@dereekb/firebase 14.0.1 → 14.1.0

package/eslint/package.json

@@ -1,16 +1,16 @@
 {
   "name": "@dereekb/firebase/eslint",
-  "version": "14.0.1",
+  "version": "14.1.0",
   "type": "module",
   "peerDependencies": {
-    "@dereekb/util": "14.0.1",
+    "@dereekb/util": "14.1.0",
     "@marcbachmann/cel-js": "^8.0.0",
     "@typescript-eslint/parser": "8.69.0",
     "@typescript-eslint/utils": "8.69.0",
     "typescript": "6.0.3"
   },
   "devDependencies": {
-    "@dereekb/firebase": "14.0.1",
+    "@dereekb/firebase": "14.1.0",
     "eslint": "10.9.1",
     "firebase": "^12.18.0"
   },

package/index.esm.js

@@ -26853,6 +26853,20 @@ var UserExternalConnectionDocument = /*#__PURE__*/ function(AbstractFirestoreDoc
     }),
     er: optionalFirestoreEnum()
 };
+/**
+ * Field conversions for a {@link UserExternalConnectionLogin}.
+ */ var userExternalConnectionLoginFields = {
+    ea: firestoreString(),
+    l: optionalFirestoreString(),
+    em: optionalFirestoreString(),
+    emv: optionalFirestoreBoolean(),
+    lat: firestoreDate({
+        saveDefaultAsNow: true
+    }),
+    uat: firestoreDate({
+        saveDefaultAsNow: true
+    })
+};
 var userExternalConnectionConverter = snapshotConverterFunctions({
     fields: {
         uid: firestoreUID(),
@@ -26861,7 +26875,15 @@ var userExternalConnectionConverter = snapshotConverterFunctions({
                 fields: userExternalConnectionEntryFields
             }
         }),
+        // an absent map decodes as {}, so every document written before `li` existed reads back as
+        // "no login links" without a migration
+        li: firestoreObjectMap({
+            objectField: {
+                fields: userExternalConnectionLoginFields
+            }
+        }),
         c: firestoreEnumArray(),
+        ec: optionalFirestoreArray(),
         uat: firestoreDate({
             saveDefaultAsNow: true
         })
@@ -26912,6 +26934,29 @@ var userExternalConnectionConverter = snapshotConverterFunctions({
 /**
  * Provider type for Zoho.
  */ var ZOHO_USER_EXTERNAL_CONNECTION_PROVIDER_TYPE = 'zoho';
+/**
+ * The delimiter joining a provider type to an external account id in a
+ * {@link UserExternalConnectionExternalAccountKey}.
+ *
+ * A colon is safe on both sides: {@link UserExternalConnectionProviderType} must already be a valid
+ * Firestore map key (no dots or slashes), and the key is only ever a stored/queried string VALUE,
+ * never a document id or field path.
+ */ var USER_EXTERNAL_CONNECTION_EXTERNAL_ACCOUNT_KEY_DELIMITER = ':';
+/**
+ * Builds the {@link UserExternalConnectionExternalAccountKey} for a provider/account pair.
+ *
+ * The SOLE producer of the key format: the derivation that stores it and the query that reads it
+ * both go through here, so the two can never disagree about the delimiter.
+ *
+ * @param input - The provider type and external account id to join.
+ * @param input.providerType - The provider the account belongs to.
+ * @param input.externalAccountId - The provider's stable id for the account.
+ * @returns The external account key.
+ *
+ * @__NO_SIDE_EFFECTS__
+ */ function userExternalConnectionExternalAccountKey(input) {
+    return "".concat(input.providerType).concat(USER_EXTERNAL_CONNECTION_EXTERNAL_ACCOUNT_KEY_DELIMITER).concat(input.externalAccountId);
+}
 
 function _define_property(obj, key, value) {
     if (key in obj) {
@@ -26957,6 +27002,53 @@ function _object_spread(target) {
     result.sort();
     return result;
 }
+/**
+ * The SOLE producer of a {@link UserExternalConnection}'s `ec` array.
+ *
+ * Membership is every ENTRY carrying an `ea`, at ANY status, UNION every LOGIN LINK's `ea` —
+ * deliberately unlike {@link userExternalConnectionConnectedProviderTypes}, which is `connected`-only.
+ * `c` answers "whose credentials can I use?", a question about the credentials; `ec` answers "who IS
+ * this account?", a question about identity, which survives an expired token. Filtering it by status
+ * would make a returning user with `error` credentials look like a stranger, and a sign-in would
+ * mint them a second Firebase user.
+ *
+ * The union is what makes the two lifecycles independent. Disconnecting a data connection removes its
+ * entry, and if `ec` came from `e` alone that would take the sign-in binding with it — the next
+ * sign-in would find no match and mint a second Firebase user for the same person.
+ *
+ * @param input - The entry map and the login map to derive from.
+ * @returns The external account keys, deduped and sorted for a stable stored value.
+ */ function userExternalConnectionExternalAccountKeys(input) {
+    var entries = input.entries, logins = input.logins;
+    var keys = new Set();
+    if (entries) {
+        Object.keys(entries).forEach(function(providerType) {
+            var _entries_providerType;
+            var externalAccountId = (_entries_providerType = entries[providerType]) === null || _entries_providerType === void 0 ? void 0 : _entries_providerType.ea;
+            if (externalAccountId != null) {
+                keys.add(userExternalConnectionExternalAccountKey({
+                    providerType: providerType,
+                    externalAccountId: externalAccountId
+                }));
+            }
+        });
+    }
+    if (logins) {
+        Object.keys(logins).forEach(function(providerType) {
+            var _logins_providerType;
+            var externalAccountId = (_logins_providerType = logins[providerType]) === null || _logins_providerType === void 0 ? void 0 : _logins_providerType.ea;
+            if (externalAccountId != null) {
+                keys.add(userExternalConnectionExternalAccountKey({
+                    providerType: providerType,
+                    externalAccountId: externalAccountId
+                }));
+            }
+        });
+    }
+    var result = Array.from(keys);
+    result.sort();
+    return result;
+}
 /**
  * Derives the {@link UserExternalConnectionEntry} for an operation's outcome.
  *
@@ -27009,6 +27101,32 @@ function _object_spread(target) {
     }
     return result;
 }
+/**
+ * Assembles the COMPLETE document value from both maps.
+ *
+ * Extracted so the two appliers cannot diverge on how the derived arrays are produced: `ec` is the
+ * union of `e` and `li`, and either applier computing it from only the map it happened to change
+ * would drop the other map's keys out of the sign-in lookup.
+ *
+ * Exported for the one caller that legitimately replaces a whole map rather than one provider's key —
+ * the login backfill. Ordinary writes go through the two appliers.
+ *
+ * @param input - The uid, both maps, and the instant to stamp.
+ * @returns The next UserExternalConnection value to write.
+ */ function userExternalConnectionValue(input) {
+    var uid = input.uid, entries = input.entries, logins = input.logins, now = input.now;
+    return {
+        uid: uid,
+        e: entries,
+        li: logins,
+        c: userExternalConnectionConnectedProviderTypes(entries),
+        ec: userExternalConnectionExternalAccountKeys({
+            entries: entries,
+            logins: logins
+        }),
+        uat: now
+    };
+}
 /**
  * Applies a single provider's entry and returns the COMPLETE next document.
  *
@@ -27016,6 +27134,9 @@ function _object_spread(target) {
  * exported way to change `e`, and it always recomputes `c` from the resulting map. There is no
  * exported path that touches one without the other.
  *
+ * The login map is carried through UNCHANGED. A data connection's lifecycle says nothing about
+ * whether the provider is still a way to sign in, so a disconnect must not remove the link.
+ *
  * @param input - The current document plus the provider entry to apply.
  * @returns The next UserExternalConnection value to write.
  */ function applyUserExternalConnectionEntry(input) {
@@ -27026,10 +27147,56 @@ function _object_spread(target) {
     } else {
         delete entries[providerType];
     }
-    return {
+    return userExternalConnectionValue({
         uid: uid,
-        e: entries,
-        c: userExternalConnectionConnectedProviderTypes(entries),
+        entries: entries,
+        logins: _object_spread({}, current === null || current === void 0 ? void 0 : current.li),
+        now: now
+    });
+}
+/**
+ * Applies a single provider's LOGIN LINK and returns the COMPLETE next document.
+ *
+ * The mirror of {@link applyUserExternalConnectionEntry}, and the only exported way to change `li`.
+ * The entry map is carried through unchanged: linking a provider as a login method grants nothing
+ * about its data connection, because the identity scopes and the data scopes are not guaranteed to
+ * be the same set.
+ *
+ * @param input - The current document plus the login link to apply.
+ * @returns The next UserExternalConnection value to write.
+ */ function applyUserExternalConnectionLogin(input) {
+    var current = input.current, uid = input.uid, providerType = input.providerType, login = input.login, now = input.now;
+    var logins = _object_spread({}, current === null || current === void 0 ? void 0 : current.li);
+    if (login) {
+        logins[providerType] = login;
+    } else {
+        delete logins[providerType];
+    }
+    return userExternalConnectionValue({
+        uid: uid,
+        entries: _object_spread({}, current === null || current === void 0 ? void 0 : current.e),
+        logins: logins,
+        now: now
+    });
+}
+/**
+ * Derives the {@link UserExternalConnectionLogin} for an identity a link round trip resolved.
+ *
+ * `lat` survives a relink, the mirror of how {@link userExternalConnectionEntryForOutcome} preserves
+ * `coa`: relinking the same provider is a re-consent, not a new relationship, so the date the account
+ * first became a login method stays what it was.
+ *
+ * @param input - The resolved identity, the stored link, and the instant to stamp.
+ * @returns The next login link.
+ */ function userExternalConnectionLoginForIdentity(input) {
+    var _identity_label, _identity_email, _identity_emailVerified, _ref;
+    var identity = input.identity, previous = input.previous, now = input.now;
+    return {
+        ea: identity.externalAccountId,
+        l: (_identity_label = identity.label) !== null && _identity_label !== void 0 ? _identity_label : previous === null || previous === void 0 ? void 0 : previous.l,
+        em: (_identity_email = identity.email) !== null && _identity_email !== void 0 ? _identity_email : previous === null || previous === void 0 ? void 0 : previous.em,
+        emv: (_identity_emailVerified = identity.emailVerified) !== null && _identity_emailVerified !== void 0 ? _identity_emailVerified : previous === null || previous === void 0 ? void 0 : previous.emv,
+        lat: (_ref = previous === null || previous === void 0 ? void 0 : previous.lat) !== null && _ref !== void 0 ? _ref : now,
         uat: now
     };
 }
@@ -27047,7 +27214,9 @@ function _object_spread(target) {
     return {
         uid: uid,
         e: {},
+        li: {},
         c: [],
+        ec: [],
         uat: now
     };
 }
@@ -27089,6 +27258,26 @@ function _object_spread(target) {
  */ function userExternalConnectionIsConnectedToProvider(connection, providerType) {
     return userExternalConnectionEntryIsConnected(userExternalConnectionEntryForProvider(connection, providerType));
 }
+/**
+ * Returns the login link for the given provider, if any.
+ *
+ * @param connection - The loaded connection document.
+ * @param providerType - The provider to read.
+ * @returns The provider's login link, or null when the provider is not a login method for this user.
+ */ function userExternalConnectionLoginForProvider(connection, providerType) {
+    var _connection_li;
+    return connection === null || connection === void 0 ? void 0 : (_connection_li = connection.li) === null || _connection_li === void 0 ? void 0 : _connection_li[providerType];
+}
+/**
+ * Returns every provider type that is a login method for this user.
+ *
+ * @param connection - The loaded connection document.
+ * @returns The linked provider types, sorted for a stable render order.
+ */ function userExternalConnectionLinkedLoginProviderTypes(connection) {
+    var result = (connection === null || connection === void 0 ? void 0 : connection.li) ? Object.keys(connection.li) : [];
+    result.sort();
+    return result;
+}
 
 /**
  * Query for the UserExternalConnection documents that are currently connected to the given provider.
@@ -27110,6 +27299,30 @@ function _object_spread(target) {
         where('c', 'array-contains', providerType)
     ];
 }
+/**
+ * Query for the UserExternalConnection document holding the given third-party account.
+ *
+ * The sign-in counterpart of {@link userExternalConnectionsWithConnectedProviderQuery}: that one
+ * asks "which users are connected to this provider?", this one asks "which user IS this account?".
+ * Both exist because a per-user document makes `e.<provider>.ea` unqueryable.
+ *
+ * Matches at ANY entry status — see the `ec` field docs. Expect at most one result when the
+ * provider's policy declares the connection unique, but the caller must still handle more than one:
+ * uniqueness is enforced at write time and a provider may only have started enforcing it recently.
+ *
+ * @param input - The provider type and external account id to search for.
+ * @param input.providerType - The provider the account belongs to.
+ * @param input.externalAccountId - The provider's stable id for the account.
+ * @returns Firestore query constraints matching the user holding that external account.
+ *
+ * @dbxModelFirebaseIndex
+ * @dbxModelFirebaseIndexModel UserExternalConnection
+ * @dbxModelFirebaseIndexScope COLLECTION
+ */ function userExternalConnectionsWithExternalAccountQuery(input) {
+    return [
+        where('ec', 'array-contains', userExternalConnectionExternalAccountKey(input))
+    ];
+}
 
 function _class_call_check(instance, Constructor) {
     if (!(instance instanceof Constructor)) throw new TypeError("Cannot call a class as a function");
@@ -27119,6 +27332,10 @@ var disconnectUserExternalConnectionParamsType = /* @__PURE__ */ inferredTargetM
     providerType: 'string'
 }));
 var readUserExternalConnectionAuthorizeStateParamsType = /* @__PURE__ */ inferredTargetModelParamsType.merge(type({
+    providerType: 'string',
+    'mode?': "'connect' | 'link'"
+}));
+var unlinkUserExternalConnectionLoginParamsType = /* @__PURE__ */ inferredTargetModelParamsType.merge(type({
     providerType: 'string'
 }));
 var USER_EXTERNAL_CONNECTION_FUNCTION_TYPE_CONFIG_MAP = {};
@@ -27126,7 +27343,7 @@ var USER_EXTERNAL_CONNECTION_MODEL_CRUD_FUNCTIONS_CONFIG = {
     userExternalConnection: [
         'create',
         'read:authorizeState',
-        'update:disconnect'
+        'update:disconnect,unlink'
     ]
 };
 /**
@@ -27140,4 +27357,50 @@ var USER_EXTERNAL_CONNECTION_MODEL_CRUD_FUNCTIONS_CONFIG = {
  * Used to generate the UserExternalConnectionFunctions map for a Functions instance.
  */ var userExternalConnectionFunctionMap = callModelFirebaseFunctionMapFactory(USER_EXTERNAL_CONNECTION_FUNCTION_TYPE_CONFIG_MAP, USER_EXTERNAL_CONNECTION_MODEL_CRUD_FUNCTIONS_CONFIG);
 
