@progressive-development/pd-provider-firebase-functions 0.1.0

package/dist/auth.d.ts

@@ -0,0 +1,15 @@
+import { CallableRequest } from 'firebase-functions/v2/https';
+import { AuthContext } from './types';
+/**
+ * Require authenticated user
+ */
+export declare function requireAuth(request: CallableRequest): AuthContext;
+/**
+ * Require specific role claims
+ */
+export declare function requireClaims(request: CallableRequest, allowedRoles: string[]): AuthContext;
+/**
+ * Ensure user can only access own resources
+ */
+export declare function requireOwnership(auth: AuthContext, resourceOwnerId: string): void;
+//# sourceMappingURL=auth.d.ts.map

package/dist/auth.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"auth.d.ts","sourceRoot":"","sources":["../src/auth.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,eAAe,EAAE,MAAM,6BAA6B,CAAC;AAE9D,OAAO,EAAE,WAAW,EAAE,MAAM,SAAS,CAAC;AAGtC;;GAEG;AACH,wBAAgB,WAAW,CAAC,OAAO,EAAE,eAAe,GAAG,WAAW,CASjE;AAED;;GAEG;AACH,wBAAgB,aAAa,CAC3B,OAAO,EAAE,eAAe,EACxB,YAAY,EAAE,MAAM,EAAE,GACrB,WAAW,CASb;AAED;;GAEG;AACH,wBAAgB,gBAAgB,CAAC,IAAI,EAAE,WAAW,EAAE,eAAe,EAAE,MAAM,GAAG,IAAI,CAMjF"}

package/dist/auth.js

@@ -0,0 +1,31 @@
+import { UnauthorizedError, ForbiddenError } from './errors.js';
+import { logger } from './logger.js';
+
+function requireAuth(request) {
+  if (!request.auth) {
+    throw new UnauthorizedError();
+  }
+  return {
+    uid: request.auth.uid,
+    email: request.auth.token.email ?? null,
+    claims: request.auth.token
+  };
+}
+function requireClaims(request, allowedRoles) {
+  const auth = requireAuth(request);
+  const userRoles = auth.claims.roles ?? [];
+  if (!allowedRoles.some((role) => userRoles.includes(role))) {
+    logger.warn("Access denied", { uid: auth.uid, required: allowedRoles });
+    throw new ForbiddenError();
+  }
+  return auth;
+}
+function requireOwnership(auth, resourceOwnerId) {
+  const isAdmin = (auth.claims.roles ?? []).includes("admin");
+  if (!isAdmin && auth.uid !== resourceOwnerId) {
+    logger.warn("Ownership violation", { uid: auth.uid, resourceOwnerId });
+    throw new ForbiddenError("Cannot access other user's resources");
+  }
+}
+
+export { requireAuth, requireClaims, requireOwnership };

package/dist/counter.d.ts

@@ -0,0 +1,6 @@
+/**
+ * Get next counter value atomically
+ * Uses Firestore transaction to prevent race conditions
+ */
+export declare function getNextCounter(counterName: string, databaseId?: string): Promise<number>;
+//# sourceMappingURL=counter.d.ts.map

package/dist/counter.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"counter.d.ts","sourceRoot":"","sources":["../src/counter.ts"],"names":[],"mappings":"AAIA;;;GAGG;AACH,wBAAsB,cAAc,CAClC,WAAW,EAAE,MAAM,EACnB,UAAU,CAAC,EAAE,MAAM,GAClB,OAAO,CAAC,MAAM,CAAC,CAWjB"}

package/dist/counter.js

@@ -0,0 +1,16 @@
+import { getDb } from './firestore.js';
+
+const COUNTERS_COLLECTION = "counters";
+async function getNextCounter(counterName, databaseId) {
+  const db = getDb(databaseId);
+  const counterRef = db.collection(COUNTERS_COLLECTION).doc(counterName);
+  return db.runTransaction(async (transaction) => {
+    const doc = await transaction.get(counterRef);
+    const current = doc.exists ? doc.data()?.value ?? 0 : 0;
+    const next = current + 1;
+    transaction.set(counterRef, { value: next, updatedAt: /* @__PURE__ */ new Date() }, { merge: true });
+    return next;
+  });
+}
+
+export { getNextCounter };

package/dist/errors.d.ts

@@ -0,0 +1,18 @@
+export declare class AppError extends Error {
+    readonly code: string;
+    readonly statusCode: number;
+    constructor(message: string, code: string, statusCode: number);
+}
+export declare class ValidationError extends AppError {
+    constructor(message: string);
+}
+export declare class UnauthorizedError extends AppError {
+    constructor(message?: string);
+}
+export declare class ForbiddenError extends AppError {
+    constructor(message?: string);
+}
+export declare class NotFoundError extends AppError {
+    constructor(message: string);
+}
+//# sourceMappingURL=errors.d.ts.map

