@dereekb/firebase 13.11.18 → 13.12.1

package/eslint/src/lib/require-service-factory-for-dbx-model.rule.d.ts

@@ -0,0 +1,80 @@
+import type { AstNode } from './util';
+/**
+ * Default glob patterns (relative to ESLint `cwd`) used to locate model + factory source files.
+ * Mirrors {@link require-firestore-rule-for-service-model}'s search roots so the orphan rule
+ * picks up factories declared anywhere a model interface might also live.
+ */
+export declare const DEFAULT_FACTORY_SEARCH_ROOTS: readonly string[];
+/**
+ * Default name of the `@dbxModel` marker tag that triggers the orphan check.
+ */
+export declare const DEFAULT_MODEL_MARKER_TAG: string;
+/**
+ * Default name of the `@dbxModelServiceFactory <modelType>` tag the rule cross-references.
+ */
+export declare const DEFAULT_FACTORY_TAG: string;
+/**
+ * Options for the require-service-factory-for-dbx-model rule.
+ */
+export interface FirebaseRequireServiceFactoryForDbxModelRuleOptions {
+    /**
+     * Glob patterns (relative to ESLint `cwd`) the rule scans to discover
+     * `@dbxModelServiceFactory <modelType>` declarations. Defaults to
+     * {@link DEFAULT_FACTORY_SEARCH_ROOTS}.
+     */
+    readonly factorySearchRoots?: readonly string[];
+    /**
+     * Inline factory set used in tests; bypasses filesystem globbing.
+     */
+    readonly virtualFactoryModelTypes?: readonly string[];
+    /**
+     * Override the `@dbxModel` marker tag name. Defaults to {@link DEFAULT_MODEL_MARKER_TAG}.
+     */
+    readonly modelMarkerTag?: string;
+    /**
+     * Override the `@dbxModelServiceFactory` tag name. Defaults to {@link DEFAULT_FACTORY_TAG}.
+     */
+    readonly factoryTag?: string;
+    /**
+     * Model interface names that are intentionally declared without a matching service factory.
+     * Suppresses the warning for each name.
+     */
+    readonly ignoreModels?: readonly string[];
+}
+/**
+ * ESLint rule definition for require-service-factory-for-dbx-model.
+ */
+export interface FirebaseRequireServiceFactoryForDbxModelRuleDefinition {
+    readonly meta: {
+        readonly type: 'suggestion';
+        readonly fixable: undefined;
+        readonly docs: {
+            readonly description: string;
+            readonly recommended: boolean;
+        };
+        readonly messages: Readonly<Record<string, string>>;
+        readonly schema: readonly object[];
+    };
+    create(context: RuleContext): Record<string, (node: AstNode) => void>;
+}
+interface RuleContext {
+    readonly options: FirebaseRequireServiceFactoryForDbxModelRuleOptions[];
+    readonly cwd?: string;
+    readonly sourceCode: AstNode;
+    readonly report: (descriptor: {
+        node: AstNode;
+        messageId: string;
+        data?: Record<string, string>;
+    }) => void;
+}
+/**
+ * ESLint rule that flags every `@dbxModel`-marked interface that has no matching
+ * `@dbxModelServiceFactory <modelType>` declaration elsewhere in the workspace.
+ *
+ * The expected `modelType` is derived from the interface name by lowercasing the first
+ * character (matching the `FirestoreModelIdentity.modelType` convention). Models that are
+ * intentionally factory-less (e.g. sub-objects mis-marked as `@dbxModel`) can be silenced via
+ * the `ignoreModels` option.
+ */
+export declare const FIREBASE_REQUIRE_SERVICE_FACTORY_FOR_DBX_MODEL_RULE: FirebaseRequireServiceFactoryForDbxModelRuleDefinition;
+export {};

package/eslint/src/lib/require-storagefile-policy-matches-rules.rule.d.ts

@@ -0,0 +1,79 @@
+import { type AstNode } from './util';
+/**
+ * Default type name the rule looks for on top-level declarators. Variables whose type
+ * annotation resolves to this identifier are treated as upload policies and validated
+ * against `storage.rules`.