-export { ALL_FORM_SPACE_NOTIFICATION_TASK_TYPES, ALL_NOTIFICATION_DELIVERY_METHODS, ALL_OIDC_TOKEN_ENDPOINT_AUTH_METHODS, ALL_OIDC_TOKEN_ENDPOINT_AUTH_METHOD_OPTIONS, ALL_STORAGE_FILE_NOTIFICATION_TASK_TYPES, ALL_USER_UPLOADS_FOLDER_NAME, ALL_USER_UPLOADS_FOLDER_PATH, ALREADY_EXISTS_ERROR_CODE, AbstractFirestoreDocument, AbstractFirestoreDocumentDataAccessorWrapper, AbstractFirestoreDocumentWithParent, AppCalendarTypeConfigService, AppFormSpaceTypeConfigService, AppNotificationTemplateTypeInfoRecordService, BAD_DOCUMENT_QUERY_CURSOR_ERROR_CODE, BAD_REQUEST_ERROR_CODE, BASE_MODEL_STORAGE_FILE_PATH, CALCOM_USER_EXTERNAL_CONNECTION_PROVIDER_TYPE, CALENDAR_EXTENSION_PROPERTY_PREFIX, CALENDAR_ICS_DEFAULT_TIMEZONE, CALENDAR_ICS_DOMAIN_NOT_CONFIGURED_ERROR_CODE, CALENDAR_ICS_FILE_EXTENSION, CALENDAR_ICS_ROTATE_THROTTLED_ERROR_CODE, CALENDAR_ICS_STORAGE_FILE_PURPOSE, CALENDAR_ICS_STORAGE_FILE_PURPOSE_GENERATE_ICS_SUBTASK, CALENDAR_ICS_STORAGE_FILE_UNAVAILABLE_ERROR_CODE, CALENDAR_OCCURRENCE_KEY_SEPARATOR, CALENDAR_ROOT_FOLDER_PATH, CALL_MODEL_APP_FUNCTION_KEY, CALL_MODEL_MISSING_OIDC_SCOPE_ERROR_CODE, CALL_MODEL_OIDC_SCOPES, CALL_MODEL_OIDC_SCOPE_DETAILS, CALL_MODEL_OIDC_SCOPE_FOR_CALL_TYPE, CALL_MODEL_OIDC_SCOPE_PREFIX, CLIENT_SECRET_BASIC_TOKEN_ENDPOINT_AUTH_METHOD, CLIENT_SECRET_JWT_TOKEN_ENDPOINT_AUTH_METHOD, CLIENT_SECRET_POST_TOKEN_ENDPOINT_AUTH_METHOD, CONFLICT_ERROR_CODE, COPY_USER_RELATED_DATA_ACCESSOR_FACTORY_FUNCTION, CREATE_MODEL_OIDC_SCOPE, CREATE_NOTIFICATION_ID_REQUIRED_ERROR_CODE, CREATE_STORAGE_FILE_SIGNED_UPLOAD_URL_MAX_EXPIRES_IN_MS, CREATE_STORAGE_FILE_SIGNED_UPLOAD_URL_MAX_FILENAME_LENGTH, CREATE_STORAGE_FILE_SIGNED_UPLOAD_URL_MIN_EXPIRES_IN_MS, CalendarDocument, CalendarEventStatus, CalendarFirestoreCollections, CalendarFunctions, CalendarSyncState, ContextGrantedModelRolesReaderInstance, DBX_FIREBASE_SERVER_NO_AUTH_ERROR_CODE, DBX_FIREBASE_SERVER_NO_UID_ERROR_CODE, DBX_FIREBASE_SERVER_PASSWORD_RESET_INVALID_CODE_ERROR_CODE, DBX_FIREBASE_SERVER_PASSWORD_RESET_NO_CONFIG_ERROR_CODE, DBX_FIREBASE_SERVER_PASSWORD_RESET_SEND_ONCE_ERROR_CODE, DBX_FIREBASE_SERVER_PASSWORD_RESET_THROTTLE_ERROR_CODE, DEFAULT_CALENDAR_ICS_EXPANSION_FUTURE_DAYS, DEFAULT_CALENDAR_ICS_EXPANSION_PAST_DAYS, DEFAULT_CALENDAR_ICS_RECURRENCE_MODE, DEFAULT_CALENDAR_ICS_ROTATE_THROTTLE_HOURS, DEFAULT_CALENDAR_INVITE_ATTENDEE_PARTICIPATION_STATUS, DEFAULT_CALENDAR_INVITE_ATTENDEE_ROLE, DEFAULT_CALENDAR_INVITE_METHOD, DEFAULT_CALENDAR_MAX_EVENTS, DEFAULT_CALENDAR_RESYNC_INTERVAL, DEFAULT_CALENDAR_RETAIN_PAST_EVENT_DAYS, DEFAULT_CALENDAR_TYPE_CONFIG, DEFAULT_CREATE_STORAGE_FILE_SIGNED_UPLOAD_URL_EXPIRES_IN_MS, DEFAULT_DATE_CELL_RANGE_VALUE, DEFAULT_FIRESTORE_DATE_CELL_SCHEDULE_VALUE, DEFAULT_FIRESTORE_ITEM_PAGE_ITERATOR_ITEMS_PER_PAGE, DEFAULT_FIRESTORE_STRING_FIELD_VALUE, DEFAULT_FIRESTORE_TIMEZONE_STRING_VALUE, DEFAULT_FIRESTORE_UNITED_STATES_ADDRESS_VALUE, DEFAULT_FIRESTORE_WEBSITE_FILE_LINK_VALUE, DEFAULT_FORM_SPACE_ALLOWED_MIME_TYPES, DEFAULT_FORM_SPACE_EXPIRES_IN, DEFAULT_FORM_SPACE_FILE_ACCESS, DEFAULT_FORM_SPACE_MAX_FILE_SIZE_BYTES, DEFAULT_FORM_SPACE_MAX_UPLOADS, DEFAULT_FORM_SPACE_SLOT_MAX_FILES, DEFAULT_FORM_SPACE_TYPE_CONFIG, DEFAULT_IN_MEMORY_CACHE_TTL, DEFAULT_ITERATE_FIRESTORE_DOCUMENT_SNAPSHOT_BATCHES_BATCH_SIZE, DEFAULT_MODEL_FUNCTION_FIREBASE_CRUD_FUNCTION_SPECIFIER, DEFAULT_NOTIFICATION_MESSAGE_CALENDAR_ATTACHMENT_FILENAME, DEFAULT_NOTIFICATION_TASK_NOTIFICATION_MODEL_KEY, DEFAULT_NOTIFICATION_TASK_SUBTASK_CLEANUP_RETRY_ATTEMPTS, DEFAULT_NOTIFICATION_TASK_SUBTASK_CLEANUP_RETRY_DELAY, DEFAULT_NOTIFICATION_TEMPLATE_TYPE, DEFAULT_NOTIFICATION_USER_HEALTH_CHECK_PROBE_THROTTLE_MINUTES, DEFAULT_NOTIFICATION_USER_HEALTH_CHECK_THROTTLE_MINUTES, DEFAULT_NOTIFICATION_USER_HEALTH_CHECK_VERIFY_THROTTLE_SECONDS, DEFAULT_ON_CALL_QUERY_MODEL_LIMIT, DEFAULT_PAGED_ITEM_INDEX_DOCUMENT_ID, DEFAULT_PAGED_ITEM_MAX_ITEMS_PER_PAGE, DEFAULT_QUERY_CHANGE_WATCHER_DELAY, DEFAULT_SINGLE_ITEM_FIRESTORE_COLLECTION_DOCUMENT_IDENTIFIER, DEFAULT_UPLOADED_FILE_TYPE_DETERMINATION_LEVEL, DEFAULT_WEBSITE_LINK, DELETE_MODEL_OIDC_SCOPE, DISCORD_USER_EXTERNAL_CONNECTION_PROVIDER_TYPE, DOWNLOAD_MULTIPLE_STORAGE_FILES_MAX_FILES, DOWNLOAD_MULTIPLE_STORAGE_FILES_MIN_FILES, EMAIL_OIDC_SCOPE, EMAIL_OIDC_SCOPE_DETAILS, EMPTY_STORAGE_FILE_PURPOSE_SUBGROUP, EXACT_UPLOADED_FILE_TYPE_DETERMINATION_LEVEL, FIREBASE_AUTH_CREDENTIAL_ALREADY_IN_USE_ERROR, FIREBASE_AUTH_EMAIL_ALREADY_EXISTS_ERROR, FIREBASE_AUTH_EMAIL_ALREADY_IN_USE_ERROR, FIREBASE_AUTH_INVALID_PHONE_NUMBER_ERROR, FIREBASE_AUTH_NETWORK_REQUEST_ERROR, FIREBASE_AUTH_NETWORK_REQUEST_FAILED, FIREBASE_AUTH_OOB_CODE_DATA_PAIR_DELIMITER, FIREBASE_AUTH_PASSWORD_MAX_LENGTH, FIREBASE_AUTH_PASSWORD_MIN_LENGTH, FIREBASE_AUTH_PHONE_NUMBER_ALREADY_EXISTS_ERROR, FIREBASE_AUTH_PROVIDER_ALREADY_LINKED_ERROR, FIREBASE_AUTH_QUOTA_EXCEEDED_ERROR, FIREBASE_AUTH_USER_NOT_FOUND_ERROR, FIREBASE_AUTH_WRONG_PASSWORD, FIREBASE_DEVELOPMENT_FUNCTIONS_MAP_KEY, FIREBASE_SERVER_AUTH_CLAIMS_RESET_EXPIRES_AT_KEY, FIREBASE_SERVER_AUTH_CLAIMS_RESET_LAST_COM_DATE_KEY, FIREBASE_SERVER_AUTH_CLAIMS_RESET_PASSWORD_KEY, FIREBASE_SERVER_AUTH_CLAIMS_SETUP_LAST_COM_DATE_KEY, FIREBASE_SERVER_AUTH_CLAIMS_SETUP_PASSWORD_KEY, FIRESTORE_CLIENT_QUERY_CONSTRAINT_HANDLER_MAPPING, FIRESTORE_COLLECTION_NAME_SEPARATOR, FIRESTORE_DUMMY_MODEL_KEY, FIRESTORE_EMPTY_VALUE, FIRESTORE_END_AT_QUERY_CONSTRAINT_TYPE, FIRESTORE_END_AT_VALUE_QUERY_CONSTRAINT_TYPE, FIRESTORE_END_BEFORE_QUERY_CONSTRAINT_TYPE, FIRESTORE_ITEM_PAGE_ITERATOR, FIRESTORE_ITEM_PAGE_ITERATOR_DELEGATE, FIRESTORE_LIMIT_QUERY_CONSTRAINT_TYPE, FIRESTORE_LIMIT_TO_LAST_QUERY_CONSTRAINT_TYPE, FIRESTORE_MAX_WHERE_IN_FILTER_ARGS_COUNT, FIRESTORE_MODEL_ID_REGEX, FIRESTORE_MODEL_KEY_REGEX, FIRESTORE_MODEL_KEY_REGEX_STRICT, FIRESTORE_OFFSET_QUERY_CONSTRAINT_TYPE, FIRESTORE_ORDER_BY_DOCUMENT_ID_QUERY_CONSTRAINT_TYPE, FIRESTORE_ORDER_BY_QUERY_CONSTRAINT_TYPE, FIRESTORE_PASSTHROUGH_FIELD, FIRESTORE_PERMISSION_DENIED_ERROR_CODE, FIRESTORE_SESSION_OIDC_SCOPE, FIRESTORE_SESSION_OIDC_SCOPE_DETAILS, FIRESTORE_START_AFTER_QUERY_CONSTRAINT_TYPE, FIRESTORE_START_AT_QUERY_CONSTRAINT_TYPE, FIRESTORE_START_AT_VALUE_QUERY_CONSTRAINT_TYPE, FIRESTORE_WHERE_DOCUMENT_ID_QUERY_CONSTRAINT_TYPE, FIRESTORE_WHERE_QUERY_CONSTRAINT_TYPE, FORBIDDEN_ERROR_CODE, FORM_SPACE_ALREADY_EXISTS_ERROR_CODE, FORM_SPACE_FILES_ROOT_FOLDER_PATH, FORM_SPACE_FILE_ACCESS_DENIED_ERROR_CODE, FORM_SPACE_FILE_NOT_FOUND_ERROR_CODE, FORM_SPACE_FUNCTION_TYPE_CONFIG_MAP, FORM_SPACE_HAS_INVALID_FILES_ERROR_CODE, FORM_SPACE_MODEL_CRUD_FUNCTIONS_CONFIG, FORM_SPACE_NOT_EDITABLE_ERROR_CODE, FORM_SPACE_NOT_FOUND_ERROR_CODE, FORM_SPACE_NOT_REOPENABLE_ERROR_CODE, FORM_SPACE_NOT_SUBMITTED_ERROR_CODE, FORM_SPACE_PROCESSING_IN_PROGRESS_ERROR_CODE, FORM_SPACE_PURPOSE, FORM_SPACE_PURPOSE_REGISTER_SUBTASK, FORM_SPACE_PURPOSE_VALIDATE_SUBTASK, FORM_SPACE_REQUIRED_SLOT_MISSING_ERROR_CODE, FORM_SPACE_SUBMISSION_NOTIFICATION_TASK_TYPE, FORM_SPACE_TYPE_MISMATCH_ERROR_CODE, FORM_SPACE_TYPE_NOT_REGISTERED_ERROR_CODE, FORM_SPACE_UPLOADED_FILE_TYPE_IDENTIFIER, FORM_SPACE_UPLOADS_FOLDER_NAME, FORM_SPACE_UPLOAD_NOT_ALLOWED_ERROR_CODE, FORM_SPACE_UPLOAD_POLICY, FORM_SPACE_UPLOAD_USER_MISMATCH_ERROR_CODE, FORM_SPACE_VALIDATION_PENDING_ERROR_CODE, FirebaseDevelopmentFunctions, FirebaseModelPermissionServiceInstance, FirebaseServerError, FirestoreAccessorStreamMode, FirestoreDocumentContextType, FormSpaceDocument, FormSpaceFileValidationState, FormSpaceFirestoreCollections, FormSpaceFunctions, FormSpaceProcessingState, FormSpaceState, GOOGLE_CLOUD_STORAGE_PUBLIC_URL_API_ENDPOINT, HIGH_UPLOADED_FILE_TYPE_DETERMINATION_LEVEL, INTERNAL_SERVER_ERROR_CODE, INVOKE_MODEL_OIDC_SCOPE, KnownNotificationHealthCheckIssueCode, LOW_UPLOADED_FILE_TYPE_DETERMINATION_LEVEL, MAX_FIRESTORE_MAP_ZOOM_LEVEL_VALUE, MAX_ON_CALL_QUERY_MODEL_LIMIT, MIN_FIRESTORE_MAP_ZOOM_LEVEL_VALUE, MODEL_FUNCTION_FIREBASE_CRUD_FUNCTION_SPECIFIER_SPLITTER, MODEL_NOT_AVAILABLE_ERROR_CODE, MODEL_STORAGE_FILE_SLASH_PATH_FACTORY, MailgunNotificationHealthCheckIssueCode, ModifyBeforeSetFirestoreDocumentDataAccessorWrapper, NOTIFICATION_BOX_DOES_NOT_EXIST_ERROR_CODE, NOTIFICATION_BOX_EXCLUSION_TARGET_INVALID_ERROR_CODE, NOTIFICATION_BOX_EXISTS_FOR_MODEL_ERROR_CODE, NOTIFICATION_BOX_MODEL_CRUD_FUNCTIONS_CONFIG, NOTIFICATION_BOX_RECIPIENT_DOES_NOT_EXIST_ERROR_CODE, NOTIFICATION_FUNCTION_TYPE_CONFIG_MAP, NOTIFICATION_HEALTH_CHECK_STATUS_SEVERITY, NOTIFICATION_LOGGED_EVENT_DAY_ITEM_CONVERTER, NOTIFICATION_MESSAGE_MAX_LENGTH, NOTIFICATION_MESSAGE_MIN_LENGTH, NOTIFICATION_MODEL_ALREADY_INITIALIZED_ERROR_CODE, NOTIFICATION_RECIPIENT_NAME_MAX_LENGTH, NOTIFICATION_RECIPIENT_NAME_MIN_LENGTH, NOTIFICATION_SUBJECT_MAX_LENGTH, NOTIFICATION_SUBJECT_MIN_LENGTH, NOTIFICATION_SUMMARY_EMBEDDED_NOTIFICATION_ITEM_MESSAGE_MAX_LENGTH, NOTIFICATION_SUMMARY_EMBEDDED_NOTIFICATION_ITEM_SUBJECT_MAX_LENGTH, NOTIFICATION_SUMMARY_ITEM_LIMIT, NOTIFICATION_TASK_SUBTASK_CHECKPOINT_CLEANUP, NOTIFICATION_TASK_SUBTASK_CHECKPOINT_PROCESSING, NOTIFICATION_USER_BLOCKED_FROM_BEING_ADD_TO_RECIPIENTS_ERROR_CODE, NOTIFICATION_USER_HEALTH_CHECK_PROBE_THROTTLED_ERROR_CODE, NOTIFICATION_USER_HEALTH_CHECK_THROTTLED_ERROR_CODE, NOTIFICATION_USER_HEALTH_CHECK_VERIFY_THROTTLED_ERROR_CODE, NOTIFICATION_USER_INVALID_UID_FOR_CREATE_ERROR_CODE, NOTIFICATION_USER_LOCKED_CONFIG_FROM_BEING_UPDATED_ERROR_CODE, NOTIFICATION_WEEK_NOTIFICATION_ITEM_LIMIT, NOT_FOUND_ERROR_CODE, NotificationBoxDocument, NotificationBoxRecipientFlag, NotificationBoxRecipientTemplateConfigBoolean, NotificationDeliveryMethod, NotificationDocument, NotificationFirestoreCollections, NotificationFunctions, NotificationHealthCheckStatus, NotificationLoggedEventDayDocument, NotificationLoggedEventDayPageDocument, NotificationMessageFlag, NotificationRecipientSendFlag, NotificationSendState, NotificationSendType, NotificationSummaryDocument, NotificationUserDocument, NotificationWeekDocument, OFFLINE_ACCESS_OIDC_SCOPE, OFFLINE_ACCESS_OIDC_SCOPE_DETAILS, OIDC_ENTRY_CLIENT_TYPE, OIDC_FUNCTION_TYPE_CONFIG_MAP, OIDC_MODEL_CRUD_FUNCTIONS_CONFIG, OIDC_PROVIDER_PROFILE_DEFAULT_DESCRIPTION_SUFFIX, OPENID_OIDC_SCOPE, OPENID_OIDC_SCOPE_DETAILS, OidcEntryDocument, OidcModelFirestoreCollections, OidcModelFunctions, PERMISSION_DENIED_ERROR_CODE, PRIVATE_KEY_JWT_TOKEN_ENDPOINT_AUTH_METHOD, PROFILE_OIDC_SCOPE, PROFILE_OIDC_SCOPE_DETAILS, PUBLIC_PKCE_TOKEN_ENDPOINT_AUTH_METHOD, QUERY_MODEL_OIDC_SCOPE, READ_MODEL_OIDC_SCOPE, RUN_DEV_FUNCTION_APP_FUNCTION_KEY, SCHEDULED_FUNCTION_DEV_FUNCTION_SPECIFIER, SCHEDULER_SYSTEM_STATE_TYPE, SERVICE_TOKEN_OIDC_SCOPE, SERVICE_TOKEN_OIDC_SCOPE_DETAILS, STANDARD_OIDC_SCOPES, STANDARD_OIDC_SCOPE_DETAILS, STORAGEFILE_RELATED_FILE_METADATA_KEY, STORAGE_FILE_ALREADY_PROCESSED_ERROR_CODE, STORAGE_FILE_CANNOT_BE_DELETED_YET_ERROR_CODE, STORAGE_FILE_FUNCTION_TYPE_CONFIG_MAP, STORAGE_FILE_GROUP_CREATE_INPUT_ERROR_CODE, STORAGE_FILE_GROUP_QUEUED_FOR_INITIALIZATION_ERROR_CODE, STORAGE_FILE_GROUP_ROOT_FOLDER_PATH, STORAGE_FILE_GROUP_ZIP_FILE_PATH, STORAGE_FILE_GROUP_ZIP_INFO_JSON_FILE_NAME, STORAGE_FILE_GROUP_ZIP_STORAGE_FILE_PURPOSE, STORAGE_FILE_GROUP_ZIP_STORAGE_FILE_PURPOSE_CREATE_ZIP_SUBTASK, STORAGE_FILE_MODEL_ALREADY_INITIALIZED_ERROR_CODE, STORAGE_FILE_MODEL_CRUD_FUNCTIONS_CONFIG, STORAGE_FILE_NOT_FLAGGED_FOR_DELETION_ERROR_CODE, STORAGE_FILE_NOT_FLAGGED_FOR_GROUPS_SYNC_ERROR_CODE, STORAGE_FILE_PROCESSING_NOTIFICATION_TASK_TYPE, STORAGE_FILE_PROCESSING_NOT_ALLOWED_FOR_INVALID_STATE_ERROR_CODE, STORAGE_FILE_PROCESSING_NOT_AVAILABLE_FOR_TYPE_ERROR_CODE, STORAGE_FILE_PROCESSING_NOT_QUEUED_FOR_PROCESSING_ERROR_CODE, STORAGE_FILE_PROCESSING_STUCK_THROTTLE_CHECK_MS, STORAGE_FILE_UPLOAD_USER_ROLE, STORAGE_FILE_UPLOAD_USER_SIMPLE_CLAIMS_CONFIGURATION, ScheduledFunctionDevelopmentFirebaseFunctionListEntry, ScheduledFunctionDevelopmentFunctionTypeEnum, StorageFileCreationType, StorageFileDocument, StorageFileFirestoreCollections, StorageFileFunctions, StorageFileGroupDocument, StorageFileProcessingState, StorageFileState, StorageFileUploadStreamUnsupportedError, SystemStateDocument, SystemStateFirestoreCollections, UNAUTHENTICATED_ERROR_CODE, UNAVAILABLE_ERROR_CODE, UNAVAILABLE_OR_DEACTIVATED_FUNCTION_ERROR_CODE, UNKNOWN_CALENDAR_TYPE, UNKNOWN_FORM_SPACE_TYPE, UNKNOWN_MODEL_TYPE_ERROR_CODE, UNTRACKABLE_NOTIFICATION_HEALTH_CHECK_PROBE_ID, UPDATE_MODEL_OIDC_SCOPE, UPLOADED_FILE_DOES_NOT_EXIST_ERROR_CODE, UPLOADED_FILE_INITIALIZATION_DISCARDED_ERROR_CODE, UPLOADED_FILE_INITIALIZATION_FAILED_ERROR_CODE, UPLOADED_FILE_NOT_ALLOWED_TO_BE_INITIALIZED_ERROR_CODE, UPLOADS_FOLDER_PATH, USER_EXTERNAL_CONNECTION_ENTRY_STATUSES, USER_EXTERNAL_CONNECTION_FUNCTION_TYPE_CONFIG_MAP, USER_EXTERNAL_CONNECTION_MODEL_CRUD_FUNCTIONS_CONFIG, UserExternalConnectionDocument, UserExternalConnectionFunctions, ZOHO_USER_EXTERNAL_CONNECTION_PROVIDER_TYPE, ZOOM_USER_EXTERNAL_CONNECTION_PROVIDER_TYPE, _createNotificationDocumentFromPair, abstractSubscribeOrUnsubscribeToNotificationBoxParamsType, abstractSubscribeToNotificationBoxParamsType, addConstraintToBuilder, addOrReplaceLimitInConstraints, adminOnlyScopesForOidcProviderProfiles, allChildDocumentsUnderParent, allChildDocumentsUnderParentPath, allChildDocumentsUnderRelativePath, allNotificationHealthCheckIssues, allowDocumentSnapshotWithPathOnceFilter, allowedNotificationRecipients, appCalendarTypeConfigService, appFormSpaceTypeConfigService, appNotificationTemplateTypeInfoRecordService, applyExclusionsToNotificationUserNotificationBoxRecipientConfigs, applyUserExternalConnectionEntry, arrayUpdateWithAccessorFunction, asTopLevelFieldPath, asTopLevelFieldPaths, assertFirestoreUpdateHasData, assertFormSpaceUploadAllowed, assertStorageUploadOptionsStringFormat, assignDateCellRangeFunction, assignDateCellScheduleFunction, assignUnitedStatesAddressFunction, assignWebsiteFileLinkFunction, assignWebsiteLinkFunction, assignmentOnlyScopesForOidcProviderProfiles, buildFirebaseCollectionTypeModelTypeMap, calculateNsForNotificationUserNotificationBoxRecipientConfigs, calculateStorageFileGroupEmbeddedFileUpdate, calculateStorageFileGroupRegeneration, calendarCollectionReference, calendarConverter, calendarEventItem, calendarEventItemCalendarDate, calendarEventItemEndDate, calendarEventItemExceptionDateSet, calendarEventItemExceptionDateValue, calendarEventItemFields, calendarEventItemForId, calendarEventItemTimezone, calendarEventItemToICalendarEvent, calendarEventItemToInviteICalendar, calendarEventItemToInviteIcsString, calendarEventItemsFilterUniqueFunction, calendarEventItemsForModelKey, calendarEventItemsSortFunction, calendarEventOccurrenceToICalendarEvent, calendarExtensionDataToICalendarExtraProperties, calendarFirestoreCollection, calendarFunctionMap, calendarFunctionTypeConfigMap, calendarIcsFileStoragePath, calendarIdForModel, calendarIdentity, calendarModelCrudFunctionsConfig, calendarNextIcsRotateAt, calendarRecurringEventItem, calendarRecurringEventItemForScheduleRange, calendarRecurringEventItemModelRecurrenceInfo, calendarRecurringEventItemRecurrenceFields, calendarRecurringEventItemToICalendarEvent, calendarRecurringEventOccurrenceKey, calendarSyncState, calendarTemplate, calendarToICalendar, calendarToIcsString, calendarTypeConfigIcsConfig, calendarTypeConfigIcsExpansionRange, calendarTypeConfigRecord, calendarsDueForResyncQuery, calendarsFlaggedForSyncQuery, calendarsForTypeQuery, callModelFirebaseFunctionMapFactory, callModelOidcScopeForCallType, canQueueStorageFileForProcessing, childFirestoreModelKey, childFirestoreModelKeyPath, childFirestoreModelKeys, cleanupOldNotificationLoggedEventDaysParamsType, cleanupSentNotificationsParamsType, clientFirebaseFirestoreContextFactory, clientFirebaseStorageContextFactory, combineUploadFileTypeDeterminers, completeSubtaskProcessingAndScheduleCleanupTaskResult, contextGrantedModelRolesReader, contextGrantedModelRolesReaderDoesNotExistErrorMessage, contextGrantedModelRolesReaderPermissionErrorMessage, convertHttpsCallableErrorToReadableError, copyDocumentIdForUserRelatedModifierFunction, copyDocumentIdToFieldModifierFunction, copyStoragePath, copyUserRelatedDataAccessorFactoryFunction, copyUserRelatedDataModifierConfig, createFormSpaceParamsType, createNotificationBoxParamsType, createNotificationDocument, createNotificationDocumentIfSending, createNotificationDocumentPair, createNotificationLoggedEventTemplate, createNotificationSummaryParamsType, createNotificationTaskTemplate, createNotificationTemplate, createNotificationUserParamsType, createOidcClientFieldParamsType, createOidcClientParamsType, createStorageFileDocumentPair, createStorageFileDocumentPairFactory, createStorageFileGroupParamsType, createStorageFileParamsType, createStorageFileSignedUploadUrlParamsType, createUserExternalConnectionParamsType, dataFromDocumentSnapshots, dataFromSnapshotStream, decodeFirebaseAuthOobCode, defaultOidcProviderProfiles, defaultPagedItemPageDataConverter, defaultUnlockedScopesForOidcProviderProfiles, delayCompletion, deleteAllQueuedStorageFilesParamsType, deleteFormSpaceParamsType, targetModelParamsType