ERROR_CODE, USER_EXTERNAL_CONNECTION_SIGN_IN_EMAIL_CONFLICT_ERROR_CODE, USER_EXTERNAL_CONNECTION_SIGN_IN_REPORTABLE_ERROR_CODES, USER_EXTERNAL_CONNECTION_SIGN_IN_IDENTITY_UNAVAILABLE_ERROR_CODE, USER_EXTERNAL_CONNECTION_SIGN_IN_NOT_ENABLED_ERROR_CODE, USER_EXTERNAL_CONNECTION_SIGN_IN_USER_MISSING_ERROR_CODE, USER_EXTERNAL_CONNECTION_UNLINK_LAST_LOGIN_METHOD_ERROR_CODE, copyUserRelatedDataAccessorFactoryFunction, snapshotConverterFunctions, firestoreDate, firestoreUID, emptyUserExternalConnection, applyUserExternalConnectionEntry, userExternalConnectionEntryForOutcome, applyUserExternalConnectionLogin, userExternalConnectionsWithExternalAccountQuery, userExternalConnectionLoginForIdentity, userExternalConnectionExternalAccountKeys, userExternalConnectionValue } from '@dereekb/firebase';
 export { USER_EXTERNAL_CONNECTION_ALREADY_EXISTS_ERROR_CODE, USER_EXTERNAL_CONNECTION_CREDENTIALS_EXPIRED_ERROR_CODE, USER_EXTERNAL_CONNECTION_EXTERNAL_ACCOUNT_IN_USE_ERROR_CODE, USER_EXTERNAL_CONNECTION_LINK_NOT_ENABLED_ERROR_CODE, USER_EXTERNAL_CONNECTION_PROVIDER_NOT_ALLOWED_ERROR_CODE, USER_EXTERNAL_CONNECTION_PROVIDER_NOT_CONNECTED_ERROR_CODE, USER_EXTERNAL_CONNECTION_SIGN_IN_DENIED_ERROR_CODE, USER_EXTERNAL_CONNECTION_SIGN_IN_EMAIL_CONFLICT_ERROR_CODE, USER_EXTERNAL_CONNECTION_SIGN_IN_IDENTITY_UNAVAILABLE_ERROR_CODE, USER_EXTERNAL_CONNECTION_SIGN_IN_NOT_ENABLED_ERROR_CODE, USER_EXTERNAL_CONNECTION_SIGN_IN_REPORTABLE_ERROR_CODES, USER_EXTERNAL_CONNECTION_SIGN_IN_USER_MISSING_ERROR_CODE, USER_EXTERNAL_CONNECTION_UNLINK_LAST_LOGIN_METHOD_ERROR_CODE } from '@dereekb/firebase';
 import { preconditionConflictError, internalServerError, assertSnapshotData, badRequestError, unavailableError, FIREBASE_FIRESTORE_CONTEXT_TOKEN, FirebaseServerFirestoreContextModule, forbiddenError, firestoreEncryptedField, getAuthUserOrUndefined, FirebaseServerEnvService } from '@dereekb/firebase-server';
 import { addDays, subMilliseconds, isAfter, hoursToMilliseconds, addHours, isFuture, addMinutes, addSeconds } from 'date-fns';
@@ -160,7 +160,7 @@ import { createAES256GCMEncryption, isValidAES256GCMEncryptionSecret } from '@de
     });
 }
 
-function _array_like_to_array$l(arr, len) {
+function _array_like_to_array$m(arr, len) {
     if (len == null || len > arr.length) len = arr.length;
     for(var i = 0, arr2 = new Array(len); i < len; i++)arr2[i] = arr[i];
     return arr2;
@@ -275,7 +275,7 @@ function _object_spread_props$p(target, source) {
     return target;
 }
 function _sliced_to_array$9(arr, i) {
-    return _array_with_holes$9(arr) || _iterable_to_array_limit$9(arr, i) || _unsupported_iterable_to_array$l(arr, i) || _non_iterable_rest$9();
+    return _array_with_holes$9(arr) || _iterable_to_array_limit$9(arr, i) || _unsupported_iterable_to_array$m(arr, i) || _non_iterable_rest$9();
 }
 function _ts_generator$A(thisArg, body) {
     var f, y, t, _ = {
@@ -376,13 +376,13 @@ function _ts_generator$A(thisArg, body) {
         };
     }
 }
-function _unsupported_iterable_to_array$l(o, minLen) {
+function _unsupported_iterable_to_array$m(o, minLen) {
     if (!o) return;
-    if (typeof o === "string") return _array_like_to_array$l(o, minLen);
+    if (typeof o === "string") return _array_like_to_array$m(o, minLen);
     var n = Object.prototype.toString.call(o).slice(8, -1);
     if (n === "Object" && o.constructor) n = o.constructor.name;
     if (n === "Map" || n === "Set") return Array.from(n);
-    if (n === "Arguments" || /^(?:Ui|I)nt(?:8|16|32)(?:Clamped)?Array$/.test(n)) return _array_like_to_array$l(o, minLen);
+    if (n === "Arguments" || /^(?:Ui|I)nt(?:8|16|32)(?:Clamped)?Array$/.test(n)) return _array_like_to_array$m(o, minLen);
 }
 /**
  * NestJS injection token for the {@link BaseStorageFileServerActionsContext}, providing
@@ -4098,13 +4098,13 @@ function _ts_values(o) {
     });
 }
 