+ */
+export declare const DEFAULT_STORAGE_FILE_UPLOAD_POLICY_TYPE_NAME: string;
+/**
+ * Default file name searched relative to the lint root when `storageRulesPath` is omitted.
+ */
+export declare const DEFAULT_STORAGE_RULES_FILENAME: string;
+/**
+ * Options for the require-storagefile-policy-matches-rules rule.
+ */
+export interface FirebaseRequireStorageFilePolicyMatchesRulesRuleOptions {
+    /**
+     * Path to the `storage.rules` file. Resolved against the ESLint `cwd` when relative.
+     * Defaults to `<cwd>/storage.rules`.
+     */
+    readonly storageRulesPath?: string;
+    /**
+     * Inline `storage.rules` source used in tests; bypasses filesystem reads when set.
+     */
+    readonly virtualStorageRules?: string;
+    /**
+     * Type-annotation identifier the rule treats as the upload-policy marker. Defaults to
+     * {@link DEFAULT_STORAGE_FILE_UPLOAD_POLICY_TYPE_NAME}.
+     */
+    readonly policyTypeName?: string;
+}
+/**
+ * ESLint rule definition for require-storagefile-policy-matches-rules.
+ */
+export interface FirebaseRequireStorageFilePolicyMatchesRulesRuleDefinition {
+    readonly meta: {
+        readonly type: 'problem';
+        readonly fixable: undefined;
+        readonly docs: {
+            readonly description: string;
+            readonly recommended: boolean;
+        };
+        readonly messages: Readonly<Record<string, string>>;
+        readonly schema: readonly object[];
+    };
+    create(context: RuleContext): Record<string, (node: AstNode) => void>;
+}
+interface RuleContext {
+    readonly options: FirebaseRequireStorageFilePolicyMatchesRulesRuleOptions[];
+    readonly cwd?: string;
+    readonly report: (descriptor: {
+        node: AstNode;
+        messageId: string;
+        data?: Record<string, string>;
+    }) => void;
+}
+/**
+ * ESLint rule that cross-checks every `StorageFilePurposeUploadPolicy`-typed declaration in
+ * a `*-firebase` component against the workspace's `storage.rules`. Each policy must have a
+ * paired `// Mirrors STORAGE_FILE_PURPOSE_UPLOAD_POLICIES[<KEY>]` match block whose
+ * `request.resource.size` cap and `request.resource.contentType` predicate are at least as
+ * permissive as the TypeScript policy's `maxFileSizeBytes` and `allowedMimeTypes`.
+ *
+ * Reports on the TS side so drift surfaces in the normal lint pipeline; mismatches almost
+ * always originate from editing one side and forgetting the other.
+ *
+ * @example
+ * ```ts
+ * // OK — storage.rules has `Mirrors ...[USER_AVATAR_PURPOSE]` block with matching constraints
+ * export const USER_AVATAR_UPLOAD_POLICY: StorageFilePurposeUploadPolicy = {
+ *   purpose: USER_AVATAR_PURPOSE,
+ *   allowedMimeTypes: ['image/jpeg', 'image/png'],
+ *   maxFileSizeBytes: 16 * 1024 * 1024,
+ *   buildUploadPath: ({ uid }) => userAvatarUploadsFilePath(uid),
+ *   requiresFilenameInput: false
+ * };
+ * ```
+ */
+export declare const FIREBASE_REQUIRE_STORAGEFILE_POLICY_MATCHES_RULES_RULE: FirebaseRequireStorageFilePolicyMatchesRulesRuleDefinition;
+export {};

package/eslint/src/lib/storage-rules-parser.d.ts

@@ -0,0 +1,38 @@
+import { type PredicateBranch } from './predicate-evaluator';
+/**
+ * Marker comment that pairs a `storage.rules` match block with a TypeScript policy key
+ * in `STORAGE_FILE_PURPOSE_UPLOAD_POLICIES`. The capture group is the policy key constant
+ * name, e.g. `USER_AVATAR_PURPOSE`.