as deleteOidcClientParamsType, targetModelParamsType as deleteOidcTokenParamsType, deleteStorageFileParamsType, determineByFileName, determineByFilePath, determineByFolderName, determineUserByFolder, determineUserByFolderWrapperFunction, determineUserByUserUploadsFolderWrapperFunction, developmentFirebaseFunctionMapFactory, directDataHttpsCallable, disconnectUserExternalConnectionParamsType, documentData, documentDataFunction, documentDataWithIdAndKey, documentReferenceFromDocument, documentReferencesFromDocuments, documentReferencesFromSnapshot, downloadMultipleStorageFilesFileParamsType, downloadMultipleStorageFilesParamsType, downloadStorageFileParamsType, effectiveNotificationBoxRecipientConfig, effectiveNotificationBoxRecipientTemplateConfig, emptyUserExternalConnection, encodeFirebaseAuthOobCode, endAt, endAtValue, endBefore, expandCalendarEvents, expireAllExpiredFormSpacesParamsType, expireFormSpaceTemplate, extendFirestoreCollectionWithPagedItemAccessor, extendFirestoreCollectionWithSingleDocumentAccessor, filterConstraintsOfType, filterDisallowedFirestoreItemPageIteratorInputConstraints, filterRepeatCheckpointSnapshots, filterWithDateRange, firebaseAuthErrorToReadableError, firebaseFirestoreClientDrivers, firebaseFirestoreQueryConstraintFunctionsDriver, firebaseFirestoreQueryDriver, firebaseFunctionMapFactory, firebaseModelLoader, firebaseModelPermissionService, firebaseModelService, firebaseModelServiceFactory, firebaseModelsService, firebaseQueryItemAccumulator, firebaseQuerySnapshotAccumulator, firebaseStorageBucketFolderPath, firebaseStorageClientAccessorDriver, firebaseStorageClientAccessorFile, firebaseStorageClientAccessorFolder, firebaseStorageClientDrivers, firebaseStorageClientListFilesResultFactory, firebaseStorageContextFactory, firebaseStorageFileExists, firebaseStorageFilePathFromStorageFilePath, firebaseStorageRefForStorageFilePath, firestoreArray, firestoreArrayMap, firestoreBitwiseObjectMap, firestoreBitwiseSet, firestoreBitwiseSetMap, firestoreBoolean, firestoreClientAccessorDriver, firestoreClientArrayUpdateToUpdateData, firestoreClientIncrementUpdateToUpdateData, firestoreCollectionDocumentCache, firestoreCollectionQueryFactory, firestoreContextFactory, firestoreDate, firestoreDateCellRange, firestoreDateCellRangeArray, firestoreDateCellRangeAssignFn, firestoreDateCellSchedule, firestoreDateCellScheduleAssignFn, firestoreDateNumber, firestoreDencoderArray, firestoreDencoderMap, firestoreDencoderStringArray, firestoreDocumentAccessorContextExtension, firestoreDocumentAccessorFactory, firestoreDocumentLoader, firestoreDocumentSnapshotPairsLoader, firestoreDocumentSnapshotPairsLoaderInstance, firestoreDummyKey, firestoreEncodedArray, firestoreEncodedObjectMap, firestoreEnum, firestoreEnumArray, firestoreField, firestoreFieldConfigToModelMapFunctionsRef, firestoreFixedItemPageIteration, firestoreFixedItemPageIterationFactory, firestoreIdBatchVerifierFactory, firestoreIdentityTypeArray, firestoreIdentityTypeArrayName, firestoreItemPageIteration, firestoreItemPageIterationFactory, firestoreLatLngString, firestoreMap, firestoreMapZoomLevel, firestoreModelId, firestoreModelIdArrayField, firestoreModelIdFromDocument, firestoreModelIdFromEmail, firestoreModelIdGrantedRoleArrayMap, firestoreModelIdGrantedRoleMap, firestoreModelIdOrKeyType, firestoreModelIdString, firestoreModelIdType, firestoreModelIdentity, firestoreModelIdentityTypeMap, firestoreModelIdsFromDocuments, firestoreModelIdsFromKey, firestoreModelKey, firestoreModelKeyArrayField, firestoreModelKeyCollectionName, firestoreModelKeyCollectionType, firestoreModelKeyCollectionTypeArray, firestoreModelKeyCollectionTypeArrayName, firestoreModelKeyCollectionTypePair, firestoreModelKeyEncodedGrantedRoleMap, firestoreModelKeyFactory, firestoreModelKeyFromDocument, firestoreModelKeyGrantedRoleArrayMap, firestoreModelKeyGrantedRoleMap, firestoreModelKeyPairObject, firestoreModelKeyParentKey, firestoreModelKeyParentKeyPartPairs, firestoreModelKeyPart, firestoreModelKeyPartPairs, firestoreModelKeyPartPairsKeyPath, firestoreModelKeyPartPairsPaths, firestoreModelKeyPath, firestoreModelKeyString, firestoreModelKeyType, firestoreModelKeyTypePair, firestoreModelKeys, firestoreModelKeysFromDocuments, firestoreModelType, firestoreNotificationBoxRecipient, firestoreNotificationBoxRecipientTemplateConfigRecord, firestoreNotificationDeliveryHealthCheckResult, firestoreNotificationHealthCheck, firestoreNotificationHealthCheckIssue, firestoreNotificationHealthCheckProbe, firestoreNotificationItem, firestoreNotificationRecipientWithConfig, firestoreNotificationUserDefaultNotificationBoxRecipientConfig, firestoreNotificationUserNotificationBoxRecipientConfig, firestoreNumber, firestoreObjectArray, firestoreObjectMap, firestorePassThroughField, firestoreQueryConstraint, firestoreQueryConstraintFactory, firestoreQueryDocumentSnapshotPairsLoader, firestoreQueryFactory, firestoreSingleDocumentAccessor, firestoreString, firestoreSubObject, firestoreTimezoneString, firestoreUID, firestoreUniqueArray, firestoreUniqueKeyedArray, firestoreUniqueNumberArray, firestoreUniqueStringArray, firestoreUnitedStatesAddress, firestoreUnitedStatesAddressAssignFn, firestoreUnixDateTimeSecondsNumber, firestoreUpdateWithNoDataError, firestoreWebsiteFileLink, firestoreWebsiteFileLinkAssignFn, firestoreWebsiteFileLinkEncodedArray, firestoreWebsiteFileLinkObjectArray, firestoreWebsiteLink, firestoreWebsiteLinkArray, firestoreWebsiteLinkAssignFn, flagStaleCalendarsForSyncParamsType, flatFirestoreModelKey, formSpaceCollectionReference, formSpaceConverter, formSpaceFileSlotConfig, formSpaceFileSlotName, formSpaceFileStoragePath, formSpaceFileSubObject, formSpaceFileUploaderId, formSpaceFilesInSlot, formSpaceFirestoreCollection, formSpaceFunctionMap, formSpaceIdForModel, formSpaceIdentity, formSpaceKeyForStorageFile, formSpaceSlotFileAccess, formSpaceSlotMaxFiles, formSpaceSlotMinFiles, formSpaceSlotStatus, formSpaceStorageFileGroupId, formSpaceSubmissionNotificationTaskTemplate, formSpaceSubmissionNotificationTaskUniqueId, formSpaceSubmitBlockers, formSpaceTemplate, formSpaceTypeConfigRecord, formSpaceUploadFileNameDetails, formSpaceUploadsFilePath, formSpaceUploadsFolderPath, formSpacesDueForExpirationQuery, formSpacesForOwnerQuery, formSpacesQueuedForProcessingQuery, getDataFromDocumentSnapshots, getDocumentSnapshotData, getDocumentSnapshotDataPair, getDocumentSnapshotDataPairs, getDocumentSnapshotDataPairsWithData, getDocumentSnapshotDataTuples, getDocumentSnapshotPair, getDocumentSnapshotPairs, getDocumentSnapshots, getDocumentSnapshotsData, grantFormSpaceRolesForUserAuthFunction, grantFullAccessIfAdmin, grantFullAccessIfAuthUserRelated, grantModelRolesIfAdmin, grantModelRolesIfAdminFunction, grantModelRolesIfAuthUserRelatedModelFunction, grantModelRolesIfFunction, grantModelRolesIfHasAuthRolesFactory, grantModelRolesIfHasAuthRolesFunction, grantModelRolesOnlyIfFunction, grantStorageFileRolesForUserAuthFunction, hasRunInCurrentHour, inContextFirebaseModelServiceFactory, inContextFirebaseModelsServiceFactory, inMemoryFirestoreCollectionCacheDelegate, inMemoryFirestoreContextCache, inMemoryFirestoreContextCacheFactory, incrementUpdateWithAccessorFunction, inferCalendarRelatedModelKey, inferKeyFromTwoWayFlatFirestoreModelKey, inferNotificationBoxRelatedModelKey, inferStorageFileGroupRelatedModelKey, inferredTargetModelIdParamsType, inferredTargetModelParamsType, initializeAllApplicableNotificationBoxesParamsType, initializeAllApplicableNotificationSummariesParamsType, initializeAllApplicableStorageFileGroupsParamsType, initializeAllStorageFilesFromUploadsParamsType, initializeNotificationModelParamsType, initializeStorageFileFromUploadParamsType, initializeStorageFileModelParamsType, interceptAccessorFactoryFunction, isAdminInFirebaseModelContext, isCalendarIcsRotateThrottled, isClientFirebaseError, isCompleteNotificationSendState, isFirebaseStorageObjectNotFoundError, isFirestoreModelId, isFirestoreModelIdOrKey, isFirestoreModelKey, isFormSpaceEditable, isFormSpaceFileAccessibleByUser, isFormSpaceFileAccessibleWithAccess, isFormSpaceFullyLocked, isFormSpaceReopenable, isFormSpaceStorageFileAccessibleByUser, isLoggedEventNotification, isNthHourOfDay, isOwnerOfUserRelatedModelInFirebaseModelContext, isPendingNotificationHealthCheckProbe, isProblemNotificationHealthCheckStatus, iterateFirestoreDocumentSnapshotBatches, iterateFirestoreDocumentSnapshotCheckpoints, iterateFirestoreDocumentSnapshotPairBatches, iterateFirestoreDocumentSnapshotPairs, iterateFirestoreDocumentSnapshots, iterateStorageListFiles, iterateStorageListFilesByEachFile, iterateStorageListFilesFactory, iterationQueryDocChangeWatcher, iterationQueryDocChangeWatcherChangeTypeForGroup, latestSnapshotsFromDocuments, lazyFirebaseFunctionsFactory, limit, limitToLast, limitUploadFileTypeDeterminer, limitedFirestoreDocumentAccessorFactory, limitedFirestoreDocumentAccessorSnapshotCache, loadAllFirestoreDocumentSnapshot, loadAllFirestoreDocumentSnapshotPairs, loadDocumentsForDocumentReferences, loadDocumentsForDocumentReferencesFromValues, loadDocumentsForIds, loadDocumentsForIdsFromValues, loadDocumentsForKeys, loadDocumentsForKeysFromValues, loadDocumentsForSnapshots, loadDocumentsForValues, loadNotificationBoxDocumentForReferencePair, loadSchedulerSystemState, loadStorageFileGroupDocumentForReferencePair, lockFormSpaceParamsType, lockFormSpaceTemplate, makeDocuments, makeFirestoreCollection, makeFirestoreCollectionGroup, makeFirestoreCollectionWithParent, makeFirestoreContextCache, makeFirestoreItemPageIteratorDelegate, makeFirestoreQueryConstraintFunctionsDriver, makePagedItemFirestoreCollection, makeRootSingleItemFirestoreCollection, makeSingleItemFirestoreCollection, mapDataFromSnapshot, mapHttpsCallable, mapLatestSnapshotsFromDocuments, markCalendarForSyncTemplate, mergeNotificationBoxRecipientTemplateConfigRecords, mergeNotificationBoxRecipientTemplateConfigs, mergeNotificationBoxRecipients, mergeNotificationSendMessagesResult, mergeNotificationUserDefaultNotificationBoxRecipientConfig, mergeNotificationUserNotificationBoxRecipientConfigs, modelStorageSlashPathFactory, modifyBeforeSetInterceptAccessorFactoryFunction, newDocuments, newNotificationBoxRecipientForUid, noContentNotificationMessageFunctionFactory, noStringFormatInStorageUploadOptionsError, noopFirestoreCollectionCache, noopFirestoreCollectionCacheDelegate, noopFirestoreCollectionDocumentCache, noopFirestoreContextCache, notificationBoxCollectionReference, notificationBoxConverter, notificationBoxFirestoreCollection, notificationBoxIdForModel, notificationBoxIdentity, notificationBoxRecipientTemplateConfigArrayEntryParamType, notificationBoxRecipientTemplateConfigArrayToRecord, notificationBoxRecipientTemplateConfigRecordToArray, notificationBoxesFlaggedForNeedsInitializationQuery, notificationBoxesFlaggedInvalidQuery, notificationCollectionReference, notificationCollectionReferenceFactory, notificationConverter, notificationDeliveryHealthCheckResultForMethod, notificationFirestoreCollectionFactory, notificationFirestoreCollectionGroup, notificationFunctionMap, notificationHealthCheckIssue, notificationHealthCheckPendingProbeMethods, notificationIdentity, notificationLoggedEventDayCollectionReference, notificationLoggedEventDayCollectionReferenceFactory, notificationLoggedEventDayConverter, notificationLoggedEventDayFirestoreCollectionFactory, notificationLoggedEventDayFirestoreCollectionGroup, notificationLoggedEventDayId, notificationLoggedEventDayIdentity, notificationLoggedEventDayPageCollectionReference, notificationLoggedEventDayPageFirestoreCollectionGroup, notificationLoggedEventDayPageIdentity, notificationLoggedEventDayPagedItemsCollectionFactory, notificationLoggedEventDayPagedItemsCollectionReferenceFactory, notificationLoggedEventDaysOlderThanQuery, notificationLoggedEventLoader, notificationMessageFunction, notificationRecipientParamsType, notificationSendExclusionCanSendFunction, notificationSendFlagsImplyIsComplete, notificationSubtaskComplete, notificationSummariesFlaggedForNeedsInitializationQuery, notificationSummaryCollectionReference, notificationSummaryConverter, notificationSummaryFirestoreCollection, notificationSummaryIdForModel, notificationSummaryIdForUidFunctionForRootFirestoreModelIdentity, notificationSummaryIdentity, notificationTaskCanRunNextCheckpoint, notificationTaskComplete, notificationTaskDelayRetry, notificationTaskFailed, notificationTaskPartiallyComplete, notificationTaskUniqueId, notificationTemplateTypeInfoRecord, notificationUserCollectionReference, notificationUserConverter, notificationUserFirestoreCollection, notificationUserHasExclusionQuery, notificationUserHealthCheckNextProbeAt, notificationUserHealthCheckNextProbeAtByMethod, notificationUserHealthCheckNextRunAt, notificationUserHealthCheckNextVerifyAt, notificationUserHealthCheckParamsType, notificationUserIdentity, notificationUsersFlaggedForNeedsSyncQuery, notificationWeekCollectionReference, notificationWeekCollectionReferenceFactory, notificationWeekConverter, notificationWeekFirestoreCollectionFactory, notificationWeekFirestoreCollectionGroup, notificationWeekIdentity, notificationsPastSendAtTimeQuery, notificationsReadyForCleanupQuery, nthHourOfDayIndex, offset, oidcClientEntriesByOwnerQuery, oidcEntriesByClientIdQuery, oidcEntriesByGrantIdQuery, oidcEntriesByUidQuery, oidcEntriesByUserCodeQuery, oidcEntriesWithTypeQuery, oidcEntryCollectionReference, oidcEntryConverter, oidcEntryFirestoreCollection, oidcEntryIdentity, oidcGrantEntriesByUidQuery, oidcModelFunctionMap, oidcProviderProfileDetails, oidcProviderProfilesForClient, oidcProviderProfilesForKeys, oidcScopeTermSatisfied, oidcScopeTermsSatisfied, oidcScopesFromScopeClaim, onCallCreateModelParams, onCallCreateModelResult, onCallCreateModelResultWithDocs, onCallDeleteModelParams, onCallDevelopmentParams, onCallInvokeModelParams, onCallQueryModelParams, onCallReadModelParams, onCallTypedModelParamsFunction, onCallUpdateModelParams, optionalFirestoreArray, optionalFirestoreBoolean, optionalFirestoreDate, optionalFirestoreDateNumber, optionalFirestoreEnum, optionalFirestoreField, optionalFirestoreNotificationHealthCheck, optionalFirestoreNumber, optionalFirestorePassthroughJsonField, optionalFirestoreString, optionalFirestoreUID, optionalFirestoreUnitedStatesAddress, optionalFirestoreUnixDateTimeSecondsNumber, orderBy, orderByDocumentId, parseFormSpaceUploadPath, processAllQueuedFormSpacesParamsType, processAllQueuedStorageFilesParamsType, processStorageFileParamsType, pruneCalendarEvents, readFirestoreModelKey, readFirestoreModelKeyFromDocumentSnapshot, readLoggingFirestoreContextCache, readLoggingFirestoreContextCacheFactory, readMultipleStorageFilesMetadataFileParamsType, readMultipleStorageFilesMetadataParamsType, readStorageFileMetadataParamsType, readUserExternalConnectionAuthorizeStateParamsType, regenerateAllFlaggedStorageFileGroupsContentParamsType, regenerateStorageFileGroupContentParamsType, removeCalendarEventItems, removeFormSpaceFileParamsType, reopenFormSpaceParamsType, reopenFormSpaceTemplate, replaceCalendarEventItemsForModelKey, replaceConstraints, requiredFormSpaceFileSlots, requiredScopesForOidcProviderProfiles, resolveEffectiveOidcScopeTerms, resolveFormSpaceExpiresAt, resolveFormSpaceLocksAt, resolveOidcModelScopeRequirement, resyncAllNotificationUserParamsType, targetModelParamsType