-function _array_like_to_array$k(arr, len) {
+function _array_like_to_array$l(arr, len) {
     if (len == null || len > arr.length) len = arr.length;
     for(var i = 0, arr2 = new Array(len); i < len; i++)arr2[i] = arr[i];
     return arr2;
 }
-function _array_without_holes$f(arr) {
-    if (Array.isArray(arr)) return _array_like_to_array$k(arr);
+function _array_without_holes$g(arr) {
+    if (Array.isArray(arr)) return _array_like_to_array$l(arr);
 }
 function _define_property$s(obj, key, value) {
     if (key in obj) {
@@ -4117,12 +4117,12 @@ function _define_property$s(obj, key, value) {
     } else obj[key] = value;
     return obj;
 }
-function _iterable_to_array$f(iter) {
+function _iterable_to_array$g(iter) {
     if (typeof Symbol !== "undefined" && iter[Symbol.iterator] != null || iter["@@iterator"] != null) {
         return Array.from(iter);
     }
 }
-function _non_iterable_spread$f() {
+function _non_iterable_spread$g() {
     throw new TypeError("Invalid attempt to spread non-iterable instance.\nIn order to be iterable, non-array objects must have a [Symbol.iterator]() method.");
 }
 function _object_spread$q(target) {
@@ -4158,16 +4158,16 @@ function _object_spread_props$o(target, source) {
     }
     return target;
 }
-function _to_consumable_array$f(arr) {
-    return _array_without_holes$f(arr) || _iterable_to_array$f(arr) || _unsupported_iterable_to_array$k(arr) || _non_iterable_spread$f();
+function _to_consumable_array$g(arr) {
+    return _array_without_holes$g(arr) || _iterable_to_array$g(arr) || _unsupported_iterable_to_array$l(arr) || _non_iterable_spread$g();
 }
-function _unsupported_iterable_to_array$k(o, minLen) {
+function _unsupported_iterable_to_array$l(o, minLen) {
     if (!o) return;
-    if (typeof o === "string") return _array_like_to_array$k(o, minLen);
+    if (typeof o === "string") return _array_like_to_array$l(o, minLen);
     var n = Object.prototype.toString.call(o).slice(8, -1);
     if (n === "Object" && o.constructor) n = o.constructor.name;
     if (n === "Map" || n === "Set") return Array.from(n);
-    if (n === "Arguments" || /^(?:Ui|I)nt(?:8|16|32)(?:Clamped)?Array$/.test(n)) return _array_like_to_array$k(o, minLen);
+    if (n === "Arguments" || /^(?:Ui|I)nt(?:8|16|32)(?:Clamped)?Array$/.test(n)) return _array_like_to_array$l(o, minLen);
 }
 /**
  * NestJS injection token for the app's `CalendarTypeConfig[]` registry.
@@ -4224,13 +4224,13 @@ function _unsupported_iterable_to_array$k(o, minLen) {
     return {
         imports: [
             ConfigModule
-        ].concat(_to_consumable_array$f(dependencyModuleImport), _to_consumable_array$f(imports !== null && imports !== void 0 ? imports : [])),
+        ].concat(_to_consumable_array$g(dependencyModuleImport), _to_consumable_array$g(imports !== null && imports !== void 0 ? imports : [])),
         exports: [
             CALENDAR_SERVER_ACTION_CONTEXT_TOKEN,
             CalendarServerActions,
             AppCalendarTypeConfigService,
             CALENDAR_ICS_DOMAIN_TOKEN
-        ].concat(_to_consumable_array$f(exports !== null && exports !== void 0 ? exports : [])),
+        ].concat(_to_consumable_array$g(exports !== null && exports !== void 0 ? exports : [])),
         providers: [
             {
                 provide: CALENDAR_TYPE_CONFIGS_TOKEN,
@@ -4262,7 +4262,7 @@ function _unsupported_iterable_to_array$k(o, minLen) {
                     CALENDAR_SERVER_ACTION_CONTEXT_TOKEN
                 ]
             }
-        ].concat(_to_consumable_array$f(providers !== null && providers !== void 0 ? providers : []))
+        ].concat(_to_consumable_array$g(providers !== null && providers !== void 0 ? providers : []))
     };
 }
 