+ */
+export declare const MIRRORS_POLICY_KEY_MARKER_REGEX: RegExp;
+/**
+ * One disjunct of an `allow write: if ...` predicate after helper-function expansion.
+ * Always carries a numeric byte cap plus at least one MIME constraint (literal or regex).
+ *
+ * Structurally identical to the evaluator's {@link PredicateBranch}; the alias keeps the
+ * existing public type name stable for downstream consumers.
+ */
+export type ParsedRuleBranch = PredicateBranch;
+/**
+ * One `match /<path>` block in `storage.rules` paired with a `// Mirrors ...` marker.
+ * `branches` carries the disjunction of (size, MIME) tuples extracted from the block's
+ * `allow write` predicate; `unsupported` is set when the parser cannot reduce the
+ * predicate to >=1 valid branch.
+ */
+export interface ParsedStorageRulesBlock {
+    readonly mirrorsPolicyKey: string;
+    readonly matchPath: string;
+    readonly branches: readonly ParsedRuleBranch[];
+    readonly sourceLine: number;
+    readonly sourceColumn: number;
+    readonly unsupported?: string;
+}
+/**
+ * Parses a `storage.rules` source string and returns every match block paired with a
+ * `// Mirrors STORAGE_FILE_PURPOSE_UPLOAD_POLICIES[<KEY>]` marker. Catch-all deny blocks
+ * are skipped; the rest of the tree is walked normally.
+ *
+ * @param source - The raw rules source text.
+ * @returns Parsed mirrored blocks in source order.
+ */
+export declare function parseStorageRules(source: string): ParsedStorageRulesBlock[];

package/eslint/src/lib/util.d.ts

@@ -105,3 +105,143 @@ export declare function getFunctionName(node: AstNode): Maybe<string>;
  * @returns The node to attach a `context.report` location to.
  */
 export declare function getFunctionNameNode(node: AstNode): AstNode;
+/**
+ * Default CRUD verb names that combine with the `ModelFunction` suffix to form a type-name
+ * pattern the api-details rules treat as a CRUD function declaration (e.g. `OnCallCreateModelFunction`,
+ * `DemoUpdateModelFunction`).
+ *
+ * Mirrors the verbs supported by `ModelFirebaseCrudFunctionConfigMap` — see
+ * `packages/firebase/src/lib/client/function/model.function.factory.ts`.
+ */
+export declare const DEFAULT_CRUD_FUNCTION_TYPE_VERBS: readonly string[];
+/**
+ * Default factory function name that wraps CRUD function declarations and attaches the
+ * `_apiDetails` metadata (`inputType`, `outputType`, `mcp.visibility`, `analytics`) consumed
+ * by the MCP manifest builder. Defined in `packages/firebase-server/src/lib/nest/model/api.details.ts`.
+ */
+export declare const DEFAULT_API_DETAILS_FACTORY_NAME: string;
+/**
+ * Property name on the `withApiDetails(...)` config object that declares the handler's input
+ * parameter type (consumed by the MCP manifest builder to generate the tool input schema).
+ */
+export declare const INPUT_TYPE_PROPERTY_NAME: string;
+/**
+ * Module the default api-details factory ({@link DEFAULT_API_DETAILS_FACTORY_NAME}) is exported
+ * from. Used by the require-api-details auto-fix to insert a missing import.
+ */
+export declare const API_DETAILS_IMPORT_MODULE: string;
+/**
+ * Unwraps `TSAsExpression` and `TSTypeAssertion` wrappers around an initializer so callers see the
+ * underlying expression (matches the helper in `require-complete-crud-function-config-map.rule.ts`).
+ *
+ * @param node - The AST node to unwrap.
+ * @returns The innermost wrapped expression, or `node` when no cast is present.
+ */
+export declare function unwrapTypeAssertion(node: AstNode): AstNode;
+/**
+ * Resolves the identifier name from a `TSTypeReference` annotation, when present.
+ *
+ * @param node - A `TSTypeReference` node (or anything else).
+ * @returns The identifier name when `node` is a TSTypeReference whose typeName is an Identifier; otherwise null.