as resyncNotificationUserParamsType, rollupNotificationDeliveryHealthCheckResultStatus, rollupNotificationHealthCheckResultStatus, rollupNotificationHealthCheckStatus, rotateCalendarIcsParamsType, targetModelParamsType as rotateOidcClientSecretParamsType, scheduledFunctionDevelopmentFirebaseFunctionParamsType, schedulerSystemDataConverter, schedulerSystemStateRead, scopesForOidcProviderProfiles, selectFromFirebaseModelsService, sendNotificationParamsType, sendQueuedNotificationsParamsType, separateConstraints, setIdAndKeyFromKeyIdRefOnDocumentData, setIdAndKeyFromSnapshotOnDocumentData, shouldSaveNotificationToNotificationWeek, shouldSendCreatedNotificationInput, snapshotConverterFunctions, snapshotStreamDataForAccessor, snapshotStreamForAccessor, sortNotificationItemsFunction, startAfter, startAt, startAtValue, storageFileCollectionReference, storageFileConverter, storageFileDisplayFileName, storageFileFirestoreCollection, storageFileFlaggedForSyncWithGroupsQuery, storageFileFunctionMap, storageFileGroupCollectionReference, storageFileGroupConverter, storageFileGroupCreateStorageFileKeyFactory, storageFileGroupCreatedStorageFileKey, storageFileGroupEmbeddedFile, storageFileGroupFirestoreCollection, storageFileGroupFolderPath, storageFileGroupIdForModel, storageFileGroupIdentity, storageFileGroupZipFileStoragePath, storageFileGroupZipStorageFileKey, storageFileGroupsFlaggedForContentRegenerationQuery, storageFileGroupsFlaggedForNeedsInitializationQuery, storageFileGroupsFlaggedInvalidQuery, storageFileIdentity, storageFileProcessingNotificationTaskTemplate, storageFilePurposeAndUserQuery, storageFileUploadScopeType, storageFilesForFormSpaceQuery, storageFilesQueuedForDeleteQuery, storageFilesQueuedForProcessingQuery, storageListFilesResultFactory, storageListFilesResultHasNoNextError, storagePathFactory, storagePublicDownloadUrl, storedFileReaderFactory, streamDocumentSnapshotDataPairs, streamDocumentSnapshotDataPairsWithData, streamDocumentSnapshotsData, streamFromOnSnapshot, submitFormSpaceParamsType, submitFormSpaceTemplate, syncAllFlaggedCalendarsParamsType, syncAllFlaggedStorageFilesWithGroupsParamsType, syncCalendarParamsType, syncStorageFileWithGroupsParamsType, systemStateCollectionReference, systemStateConverter, systemStateFirestoreCollection, systemStateIdentity, systemStateStoredDataConverterFactory, targetModelIdParamsType, targetModelParamsType, twoWayFlatFirestoreModelKey, unreadNotificationItems, unsupportedFirestoreDriverFunctionError, untrackableNotificationHealthCheckProbe, updateCalendarEventsTemplate, updateFormSpaceParamsType, targetModelParamsType as updateNotificationBoxParamsType, updateNotificationBoxRecipientLikeParamsType, updateNotificationBoxRecipientParamsType, updateNotificationBoxRecipientTemplateConfigRecord, updateNotificationRecipient, updateNotificationSummaryParamsType, updateNotificationUserDefaultNotificationBoxRecipientConfig, updateNotificationUserDefaultNotificationBoxRecipientConfigParamsType, updateNotificationUserNotificationBoxRecipientConfigIfChanged, updateNotificationUserNotificationBoxRecipientConfigs, updateNotificationUserNotificationBoxRecipientParamsType, updateNotificationUserNotificationSendExclusions, updateNotificationUserParamsType, updateOidcClientFieldParamsType, updateOidcClientParamsType, updateStorageFileGroupEntryParamsType, updateStorageFileGroupParamsType, updateStorageFileParamsType, updateWithAccessorUpdateAndConverterFunction, uploadFileWithStream, upsertCalendarEventItems, useContextAuth, useContextAuthUid, useDocumentSnapshot, useDocumentSnapshotData, useFirebaseModelsService, userExternalConnectionAccessorFactory, userExternalConnectionCollectionReference, userExternalConnectionConnectedProviderTypes, userExternalConnectionConverter, userExternalConnectionEntryFields, userExternalConnectionEntryForOutcome, userExternalConnectionEntryForProvider, userExternalConnectionEntryIsConnected, userExternalConnectionEntryIsExpired, userExternalConnectionFirestoreCollection, userExternalConnectionFunctionMap, userExternalConnectionIdentity, userExternalConnectionIsConnectedToProvider, userExternalConnectionsWithConnectedProviderQuery, userUploadsFolderSlashPathFactory, userUploadsFolderStoragePathFactory, where, whereDateIsAfter, whereDateIsAfterWithSort, whereDateIsBefore, whereDateIsBeforeWithSort, whereDateIsBetween, whereDateIsInRange, whereDateIsOnOrAfter, whereDateIsOnOrAfterWithSort, whereDateIsOnOrBefore, whereDateIsOnOrBeforeWithSort, whereDocumentId, whereStringHasRootIdentityModelKey, whereStringValueHasPrefix };
+/**
+ * Error codes the UserExternalConnection server surfaces.
+ *
+ * Declared HERE rather than beside the `HttpsError` factories in `@dereekb/firebase-server/model`
+ * because both sides need them: the server throws them, and the client branches on them — a login
+ * page deciding what to say about a refused sign-in, or a client treating a raced
+ * `..._ALREADY_EXISTS` as success. A code the browser cannot import is a code the browser has to
+ * hard-code.
+ */ var USER_EXTERNAL_CONNECTION_PROVIDER_NOT_CONNECTED_ERROR_CODE = 'USER_EXTERNAL_CONNECTION_PROVIDER_NOT_CONNECTED';
+var USER_EXTERNAL_CONNECTION_PROVIDER_NOT_ALLOWED_ERROR_CODE = 'USER_EXTERNAL_CONNECTION_PROVIDER_NOT_ALLOWED';
+var USER_EXTERNAL_CONNECTION_ALREADY_EXISTS_ERROR_CODE = 'USER_EXTERNAL_CONNECTION_ALREADY_EXISTS';
+var USER_EXTERNAL_CONNECTION_CREDENTIALS_EXPIRED_ERROR_CODE = 'USER_EXTERNAL_CONNECTION_CREDENTIALS_EXPIRED';
+var USER_EXTERNAL_CONNECTION_EXTERNAL_ACCOUNT_IN_USE_ERROR_CODE = 'USER_EXTERNAL_CONNECTION_EXTERNAL_ACCOUNT_IN_USE';
+var USER_EXTERNAL_CONNECTION_SIGN_IN_NOT_ENABLED_ERROR_CODE = 'USER_EXTERNAL_CONNECTION_SIGN_IN_NOT_ENABLED';
+var USER_EXTERNAL_CONNECTION_SIGN_IN_DENIED_ERROR_CODE = 'USER_EXTERNAL_CONNECTION_SIGN_IN_DENIED';
+var USER_EXTERNAL_CONNECTION_SIGN_IN_EMAIL_CONFLICT_ERROR_CODE = 'USER_EXTERNAL_CONNECTION_SIGN_IN_EMAIL_CONFLICT';
+var USER_EXTERNAL_CONNECTION_SIGN_IN_USER_MISSING_ERROR_CODE = 'USER_EXTERNAL_CONNECTION_SIGN_IN_USER_MISSING';
+var USER_EXTERNAL_CONNECTION_SIGN_IN_IDENTITY_UNAVAILABLE_ERROR_CODE = 'USER_EXTERNAL_CONNECTION_SIGN_IN_IDENTITY_UNAVAILABLE';
+/**
+ * Refuses an unlink that would leave the account with no way back in.
+ */ var USER_EXTERNAL_CONNECTION_UNLINK_LAST_LOGIN_METHOD_ERROR_CODE = 'USER_EXTERNAL_CONNECTION_UNLINK_LAST_LOGIN_METHOD';
+/**
+ * Refuses a `link` round trip for a provider the app has not enabled for sign-in.
+ *
+ * Distinct from `..._SIGN_IN_NOT_ENABLED`: nothing is signing in — an already-authenticated user asked
+ * to make the provider a login method, and the same `policy.signIn` opt-in governs both.
+ */ var USER_EXTERNAL_CONNECTION_LINK_NOT_ENABLED_ERROR_CODE = 'USER_EXTERNAL_CONNECTION_LINK_NOT_ENABLED';
+/**
+ * The only error codes a failed SIGN-IN reports back to the browser.
+ *
+ * An ALLOWLIST rather than a filter: a failed sign-in redirects to a URL the user can read, so
+ * anything that reaches it is public. Passing whatever code an internal failure happened to carry
+ * would leak the shape of that failure, and passing a message would leak its text — so a code absent
+ * from this set is reported as nothing at all.
+ *
+ * Shared with the client so a login page's copy map and the server's allowlist cannot drift.
+ */ var USER_EXTERNAL_CONNECTION_SIGN_IN_REPORTABLE_ERROR_CODES = new Set([
+    USER_EXTERNAL_CONNECTION_EXTERNAL_ACCOUNT_IN_USE_ERROR_CODE,
+    USER_EXTERNAL_CONNECTION_SIGN_IN_NOT_ENABLED_ERROR_CODE,
+    USER_EXTERNAL_CONNECTION_SIGN_IN_DENIED_ERROR_CODE,
+    USER_EXTERNAL_CONNECTION_SIGN_IN_EMAIL_CONFLICT_ERROR_CODE,
+    USER_EXTERNAL_CONNECTION_SIGN_IN_USER_MISSING_ERROR_CODE,
+    USER_EXTERNAL_CONNECTION_SIGN_IN_IDENTITY_UNAVAILABLE_ERROR_CODE,
+    USER_EXTERNAL_CONNECTION_LINK_NOT_ENABLED_ERROR_CODE
+]);
+
+export { ALL_FORM_SPACE_NOTIFICATION_TASK_TYPES, ALL_NOTIFICATION_DELIVERY_METHODS, ALL_OIDC_TOKEN_ENDPOINT_AUTH_METHODS, ALL_OIDC_TOKEN_ENDPOINT_AUTH_METHOD_OPTIONS, ALL_STORAGE_FILE_NOTIFICATION_TASK_TYPES, ALL_USER_UPLOADS_FOLDER_NAME, ALL_USER_UPLOADS_FOLDER_PATH, ALREADY_EXISTS_ERROR_CODE, AbstractFirestoreDocument, AbstractFirestoreDocumentDataAccessorWrapper, AbstractFirestoreDocumentWithParent, AppCalendarTypeConfigService, AppFormSpaceTypeConfigService, AppNotificationTemplateTypeInfoRecordService, BAD_DOCUMENT_QUERY_CURSOR_ERROR_CODE, BAD_REQUEST_ERROR_CODE, BASE_MODEL_STORAGE_FILE_PATH, CALCOM_USER_EXTERNAL_CONNECTION_PROVIDER_TYPE, CALENDAR_EXTENSION_PROPERTY_PREFIX, CALENDAR_ICS_DEFAULT_TIMEZONE, CALENDAR_ICS_DOMAIN_NOT_CONFIGURED_ERROR_CODE, CALENDAR_ICS_FILE_EXTENSION, CALENDAR_ICS_ROTATE_THROTTLED_ERROR_CODE, CALENDAR_ICS_STORAGE_FILE_PURPOSE, CALENDAR_ICS_STORAGE_FILE_PURPOSE_GENERATE_ICS_SUBTASK, CALENDAR_ICS_STORAGE_FILE_UNAVAILABLE_ERROR_CODE, CALENDAR_OCCURRENCE_KEY_SEPARATOR, CALENDAR_ROOT_FOLDER_PATH, CALL_MODEL_APP_FUNCTION_KEY, CALL_MODEL_MISSING_OIDC_SCOPE_ERROR_CODE, CALL_MODEL_OIDC_SCOPES, CALL_MODEL_OIDC_SCOPE_DETAILS, CALL_MODEL_OIDC_SCOPE_FOR_CALL_TYPE, CALL_MODEL_OIDC_SCOPE_PREFIX, CLIENT_SECRET_BASIC_TOKEN_ENDPOINT_AUTH_METHOD, CLIENT_SECRET_JWT_TOKEN_ENDPOINT_AUTH_METHOD, CLIENT_SECRET_POST_TOKEN_ENDPOINT_AUTH_METHOD, CONFLICT_ERROR_CODE, COPY_USER_RELATED_DATA_ACCESSOR_FACTORY_FUNCTION, CREATE_MODEL_OIDC_SCOPE, CREATE_NOTIFICATION_ID_REQUIRED_ERROR_CODE, CREATE_STORAGE_FILE_SIGNED_UPLOAD_URL_MAX_EXPIRES_IN_MS, CREATE_STORAGE_FILE_SIGNED_UPLOAD_URL_MAX_FILENAME_LENGTH, CREATE_STORAGE_FILE_SIGNED_UPLOAD_URL_MIN_EXPIRES_IN_MS, CalendarDocument, CalendarEventStatus, CalendarFirestoreCollections, CalendarFunctions, CalendarSyncState, ContextGrantedModelRolesReaderInstance, DBX_FIREBASE_SERVER_NO_AUTH_ERROR_CODE, DBX_FIREBASE_SERVER_NO_UID_ERROR_CODE, DBX_FIREBASE_SERVER_PASSWORD_RESET_INVALID_CODE_ERROR_CODE, DBX_FIREBASE_SERVER_PASSWORD_RESET_NO_CONFIG_ERROR_CODE, DBX_FIREBASE_SERVER_PASSWORD_RESET_SEND_ONCE_ERROR_CODE, DBX_FIREBASE_SERVER_PASSWORD_RESET_THROTTLE_ERROR_CODE, DEFAULT_CALENDAR_ICS_EXPANSION_FUTURE_DAYS, DEFAULT_CALENDAR_ICS_EXPANSION_PAST_DAYS, DEFAULT_CALENDAR_ICS_RECURRENCE_MODE, DEFAULT_CALENDAR_ICS_ROTATE_THROTTLE_HOURS, DEFAULT_CALENDAR_INVITE_ATTENDEE_PARTICIPATION_STATUS, DEFAULT_CALENDAR_INVITE_ATTENDEE_ROLE, DEFAULT_CALENDAR_INVITE_METHOD, DEFAULT_CALENDAR_MAX_EVENTS, DEFAULT_CALENDAR_RESYNC_INTERVAL, DEFAULT_CALENDAR_RETAIN_PAST_EVENT_DAYS, DEFAULT_CALENDAR_TYPE_CONFIG, DEFAULT_CREATE_STORAGE_FILE_SIGNED_UPLOAD_URL_EXPIRES_IN_MS, DEFAULT_DATE_CELL_RANGE_VALUE, DEFAULT_FIRESTORE_DATE_CELL_SCHEDULE_VALUE, DEFAULT_FIRESTORE_ITEM_PAGE_ITERATOR_ITEMS_PER_PAGE, DEFAULT_FIRESTORE_STRING_FIELD_VALUE, DEFAULT_FIRESTORE_TIMEZONE_STRING_VALUE, DEFAULT_FIRESTORE_UNITED_STATES_ADDRESS_VALUE, DEFAULT_FIRESTORE_WEBSITE_FILE_LINK_VALUE, DEFAULT_FORM_SPACE_ALLOWED_MIME_TYPES, DEFAULT_FORM_SPACE_EXPIRES_IN, DEFAULT_FORM_SPACE_FILE_ACCESS, DEFAULT_FORM_SPACE_MAX_FILE_SIZE_BYTES, DEFAULT_FORM_SPACE_MAX_UPLOADS, DEFAULT_FORM_SPACE_SLOT_MAX_FILES, DEFAULT_FORM_SPACE_TYPE_CONFIG, DEFAULT_IN_MEMORY_CACHE_TTL, DEFAULT_ITERATE_FIRESTORE_DOCUMENT_SNAPSHOT_BATCHES_BATCH_SIZE, DEFAULT_MODEL_FUNCTION_FIREBASE_CRUD_FUNCTION_SPECIFIER, DEFAULT_NOTIFICATION_MESSAGE_CALENDAR_ATTACHMENT_FILENAME, DEFAULT_NOTIFICATION_TASK_NOTIFICATION_MODEL_KEY, DEFAULT_NOTIFICATION_TASK_SUBTASK_CLEANUP_RETRY_ATTEMPTS, DEFAULT_NOTIFICATION_TASK_SUBTASK_CLEANUP_RETRY_DELAY, DEFAULT_NOTIFICATION_TEMPLATE_TYPE, DEFAULT_NOTIFICATION_USER_HEALTH_CHECK_PROBE_THROTTLE_MINUTES, DEFAULT_NOTIFICATION_USER_HEALTH_CHECK_THROTTLE_MINUTES, DEFAULT_NOTIFICATION_USER_HEALTH_CHECK_VERIFY_THROTTLE_SECONDS, DEFAULT_ON_CALL_QUERY_MODEL_LIMIT, DEFAULT_PAGED_ITEM_INDEX_DOCUMENT_ID, DEFAULT_PAGED_ITEM_MAX_ITEMS_PER_PAGE, DEFAULT_QUERY_CHANGE_WATCHER_DELAY, DEFAULT_SINGLE_ITEM_FIRESTORE_COLLECTION_DOCUMENT_IDENTIFIER, DEFAULT_UPLOADED_FILE_TYPE_DETERMINATION_LEVEL, DEFAULT_WEBSITE_LINK, DELETE_MODEL_OIDC_SCOPE, DISCORD_USER_EXTERNAL_CONNECTION_PROVIDER_TYPE, DOWNLOAD_MULTIPLE_STORAGE_FILES_MAX_FILES, DOWNLOAD_MULTIPLE_STORAGE_FILES_MIN_FILES, EMAIL_OIDC_SCOPE, EMAIL_OIDC_SCOPE_DETAILS, EMPTY_STORAGE_FILE_PURPOSE_SUBGROUP, EXACT_UPLOADED_FILE_TYPE_DETERMINATION_LEVEL, FIREBASE_AUTH_CREDENTIAL_ALREADY_IN_USE_ERROR, FIREBASE_AUTH_EMAIL_ALREADY_EXISTS_ERROR, FIREBASE_AUTH_EMAIL_ALREADY_IN_USE_ERROR, FIREBASE_AUTH_INVALID_PHONE_NUMBER_ERROR, FIREBASE_AUTH_NETWORK_REQUEST_ERROR, FIREBASE_AUTH_NETWORK_REQUEST_FAILED, FIREBASE_AUTH_OOB_CODE_DATA_PAIR_DELIMITER, FIREBASE_AUTH_PASSWORD_MAX_LENGTH, FIREBASE_AUTH_PASSWORD_MIN_LENGTH, FIREBASE_AUTH_PHONE_NUMBER_ALREADY_EXISTS_ERROR, FIREBASE_AUTH_PROVIDER_ALREADY_LINKED_ERROR, FIREBASE_AUTH_QUOTA_EXCEEDED_ERROR, FIREBASE_AUTH_USER_NOT_FOUND_ERROR, FIREBASE_AUTH_WRONG_PASSWORD, FIREBASE_DEVELOPMENT_FUNCTIONS_MAP_KEY, FIREBASE_SERVER_AUTH_CLAIMS_RESET_EXPIRES_AT_KEY, FIREBASE_SERVER_AUTH_CLAIMS_RESET_LAST_COM_DATE_KEY, FIREBASE_SERVER_AUTH_CLAIMS_RESET_PASSWORD_KEY, FIREBASE_SERVER_AUTH_CLAIMS_SETUP_LAST_COM_DATE_KEY, FIREBASE_SERVER_AUTH_CLAIMS_SETUP_PASSWORD_KEY, FIRESTORE_CLIENT_QUERY_CONSTRAINT_HANDLER_MAPPING, FIRESTORE_COLLECTION_NAME_SEPARATOR, FIRESTORE_DUMMY_MODEL_KEY, FIRESTORE_EMPTY_VALUE, FIRESTORE_END_AT_QUERY_CONSTRAINT_TYPE, FIRESTORE_END_AT_VALUE_QUERY_CONSTRAINT_TYPE, FIRESTORE_END_BEFORE_QUERY_CONSTRAINT_TYPE, FIRESTORE_ITEM_PAGE_ITERATOR, FIRESTORE_ITEM_PAGE_ITERATOR_DELEGATE, FIRESTORE_LIMIT_QUERY_CONSTRAINT_TYPE, FIRESTORE_LIMIT_TO_LAST_QUERY_CONSTRAINT_TYPE, FIRESTORE_MAX_WHERE_IN_FILTER_ARGS_COUNT, FIRESTORE_MODEL_ID_REGEX, FIRESTORE_MODEL_KEY_REGEX, FIRESTORE_MODEL_KEY_REGEX_STRICT, FIRESTORE_OFFSET_QUERY_CONSTRAINT_TYPE, FIRESTORE_ORDER_BY_DOCUMENT_ID_QUERY_CONSTRAINT_TYPE, FIRESTORE_ORDER_BY_QUERY_CONSTRAINT_TYPE, FIRESTORE_PASSTHROUGH_FIELD, FIRESTORE_PERMISSION_DENIED_ERROR_CODE, FIRESTORE_SESSION_OIDC_SCOPE, FIRESTORE_SESSION_OIDC_SCOPE_DETAILS, FIRESTORE_START_AFTER_QUERY_CONSTRAINT_TYPE, FIRESTORE_START_AT_QUERY_CONSTRAINT_TYPE, FIRESTORE_START_AT_VALUE_QUERY_CONSTRAINT_TYPE, FIRESTORE_WHERE_DOCUMENT_ID_QUERY_CONSTRAINT_TYPE, FIRESTORE_WHERE_QUERY_CONSTRAINT_TYPE, FORBIDDEN_ERROR_CODE, FORM_SPACE_ALREADY_EXISTS_ERROR_CODE, FORM_SPACE_FILES_ROOT_FOLDER_PATH, FORM_SPACE_FILE_ACCESS_DENIED_ERROR_CODE, FORM_SPACE_FILE_NOT_FOUND_ERROR_CODE, FORM_SPACE_FUNCTION_TYPE_CONFIG_MAP, FORM_SPACE_HAS_INVALID_FILES_ERROR_CODE, FORM_SPACE_MODEL_CRUD_FUNCTIONS_CONFIG, FORM_SPACE_NOT_EDITABLE_ERROR_CODE, FORM_SPACE_NOT_FOUND_ERROR_CODE, FORM_SPACE_NOT_REOPENABLE_ERROR_CODE, FORM_SPACE_NOT_SUBMITTED_ERROR_CODE, FORM_SPACE_PROCESSING_IN_PROGRESS_ERROR_CODE, FORM_SPACE_PURPOSE, FORM_SPACE_PURPOSE_REGISTER_SUBTASK, FORM_SPACE_PURPOSE_VALIDATE_SUBTASK, FORM_SPACE_REQUIRED_SLOT_MISSING_ERROR_CODE, FORM_SPACE_SUBMISSION_NOTIFICATION_TASK_TYPE, FORM_SPACE_TYPE_MISMATCH_ERROR_CODE, FORM_SPACE_TYPE_NOT_REGISTERED_ERROR_CODE, FORM_SPACE_UPLOADED_FILE_TYPE_IDENTIFIER, FORM_SPACE_UPLOADS_FOLDER_NAME, FORM_SPACE_UPLOAD_NOT_ALLOWED_ERROR_CODE, FORM_SPACE_UPLOAD_POLICY, FORM_SPACE_UPLOAD_USER_MISMATCH_ERROR_CODE, FORM_SPACE_VALIDATION_PENDING_ERROR_CODE, FirebaseDevelopmentFunctions, FirebaseModelPermissionServiceInstance, FirebaseServerError, FirestoreAccessorStreamMode, FirestoreDocumentContextType, FormSpaceDocument, FormSpaceFileValidationState, FormSpaceFirestoreCollections, FormSpaceFunctions, FormSpaceProcessingState, FormSpaceState, GOOGLE_CLOUD_STORAGE_PUBLIC_URL_API_ENDPOINT, HIGH_UPLOADED_FILE_TYPE_DETERMINATION_LEVEL, INTERNAL_SERVER_ERROR_CODE, INVOKE_MODEL_OIDC_SCOPE, KnownNotificationHealthCheckIssueCode, LOW_UPLOADED_FILE_TYPE_DETERMINATION_LEVEL, MAX_FIRESTORE_MAP_ZOOM_LEVEL_VALUE, MAX_ON_CALL_QUERY_MODEL_LIMIT, MIN_FIRESTORE_MAP_ZOOM_LEVEL_VALUE, MODEL_FUNCTION_FIREBASE_CRUD_FUNCTION_SPECIFIER_SPLITTER, MODEL_NOT_AVAILABLE_ERROR_CODE, MODEL_STORAGE_FILE_SLASH_PATH_FACTORY, MailgunNotificationHealthCheckIssueCode, ModifyBeforeSetFirestoreDocumentDataAccessorWrapper, NOTIFICATION_BOX_DOES_NOT_EXIST_ERROR_CODE, NOTIFICATION_BOX_EXCLUSION_TARGET_INVALID_ERROR_CODE, NOTIFICATION_BOX_EXISTS_FOR_MODEL_ERROR_CODE, NOTIFICATION_BOX_MODEL_CRUD_FUNCTIONS_CONFIG, NOTIFICATION_BOX_RECIPIENT_DOES_NOT_EXIST_ERROR_CODE, NOTIFICATION_FUNCTION_TYPE_CONFIG_MAP, NOTIFICATION_HEALTH_CHECK_STATUS_SEVERITY, NOTIFICATION_LOGGED_EVENT_DAY_ITEM_CONVERTER, NOTIFICATION_MESSAGE_MAX_LENGTH, NOTIFICATION_MESSAGE_MIN_LENGTH, NOTIFICATION_MODEL_ALREADY_INITIALIZED_ERROR_CODE, NOTIFICATION_RECIPIENT_NAME_MAX_LENGTH, NOTIFICATION_RECIPIENT_NAME_MIN_LENGTH, NOTIFICATION_SUBJECT_MAX_LENGTH, NOTIFICATION_SUBJECT_MIN_LENGTH, NOTIFICATION_SUMMARY_EMBEDDED_NOTIFICATION_ITEM_MESSAGE_MAX_LENGTH, NOTIFICATION_SUMMARY_EMBEDDED_NOTIFICATION_ITEM_SUBJECT_MAX_LENGTH, NOTIFICATION_SUMMARY_ITEM_LIMIT, NOTIFICATION_TASK_SUBTASK_CHECKPOINT_CLEANUP, NOTIFICATION_TASK_SUBTASK_CHECKPOINT_PROCESSING, NOTIFICATION_USER_BLOCKED_FROM_BEING_ADD_TO_RECIPIENTS_ERROR_CODE, NOTIFICATION_USER_HEALTH_CHECK_PROBE_THROTTLED_ERROR_CODE, NOTIFICATION_USER_HEALTH_CHECK_THROTTLED_ERROR_CODE, NOTIFICATION_USER_HEALTH_CHECK_VERIFY_THROTTLED_ERROR_CODE, NOTIFICATION_USER_INVALID_UID_FOR_CREATE_ERROR_CODE, NOTIFICATION_USER_LOCKED_CONFIG_FROM_BEING_UPDATED_ERROR_CODE, NOTIFICATION_WEEK_NOTIFICATION_ITEM_LIMIT, NOT_FOUND_ERROR_CODE, NotificationBoxDocument, NotificationBoxRecipientFlag, NotificationBoxRecipientTemplateConfigBoolean, NotificationDeliveryMethod, NotificationDocument, NotificationFirestoreCollections, NotificationFunctions, NotificationHealthCheckStatus, NotificationLoggedEventDayDocument, NotificationLoggedEventDayPageDocument, NotificationMessageFlag, NotificationRecipientSendFlag, NotificationSendState, NotificationSendType, NotificationSummaryDocument, NotificationUserDocument, NotificationWeekDocument, OFFLINE_ACCESS_OIDC_SCOPE, OFFLINE_ACCESS_OIDC_SCOPE_DETAILS, OIDC_ENTRY_CLIENT_TYPE, OIDC_FUNCTION_TYPE_CONFIG_MAP, OIDC_MODEL_CRUD_FUNCTIONS_CONFIG, OIDC_PROVIDER_PROFILE_DEFAULT_DESCRIPTION_SUFFIX, OPENID_OIDC_SCOPE, OPENID_OIDC_SCOPE_DETAILS, OidcEntryDocument, OidcModelFirestoreCollections, OidcModelFunctions, PERMISSION_DENIED_ERROR_CODE, PRIVATE_KEY_JWT_TOKEN_ENDPOINT_AUTH_METHOD, PROFILE_OIDC_SCOPE, PROFILE_OIDC_SCOPE_DETAILS, PUBLIC_PKCE_TOKEN_ENDPOINT_AUTH_METHOD, QUERY_MODEL_OIDC_SCOPE, READ_MODEL_OIDC_SCOPE, RUN_DEV_FUNCTION_APP_FUNCTION_KEY, SCHEDULED_FUNCTION_DEV_FUNCTION_SPECIFIER, SCHEDULER_SYSTEM_STATE_TYPE, SERVICE_TOKEN_OIDC_SCOPE, SERVICE_TOKEN_OIDC_SCOPE_DETAILS, STANDARD_OIDC_SCOPES, STANDARD_OIDC_SCOPE_DETAILS, STORAGEFILE_RELATED_FILE_METADATA_KEY, STORAGE_FILE_ALREADY_PROCESSED_ERROR_CODE, STORAGE_FILE_CANNOT_BE_DELETED_YET_ERROR_CODE, STORAGE_FILE_FUNCTION_TYPE_CONFIG_MAP, STORAGE_FILE_GROUP_CREATE_INPUT_ERROR_CODE, STORAGE_FILE_GROUP_QUEUED_FOR_INITIALIZATION_ERROR_CODE, STORAGE_FILE_GROUP_ROOT_FOLDER_PATH, STORAGE_FILE_GROUP_ZIP_FILE_PATH, STORAGE_FILE_GROUP_ZIP_INFO_JSON_FILE_NAME, STORAGE_FILE_GROUP_ZIP_STORAGE_FILE_PURPOSE, STORAGE_FILE_GROUP_ZIP_STORAGE_FILE_PURPOSE_CREATE_ZIP_SUBTASK, STORAGE_FILE_MODEL_ALREADY_INITIALIZED_ERROR_CODE, STORAGE_FILE_MODEL_CRUD_FUNCTIONS_CONFIG, STORAGE_FILE_NOT_FLAGGED_FOR_DELETION_ERROR_CODE, STORAGE_FILE_NOT_FLAGGED_FOR_GROUPS_SYNC_ERROR_CODE, STORAGE_FILE_PROCESSING_NOTIFICATION_TASK_TYPE, STORAGE_FILE_PROCESSING_NOT_ALLOWED_FOR_INVALID_STATE_ERROR_CODE, STORAGE_FILE_PROCESSING_NOT_AVAILABLE_FOR_TYPE_ERROR_CODE, STORAGE_FILE_PROCESSING_NOT_QUEUED_FOR_PROCESSING_ERROR_CODE, STORAGE_FILE_PROCESSING_STUCK_THROTTLE_CHECK_MS, STORAGE_FILE_UPLOAD_USER_ROLE, STORAGE_FILE_UPLOAD_USER_SIMPLE_CLAIMS_CONFIGURATION, ScheduledFunctionDevelopmentFirebaseFunctionListEntry, ScheduledFunctionDevelopmentFunctionTypeEnum, StorageFileCreationType, StorageFileDocument, StorageFileFirestoreCollections, StorageFileFunctions, StorageFileGroupDocument, StorageFileProcessingState, StorageFileState, StorageFileUploadStreamUnsupportedError, SystemStateDocument, SystemStateFirestoreCollections, UNAUTHENTICATED_ERROR_CODE, UNAVAILABLE_ERROR_CODE, UNAVAILABLE_OR_DEACTIVATED_FUNCTION_ERROR_CODE, UNKNOWN_CALENDAR_TYPE, UNKNOWN_FORM_SPACE_TYPE, UNKNOWN_MODEL_TYPE_ERROR_CODE, UNTRACKABLE_NOTIFICATION_HEALTH_CHECK_PROBE_ID, UPDATE_MODEL_OIDC_SCOPE, UPLOADED_FILE_DOES_NOT_EXIST_ERROR_CODE, UPLOADED_FILE_INITIALIZATION_DISCARDED_ERROR_CODE, UPLOADED_FILE_INITIALIZATION_FAILED_ERROR_CODE, UPLOADED_FILE_NOT_ALLOWED_TO_BE_INITIALIZED_ERROR_CODE, UPLOADS_FOLDER_PATH, USER_EXTERNAL_CONNECTION_ALREADY_EXISTS_ERROR_CODE, USER_EXTERNAL_CONNECTION_CREDENTIALS_EXPIRED_ERROR_CODE, USER_EXTERNAL_CONNECTION_ENTRY_STATUSES, USER_EXTERNAL_CONNECTION_EXTERNAL_ACCOUNT_IN_USE_ERROR_CODE, USER_EXTERNAL_CONNECTION_EXTERNAL_ACCOUNT_KEY_DELIMITER, USER_EXTERNAL_CONNECTION_FUNCTION_TYPE_CONFIG_MAP, USER_EXTERNAL_CONNECTION_LINK_NOT_ENABLED_ERROR_CODE, USER_EXTERNAL_CONNECTION_MODEL_CRUD_FUNCTIONS_CONFIG, USER_EXTERNAL_CONNECTION_PROVIDER_NOT_ALLOWED_ERROR_CODE, USER_EXTERNAL_CONNECTION_PROVIDER_NOT_CONNECTED_ERROR_CODE, USER_EXTERNAL_CONNECTION_SIGN_IN_DENIED_ERROR_CODE, USER_EXTERNAL_CONNECTION_SIGN_IN_EMAIL_CONFLICT_ERROR_CODE, USER_EXTERNAL_CONNECTION_SIGN_IN_IDENTITY_UNAVAILABLE_ERROR_CODE, USER_EXTERNAL_CONNECTION_SIGN_IN_NOT_ENABLED_ERROR_CODE, USER_EXTERNAL_CONNECTION_SIGN_IN_REPORTABLE_ERROR_CODES, USER_EXTERNAL_CONNECTION_SIGN_IN_USER_MISSING_ERROR_CODE, USER_EXTERNAL_CONNECTION_UNLINK_LAST_LOGIN_METHOD_ERROR_CODE, UserExternalConnectionDocument, UserExternalConnectionFunctions, ZOHO_USER_EXTERNAL_CONNECTION_PROVIDER_TYPE, ZOOM_USER_EXTERNAL_CONNECTION_PROVIDER_TYPE, _createNotificationDocumentFromPair, abstractSubscribeOrUnsubscribeToNotificationBoxParamsType, abstractSubscribeToNotificationBoxParamsType, addConstraintToBuilder, addOrReplaceLimitInConstraints, adminOnlyScopesForOidcProviderProfiles, allChildDocumentsUnderParent, allChildDocumentsUnderParentPath, allChildDocumentsUnderRelativePath, allNotificationHealthCheckIssues, allowDocumentSnapshotWithPathOnceFilter, allowedNotificationRecipients, appCalendarTypeConfigService, appFormSpaceTypeConfigService, appNotificationTemplateTypeInfoRecordService, applyExclusionsToNotificationUserNotificationBoxRecipientConfigs, applyUserExternalConnectionEntry, applyUserExternalConnectionLogin, arrayUpdateWithAccessorFunction, asTopLevelFieldPath, asTopLevelFieldPaths, assertFirestoreUpdateHasData, assertFormSpaceUploadAllowed, assertStorageUploadOptionsStringFormat, assignDateCellRangeFunction, assignDateCellScheduleFunction, assignUnitedStatesAddressFunction, assignWebsiteFileLinkFunction, assignWebsiteLinkFunction, assignmentOnlyScopesForOidcProviderProfiles, buildFirebaseCollectionTypeModelTypeMap, calculateNsForNotificationUserNotificationBoxRecipientConfigs, calculateStorageFileGroupEmbeddedFileUpdate, calculateStorageFileGroupRegeneration, calendarCollectionReference, calendarConverter, calendarEventItem, calendarEventItemCalendarDate, calendarEventItemEndDate, calendarEventItemExceptionDateSet, calendarEventItemExceptionDateValue, calendarEventItemFields, calendarEventItemForId, calendarEventItemTimezone, calendarEventItemToICalendarEvent, calendarEventItemToInviteICalendar, calendarEventItemToInviteIcsString, calendarEventItemsFilterUniqueFunction, calendarEventItemsForModelKey, calendarEventItemsSortFunction, calendarEventOccurrenceToICalendarEvent, calendarExtensionDataToICalendarExtraProperties, calendarFirestoreCollection, calendarFunctionMap, calendarFunctionTypeConfigMap, calendarIcsFileStoragePath, calendarIdForModel, calendarIdentity, calendarModelCrudFunctionsConfig, calendarNextIcsRotateAt, calendarRecurringEventItem, calendarRecurringEventItemForScheduleRange, calendarRecurringEventItemModelRecurrenceInfo, calendarRecurringEventItemRecurrenceFields, calendarRecurringEventItemToICalendarEvent, calendarRecurringEventOccurrenceKey, calendarSyncState, calendarTemplate, calendarToICalendar, calendarToIcsString, calendarTypeConfigIcsConfig, calendarTypeConfigIcsExpansionRange, calendarTypeConfigRecord, calendarsDueForResyncQuery, calendarsFlaggedForSyncQuery, calendarsForTypeQuery, callModelFirebaseFunctionMapFactory, callModelOidcScopeForCallType, canQueueStorageFileForProcessing, childFirestoreModelKey, childFirestoreModelKeyPath, childFirestoreModelKeys, cleanupOldNotificationLoggedEventDaysParamsType, cleanupSentNotificationsParamsType, clientFirebaseFirestoreContextFactory, clientFirebaseStorageContextFactory, combineUploadFileTypeDeterminers, completeSubtaskProcessingAndScheduleCleanupTaskResult, contextGrantedModelRolesReader, contextGrantedModelRolesReaderDoesNotExistErrorMessage, contextGrantedModelRolesReaderPermissionErrorMessage, convertHttpsCallableErrorToReadableError, copyDocumentIdForUserRelatedModifierFunction, copyDocumentIdToFieldModifierFunction, copyStoragePath, copyUserRelatedDataAccessorFactoryFunction, copyUserRelatedDataModifierConfig, createFormSpaceParamsType, createNotificationBoxParamsType, createNotificationDocument, createNotificationDocumentIfSending, createNotificationDocumentPair, createNotificationLoggedEventTemplate, createNotificationSummaryParamsType, createNotificationTaskTemplate, createNotificationTemplate, createNotificationUserParamsType, createOidcClientFieldParamsType, createOidcClientParamsType, createStorageFileDocumentPair, createStorageFileDocumentPairFactory, createStorageFileGroupParamsType, createStorageFileParamsType, createStorageFileSignedUploadUrlParamsType, createUserExternalConnectionParamsType, dataFromDocumentSnapshots, dataFromSnapshotStream, decodeFirebaseAuthOobCode, defaultOidcProviderProfiles, defaultPagedItemPageDataConverter, defaultUnlockedScopesForOidcProviderProfiles, delayCompletion, deleteAllQueuedStorageFilesParamsType, deleteFormSpaceParamsType, targetModelParamsType as deleteOidcClientParamsType, targetModelParamsType as deleteOidcTokenParamsType, deleteStorageFileParamsType, determineByFileName, determineByFilePath, determineByFolderName, determineUserByFolder, determineUserByFolderWrapperFunction, determineUserByUserUploadsFolderWrapperFunction, developmentFirebaseFunctionMapFactory, directDataHttpsCallable, disconnectUserExternalConnectionParamsType, documentData, documentDataFunction, documentDataWithIdAndKey, documentReferenceFromDocument, documentReferencesFromDocuments, documentReferencesFromSnapshot, downloadMultipleStorageFilesFileParamsType, downloadMultipleStorageFilesParamsType, downloadStorageFileParamsType, effectiveNotificationBoxRecipientConfig, effectiveNotificationBoxRecipientTemplateConfig, emptyUserExternalConnection, encodeFirebaseAuthOobCode, endAt, endAtValue, endBefore, expandCalendarEvents, expireAllExpiredFormSpacesParamsType, expireFormSpaceTemplate, extendFirestoreCollectionWithPagedItemAccessor, extendFirestoreCollectionWithSingleDocumentAccessor, filterConstraintsOfType, filterDisallowedFirestoreItemPageIteratorInputConstraints, filterRepeatCheckpointSnapshots, filterWithDateRange, firebaseAuthErrorToReadableError, firebaseFirestoreClientDrivers, firebaseFirestoreQueryConstraintFunctionsDriver, firebaseFirestoreQueryDriver, firebaseFunctionMapFactory, firebaseModelLoader, firebaseModelPermissionService, firebaseModelService, firebaseModelServiceFactory, firebaseModelsService, firebaseQueryItemAccumulator, firebaseQuerySnapshotAccumulator, firebaseStorageBucketFolderPath, firebaseStorageClientAccessorDriver, firebaseStorageClientAccessorFile, firebaseStorageClientAccessorFolder, firebaseStorageClientDrivers, firebaseStorageClientListFilesResultFactory, firebaseStorageContextFactory, firebaseStorageFileExists, firebaseStorageFilePathFromStorageFilePath, firebaseStorageRefForStorageFilePath, firestoreArray, firestoreArrayMap, firestoreBitwiseObjectMap, firestoreBitwiseSet, firestoreBitwiseSetMap, firestoreBoolean, firestoreClientAccessorDriver, firestoreClientArrayUpdateToUpdateData, firestoreClientIncrementUpdateToUpdateData, firestoreCollectionDocumentCache, firestoreCollectionQueryFactory, firestoreContextFactory, firestoreDate, firestoreDateCellRange, firestoreDateCellRangeArray, firestoreDateCellRangeAssignFn, firestoreDateCellSchedule, firestoreDateCellScheduleAssignFn, firestoreDateNumber, firestoreDencoderArray, firestoreDencoderMap, firestoreDencoderStringArray, firestoreDocumentAccessorContextExtension, firestoreDocumentAccessorFactory, firestoreDocumentLoader, firestoreDocumentSnapshotPairsLoader, firestoreDocumentSnapshotPairsLoaderInstance, firestoreDummyKey, firestoreEncodedArray, firestoreEncodedObjectMap, firestoreEnum, firestoreEnumArray, firestoreField, firestoreFieldConfigToModelMapFunctionsRef, firestoreFixedItemPageIteration, firestoreFixedItemPageIterationFactory, firestoreIdBatchVerifierFactory, firestoreIdentityTypeArray, firestoreIdentityTypeArrayName, firestoreItemPageIteration, firestoreItemPageIterationFactory, firestoreLatLngString, firestoreMap, firestoreMapZoomLevel, firestoreModelId, firestoreModelIdArrayField, firestoreModelIdFromDocument, firestoreModelIdFromEmail, firestoreModelIdGrantedRoleArrayMap, firestoreModelIdGrantedRoleMap, firestoreModelIdOrKeyType, firestoreModelIdString, firestoreModelIdType, firestoreModelIdentity, firestoreModelIdentityTypeMap, firestoreModelIdsFromDocuments, firestoreModelIdsFromKey, firestoreModelKey, firestoreModelKeyArrayField, firestoreModelKeyCollectionName, firestoreModelKeyCollectionType, firestoreModelKeyCollectionTypeArray, firestoreModelKeyCollectionTypeArrayName, firestoreModelKeyCollectionTypePair, firestoreModelKeyEncodedGrantedRoleMap, firestoreModelKeyFactory, firestoreModelKeyFromDocument, firestoreModelKeyGrantedRoleArrayMap, firestoreModelKeyGrantedRoleMap, firestoreModelKeyPairObject, firestoreModelKeyParentKey, firestoreModelKeyParentKeyPartPairs, firestoreModelKeyPart, firestoreModelKeyPartPairs, firestoreModelKeyPartPairsKeyPath, firestoreModelKeyPartPairsPaths, firestoreModelKeyPath, firestoreModelKeyString, firestoreModelKeyType, firestoreModelKeyTypePair, firestoreModelKeys, firestoreModelKeysFromDocuments, firestoreModelType, firestoreNotificationBoxRecipient, firestoreNotificationBoxRecipientTemplateConfigRecord, firestoreNotificationDeliveryHealthCheckResult, firestoreNotificationHealthCheck, firestoreNotificationHealthCheckIssue, firestoreNotificationHealthCheckProbe, firestoreNotificationItem, firestoreNotificationRecipientWithConfig, firestoreNotificationUserDefaultNotificationBoxRecipientConfig, firestoreNotificationUserNotificationBoxRecipientConfig, firestoreNumber, firestoreObjectArray, firestoreObjectMap, firestorePassThroughField, firestoreQueryConstraint, firestoreQueryConstraintFactory, firestoreQueryDocumentSnapshotPairsLoader, firestoreQueryFactory, firestoreSingleDocumentAccessor, firestoreString, firestoreSubObject, firestoreTimezoneString, firestoreUID, firestoreUniqueArray, firestoreUniqueKeyedArray, firestoreUniqueNumberArray, firestoreUniqueStringArray, firestoreUnitedStatesAddress, firestoreUnitedStatesAddressAssignFn, firestoreUnixDateTimeSecondsNumber, firestoreUpdateWithNoDataError, firestoreWebsiteFileLink, firestoreWebsiteFileLinkAssignFn, firestoreWebsiteFileLinkEncodedArray, firestoreWebsiteFileLinkObjectArray, firestoreWebsiteLink, firestoreWebsiteLinkArray, firestoreWebsiteLinkAssignFn, flagStaleCalendarsForSyncParamsType, flatFirestoreModelKey, formSpaceCollectionReference, formSpaceConverter, formSpaceFileSlotConfig, formSpaceFileSlotName, formSpaceFileStoragePath, formSpaceFileSubObject, formSpaceFileUploaderId, formSpaceFilesInSlot, formSpaceFirestoreCollection, formSpaceFunctionMap, formSpaceIdForModel, formSpaceIdentity, formSpaceKeyForStorageFile, formSpaceSlotFileAccess, formSpaceSlotMaxFiles, formSpaceSlotMinFiles, formSpaceSlotStatus, formSpaceStorageFileGroupId, formSpaceSubmissionNotificationTaskTemplate, formSpaceSubmissionNotificationTaskUniqueId, formSpaceSubmitBlockers, formSpaceTemplate, formSpaceTypeConfigRecord, formSpaceUploadFileNameDetails, formSpaceUploadsFilePath, formSpaceUploadsFolderPath, formSpacesDueForExpirationQuery, formSpacesForOwnerQuery, formSpacesQueuedForProcessingQuery, getDataFromDocumentSnapshots, getDocumentSnapshotData, getDocumentSnapshotDataPair, getDocumentSnapshotDataPairs, getDocumentSnapshotDataPairsWithData, getDocumentSnapshotDataTuples, getDocumentSnapshotPair, getDocumentSnapshotPairs, getDocumentSnapshots, getDocumentSnapshotsData, grantFormSpaceRolesForUserAuthFunction, grantFullAccessIfAdmin, grantFullAccessIfAuthUserRelated, grantModelRolesIfAdmin, grantModelRolesIfAdminFunction, grantModelRolesIfAuthUserRelatedModelFunction, grantModelRolesIfFunction, grantModelRolesIfHasAuthRolesFactory, grantModelRolesIfHasAuthRolesFunction, grantModelRolesOnlyIfFunction, grantStorageFileRolesForUserAuthFunction, hasRunInCurrentHour, inContextFirebaseModelServiceFactory, inContextFirebaseModelsServiceFactory, inMemoryFirestoreCollectionCacheDelegate, inMemoryFirestoreContextCache, inMemoryFirestoreContextCacheFactory, incrementUpdateWithAccessorFunction, inferCalendarRelatedModelKey, inferKeyFromTwoWayFlatFirestoreModelKey, inferNotificationBoxRelatedModelKey, inferStorageFileGroupRelatedModelKey, inferredTargetModelIdParamsType, inferredTargetModelParamsType, initializeAllApplicableNotificationBoxesParamsType, initializeAllApplicableNotificationSummariesParamsType, initializeAllApplicableStorageFileGroupsParamsType, initializeAllStorageFilesFromUploadsParamsType, initializeNotificationModelParamsType, initializeStorageFileFromUploadParamsType, initializeStorageFileModelParamsType, interceptAccessorFactoryFunction, isAdminInFirebaseModelContext, isCalendarIcsRotateThrottled, isClientFirebaseError, isCompleteNotificationSendState, isFirebaseStorageObjectNotFoundError, isFirestoreModelId, isFirestoreModelIdOrKey, isFirestoreModelKey, isFormSpaceEditable, isFormSpaceFileAccessibleByUser, isFormSpaceFileAccessibleWithAccess, isFormSpaceFullyLocked, isFormSpaceReopenable, isFormSpaceStorageFileAccessibleByUser, isLoggedEventNotification, isNthHourOfDay, isOwnerOfUserRelatedModelInFirebaseModelContext, isPendingNotificationHealthCheckProbe, isProblemNotificationHealthCheckStatus, iterateFirestoreDocumentSnapshotBatches, iterateFirestoreDocumentSnapshotCheckpoints, iterateFirestoreDocumentSnapshotPairBatches, iterateFirestoreDocumentSnapshotPairs, iterateFirestoreDocumentSnapshots, iterateStorageListFiles, iterateStorageListFilesByEachFile, iterateStorageListFilesFactory, iterationQueryDocChangeWatcher, iterationQueryDocChangeWatcherChangeTypeForGroup, latestSnapshotsFromDocuments, lazyFirebaseFunctionsFactory, limit, limitToLast, limitUploadFileTypeDeterminer, limitedFirestoreDocumentAccessorFactory, limitedFirestoreDocumentAccessorSnapshotCache, loadAllFirestoreDocumentSnapshot, loadAllFirestoreDocumentSnapshotPairs, loadDocumentsForDocumentReferences, loadDocumentsForDocumentReferencesFromValues, loadDocumentsForIds, loadDocumentsForIdsFromValues, loadDocumentsForKeys, loadDocumentsForKeysFromValues, loadDocumentsForSnapshots, loadDocumentsForValues, loadNotificationBoxDocumentForReferencePair, loadSchedulerSystemState, loadStorageFileGroupDocumentForReferencePair, lockFormSpaceParamsType, lockFormSpaceTemplate, makeDocuments, makeFirestoreCollection, makeFirestoreCollectionGroup, makeFirestoreCollectionWithParent, makeFirestoreContextCache, makeFirestoreItemPageIteratorDelegate, makeFirestoreQueryConstraintFunctionsDriver, makePagedItemFirestoreCollection, makeRootSingleItemFirestoreCollection, makeSingleItemFirestoreCollection, mapDataFromSnapshot, mapHttpsCallable, mapLatestSnapshotsFromDocuments, markCalendarForSyncTemplate, mergeNotificationBoxRecipientTemplateConfigRecords, mergeNotificationBoxRecipientTemplateConfigs, mergeNotificationBoxRecipients, mergeNotificationSendMessagesResult, mergeNotificationUserDefaultNotificationBoxRecipientConfig, mergeNotificationUserNotificationBoxRecipientConfigs, modelStorageSlashPathFactory, modifyBeforeSetInterceptAccessorFactoryFunction, newDocuments, newNotificationBoxRecipientForUid, noContentNotificationMessageFunctionFactory, noStringFormatInStorageUploadOptionsError, noopFirestoreCollectionCache, noopFirestoreCollectionCacheDelegate, noopFirestoreCollectionDocumentCache, noopFirestoreContextCache, notificationBoxCollectionReference, notificationBoxConverter, notificationBoxFirestoreCollection, notificationBoxIdForModel, notificationBoxIdentity, notificationBoxRecipientTemplateConfigArrayEntryParamType, notificationBoxRecipientTemplateConfigArrayToRecord, notificationBoxRecipientTemplateConfigRecordToArray, notificationBoxesFlaggedForNeedsInitializationQuery, notificationBoxesFlaggedInvalidQuery, notificationCollectionReference, notificationCollectionReferenceFactory, notificationConverter, notificationDeliveryHealthCheckResultForMethod, notificationFirestoreCollectionFactory, notificationFirestoreCollectionGroup, notificationFunctionMap, notificationHealthCheckIssue, notificationHealthCheckPendingProbeMethods, notificationIdentity, notificationLoggedEventDayCollectionReference, notificationLoggedEventDayCollectionReferenceFactory, notificationLoggedEventDayConverter, notificationLoggedEventDayFirestoreCollectionFactory, notificationLoggedEventDayFirestoreCollectionGroup, notificationLoggedEventDayId, notificationLoggedEventDayIdentity, notificationLoggedEventDayPageCollectionReference, notificationLoggedEventDayPageFirestoreCollectionGroup, notificationLoggedEventDayPageIdentity, notificationLoggedEventDayPagedItemsCollectionFactory, notificationLoggedEventDayPagedItemsCollectionReferenceFactory, notificationLoggedEventDaysOlderThanQuery, notificationLoggedEventLoader, notificationMessageFunction, notificationRecipientParamsType, notificationSendExclusionCanSendFunction, notificationSendFlagsImplyIsComplete, notificationSubtaskComplete, notificationSummariesFlaggedForNeedsInitializationQuery, notificationSummaryCollectionReference, notificationSummaryConverter, notificationSummaryFirestoreCollection, notificationSummaryIdForModel, notificationSummaryIdForUidFunctionForRootFirestoreModelIdentity, notificationSummaryIdentity, notificationTaskCanRunNextCheckpoint, notificationTaskComplete, notificationTaskDelayRetry, notificationTaskFailed, notificationTaskPartiallyComplete, notificationTaskUniqueId, notificationTemplateTypeInfoRecord, notificationUserCollectionReference, notificationUserConverter, notificationUserFirestoreCollection, notificationUserHasExclusionQuery, notificationUserHealthCheckNextProbeAt, notificationUserHealthCheckNextProbeAtByMethod, notificationUserHealthCheckNextRunAt, notificationUserHealthCheckNextVerifyAt, notificationUserHealthCheckParamsType, notificationUserIdentity, notificationUsersFlaggedForNeedsSyncQuery, notificationWeekCollectionReference, notificationWeekCollectionReferenceFactory, notificationWeekConverter, notificationWeekFirestoreCollectionFactory, notificationWeekFirestoreCollectionGroup, notificationWeekIdentity, notificationsPastSendAtTimeQuery, notificationsReadyForCleanupQuery, nthHourOfDayIndex, offset, oidcClientEntriesByOwnerQuery, oidcEntriesByClientIdQuery, oidcEntriesByGrantIdQuery, oidcEntriesByUidQuery, oidcEntriesByUserCodeQuery, oidcEntriesWithTypeQuery, oidcEntryCollectionReference, oidcEntryConverter, oidcEntryFirestoreCollection, oidcEntryIdentity, oidcGrantEntriesByUidQuery, oidcModelFunctionMap, oidcProviderProfileDetails, oidcProviderProfilesForClient, oidcProviderProfilesForKeys, oidcScopeTermSatisfied, oidcScopeTermsSatisfied, oidcScopesFromScopeClaim, onCallCreateModelParams, onCallCreateModelResult, onCallCreateModelResultWithDocs, onCallDeleteModelParams, onCallDevelopmentParams, onCallInvokeModelParams, onCallQueryModelParams, onCallReadModelParams, onCallTypedModelParamsFunction, onCallUpdateModelParams, optionalFirestoreArray, optionalFirestoreBoolean, optionalFirestoreDate, optionalFirestoreDateNumber, optionalFirestoreEnum, optionalFirestoreField, optionalFirestoreNotificationHealthCheck, optionalFirestoreNumber, optionalFirestorePassthroughJsonField, optionalFirestoreString, optionalFirestoreUID, optionalFirestoreUnitedStatesAddress, optionalFirestoreUnixDateTimeSecondsNumber, orderBy, orderByDocumentId, parseFormSpaceUploadPath, processAllQueuedFormSpacesParamsType, processAllQueuedStorageFilesParamsType, processStorageFileParamsType, pruneCalendarEvents, readFirestoreModelKey, readFirestoreModelKeyFromDocumentSnapshot, readLoggingFirestoreContextCache, readLoggingFirestoreContextCacheFactory, readMultipleStorageFilesMetadataFileParamsType, readMultipleStorageFilesMetadataParamsType, readStorageFileMetadataParamsType, readUserExternalConnectionAuthorizeStateParamsType, regenerateAllFlaggedStorageFileGroupsContentParamsType, regenerateStorageFileGroupContentParamsType, removeCalendarEventItems, removeFormSpaceFileParamsType, reopenFormSpaceParamsType, reopenFormSpaceTemplate, replaceCalendarEventItemsForModelKey, replaceConstraints, requiredFormSpaceFileSlots, requiredScopesForOidcProviderProfiles, resolveEffectiveOidcScopeTerms, resolveFormSpaceExpiresAt, resolveFormSpaceLocksAt, resolveOidcModelScopeRequirement, resyncAllNotificationUserParamsType, targetModelParamsType as resyncNotificationUserParamsType, rollupNotificationDeliveryHealthCheckResultStatus, rollupNotificationHealthCheckResultStatus, rollupNotificationHealthCheckStatus, rotateCalendarIcsParamsType, targetModelParamsType as rotateOidcClientSecretParamsType, scheduledFunctionDevelopmentFirebaseFunctionParamsType, schedulerSystemDataConverter, schedulerSystemStateRead, scopesForOidcProviderProfiles, selectFromFirebaseModelsService, sendNotificationParamsType, sendQueuedNotificationsParamsType, separateConstraints, setIdAndKeyFromKeyIdRefOnDocumentData, setIdAndKeyFromSnapshotOnDocumentData, shouldSaveNotificationToNotificationWeek, shouldSendCreatedNotificationInput, snapshotConverterFunctions, snapshotStreamDataForAccessor, snapshotStreamForAccessor, sortNotificationItemsFunction, startAfter, startAt, startAtValue, storageFileCollectionReference, storageFileConverter, storageFileDisplayFileName, storageFileFirestoreCollection, storageFileFlaggedForSyncWithGroupsQuery, storageFileFunctionMap, storageFileGroupCollectionReference, storageFileGroupConverter, storageFileGroupCreateStorageFileKeyFactory, storageFileGroupCreatedStorageFileKey, storageFileGroupEmbeddedFile, storageFileGroupFirestoreCollection, storageFileGroupFolderPath, storageFileGroupIdForModel, storageFileGroupIdentity, storageFileGroupZipFileStoragePath, storageFileGroupZipStorageFileKey, storageFileGroupsFlaggedForContentRegenerationQuery, storageFileGroupsFlaggedForNeedsInitializationQuery, storageFileGroupsFlaggedInvalidQuery, storageFileIdentity, storageFileProcessingNotificationTaskTemplate, storageFilePurposeAndUserQuery, storageFileUploadScopeType, storageFilesForFormSpaceQuery, storageFilesQueuedForDeleteQuery, storageFilesQueuedForProcessingQuery, storageListFilesResultFactory, storageListFilesResultHasNoNextError, storagePathFactory, storagePublicDownloadUrl, storedFileReaderFactory, streamDocumentSnapshotDataPairs, streamDocumentSnapshotDataPairsWithData, streamDocumentSnapshotsData, streamFromOnSnapshot, submitFormSpaceParamsType, submitFormSpaceTemplate, syncAllFlaggedCalendarsParamsType, syncAllFlaggedStorageFilesWithGroupsParamsType, syncCalendarParamsType, syncStorageFileWithGroupsParamsType, systemStateCollectionReference, systemStateConverter, systemStateFirestoreCollection, systemStateIdentity, systemStateStoredDataConverterFactory, targetModelIdParamsType, targetModelParamsType, twoWayFlatFirestoreModelKey, unlinkUserExternalConnectionLoginParamsType, unreadNotificationItems, unsupportedFirestoreDriverFunctionError, untrackableNotificationHealthCheckProbe, updateCalendarEventsTemplate, updateFormSpaceParamsType, targetModelParamsType as updateNotificationBoxParamsType, updateNotificationBoxRecipientLikeParamsType, updateNotificationBoxRecipientParamsType, updateNotificationBoxRecipientTemplateConfigRecord, updateNotificationRecipient, updateNotificationSummaryParamsType, updateNotificationUserDefaultNotificationBoxRecipientConfig, updateNotificationUserDefaultNotificationBoxRecipientConfigParamsType, updateNotificationUserNotificationBoxRecipientConfigIfChanged, updateNotificationUserNotificationBoxRecipientConfigs, updateNotificationUserNotificationBoxRecipientParamsType, updateNotificationUserNotificationSendExclusions, updateNotificationUserParamsType, updateOidcClientFieldParamsType, updateOidcClientParamsType, updateStorageFileGroupEntryParamsType, updateStorageFileGroupParamsType, updateStorageFileParamsType, updateWithAccessorUpdateAndConverterFunction, uploadFileWithStream, upsertCalendarEventItems, useContextAuth, useContextAuthUid, useDocumentSnapshot, useDocumentSnapshotData, useFirebaseModelsService, userExternalConnectionAccessorFactory, userExternalConnectionCollectionReference, userExternalConnectionConnectedProviderTypes, userExternalConnectionConverter, userExternalConnectionEntryFields, userExternalConnectionEntryForOutcome, userExternalConnectionEntryForProvider, userExternalConnectionEntryIsConnected, userExternalConnectionEntryIsExpired, userExternalConnectionExternalAccountKey, userExternalConnectionExternalAccountKeys, userExternalConnectionFirestoreCollection, userExternalConnectionFunctionMap, userExternalConnectionIdentity, userExternalConnectionIsConnectedToProvider, userExternalConnectionLinkedLoginProviderTypes, userExternalConnectionLoginFields, userExternalConnectionLoginForIdentity, userExternalConnectionLoginForProvider, userExternalConnectionValue, userExternalConnectionsWithConnectedProviderQuery, userExternalConnectionsWithExternalAccountQuery, userUploadsFolderSlashPathFactory, userUploadsFolderStoragePathFactory, where, whereDateIsAfter, whereDateIsAfterWithSort, whereDateIsBefore, whereDateIsBeforeWithSort, whereDateIsBetween, whereDateIsInRange, whereDateIsOnOrAfter, whereDateIsOnOrAfterWithSort, whereDateIsOnOrBefore, whereDateIsOnOrBeforeWithSort, whereDocumentId, whereStringHasRootIdentityModelKey, whereStringValueHasPrefix };