package/dist/errors.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"errors.d.ts","sourceRoot":"","sources":["../src/errors.ts"],"names":[],"mappings":"AAEA,qBAAa,QAAS,SAAQ,KAAK;aAGf,IAAI,EAAE,MAAM;aACZ,UAAU,EAAE,MAAM;gBAFlC,OAAO,EAAE,MAAM,EACC,IAAI,EAAE,MAAM,EACZ,UAAU,EAAE,MAAM;CAKrC;AAED,qBAAa,eAAgB,SAAQ,QAAQ;gBAC/B,OAAO,EAAE,MAAM;CAG5B;AAED,qBAAa,iBAAkB,SAAQ,QAAQ;gBACjC,OAAO,SAA4B;CAGhD;AAED,qBAAa,cAAe,SAAQ,QAAQ;gBAC9B,OAAO,SAAkB;CAGtC;AAED,qBAAa,aAAc,SAAQ,QAAQ;gBAC7B,OAAO,EAAE,MAAM;CAG5B"}

package/dist/errors.js

@@ -0,0 +1,30 @@
+class AppError extends Error {
+  constructor(message, code, statusCode) {
+    super(message);
+    this.code = code;
+    this.statusCode = statusCode;
+    this.name = this.constructor.name;
+  }
+}
+class ValidationError extends AppError {
+  constructor(message) {
+    super(message, "VALIDATION_ERROR", 400);
+  }
+}
+class UnauthorizedError extends AppError {
+  constructor(message = "Authentication required") {
+    super(message, "UNAUTHORIZED", 401);
+  }
+}
+class ForbiddenError extends AppError {
+  constructor(message = "Access denied") {
+    super(message, "FORBIDDEN", 403);
+  }
+}
+class NotFoundError extends AppError {
+  constructor(message) {
+    super(message, "NOT_FOUND", 404);
+  }
+}
+
+export { AppError, ForbiddenError, NotFoundError, UnauthorizedError, ValidationError };

package/dist/firestore.d.ts

@@ -0,0 +1,7 @@
+import { Firestore } from 'firebase-admin/firestore';
+/**
+ * Get Firestore instance (cached)
+ * @param databaseId Optional named database
+ */
+export declare function getDb(databaseId?: string): Firestore;
+//# sourceMappingURL=firestore.d.ts.map

package/dist/firestore.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"firestore.d.ts","sourceRoot":"","sources":["../src/firestore.ts"],"names":[],"mappings":"AACA,OAAO,EAAgB,SAAS,EAAE,MAAM,0BAA0B,CAAC;AAKnE;;;GAGG;AACH,wBAAgB,KAAK,CAAC,UAAU,CAAC,EAAE,MAAM,GAAG,SAAS,CAepD"}

package/dist/firestore.js

@@ -0,0 +1,19 @@
+import { initializeApp } from 'firebase-admin/app';
+import { getFirestore } from 'firebase-admin/firestore';
+
+let app;
+const dbCache = /* @__PURE__ */ new Map();
+function getDb(databaseId) {
+  const cacheKey = databaseId ?? "default";
+  if (!dbCache.has(cacheKey)) {
+    if (!app) {
+      app = initializeApp();
+    }
+    const db = databaseId ? getFirestore(app, databaseId) : getFirestore(app);
+    db.settings({ ignoreUndefinedProperties: true });
+    dbCache.set(cacheKey, db);
+  }
+  return dbCache.get(cacheKey);
+}
+
+export { getDb };

package/dist/index.d.ts

@@ -0,0 +1,9 @@
+export type { ApiResponse, AuthContext } from './types';
+export { StatusCode } from './types';
+export { AppError, ValidationError, UnauthorizedError, ForbiddenError, NotFoundError } from './errors';
+export { requireAuth, requireClaims, requireOwnership } from './auth';
+export { success, created, handleError } from './response';
+export { getDb } from './firestore';
+export { getNextCounter } from './counter';
+export { logger } from './logger';
+//# sourceMappingURL=index.d.ts.map

package/dist/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AACA,YAAY,EAAE,WAAW,EAAE,WAAW,EAAE,MAAM,SAAS,CAAC;AACxD,OAAO,EAAE,UAAU,EAAE,MAAM,SAAS,CAAC;AAGrC,OAAO,EAAE,QAAQ,EAAE,eAAe,EAAE,iBAAiB,EAAE,cAAc,EAAE,aAAa,EAAE,MAAM,UAAU,CAAC;AAGvG,OAAO,EAAE,WAAW,EAAE,aAAa,EAAE,gBAAgB,EAAE,MAAM,QAAQ,CAAC;AAGtE,OAAO,EAAE,OAAO,EAAE,OAAO,EAAE,WAAW,EAAE,MAAM,YAAY,CAAC;AAG3D,OAAO,EAAE,KAAK,EAAE,MAAM,aAAa,CAAC;AAGpC,OAAO,EAAE,cAAc,EAAE,MAAM,WAAW,CAAC;AAG3C,OAAO,EAAE,MAAM,EAAE,MAAM,UAAU,CAAC"}