@@ -5197,6 +5197,14 @@ function _ts_generator$w(thisArg, body) {
     });
 }
 
+function _array_like_to_array$k(arr, len) {
+    if (len == null || len > arr.length) len = arr.length;
+    for(var i = 0, arr2 = new Array(len); i < len; i++)arr2[i] = arr[i];
+    return arr2;
+}
+function _array_without_holes$f(arr) {
+    if (Array.isArray(arr)) return _array_like_to_array$k(arr);
+}
 function asyncGeneratorStep$v(gen, resolve, reject, _next, _throw, key, arg) {
     try {
         var info = gen[key](arg);
@@ -5226,6 +5234,17 @@ function _async_to_generator$v(fn) {
 function _class_call_check$r(instance, Constructor) {
     if (!(instance instanceof Constructor)) throw new TypeError("Cannot call a class as a function");
 }
+function _iterable_to_array$f(iter) {
+    if (typeof Symbol !== "undefined" && iter[Symbol.iterator] != null || iter["@@iterator"] != null) {
+        return Array.from(iter);
+    }
+}
+function _non_iterable_spread$f() {
+    throw new TypeError("Invalid attempt to spread non-iterable instance.\nIn order to be iterable, non-array objects must have a [Symbol.iterator]() method.");
+}
+function _to_consumable_array$f(arr) {
+    return _array_without_holes$f(arr) || _iterable_to_array$f(arr) || _unsupported_iterable_to_array$k(arr) || _non_iterable_spread$f();
+}
 function _ts_generator$v(thisArg, body) {
     var f, y, t, _ = {
         label: 0,
@@ -5325,6 +5344,14 @@ function _ts_generator$v(thisArg, body) {
         };
     }
 }
+function _unsupported_iterable_to_array$k(o, minLen) {
+    if (!o) return;
+    if (typeof o === "string") return _array_like_to_array$k(o, minLen);
+    var n = Object.prototype.toString.call(o).slice(8, -1);
+    if (n === "Object" && o.constructor) n = o.constructor.name;
+    if (n === "Map" || n === "Set") return Array.from(n);
+    if (n === "Arguments" || /^(?:Ui|I)nt(?:8|16|32)(?:Clamped)?Array$/.test(n)) return _array_like_to_array$k(o, minLen);
+}
 /**
  * NestJS injection token for the {@link BaseFormSpaceServerActionsContext}.
  */ var BASE_FORM_SPACE_SERVER_ACTION_CONTEXT_TOKEN = 'BASE_FORM_SPACE_SERVER_ACTION_CONTEXT';
@@ -6106,9 +6133,9 @@ function _ts_generator$v(thisArg, body) {
     var queueFormSpaceForProcessing = _queueFormSpaceForProcessingFactory(context);
     return firebaseServerActionTransformFunctionFactory(processAllQueuedFormSpacesParamsType, function(params) {
         return _async_to_generator$v(function() {
-            var limit;
+            var totalSnapshotsLimit;
             return _ts_generator$v(this, function(_state) {
-                limit = params.limit;
+                totalSnapshotsLimit = params.limit;
                 return [
                     2,
                     function() {
@@ -6155,9 +6182,10 @@ function _ts_generator$v(thisArg, body) {
                                                     })();
                                                 },
                                                 constraintsFactory: function constraintsFactory() {
-                                                    return formSpacesQueuedForProcessingQuery(limit);
+                                                    return formSpacesQueuedForProcessingQuery();
                                                 },
                                                 queryFactory: formSpaceCollection,
+                                                totalSnapshotsLimit: totalSnapshotsLimit,
                                                 batchSize: undefined,
                                                 performTasksConfig: {
                                                     maxParallelTasks: 10
@@ -6209,13 +6237,13 @@ function _ts_generator$v(thisArg, body) {
                     2,
                     function() {
                         return _async_to_generator$v(function() {
-                            var startedAt, budget, limit, cutoff, formSpacesExpired, storageFilesFlaggedForDelete, pages, stoppedForTimeBudget, elapsed, documents, _iteratorNormalCompletion, _didIteratorError, _iteratorError, _iterator, _step, formSpaceDocument, flagResult, err, result;
+                            var startedAt, budget, pageLimit, cutoff, formSpacesExpired, storageFilesFlaggedForDelete, pages, stoppedForTimeBudget, elapsed, documents, _iteratorNormalCompletion, _didIteratorError, _iteratorError, _iterator, _step, formSpaceDocument, flagResult, err, result;
                             return _ts_generator$v(this, function(_state) {
                                 switch(_state.label){
                                     case 0:
                                         startedAt = Date.now();
                                         budget = maxRunTimeMs !== null && maxRunTimeMs !== void 0 ? maxRunTimeMs : DEFAULT_FORM_SPACE_EXPIRATION_SWEEP_MAX_RUN_TIME;
-                                        limit = pageSize !== null && pageSize !== void 0 ? pageSize : DEFAULT_FORM_SPACE_EXPIRATION_SWEEP_PAGE_SIZE;
+                                        pageLimit = pageSize !== null && pageSize !== void 0 ? pageSize : DEFAULT_FORM_SPACE_EXPIRATION_SWEEP_PAGE_SIZE;
                                         cutoff = before !== null && before !== void 0 ? before : new Date(startedAt);
                                         formSpacesExpired = 0;
                                         storageFilesFlaggedForDelete = 0;
@@ -6241,10 +6269,11 @@ function _ts_generator$v(thisArg, body) {
                                         }
                                         return [
                                             4,
-                                            formSpaceCollection.queryDocument(formSpacesDueForExpirationQuery({
-                                                before: cutoff,
-                                                limit: limit
-                                            })).getDocs()
+                                            formSpaceCollection.queryDocument(_to_consumable_array$f(formSpacesDueForExpirationQuery({
+                                                before: cutoff
+                                            })).concat([
+                                                limit(pageLimit)
+                                            ])).getDocs()
                                         ];
                                     case 2:
                                         documents = _state.sent();