+ */
+export declare function typeReferenceTypeName(node: AstNode): Maybe<string>;
+/**
+ * Resolves the type-argument nodes of a `TSTypeReference`, normalizing across `@typescript-eslint`
+ * versions (`typeArguments` in v6+, `typeParameters` in older releases).
+ *
+ * @param node - A `TSTypeReference` node (or anything else).
+ * @returns The generic argument nodes, or null when the reference has no type arguments.
+ */
+export declare function typeReferenceTypeArguments(node: AstNode): Maybe<AstNode[]>;
+/**
+ * Resolves the callee identifier name from a `CallExpression`, looking through both bare identifier
+ * callees (`withApiDetails(...)`) and member-expression callees (`api.withApiDetails(...)`).
+ *
+ * @param callee - The `CallExpression.callee` node.
+ * @returns The callee name when resolvable; otherwise null.
+ */
+export declare function callExpressionCalleeName(callee: AstNode): Maybe<string>;
+/**
+ * Determines whether the (already-unwrapped) initializer is a call to the configured api-details factory.
+ *
+ * @param initializer - The unwrapped initializer node.
+ * @param factoryName - The expected factory identifier name.
+ * @returns True when the initializer is a `CallExpression` whose callee resolves to `factoryName`.
+ */
+export declare function isApiDetailsCall(initializer: AstNode, factoryName: string): boolean;
+/**
+ * Returns the declarator's identifier name, when present.
+ *
+ * @param declaratorId - The `VariableDeclarator.id` node.
+ * @returns The identifier name, or null when the declarator binds a destructuring pattern.
+ */
+export declare function declaratorName(declaratorId: AstNode): Maybe<string>;
+/**
+ * Returns the CRUD verb fragment that `typeName` ends with — i.e. the `<Verb>` in a
+ * `<Verb>ModelFunction` suffix for one of the configured verbs (e.g. `OnCallCreateModelFunction` →
+ * `Create`, `DemoUpdateModelFunction` → `Update`).
+ *
+ * @param typeName - The type-reference identifier name.
+ * @param verbs - The allowed verb fragments.
+ * @returns The matched verb, or null when the suffix matches no recognized CRUD verb.
+ */
+export declare function matchedCrudFunctionVerb(typeName: string, verbs: Iterable<string>): Maybe<string>;
+/**
+ * Returns true when `typeName` ends with `<Verb>ModelFunction` for one of the configured verbs.
+ *
+ * @param typeName - The type-reference identifier name.
+ * @param verbs - The allowed verb fragments.
+ * @returns True when the suffix matches a recognized CRUD verb.
+ */
+export declare function isCrudFunctionTypeName(typeName: string, verbs: Iterable<string>): boolean;
+/**
+ * Resolves the input-parameter type-argument node from a CRUD function type reference.
+ *
+ * @param typeRef - The `TSTypeReference` annotation node.
+ * @param typeName - The resolved type-reference name (selects the generic position).
+ * @returns The input type-argument node, or null when absent.
+ */
+export declare function crudFunctionInputTypeArgNode(typeRef: AstNode, typeName: string): Maybe<AstNode>;
+/**
+ * Returns true when a CRUD function declares no meaningful input — either the input generic argument
+ * is absent or it is an empty object type literal (`{}`). Such handlers need no MCP input schema, so
+ * the require-input-type rule exempts them.
+ *
+ * @param typeRef - The `TSTypeReference` annotation node.
+ * @param typeName - The resolved type-reference name.
+ * @returns True when the input generic is empty or absent.
+ */
+export declare function isEmptyOrAbsentInputGeneric(typeRef: AstNode, typeName: string): boolean;
+/**
+ * Returns true when an `ObjectExpression` has an own (non-computed) property with the given name.
+ *
+ * @param objExpr - The `ObjectExpression` node.
+ * @param propName - The property name to look for.
+ * @returns True when a matching property is present.
+ */
+export declare function objectExpressionHasProperty(objExpr: AstNode, propName: string): boolean;
+/**
+ * Returns true when an `ObjectExpression` contains a spread element (`{ ...base }`), whose contents
+ * cannot be introspected statically.
+ *
+ * @param objExpr - The `ObjectExpression` node.
+ * @returns True when any property is a spread element.
+ */
+export declare function objectExpressionHasSpread(objExpr: AstNode): boolean;
+/**
+ * Returns the character offset at which an auto-fixer should insert a new import — the start of the
+ * first existing `ImportDeclaration`, or offset 0 when the file has no imports yet.
+ *
+ * @param program - The `Program` AST node.
+ * @returns The character offset for the import-insertion point.
+ */
+export declare function findImportInsertionOffset(program: AstNode): number;
+/**
+ * Returns true when the given identifier name is already in the module's top-level scope (imported
+ * or declared). Used by the require-api-details auto-fix to avoid inserting a duplicate import.
+ *
+ * @param program - The `Program` AST node.
+ * @param name - The identifier name to check.
+ * @returns True when an existing import or declaration brings `name` into scope.
+ */
+export declare function isFactoryNameInScope(program: AstNode, name: string): boolean;

package/index.cjs.js

@@ -11479,6 +11479,9 @@ function mapHttpsCallable(callable, wrap) {
 /**
  * Pre-configured OnCallTypedModelParamsFunctions for 'query'
  */ var onCallQueryModelParams = onCallTypedModelParamsFunction('query');
+/**
+ * Pre-configured OnCallTypedModelParamsFunctions for 'invoke'
+ */ var onCallInvokeModelParams = onCallTypedModelParamsFunction('invoke');
 /**
  * Key used on the front-end and backend that refers to the call function.
  */ var CALL_MODEL_APP_FUNCTION_KEY = 'callModel';
@@ -11893,8 +11896,9 @@ var READ_MODEL_OIDC_SCOPE = "".concat(CALL_MODEL_OIDC_SCOPE_PREFIX, "read");
 var UPDATE_MODEL_OIDC_SCOPE = "".concat(CALL_MODEL_OIDC_SCOPE_PREFIX, "update");
 var DELETE_MODEL_OIDC_SCOPE = "".concat(CALL_MODEL_OIDC_SCOPE_PREFIX, "delete");
 var QUERY_MODEL_OIDC_SCOPE = "".concat(CALL_MODEL_OIDC_SCOPE_PREFIX, "query");
+var INVOKE_MODEL_OIDC_SCOPE = "".concat(CALL_MODEL_OIDC_SCOPE_PREFIX, "invoke");
 /**
- * Canonical CRUD scopes enforced on the `callModel` API.
+ * Canonical CRUD + invoke scopes enforced on the `callModel` API.
  *
  * Each scope corresponds 1:1 to a {@link KnownOnCallFunctionType}; see
  * {@link CALL_MODEL_OIDC_SCOPE_FOR_CALL_TYPE}.
@@ -11903,16 +11907,18 @@ var QUERY_MODEL_OIDC_SCOPE = "".concat(CALL_MODEL_OIDC_SCOPE_PREFIX, "query");
     READ_MODEL_OIDC_SCOPE,
     UPDATE_MODEL_OIDC_SCOPE,
     DELETE_MODEL_OIDC_SCOPE,
-    QUERY_MODEL_OIDC_SCOPE
+    QUERY_MODEL_OIDC_SCOPE,
+    INVOKE_MODEL_OIDC_SCOPE
 ];
 /**
- * Maps each known CRUD call type to the scope an OIDC token must carry to invoke it.
+ * Maps each known call type to the scope an OIDC token must carry to invoke it.