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@dereekb/firebase",
-  "version": "14.0.1",
+  "version": "14.1.0",
   "type": "module",
   "sideEffects": false,
   "exports": {
@@ -22,10 +22,10 @@
     }
   },
   "peerDependencies": {
-    "@dereekb/date": "14.0.1",
-    "@dereekb/model": "14.0.1",
-    "@dereekb/rxjs": "14.0.1",
-    "@dereekb/util": "14.0.1",
+    "@dereekb/date": "14.1.0",
+    "@dereekb/model": "14.1.0",
+    "@dereekb/rxjs": "14.1.0",
+    "@dereekb/util": "14.1.0",
     "@firebase/rules-unit-testing": "5.0.2",
     "@marcbachmann/cel-js": "^8.0.0",
     "@typescript-eslint/parser": "8.69.0",

package/src/lib/model/userexternalconnection/index.d.ts

@@ -4,3 +4,4 @@ export * from './userexternalconnection.util';
 export * from './userexternalconnection.query';
 export * from './userexternalconnection.api';
 export * from './userexternalconnection.action';
+export * from './userexternalconnection.error';

package/src/lib/model/userexternalconnection/userexternalconnection.api.d.ts

@@ -1,4 +1,5 @@
 import { type Type } from 'arktype';
+import { type Maybe } from '@dereekb/util';
 import { type InferredTargetModelParams } from '../../common/model/model/model.param';
 import { type FirebaseFunctionTypeConfigMap, type ModelFirebaseCreateFunction, type ModelFirebaseCrudFunction, type ModelFirebaseCrudFunctionConfigMap, type ModelFirebaseFunctionMap } from '../../client';
 import { type UserExternalConnectionTypes } from './userexternalconnection';
@@ -41,8 +42,38 @@ export interface ReadUserExternalConnectionAuthorizeStateParams extends Inferred
      * The provider type to begin connecting to.
      */
     readonly providerType: UserExternalConnectionProviderType;
+    /**
+     * Which handoff the state begins. Defaults to `connect`.
+     *
+     * - `connect` — attach the provider as a DATA connection, with the data scopes.
+     * - `link` — make the provider a LOGIN METHOD for the already-signed-in caller, with the sign-in
+     *   scopes. A separate round trip because the two scope sets are not guaranteed to be the same,
+     *   so a data grant cannot be assumed to cover an identity read.
+     *
+     * Absent means `connect`, so a client minting a state before `link` existed still gets one.
+     */
+    readonly mode?: Maybe<'connect' | 'link'>;
 }
 export declare const readUserExternalConnectionAuthorizeStateParamsType: Type<ReadUserExternalConnectionAuthorizeStateParams>;
+/**
+ * Parameters for removing a provider as a LOGIN METHOD for the current user.
+ *
+ * Distinct from {@link DisconnectUserExternalConnectionParams}, and strictly larger: a disconnect
+ * drops the data connection and leaves the login link in place, whereas an unlink removes the login
+ * link AND the data connection and its credentials. "Stop using my Discord token" and "Discord is no
+ * longer how I log in" are different requests, so they are different calls.
+ *
+ * If no target model is provided, the current user's connection document is assumed.
+ *
+ * @dbxModelApiParams
+ */
+export interface UnlinkUserExternalConnectionLoginParams extends InferredTargetModelParams {
+    /**
+     * The provider type to unlink.
+     */
+    readonly providerType: UserExternalConnectionProviderType;
+}
+export declare const unlinkUserExternalConnectionLoginParamsType: Type<UnlinkUserExternalConnectionLoginParams>;
 /**
  * The opaque, short-lived `state` to carry through a provider's OAuth handoff.
  *
@@ -91,9 +122,17 @@ export type UserExternalConnectionModelCrudFunctionsConfig = {
              * Disconnects the current user from the given provider.
              *
              * Removes the provider's credentials and its entry in one transaction, and recomputes the
-             * connected-provider array from the result.
+             * connected-provider array from the result. The provider's LOGIN LINK is retained — a data
+             * connection ending says nothing about whether the provider is still a way to sign in.
              */
             disconnect: DisconnectUserExternalConnectionParams;
+            /**
+             * Removes the given provider as a login method for the current user.
+             *
+             * Removes the login link, the entry, and the credentials in one transaction. Refused when it
+             * would leave the account with no way to sign back in.
+             */
+            unlink: UnlinkUserExternalConnectionLoginParams;
         };
     };
 };
@@ -111,6 +150,7 @@ export declare abstract class UserExternalConnectionFunctions implements ModelFi
         };
         updateUserExternalConnection: {
             disconnect: ModelFirebaseCrudFunction<DisconnectUserExternalConnectionParams>;
+            unlink: ModelFirebaseCrudFunction<UnlinkUserExternalConnectionLoginParams>;
         };
     };
 }

package/src/lib/model/userexternalconnection/userexternalconnection.d.ts

@@ -1,8 +1,8 @@
-import { type Maybe } from '@dereekb/util';
+import { type EmailAddress, type Maybe } from '@dereekb/util';
 import { type GrantedReadRole, type GrantedUpdateRole } from '@dereekb/model';
 import { AbstractFirestoreDocument, type CollectionReference, type FirestoreCollection, type FirestoreContext } from '../../common';
 import { type UserRelated, type UserRelatedById } from '../user';
-import { type UserExternalConnectionCapability, type UserExternalConnectionExternalAccountId, type UserExternalConnectionProviderType } from './userexternalconnection.id';
+import { type UserExternalConnectionCapability, type UserExternalConnectionExternalAccountId, type UserExternalConnectionExternalAccountKey, type UserExternalConnectionProviderType } from './userexternalconnection.id';
 /**
  * Provides access to the {@link UserExternalConnection} collection.
  *
@@ -99,6 +99,69 @@ export interface UserExternalConnectionEntry {
  * Map of provider type to the user's connection state for that provider.
  */
 export type UserExternalConnectionEntryMap = Record<UserExternalConnectionProviderType, UserExternalConnectionEntry>;
+/**
+ * A provider that is a LOGIN METHOD for this account.
+ *
+ * Separate from {@link UserExternalConnectionEntry} rather than a flag on it, because the two describe
+ * different kinds of fact and have different lifecycles. Every field on an entry is DERIVED from the
+ * credentials stored beside it — take the credentials away and the entry has nothing left to say — so
+ * an entry is a statement about a grant. A login link is a statement about the ACCOUNT: "this Discord
+ * user is how this person signs in". It survives the credentials expiring, being revoked by the
+ * provider, and the user disconnecting the data connection, and it is removed only by an explicit
+ * unlink.
+ *
+ * Folding it into the entry would mean a disconnect had to choose between destroying the sign-in
+ * binding and retaining a `disconnected` entry that lies about the credentials. Two maps make the
+ * choice unnecessary.
+ *
+ * Written ONLY by an identity-scoped OAuth round trip (the sign-in or `link` direction), never by the
+ * data connect flow: the scopes a data connection is granted are not guaranteed to cover what an
+ * identity read needs.
+ *
+ * @dbxModelSubObject
+ */
+export interface UserExternalConnectionLogin {
+    /**
+     * Identifier of the linked account within the provider. REQUIRED: this IS the identity.
+     *
+     * @dbxModelVariable externalAccountId
+     */
+    ea: UserExternalConnectionExternalAccountId;
+    /**
+     * Human-readable label for the linked account (e.g. the provider-side username).
+     *
+     * @dbxModelVariable label
+     */
+    l?: Maybe<string>;
+    /**
+     * The email the provider reported at link time, when it reported one.
+     *
+     * @dbxModelVariable email
+     */
+    em?: Maybe<EmailAddress>;
+    /**
+     * Whether the PROVIDER considered that email verified at link time.
+     *
+     * @dbxModelVariable emailVerified
+     */
+    emv?: Maybe<boolean>;
+    /**
+     * Date the provider was FIRST linked. Preserved across relinks.
+     *
+     * @dbxModelVariable linkedAt
+     */
+    lat: Date;
+    /**
+     * Date this link was last updated at.
+     *
+     * @dbxModelVariable updatedAt
+     */
+    uat: Date;
+}
+/**
+ * Map of provider type to the login link the user holds for that provider.
+ */
+export type UserExternalConnectionLoginMap = Record<UserExternalConnectionProviderType, UserExternalConnectionLogin>;
 /**
  * The client-readable half of a user's third-party OAuth connection state.
  *
@@ -136,6 +199,37 @@ export interface UserExternalConnection extends UserRelated, UserRelatedById {
      * @dbxModelVariable connectedProviderTypes
      */
     c: UserExternalConnectionProviderType[];
+    /**
+     * Per-provider LOGIN LINKS, keyed by provider type.
+     *
+     * A provider present here is a way this account signs in. Independent of `e`: a provider can be
+     * linked without a data connection (the sign-in wrote the link and the app did not opt into
+     * `signInConnects`), connected without being linked (a connect-only provider), or both.
+     *
+     * @dbxModelVariable logins
+     */
+    li: UserExternalConnectionLoginMap;
+    /**
+     * DERIVED from `e` UNION `li`: the `<providerType>:<externalAccountId>` key of every entry that
+     * names an external account, plus every login link's.
+     *
+     * The `c` array's sibling, and it exists for the same reason: Firestore cannot query across map
+     * keys, so `e.<provider>.ea` is unreachable. `c` answers "who is connected to X?"; this answers
+     * "who IS X?" — the lookup a sign-in performs to resolve a third-party identity to a Firebase uid.
+     *
+     * Both maps contribute because either one alone loses the answer. Sourcing it from `e` only meant
+     * disconnecting a data connection silently destroyed the sign-in binding and the next sign-in minted
+     * a second Firebase user; sourcing it from `li` only would lose a connect-established account that
+     * was never a login method.
+     *
+     * Unlike `c`, membership is NOT filtered by status. Which Discord account a user is is a fact
+     * about their identity, not about whether their credentials currently work: a returning user whose
+     * token expired (`error`) must still resolve to the same uid, or a sign-in would mint them a
+     * second account. Recomputed on every write and never passed in by a caller.
+     *
+     * @dbxModelVariable externalAccountKeys
+     */
+    ec?: Maybe<UserExternalConnectionExternalAccountKey[]>;
     /**
      * Date this document was last updated at.
      *
@@ -147,12 +241,17 @@ export interface UserExternalConnection extends UserRelated, UserRelatedById {
  * Roles for a UserExternalConnection. Users can read their own connection state; all writes go
  * through the server.
  *
- * `connect` and `disconnect` are called out separately from `update` because they are the only
- * operations a client can reach, so an app can withhold either one (a user allowed to drop a
+ * `connect`, `disconnect` and `unlink` are called out separately from `update` because they are the
+ * only operations a client can reach, so an app can withhold any one of them (a user allowed to drop a
  * connection but not to add another, or the reverse) without also withholding the server-driven
  * writes that share `update`.
+ *
+ * `unlink` is distinct from `disconnect` because they remove different things: a disconnect drops the
+ * data connection and keeps the login link, an unlink removes the login link AND everything the
+ * disconnect would have. Removing a way to sign in is the more consequential of the two, so an app can
+ * grant one without the other.
  */
-export type UserExternalConnectionRoles = GrantedReadRole | GrantedUpdateRole | 'connect' | 'disconnect';
+export type UserExternalConnectionRoles = GrantedReadRole | GrantedUpdateRole | 'connect' | 'disconnect' | 'unlink';
 export declare class UserExternalConnectionDocument extends AbstractFirestoreDocument<UserExternalConnection, UserExternalConnectionDocument, typeof userExternalConnectionIdentity> {
     get modelIdentity(): import("../..").RootFirestoreModelIdentity<"userExternalConnection", "uec">;
 }
@@ -169,6 +268,17 @@ export declare const userExternalConnectionEntryFields: {
     uat: import("../..").FirestoreModelFieldMapFunctionsConfig<Date, string>;
     er: import("../..").FirestoreModelFieldMapFunctionsConfig<Maybe<UserExternalConnectionErrorCode>, Maybe<UserExternalConnectionErrorCode>>;
 };
+/**
+ * Field conversions for a {@link UserExternalConnectionLogin}.
+ */
+export declare const userExternalConnectionLoginFields: {
+    ea: import("../..").FirestoreModelFieldMapFunctionsConfig<string, string>;
+    l: import("../..").FirestoreModelFieldMapFunctionsConfig<Maybe<string>, Maybe<string>>;
+    em: import("../..").FirestoreModelFieldMapFunctionsConfig<Maybe<string>, Maybe<string>>;
+    emv: import("../..").FirestoreModelFieldMapFunctionsConfig<Maybe<boolean>, Maybe<boolean>>;
+    lat: import("../..").FirestoreModelFieldMapFunctionsConfig<Date, string>;
+    uat: import("../..").FirestoreModelFieldMapFunctionsConfig<Date, string>;
+};
 export declare const userExternalConnectionConverter: import("../..").SnapshotConverterFunctions<UserExternalConnection, Partial<import("@dereekb/util").ReplaceType<UserExternalConnection, import("@dereekb/util").MaybeMap<object>, any>>>;
 /**
  * Copies the document id into `uid` on write, so the stored uid can never drift from the document id.