package/model/package.json

@@ -1,18 +1,18 @@
 {
   "name": "@dereekb/firebase-server/model",
-  "version": "14.8.0",
+  "version": "14.9.0",
   "sideEffects": false,
   "type": "module",
   "peerDependencies": {
     "@cantoo/pdf-lib": ">=2.6.5 <2.11.0",
-    "@dereekb/analytics": "14.8.0",
-    "@dereekb/date": "14.8.0",
-    "@dereekb/firebase": "14.8.0",
-    "@dereekb/firebase-server": "14.8.0",
-    "@dereekb/model": "14.8.0",
-    "@dereekb/nestjs": "14.8.0",
-    "@dereekb/rxjs": "14.8.0",
-    "@dereekb/util": "14.8.0",
+    "@dereekb/analytics": "14.9.0",
+    "@dereekb/date": "14.9.0",
+    "@dereekb/firebase": "14.9.0",
+    "@dereekb/firebase-server": "14.9.0",
+    "@dereekb/model": "14.9.0",
+    "@dereekb/nestjs": "14.9.0",
+    "@dereekb/rxjs": "14.9.0",
+    "@dereekb/util": "14.9.0",
     "@nestjs/common": "^12.0.1",
     "@nestjs/config": "^12.0.0",
     "archiver": "^8.0.0",