  */ var CALL_MODEL_OIDC_SCOPE_FOR_CALL_TYPE = {
     create: 'model.create',
     read: 'model.read',
     update: 'model.update',
     delete: 'model.delete',
-    query: 'model.query'
+    query: 'model.query',
+    invoke: 'model.invoke'
 };
 /**
  * Resolves the OIDC scope that an OIDC-authenticated caller must hold to invoke
@@ -11957,6 +11963,11 @@ var QUERY_MODEL_OIDC_SCOPE = "".concat(CALL_MODEL_OIDC_SCOPE_PREFIX, "query");
         label: 'Query models',
         value: 'model.query',
         description: 'Query model records via the callModel API'
+    },
+    {
+        label: 'Invoke model operations',
+        value: 'model.invoke',
+        description: 'Invoke RPC-style operations on model records via the callModel API'
     }
 ];
 // MARK: Standard OIDC Scopes
@@ -12036,6 +12047,7 @@ var FIREBASE_SERVER_AUTH_CLAIMS_SETUP_PASSWORD_KEY = 'setupPassword';
 var FIREBASE_SERVER_AUTH_CLAIMS_SETUP_LAST_COM_DATE_KEY = 'setupCommunicationAt';
 var FIREBASE_SERVER_AUTH_CLAIMS_RESET_PASSWORD_KEY = 'resetPassword';
 var FIREBASE_SERVER_AUTH_CLAIMS_RESET_LAST_COM_DATE_KEY = 'resetCommunicationAt';
+var FIREBASE_SERVER_AUTH_CLAIMS_RESET_EXPIRES_AT_KEY = 'resetExpiresAt';
 
 /**
  * Extracts the {@link FirebaseAuthContextInfo} from a {@link FirebaseAuthContext}.
@@ -18820,6 +18832,34 @@ var downloadMultipleStorageFilesParamsType = /* @__PURE__ */ arktype.type({
     'asAdmin?': model.clearable('boolean'),
     'throwOnFirstError?': model.clearable('boolean')
 });
+// MARK: Create Signed Upload URL
+/**
+ * Lower bound for caller-supplied `expiresInMs` on signed-upload-url generation.
+ *
+ * Anything shorter than 30 seconds is unrealistic for a caller to pick up a
+ * URL, perform the PUT, and acknowledge before the URL expires.
+ */ var CREATE_STORAGE_FILE_SIGNED_UPLOAD_URL_MIN_EXPIRES_IN_MS = 30 * 1000;
+/**
+ * Upper bound for caller-supplied `expiresInMs` on signed-upload-url generation.
+ *
+ * 10 minutes is the longest acceptable window for a one-shot upload URL. Any
+ * legitimate caller should be uploading within this window; longer windows
+ * increase the blast radius if the URL leaks.
+ */ var CREATE_STORAGE_FILE_SIGNED_UPLOAD_URL_MAX_EXPIRES_IN_MS = 10 * 60 * 1000;
+/**
+ * Default `expiresInMs` applied when the caller does not supply one.
+ */ var DEFAULT_CREATE_STORAGE_FILE_SIGNED_UPLOAD_URL_EXPIRES_IN_MS = 5 * 60 * 1000;
+/**
+ * Maximum length of a caller-supplied filename. Enforced both at the ArkType
+ * layer and again by the handler's sanitizer.
+ */ var CREATE_STORAGE_FILE_SIGNED_UPLOAD_URL_MAX_FILENAME_LENGTH = 200;
+var createStorageFileSignedUploadUrlParamsType = /* @__PURE__ */ arktype.type({
+    purpose: 'string > 0',
+    contentType: 'string > 0',