package/src/lib/model/userexternalconnection/userexternalconnection.error.d.ts

@@ -0,0 +1,41 @@
+/**
+ * Error codes the UserExternalConnection server surfaces.
+ *
+ * Declared HERE rather than beside the `HttpsError` factories in `@dereekb/firebase-server/model`
+ * because both sides need them: the server throws them, and the client branches on them — a login
+ * page deciding what to say about a refused sign-in, or a client treating a raced
+ * `..._ALREADY_EXISTS` as success. A code the browser cannot import is a code the browser has to
+ * hard-code.
+ */
+export declare const USER_EXTERNAL_CONNECTION_PROVIDER_NOT_CONNECTED_ERROR_CODE = "USER_EXTERNAL_CONNECTION_PROVIDER_NOT_CONNECTED";
+export declare const USER_EXTERNAL_CONNECTION_PROVIDER_NOT_ALLOWED_ERROR_CODE = "USER_EXTERNAL_CONNECTION_PROVIDER_NOT_ALLOWED";
+export declare const USER_EXTERNAL_CONNECTION_ALREADY_EXISTS_ERROR_CODE = "USER_EXTERNAL_CONNECTION_ALREADY_EXISTS";
+export declare const USER_EXTERNAL_CONNECTION_CREDENTIALS_EXPIRED_ERROR_CODE = "USER_EXTERNAL_CONNECTION_CREDENTIALS_EXPIRED";
+export declare const USER_EXTERNAL_CONNECTION_EXTERNAL_ACCOUNT_IN_USE_ERROR_CODE = "USER_EXTERNAL_CONNECTION_EXTERNAL_ACCOUNT_IN_USE";
+export declare const USER_EXTERNAL_CONNECTION_SIGN_IN_NOT_ENABLED_ERROR_CODE = "USER_EXTERNAL_CONNECTION_SIGN_IN_NOT_ENABLED";
+export declare const USER_EXTERNAL_CONNECTION_SIGN_IN_DENIED_ERROR_CODE = "USER_EXTERNAL_CONNECTION_SIGN_IN_DENIED";
+export declare const USER_EXTERNAL_CONNECTION_SIGN_IN_EMAIL_CONFLICT_ERROR_CODE = "USER_EXTERNAL_CONNECTION_SIGN_IN_EMAIL_CONFLICT";
+export declare const USER_EXTERNAL_CONNECTION_SIGN_IN_USER_MISSING_ERROR_CODE = "USER_EXTERNAL_CONNECTION_SIGN_IN_USER_MISSING";
+export declare const USER_EXTERNAL_CONNECTION_SIGN_IN_IDENTITY_UNAVAILABLE_ERROR_CODE = "USER_EXTERNAL_CONNECTION_SIGN_IN_IDENTITY_UNAVAILABLE";
+/**
+ * Refuses an unlink that would leave the account with no way back in.
+ */
+export declare const USER_EXTERNAL_CONNECTION_UNLINK_LAST_LOGIN_METHOD_ERROR_CODE = "USER_EXTERNAL_CONNECTION_UNLINK_LAST_LOGIN_METHOD";
+/**
+ * Refuses a `link` round trip for a provider the app has not enabled for sign-in.
+ *
+ * Distinct from `..._SIGN_IN_NOT_ENABLED`: nothing is signing in — an already-authenticated user asked
+ * to make the provider a login method, and the same `policy.signIn` opt-in governs both.
+ */
+export declare const USER_EXTERNAL_CONNECTION_LINK_NOT_ENABLED_ERROR_CODE = "USER_EXTERNAL_CONNECTION_LINK_NOT_ENABLED";
+/**
+ * The only error codes a failed SIGN-IN reports back to the browser.
+ *
+ * An ALLOWLIST rather than a filter: a failed sign-in redirects to a URL the user can read, so
+ * anything that reaches it is public. Passing whatever code an internal failure happened to carry
+ * would leak the shape of that failure, and passing a message would leak its text — so a code absent
+ * from this set is reported as nothing at all.
+ *
+ * Shared with the client so a login page's copy map and the server's allowlist cannot drift.
+ */
+export declare const USER_EXTERNAL_CONNECTION_SIGN_IN_REPORTABLE_ERROR_CODES: ReadonlySet<string>;

package/src/lib/model/userexternalconnection/userexternalconnection.id.d.ts

@@ -49,3 +49,37 @@ export type UserExternalConnectionCapability = string;
  * Identifier for the connected account within the third-party provider.
  */
 export type UserExternalConnectionExternalAccountId = string;
+/**
+ * The delimiter joining a provider type to an external account id in a
+ * {@link UserExternalConnectionExternalAccountKey}.
+ *
+ * A colon is safe on both sides: {@link UserExternalConnectionProviderType} must already be a valid
+ * Firestore map key (no dots or slashes), and the key is only ever a stored/queried string VALUE,
+ * never a document id or field path.
+ */
+export declare const USER_EXTERNAL_CONNECTION_EXTERNAL_ACCOUNT_KEY_DELIMITER = ":";
+/**
+ * A `<providerType>:<externalAccountId>` pair identifying one third-party account globally.
+ *
+ * The provider type is part of the key because an external account id is only unique WITHIN a
+ * provider — a Discord snowflake and a Zoom user id could collide as bare strings.
+ */
+export type UserExternalConnectionExternalAccountKey = string;
+export interface UserExternalConnectionExternalAccountKeyInput {
+    readonly providerType: UserExternalConnectionProviderType;
+    readonly externalAccountId: UserExternalConnectionExternalAccountId;
+}
+/**
+ * Builds the {@link UserExternalConnectionExternalAccountKey} for a provider/account pair.
+ *
+ * The SOLE producer of the key format: the derivation that stores it and the query that reads it
+ * both go through here, so the two can never disagree about the delimiter.
+ *
+ * @param input - The provider type and external account id to join.
+ * @param input.providerType - The provider the account belongs to.
+ * @param input.externalAccountId - The provider's stable id for the account.
+ * @returns The external account key.
+ *
+ * @__NO_SIDE_EFFECTS__
+ */
+export declare function userExternalConnectionExternalAccountKey(input: UserExternalConnectionExternalAccountKeyInput): UserExternalConnectionExternalAccountKey;

package/src/lib/model/userexternalconnection/userexternalconnection.query.d.ts

@@ -1,5 +1,5 @@
 import { type FirestoreQueryConstraint } from '../../common';
-import { type UserExternalConnectionProviderType } from './userexternalconnection.id';
+import { type UserExternalConnectionExternalAccountKeyInput, type UserExternalConnectionProviderType } from './userexternalconnection.id';
 /**
  * Query for the UserExternalConnection documents that are currently connected to the given provider.
  *
@@ -17,3 +17,24 @@ import { type UserExternalConnectionProviderType } from './userexternalconnectio
  * @dbxModelFirebaseIndexScope COLLECTION
  */
 export declare function userExternalConnectionsWithConnectedProviderQuery(providerType: UserExternalConnectionProviderType): FirestoreQueryConstraint[];
+/**
+ * Query for the UserExternalConnection document holding the given third-party account.
+ *
+ * The sign-in counterpart of {@link userExternalConnectionsWithConnectedProviderQuery}: that one
+ * asks "which users are connected to this provider?", this one asks "which user IS this account?".
+ * Both exist because a per-user document makes `e.<provider>.ea` unqueryable.
+ *
+ * Matches at ANY entry status — see the `ec` field docs. Expect at most one result when the
+ * provider's policy declares the connection unique, but the caller must still handle more than one:
+ * uniqueness is enforced at write time and a provider may only have started enforcing it recently.
+ *
+ * @param input - The provider type and external account id to search for.
+ * @param input.providerType - The provider the account belongs to.
+ * @param input.externalAccountId - The provider's stable id for the account.
+ * @returns Firestore query constraints matching the user holding that external account.
+ *
+ * @dbxModelFirebaseIndex
+ * @dbxModelFirebaseIndexModel UserExternalConnection
+ * @dbxModelFirebaseIndexScope COLLECTION
+ */
+export declare function userExternalConnectionsWithExternalAccountQuery(input: UserExternalConnectionExternalAccountKeyInput): FirestoreQueryConstraint[];

package/src/lib/model/userexternalconnection/userexternalconnection.util.d.ts

@@ -1,7 +1,7 @@
-import { type Maybe } from '@dereekb/util';
+import { type EmailAddress, type Maybe } from '@dereekb/util';
 import { type FirebaseAuthUserId } from '../../common';
-import { type UserExternalConnection, type UserExternalConnectionEntry, type UserExternalConnectionEntryMap, type UserExternalConnectionEntryStatus, type UserExternalConnectionErrorCode } from './userexternalconnection';
-import { type UserExternalConnectionCapability, type UserExternalConnectionExternalAccountId, type UserExternalConnectionProviderType } from './userexternalconnection.id';
+import { type UserExternalConnection, type UserExternalConnectionEntry, type UserExternalConnectionEntryMap, type UserExternalConnectionEntryStatus, type UserExternalConnectionErrorCode, type UserExternalConnectionLogin, type UserExternalConnectionLoginMap } from './userexternalconnection';
+import { type UserExternalConnectionCapability, type UserExternalConnectionExternalAccountId, type UserExternalConnectionExternalAccountKey, type UserExternalConnectionProviderType } from './userexternalconnection.id';
 /**
  * The facts about a granted third-party authorization that a {@link UserExternalConnectionEntry} is
  * allowed to summarize.
@@ -29,6 +29,36 @@ export interface UserExternalConnectionGrantSummary {
  * @returns The connected provider types, sorted for a stable stored value.
  */
 export declare function userExternalConnectionConnectedProviderTypes(entries: Maybe<UserExternalConnectionEntryMap>): UserExternalConnectionProviderType[];
+/**
+ * Input for {@link userExternalConnectionExternalAccountKeys}.
+ *
+ * BOTH maps, always. Taking them as one object rather than as a positional entry map is deliberate:
+ * `ec` is the union of the two, and a signature that made either one omittable would make it possible
+ * to recompute the array from half its sources — which silently drops the other half's keys out of the
+ * lookup a sign-in performs.
+ */
+export interface UserExternalConnectionExternalAccountKeysInput {
+    readonly entries?: Maybe<UserExternalConnectionEntryMap>;
+    readonly logins?: Maybe<UserExternalConnectionLoginMap>;
+}
+/**
+ * The SOLE producer of a {@link UserExternalConnection}'s `ec` array.
+ *
+ * Membership is every ENTRY carrying an `ea`, at ANY status, UNION every LOGIN LINK's `ea` —
+ * deliberately unlike {@link userExternalConnectionConnectedProviderTypes}, which is `connected`-only.
+ * `c` answers "whose credentials can I use?", a question about the credentials; `ec` answers "who IS
+ * this account?", a question about identity, which survives an expired token. Filtering it by status
+ * would make a returning user with `error` credentials look like a stranger, and a sign-in would
+ * mint them a second Firebase user.
+ *
+ * The union is what makes the two lifecycles independent. Disconnecting a data connection removes its
+ * entry, and if `ec` came from `e` alone that would take the sign-in binding with it — the next
+ * sign-in would find no match and mint a second Firebase user for the same person.
+ *
+ * @param input - The entry map and the login map to derive from.
+ * @returns The external account keys, deduped and sorted for a stable stored value.
+ */
+export declare function userExternalConnectionExternalAccountKeys(input: UserExternalConnectionExternalAccountKeysInput): UserExternalConnectionExternalAccountKey[];
 /**
  * Input for {@link userExternalConnectionEntryForOutcome}.
  *
@@ -87,6 +117,29 @@ export interface ApplyUserExternalConnectionEntryInput {
     readonly entry: Maybe<UserExternalConnectionEntry>;
     readonly now: Date;
 }
+/**
+ * Input for {@link userExternalConnectionValue}.
+ */
+export interface UserExternalConnectionValueInput {
+    readonly uid: FirebaseAuthUserId;
+    readonly entries: UserExternalConnectionEntryMap;
+    readonly logins: UserExternalConnectionLoginMap;
+    readonly now: Date;
+}
+/**
+ * Assembles the COMPLETE document value from both maps.
+ *
+ * Extracted so the two appliers cannot diverge on how the derived arrays are produced: `ec` is the
+ * union of `e` and `li`, and either applier computing it from only the map it happened to change
+ * would drop the other map's keys out of the sign-in lookup.
+ *
+ * Exported for the one caller that legitimately replaces a whole map rather than one provider's key —
+ * the login backfill. Ordinary writes go through the two appliers.
+ *
+ * @param input - The uid, both maps, and the instant to stamp.
+ * @returns The next UserExternalConnection value to write.
+ */
+export declare function userExternalConnectionValue(input: UserExternalConnectionValueInput): UserExternalConnection;
 /**
  * Applies a single provider's entry and returns the COMPLETE next document.
  *
@@ -94,10 +147,77 @@ export interface ApplyUserExternalConnectionEntryInput {
  * exported way to change `e`, and it always recomputes `c` from the resulting map. There is no
  * exported path that touches one without the other.
  *
+ * The login map is carried through UNCHANGED. A data connection's lifecycle says nothing about
+ * whether the provider is still a way to sign in, so a disconnect must not remove the link.
+ *
  * @param input - The current document plus the provider entry to apply.
  * @returns The next UserExternalConnection value to write.
  */
 export declare function applyUserExternalConnectionEntry(input: ApplyUserExternalConnectionEntryInput): UserExternalConnection;
+/**
+ * Input for {@link applyUserExternalConnectionLogin}.
+ */
+export interface ApplyUserExternalConnectionLoginInput {
+    /**
+     * The currently stored document, when one exists.
+     */
+    readonly current?: Maybe<UserExternalConnection>;
+    readonly uid: FirebaseAuthUserId;
+    readonly providerType: UserExternalConnectionProviderType;
+    /**
+     * The next login link for this provider, or null to remove the provider's key entirely.
+     */
+    readonly login: Maybe<UserExternalConnectionLogin>;
+    readonly now: Date;
+}
+/**
+ * Applies a single provider's LOGIN LINK and returns the COMPLETE next document.
+ *
+ * The mirror of {@link applyUserExternalConnectionEntry}, and the only exported way to change `li`.
+ * The entry map is carried through unchanged: linking a provider as a login method grants nothing
+ * about its data connection, because the identity scopes and the data scopes are not guaranteed to
+ * be the same set.
+ *
+ * @param input - The current document plus the login link to apply.
+ * @returns The next UserExternalConnection value to write.
+ */
+export declare function applyUserExternalConnectionLogin(input: ApplyUserExternalConnectionLoginInput): UserExternalConnection;
+/**
+ * The identity facts a {@link UserExternalConnectionLogin} is derived from.
+ *
+ * Structurally the subset of `UserExternalConnectionSignInIdentity` (in
+ * `@dereekb/firebase-server/model`) that a link records. Declared here rather than imported because
+ * this package is shared with the browser and cannot name a server type — and because the derivation
+ * genuinely needs nothing more than these four values.
+ */
+export interface UserExternalConnectionLoginIdentity {
+    readonly externalAccountId: UserExternalConnectionExternalAccountId;
+    readonly email?: Maybe<EmailAddress>;
+    readonly emailVerified?: Maybe<boolean>;
+    readonly label?: Maybe<string>;
+}
+/**
+ * Input for {@link userExternalConnectionLoginForIdentity}.
+ */
+export interface UserExternalConnectionLoginForIdentityInput {
+    readonly identity: UserExternalConnectionLoginIdentity;
+    /**
+     * The link currently stored for this provider, when there is one.
+     */
+    readonly previous?: Maybe<UserExternalConnectionLogin>;
+    readonly now: Date;
+}
+/**
+ * Derives the {@link UserExternalConnectionLogin} for an identity a link round trip resolved.
+ *
+ * `lat` survives a relink, the mirror of how {@link userExternalConnectionEntryForOutcome} preserves
+ * `coa`: relinking the same provider is a re-consent, not a new relationship, so the date the account
+ * first became a login method stays what it was.
+ *
+ * @param input - The resolved identity, the stored link, and the instant to stamp.
+ * @returns The next login link.
+ */
+export declare function userExternalConnectionLoginForIdentity(input: UserExternalConnectionLoginForIdentityInput): UserExternalConnectionLogin;
 /**
  * Input for {@link emptyUserExternalConnection}.
  */
@@ -147,3 +267,18 @@ export declare function userExternalConnectionEntryIsExpired(entry: Maybe<UserEx
  * @returns True when the provider's entry is connected.
  */
 export declare function userExternalConnectionIsConnectedToProvider(connection: Maybe<UserExternalConnection>, providerType: UserExternalConnectionProviderType): boolean;
+/**
+ * Returns the login link for the given provider, if any.
+ *
+ * @param connection - The loaded connection document.
+ * @param providerType - The provider to read.
+ * @returns The provider's login link, or null when the provider is not a login method for this user.
+ */
+export declare function userExternalConnectionLoginForProvider(connection: Maybe<UserExternalConnection>, providerType: UserExternalConnectionProviderType): Maybe<UserExternalConnectionLogin>;
+/**
+ * Returns every provider type that is a login method for this user.
+ *
+ * @param connection - The loaded connection document.
+ * @returns The linked provider types, sorted for a stable render order.
+ */
+export declare function userExternalConnectionLinkedLoginProviderTypes(connection: Maybe<UserExternalConnection>): UserExternalConnectionProviderType[];

package/test/package.json

@@ -1,13 +1,13 @@
 {
   "name": "@dereekb/firebase/test",
-  "version": "14.0.1",
+  "version": "14.1.0",
   "type": "module",
   "peerDependencies": {
-    "@dereekb/date": "14.0.1",
-    "@dereekb/firebase": "14.0.1",
-    "@dereekb/model": "14.0.1",
-    "@dereekb/rxjs": "14.0.1",
-    "@dereekb/util": "14.0.1",
+    "@dereekb/date": "14.1.0",
+    "@dereekb/firebase": "14.1.0",
+    "@dereekb/model": "14.1.0",
+    "@dereekb/rxjs": "14.1.0",
+    "@dereekb/util": "14.1.0",
     "@firebase/rules-unit-testing": "5.0.2",
     "date-fns": "^4.1.0",
     "firebase": "^12.18.0",