package/oidc/index.esm.js

@@ -1,10 +1,10 @@
 import { createParamDecorator, Injectable, Inject, Optional, Logger, UnauthorizedException, Post, Req, Body, Controller, HttpStatus, HttpException, Get, Param, Res, HttpCode, All } from '@nestjs/common';
+import { firestoreEncryptedField, firebaseServerActionsContext, FirebaseServerEnvService, DBX_FIREBASE_SERVER_OIDC_SESSION_EXPIRES_AT_CLAIM, notFoundError, badRequestError, forbiddenError, oidcScopesFromRequestAuth, assertEndpointOidcScope, unauthenticatedError, clientIpsMatch, oidcSessionExpiresAtFromRequestAuth, requestClientIp, FirebaseServerAnalyticsService, FIREBASE_FIRESTORE_CONTEXT_TOKEN, FirebaseServerFirestoreContextModule } from '@dereekb/firebase-server';
 import { errors } from 'oidc-provider';
 import { SECONDS_IN_MINUTE, SECONDS_IN_DAY, cachedGetter, unixDateTimeSecondsNumberToDate, unixDateTimeSecondsNumberForNow, selectiveFieldEncryptor, filterUndefinedValues, websiteUrlFromPaths, unique, filterKeysOnPOJOFunction, firstValue, SECONDS_IN_HOUR, hasHttpPrefix } from '@dereekb/util';
 import { generateKeyPairSync, randomBytes, randomUUID } from 'node:crypto';
 import { resolveEncryptionKey, encryptValue, decryptValue, createAesStringEncryptionProvider, isValidAES256GCMEncryptionSecret } from '@dereekb/nestjs';
 import { where, iterateFirestoreDocumentSnapshotPairs, firestoreModelIdentity, snapshotConverterFunctions, optionalFirestoreDate, firestoreDate, firestoreEnum, firestorePassThroughField, AbstractFirestoreDocument, createOidcClientParamsType, deleteOidcClientParamsType, deleteOidcTokenParamsType, rotateOidcClientSecretParamsType, updateOidcClientParamsType, firestoreModelKey, oidcEntryIdentity, PUBLIC_PKCE_TOKEN_ENDPOINT_AUTH_METHOD, OIDC_ENTRY_CLIENT_TYPE, oidcEntriesByUserCodeQuery, oidcEntriesByUidQuery, oidcEntriesByGrantIdQuery, assignmentOnlyScopesForOidcProviderProfiles, adminOnlyScopesForOidcProviderProfiles, oidcProviderProfilesForClient, requiredScopesForOidcProviderProfiles, scopesForOidcProviderProfiles, CLI_TOKEN_OIDC_SCOPE, SERVICE_TOKEN_OIDC_SCOPE, OFFLINE_ACCESS_OIDC_SCOPE, OIDC_ENTRY_CLI_TOKEN_CLAIM_TYPE, oidcScopesFromScopeClaim, oidcEntryFirestoreCollection } from '@dereekb/firebase';
-import { firestoreEncryptedField, firebaseServerActionsContext, FirebaseServerEnvService, notFoundError, badRequestError, forbiddenError, oidcScopesFromRequestAuth, assertEndpointOidcScope, unauthenticatedError, clientIpsMatch, requestClientIp, FirebaseServerAnalyticsService, FIREBASE_FIRESTORE_CONTEXT_TOKEN, FirebaseServerFirestoreContextModule } from '@dereekb/firebase-server';
 import { nanoid } from 'nanoid';
 import { safeToJsDate } from '@dereekb/date';
 import { makeUrlSearchParamsString } from '@dereekb/util/fetch';
@@ -401,12 +401,7 @@ function _define_property$l(obj, key, value) {
 /**
  * Custom oidc-provider client metadata field for a client's maximum requestable login duration (seconds).
  */ var DBX_FIREBASE_SERVER_OIDC_MAX_SESSION_TTL_CLIENT_METADATA = 'dbx_max_session_ttl';
-/**
- * Access-token `extra` claim carrying the grant's resolved expiry as unix seconds.
- *
- * Baked on at issuance (`extraTokenClaims`) and read back by `verifyAccessToken` and the
- * `GET /oidc/session` route so clients can surface the session lifetime without decoding the token.
- */ var DBX_FIREBASE_SERVER_OIDC_SESSION_EXPIRES_AT_CLAIM = 'dbx_session_expires_at';
+// `DBX_FIREBASE_SERVER_OIDC_SESSION_EXPIRES_AT_CLAIM` is declared in the core `@dereekb/firebase-server` layer so non-OIDC endpoints can read it.
 /**
  * Access-token `extra` claim flagging whether the grant's refresh token rotation is disabled.
  *
@@ -6877,15 +6872,8 @@ OidcCliTokenService = OidcCliTokenService_1 = __decorate([
  * @param auth - The request auth data.
  * @returns Remaining seconds on the parent grant, or `undefined`.
  */ function parentGrantRemainingSeconds(auth) {
-    var _ref;
-    var _claims_oidcValidatedToken, _claims_token;
-    var claims = auth !== null && auth !== void 0 ? auth : {};
-    var raw = (_ref = (_claims_oidcValidatedToken = claims.oidcValidatedToken) === null || _claims_oidcValidatedToken === void 0 ? void 0 : _claims_oidcValidatedToken[DBX_FIREBASE_SERVER_OIDC_SESSION_EXPIRES_AT_CLAIM]) !== null && _ref !== void 0 ? _ref : (_claims_token = claims.token) === null || _claims_token === void 0 ? void 0 : _claims_token[DBX_FIREBASE_SERVER_OIDC_SESSION_EXPIRES_AT_CLAIM];
-    var result;
-    if (typeof raw === 'number' && Number.isFinite(raw)) {
-        result = raw - unixDateTimeSecondsNumberForNow();
-    }
-    return result;
+    var expiresAt = oidcSessionExpiresAtFromRequestAuth(auth);
+    return expiresAt == null ? undefined : expiresAt - unixDateTimeSecondsNumberForNow();
 }
 /**
  * Returns true when a stored claim entry is past its `expiresAt`.