+    'filename?': model.clearable("string > 0 & string <= ".concat(CREATE_STORAGE_FILE_SIGNED_UPLOAD_URL_MAX_FILENAME_LENGTH)),
+    fileSizeBytes: 'number > 0',
+    'expiresInMs?': model.clearable("number >= ".concat(CREATE_STORAGE_FILE_SIGNED_UPLOAD_URL_MIN_EXPIRES_IN_MS, " & number <= ").concat(CREATE_STORAGE_FILE_SIGNED_UPLOAD_URL_MAX_EXPIRES_IN_MS))
+});
 var createStorageFileGroupParamsType = /* @__PURE__ */ arktype.type({
     'model?': model.clearable(firestoreModelKeyType),
     'storageFileId?': model.clearable(firestoreModelIdType)
@@ -18846,7 +18886,7 @@ var initializeAllApplicableStorageFileGroupsParamsType = /* @__PURE__ */ arktype
 var STORAGE_FILE_FUNCTION_TYPE_CONFIG_MAP = {};
 var STORAGE_FILE_MODEL_CRUD_FUNCTIONS_CONFIG = {
     storageFile: [
-        'create:_,fromUpload,allFromUpload',
+        'create:_,fromUpload,allFromUpload,signedUploadUrl',
         'update:_,process,syncWithGroups',
         'delete:_',
         'read:download,downloadMultiple'
@@ -21252,6 +21292,9 @@ exports.CONFLICT_ERROR_CODE = CONFLICT_ERROR_CODE;
 exports.COPY_USER_RELATED_DATA_ACCESSOR_FACTORY_FUNCTION = COPY_USER_RELATED_DATA_ACCESSOR_FACTORY_FUNCTION;
 exports.CREATE_MODEL_OIDC_SCOPE = CREATE_MODEL_OIDC_SCOPE;
 exports.CREATE_NOTIFICATION_ID_REQUIRED_ERROR_CODE = CREATE_NOTIFICATION_ID_REQUIRED_ERROR_CODE;
+exports.CREATE_STORAGE_FILE_SIGNED_UPLOAD_URL_MAX_EXPIRES_IN_MS = CREATE_STORAGE_FILE_SIGNED_UPLOAD_URL_MAX_EXPIRES_IN_MS;
+exports.CREATE_STORAGE_FILE_SIGNED_UPLOAD_URL_MAX_FILENAME_LENGTH = CREATE_STORAGE_FILE_SIGNED_UPLOAD_URL_MAX_FILENAME_LENGTH;
+exports.CREATE_STORAGE_FILE_SIGNED_UPLOAD_URL_MIN_EXPIRES_IN_MS = CREATE_STORAGE_FILE_SIGNED_UPLOAD_URL_MIN_EXPIRES_IN_MS;
 exports.ContextGrantedModelRolesReaderInstance = ContextGrantedModelRolesReaderInstance;
 exports.DBX_FIREBASE_SERVER_NO_AUTH_ERROR_CODE = DBX_FIREBASE_SERVER_NO_AUTH_ERROR_CODE;
 exports.DBX_FIREBASE_SERVER_NO_UID_ERROR_CODE = DBX_FIREBASE_SERVER_NO_UID_ERROR_CODE;
@@ -21259,6 +21302,7 @@ exports.DBX_FIREBASE_SERVER_PASSWORD_RESET_INVALID_CODE_ERROR_CODE = DBX_FIREBAS
 exports.DBX_FIREBASE_SERVER_PASSWORD_RESET_NO_CONFIG_ERROR_CODE = DBX_FIREBASE_SERVER_PASSWORD_RESET_NO_CONFIG_ERROR_CODE;
 exports.DBX_FIREBASE_SERVER_PASSWORD_RESET_SEND_ONCE_ERROR_CODE = DBX_FIREBASE_SERVER_PASSWORD_RESET_SEND_ONCE_ERROR_CODE;
 exports.DBX_FIREBASE_SERVER_PASSWORD_RESET_THROTTLE_ERROR_CODE = DBX_FIREBASE_SERVER_PASSWORD_RESET_THROTTLE_ERROR_CODE;
+exports.DEFAULT_CREATE_STORAGE_FILE_SIGNED_UPLOAD_URL_EXPIRES_IN_MS = DEFAULT_CREATE_STORAGE_FILE_SIGNED_UPLOAD_URL_EXPIRES_IN_MS;
 exports.DEFAULT_DATE_CELL_RANGE_VALUE = DEFAULT_DATE_CELL_RANGE_VALUE;
 exports.DEFAULT_FIRESTORE_DATE_CELL_SCHEDULE_VALUE = DEFAULT_FIRESTORE_DATE_CELL_SCHEDULE_VALUE;