package/oidc/package.json

@@ -1,19 +1,19 @@
 {
   "name": "@dereekb/firebase-server/oidc",
-  "version": "14.8.0",
+  "version": "14.9.0",
   "sideEffects": false,
   "type": "module",
   "peerDependencies": {
-    "@dereekb/analytics": "14.8.0",
-    "@dereekb/date": "14.8.0",
-    "@dereekb/firebase": "14.8.0",
-    "@dereekb/firebase-server": "14.8.0",
-    "@dereekb/model": "14.8.0",
-    "@dereekb/nestjs": "14.8.0",
-    "@dereekb/oauth-resource": "14.8.0",
-    "@dereekb/rxjs": "14.8.0",
-    "@dereekb/util": "14.8.0",
-    "@dereekb/zoho": "14.8.0",
+    "@dereekb/analytics": "14.9.0",
+    "@dereekb/date": "14.9.0",
+    "@dereekb/firebase": "14.9.0",
+    "@dereekb/firebase-server": "14.9.0",
+    "@dereekb/model": "14.9.0",
+    "@dereekb/nestjs": "14.9.0",
+    "@dereekb/oauth-resource": "14.9.0",
+    "@dereekb/rxjs": "14.9.0",
+    "@dereekb/util": "14.9.0",
+    "@dereekb/zoho": "14.9.0",
     "@nestjs/common": "^12.0.1",
     "@nestjs/config": "^12.0.0",
     "express": "^5.2.1",

package/oidc/src/lib/service/oidc.session-ttl.d.ts

@@ -9,13 +9,6 @@ export declare const DBX_FIREBASE_SERVER_OIDC_SESSION_TTL_PARAM = "dbx_session_t
  * Custom oidc-provider client metadata field for a client's maximum requestable login duration (seconds).
  */
 export declare const DBX_FIREBASE_SERVER_OIDC_MAX_SESSION_TTL_CLIENT_METADATA = "dbx_max_session_ttl";
-/**
- * Access-token `extra` claim carrying the grant's resolved expiry as unix seconds.
- *
- * Baked on at issuance (`extraTokenClaims`) and read back by `verifyAccessToken` and the
- * `GET /oidc/session` route so clients can surface the session lifetime without decoding the token.
- */
-export declare const DBX_FIREBASE_SERVER_OIDC_SESSION_EXPIRES_AT_CLAIM = "dbx_session_expires_at";
 /**
  * Access-token `extra` claim flagging whether the grant's refresh token rotation is disabled.
  *

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@dereekb/firebase-server",
-  "version": "14.8.0",
+  "version": "14.9.0",
   "type": "module",
   "sideEffects": false,
   "exports": {
@@ -58,18 +58,18 @@
   },
   "peerDependencies": {
     "@cantoo/pdf-lib": ">=2.6.5 <2.11.0",
-    "@dereekb/analytics": "14.8.0",
-    "@dereekb/calcom": "14.8.0",
-    "@dereekb/date": "14.8.0",
-    "@dereekb/dbx-core": "14.8.0",
-    "@dereekb/discord": "14.8.0",
-    "@dereekb/firebase": "14.8.0",
-    "@dereekb/model": "14.8.0",
-    "@dereekb/nestjs": "14.8.0",
-    "@dereekb/oauth-resource": "14.8.0",
-    "@dereekb/rxjs": "14.8.0",
-    "@dereekb/util": "14.8.0",
-    "@dereekb/zoho": "14.8.0",
+    "@dereekb/analytics": "14.9.0",
+    "@dereekb/calcom": "14.9.0",
+    "@dereekb/date": "14.9.0",
+    "@dereekb/dbx-core": "14.9.0",
+    "@dereekb/discord": "14.9.0",
+    "@dereekb/firebase": "14.9.0",
+    "@dereekb/model": "14.9.0",
+    "@dereekb/nestjs": "14.9.0",
+    "@dereekb/oauth-resource": "14.9.0",
+    "@dereekb/rxjs": "14.9.0",
+    "@dereekb/util": "14.9.0",
+    "@dereekb/zoho": "14.9.0",
     "@google-cloud/firestore": "^7.11.6",
     "@google-cloud/storage": "^7.22.0",
     "@modelcontextprotocol/node": "2.0.0",

package/src/lib/nest/controller/api.session-expiry.d.ts

@@ -0,0 +1,24 @@
+import { type Maybe, type UnixDateTimeSecondsNumber } from '@dereekb/util';
+import { type FirebaseServerAuthData } from './auth.context.server';
+/**
+ * Access-token `extra` claim carrying the grant's resolved expiry as unix seconds.
+ *
+ * Baked on at issuance (`extraTokenClaims`) and read back by `verifyAccessToken` and the
+ * `GET /oidc/session` route so clients can surface the session lifetime without decoding the token.
+ *
+ * Declared in this core layer (and re-exported by `@dereekb/firebase-server/oidc`) so non-OIDC
+ * endpoints such as the direct-Firestore session can bound what they mint by the caller's own
+ * lifetime without importing the OIDC sub-package.
+ */
+export declare const DBX_FIREBASE_SERVER_OIDC_SESSION_EXPIRES_AT_CLAIM = "dbx_session_expires_at";
+/**
+ * Reads when the CALLER's own OIDC grant expires, from the {@link DBX_FIREBASE_SERVER_OIDC_SESSION_EXPIRES_AT_CLAIM}
+ * claim baked onto the access token at issuance.
+ *
+ * Returns `undefined` when the claim is absent — a non-OIDC caller (plain Firebase ID token), or a
+ * token issued before the claim existed. Callers must treat that as "no bound", not "expired".
+ *
+ * @param auth - The request auth data, or undefined for unauthenticated requests.
+ * @returns The caller's grant expiry in unix seconds, or `undefined`.
+ */
+export declare function oidcSessionExpiresAtFromRequestAuth(auth: Maybe<FirebaseServerAuthData>): Maybe<UnixDateTimeSecondsNumber>;

package/src/lib/nest/controller/index.d.ts

@@ -1,5 +1,6 @@
 export * from './auth.context.server';
 export * from './api.scope';
+export * from './api.session-expiry';
 export * from './request.ip';
 export * from './download';
 export * from './model';

package/src/lib/nest/controller/session/session.api.config.d.ts

@@ -40,6 +40,16 @@ export declare const MAX_FIRESTORE_SESSION_APP_CHECK_TTL_MILLIS: Milliseconds;
  * Firebase). The exchanged ID token then lives its own hour from sign-in.
  */
 export declare const FIREBASE_CUSTOM_TOKEN_EXCHANGE_WINDOW_MILLIS: Milliseconds;
+/**
+ * Default grace allowed below {@link MIN_FIRESTORE_SESSION_APP_CHECK_TTL_MILLIS} when checking the
+ * caller's remaining lifetime (2 minutes).
+ *
+ * A session cannot be shorter than that App Check floor, so a caller whose own credential ends sooner
+ * is refused rather than handed a session that outlives it. The leeway covers the unavoidable delay
+ * between minting a credential and using it: a credential minted to last exactly the floor can still
+ * open a session for this long afterwards, and that session outlives it by at most this much.
+ */
+export declare const DEFAULT_FIRESTORE_SESSION_CALLER_EXPIRY_LEEWAY_MILLIS: Milliseconds;
 /**
  * Signature for the predicate that authorizes a caller to open a direct-Firestore session.
  *
@@ -82,6 +92,13 @@ export declare abstract class SessionApiModuleConfig {
      * Defaults to {@link DEFAULT_FIRESTORE_SESSION_APP_CHECK_TTL_MILLIS}.
      */
     readonly appCheckTokenTtlMillis?: Milliseconds;
+    /**
+     * Grace allowed below {@link MIN_FIRESTORE_SESSION_APP_CHECK_TTL_MILLIS} when checking an OIDC
+     * caller's remaining lifetime. A caller with less than `floor - leeway` left is refused.
+     *
+     * Defaults to {@link DEFAULT_FIRESTORE_SESSION_CALLER_EXPIRY_LEEWAY_MILLIS}.
+     */
+    readonly callerExpiryLeewayMillis?: Milliseconds;
     /**
      * OIDC scope term an OIDC caller must hold to open a session. Defaults to
      * {@link FIRESTORE_SESSION_OIDC_SCOPE}. Pass `null` to disable scope enforcement entirely (the admin

package/src/lib/nest/controller/session/session.api.service.d.ts

@@ -7,6 +7,12 @@ import { type FirestoreSessionAdminPredicate, SessionApiModuleConfig } from './s
  * Error code thrown when the caller is not authorized to open a direct-Firestore session.
  */
 export declare const FIRESTORE_SESSION_FORBIDDEN_ERROR_CODE = "FIRESTORE_SESSION_FORBIDDEN_ERROR";
+/**
+ * Error code thrown when the caller's own OIDC credential expires too soon to back a session — less
+ * than {@link MIN_FIRESTORE_SESSION_APP_CHECK_TTL_MILLIS} minus the configured leeway remains. The
+ * client should re-authenticate (or mint a fresh CLI handoff) and try again.
+ */
+export declare const FIRESTORE_SESSION_CALLER_EXPIRING_ERROR_CODE = "FIRESTORE_SESSION_CALLER_EXPIRING_ERROR";
 /**
  * A short-lived credential bundle that lets a headless client connect directly to Firestore as the
  * authenticated user, through the app's security rules.
@@ -52,6 +58,20 @@ export interface FirestoreSessionResult {
  *
  * The custom token is ALWAYS minted for `auth.uid`; there is no way to ask for someone else's session,
  * so a granted session is exactly as privileged as the caller already is under Firestore rules.
+ *
+ * ## Lifetime
+ *
+ * A session never outlives the OIDC credential that opened it (read from the caller's
+ * `dbx_session_expires_at` claim): the App Check TTL and the reported `expiresAt` are both capped at
+ * the caller's expiry. The App Check token cannot be shorter than
+ * {@link MIN_FIRESTORE_SESSION_APP_CHECK_TTL_MILLIS}, so a caller with less than that floor (minus
+ * {@link SessionApiModuleConfig.callerExpiryLeewayMillis}) remaining is refused with
+ * {@link FIRESTORE_SESSION_CALLER_EXPIRING_ERROR_CODE}. Inside the leeway the attestation may outlive
+ * the caller by at most the leeway.
+ *
+ * The Firebase custom token's one-hour exchange window is fixed by Firebase and cannot be shortened;
+ * the capped `expiresAt` is what stops a well-behaved client from reusing the session past its caller.
+ * A caller with no expiry claim (a non-OIDC Firebase ID token) is not bounded.
  */
 export declare class FirestoreSessionApiService {
     private readonly _logger;