 exports.DEFAULT_FIRESTORE_ITEM_PAGE_ITERATOR_ITEMS_PER_PAGE = DEFAULT_FIRESTORE_ITEM_PAGE_ITERATOR_ITEMS_PER_PAGE;
@@ -21300,6 +21344,7 @@ exports.FIREBASE_AUTH_QUOTA_EXCEEDED_ERROR = FIREBASE_AUTH_QUOTA_EXCEEDED_ERROR;
 exports.FIREBASE_AUTH_USER_NOT_FOUND_ERROR = FIREBASE_AUTH_USER_NOT_FOUND_ERROR;
 exports.FIREBASE_AUTH_WRONG_PASSWORD = FIREBASE_AUTH_WRONG_PASSWORD;
 exports.FIREBASE_DEVELOPMENT_FUNCTIONS_MAP_KEY = FIREBASE_DEVELOPMENT_FUNCTIONS_MAP_KEY;
+exports.FIREBASE_SERVER_AUTH_CLAIMS_RESET_EXPIRES_AT_KEY = FIREBASE_SERVER_AUTH_CLAIMS_RESET_EXPIRES_AT_KEY;
 exports.FIREBASE_SERVER_AUTH_CLAIMS_RESET_LAST_COM_DATE_KEY = FIREBASE_SERVER_AUTH_CLAIMS_RESET_LAST_COM_DATE_KEY;
 exports.FIREBASE_SERVER_AUTH_CLAIMS_RESET_PASSWORD_KEY = FIREBASE_SERVER_AUTH_CLAIMS_RESET_PASSWORD_KEY;
 exports.FIREBASE_SERVER_AUTH_CLAIMS_SETUP_LAST_COM_DATE_KEY = FIREBASE_SERVER_AUTH_CLAIMS_SETUP_LAST_COM_DATE_KEY;
@@ -21335,6 +21380,7 @@ exports.FirebaseModelPermissionServiceInstance = FirebaseModelPermissionServiceI
 exports.FirebaseServerError = FirebaseServerError;
 exports.HIGH_UPLOADED_FILE_TYPE_DETERMINATION_LEVEL = HIGH_UPLOADED_FILE_TYPE_DETERMINATION_LEVEL;
 exports.INTERNAL_SERVER_ERROR_CODE = INTERNAL_SERVER_ERROR_CODE;
+exports.INVOKE_MODEL_OIDC_SCOPE = INVOKE_MODEL_OIDC_SCOPE;
 exports.LOW_UPLOADED_FILE_TYPE_DETERMINATION_LEVEL = LOW_UPLOADED_FILE_TYPE_DETERMINATION_LEVEL;
 exports.MAX_FIRESTORE_MAP_ZOOM_LEVEL_VALUE = MAX_FIRESTORE_MAP_ZOOM_LEVEL_VALUE;
 exports.MAX_ON_CALL_QUERY_MODEL_LIMIT = MAX_ON_CALL_QUERY_MODEL_LIMIT;
@@ -21498,6 +21544,7 @@ exports.createStorageFileDocumentPair = createStorageFileDocumentPair;
 exports.createStorageFileDocumentPairFactory = createStorageFileDocumentPairFactory;
 exports.createStorageFileGroupParamsType = createStorageFileGroupParamsType;
 exports.createStorageFileParamsType = createStorageFileParamsType;
+exports.createStorageFileSignedUploadUrlParamsType = createStorageFileSignedUploadUrlParamsType;
 exports.dataFromDocumentSnapshots = dataFromDocumentSnapshots;
 exports.dataFromSnapshotStream = dataFromSnapshotStream;
 exports.defaultPagedItemPageDataConverter = defaultPagedItemPageDataConverter;
@@ -21862,6 +21909,7 @@ exports.onCallCreateModelResult = onCallCreateModelResult;
 exports.onCallCreateModelResultWithDocs = onCallCreateModelResultWithDocs;
 exports.onCallDeleteModelParams = onCallDeleteModelParams;
 exports.onCallDevelopmentParams = onCallDevelopmentParams;
+exports.onCallInvokeModelParams = onCallInvokeModelParams;
 exports.onCallQueryModelParams = onCallQueryModelParams;
 exports.onCallReadModelParams = onCallReadModelParams;
 exports.onCallTypedModelParams = onCallTypedModelParams;