package/test/package.json

@@ -1,19 +1,19 @@
 {
   "name": "@dereekb/firebase-server/test",
-  "version": "14.8.0",
+  "version": "14.9.0",
   "sideEffects": false,
   "type": "module",
   "peerDependencies": {
-    "@dereekb/analytics": "14.8.0",
-    "@dereekb/date": "14.8.0",
-    "@dereekb/firebase": "14.8.0",
-    "@dereekb/firebase-server": "14.8.0",
-    "@dereekb/firebase-server/oidc": "14.8.0",
-    "@dereekb/model": "14.8.0",
-    "@dereekb/nestjs": "14.8.0",
-    "@dereekb/oauth-resource": "14.8.0",
-    "@dereekb/rxjs": "14.8.0",
-    "@dereekb/util": "14.8.0",
+    "@dereekb/analytics": "14.9.0",
+    "@dereekb/date": "14.9.0",
+    "@dereekb/firebase": "14.9.0",
+    "@dereekb/firebase-server": "14.9.0",
+    "@dereekb/firebase-server/oidc": "14.9.0",
+    "@dereekb/model": "14.9.0",
+    "@dereekb/nestjs": "14.9.0",
+    "@dereekb/oauth-resource": "14.9.0",
+    "@dereekb/rxjs": "14.9.0",
+    "@dereekb/util": "14.9.0",
     "@google-cloud/firestore": "^7.11.6",
     "@google-cloud/storage": "^7.22.0",
     "@nestjs/common": "^12.0.1",
@@ -26,7 +26,7 @@
     "supertest": "^7.2.2"
   },
   "devDependencies": {
-    "@dereekb/nestjs": "14.8.0"
+    "@dereekb/nestjs": "14.9.0"
   },
   "exports": {
     "./package.json": "./package.json",

package/twilio/package.json

@@ -1,16 +1,16 @@
 {
   "name": "@dereekb/firebase-server/twilio",
-  "version": "14.8.0",
+  "version": "14.9.0",
   "sideEffects": false,
   "type": "module",
   "peerDependencies": {
-    "@dereekb/date": "14.8.0",
-    "@dereekb/firebase": "14.8.0",
-    "@dereekb/firebase-server": "14.8.0",
-    "@dereekb/model": "14.8.0",
-    "@dereekb/nestjs": "14.8.0",
-    "@dereekb/rxjs": "14.8.0",
-    "@dereekb/util": "14.8.0"
+    "@dereekb/date": "14.9.0",
+    "@dereekb/firebase": "14.9.0",
+    "@dereekb/firebase-server": "14.9.0",
+    "@dereekb/model": "14.9.0",
+    "@dereekb/nestjs": "14.9.0",
+    "@dereekb/rxjs": "14.9.0",
+    "@dereekb/util": "14.9.0"
   },
   "exports": {
     "./package.json": "./package.json",

package/zoho/package.json

@@ -1,18 +1,18 @@
 {
   "name": "@dereekb/firebase-server/zoho",
-  "version": "14.8.0",
+  "version": "14.9.0",
   "sideEffects": false,
   "type": "module",
   "peerDependencies": {
-    "@dereekb/analytics": "14.8.0",
-    "@dereekb/date": "14.8.0",
-    "@dereekb/firebase": "14.8.0",
-    "@dereekb/firebase-server": "14.8.0",
-    "@dereekb/model": "14.8.0",
-    "@dereekb/nestjs": "14.8.0",
-    "@dereekb/rxjs": "14.8.0",
-    "@dereekb/util": "14.8.0",
-    "@dereekb/zoho": "14.8.0",
+    "@dereekb/analytics": "14.9.0",
+    "@dereekb/date": "14.9.0",
+    "@dereekb/firebase": "14.9.0",
+    "@dereekb/firebase-server": "14.9.0",
+    "@dereekb/model": "14.9.0",
+    "@dereekb/nestjs": "14.9.0",
+    "@dereekb/rxjs": "14.9.0",
+    "@dereekb/util": "14.9.0",
+    "@dereekb/zoho": "14.9.0",
     "@nestjs/common": "^12.0.1",
     "@nestjs/config": "^12.0.0",
     "express": "^5.2.1"