package/dist/index.js

@@ -0,0 +1,7 @@
+export { StatusCode } from './types.js';
+export { AppError, ForbiddenError, NotFoundError, UnauthorizedError, ValidationError } from './errors.js';
+export { requireAuth, requireClaims, requireOwnership } from './auth.js';
+export { created, handleError, success } from './response.js';
+export { getDb } from './firestore.js';
+export { getNextCounter } from './counter.js';
+export { logger } from './logger.js';

package/dist/logger.d.ts

@@ -0,0 +1,7 @@
+export declare const logger: {
+    debug: (msg: string, data?: object) => void;
+    info: (msg: string, data?: object) => void;
+    warn: (msg: string, data?: object) => void;
+    error: (msg: string, error?: unknown, data?: object) => void;
+};
+//# sourceMappingURL=logger.d.ts.map

package/dist/logger.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"logger.d.ts","sourceRoot":"","sources":["../src/logger.ts"],"names":[],"mappings":"AAEA,eAAO,MAAM,MAAM;iBACJ,MAAM,SAAS,MAAM;gBACtB,MAAM,SAAS,MAAM;gBACrB,MAAM,SAAS,MAAM;iBACpB,MAAM,UAAU,OAAO,SAAS,MAAM;CAEpD,CAAC"}

package/dist/logger.js

@@ -0,0 +1,10 @@
+import * as functions from 'firebase-functions/logger';
+
+const logger = {
+  debug: (msg, data) => functions.debug(msg, data),
+  info: (msg, data) => functions.info(msg, data),
+  warn: (msg, data) => functions.warn(msg, data),
+  error: (msg, error, data) => functions.error(msg, { error, ...data })
+};
+
+export { logger };

package/dist/response.d.ts

@@ -0,0 +1,8 @@
+import { ApiResponse } from './types';
+export declare function success<T>(data: T): ApiResponse<T>;
+export declare function created<T>(data: T): ApiResponse<T>;
+export declare function handleError(error: unknown): ApiResponse<{
+    error: string;
+    code: string;
+}>;
+//# sourceMappingURL=response.d.ts.map

package/dist/response.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"response.d.ts","sourceRoot":"","sources":["../src/response.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,WAAW,EAAc,MAAM,SAAS,CAAC;AAIlD,wBAAgB,OAAO,CAAC,CAAC,EAAE,IAAI,EAAE,CAAC,GAAG,WAAW,CAAC,CAAC,CAAC,CAElD;AAED,wBAAgB,OAAO,CAAC,CAAC,EAAE,IAAI,EAAE,CAAC,GAAG,WAAW,CAAC,CAAC,CAAC,CAElD;AAED,wBAAgB,WAAW,CAAC,KAAK,EAAE,OAAO,GAAG,WAAW,CAAC;IAAE,KAAK,EAAE,MAAM,CAAC;IAAC,IAAI,EAAE,MAAM,CAAA;CAAE,CAAC,CAmBxF"}

package/dist/response.js

@@ -0,0 +1,30 @@
+import { StatusCode } from './types.js';
+import { AppError } from './errors.js';
+import { logger } from './logger.js';
+
+function success(data) {
+  return { statusCode: StatusCode.OK, resultData: data };
+}
+function created(data) {
+  return { statusCode: StatusCode.CREATED, resultData: data };
+}
+function handleError(error) {
+  if (error instanceof AppError) {
+    if (error.statusCode >= 500) {
+      logger.error("App error", error);
+    } else {
+      logger.warn("Request error", { code: error.code, message: error.message });
+    }
+    return {
+      statusCode: error.statusCode,
+      resultData: { error: error.message, code: error.code }
+    };
+  }
+  logger.error("Unexpected error", error);
+  return {
+    statusCode: StatusCode.INTERNAL_ERROR,
+    resultData: { error: "Internal server error", code: "INTERNAL_ERROR" }
+  };
+}
+
+export { created, handleError, success };

package/dist/types.d.ts

@@ -0,0 +1,19 @@
+export interface ApiResponse<T = unknown> {
+    statusCode: number;
+    resultData: T;
+}
+export interface AuthContext {
+    uid: string;
+    email: string | null;
+    claims: Record<string, unknown>;
+}
+export declare const StatusCode: {
+    readonly OK: 200;
+    readonly CREATED: 201;
+    readonly BAD_REQUEST: 400;
+    readonly UNAUTHORIZED: 401;
+    readonly FORBIDDEN: 403;
+    readonly NOT_FOUND: 404;
+    readonly INTERNAL_ERROR: 500;
+};
+//# sourceMappingURL=types.d.ts.map

package/dist/types.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"types.d.ts","sourceRoot":"","sources":["../src/types.ts"],"names":[],"mappings":"AAEA,MAAM,WAAW,WAAW,CAAC,CAAC,GAAG,OAAO;IACtC,UAAU,EAAE,MAAM,CAAC;IACnB,UAAU,EAAE,CAAC,CAAC;CACf;AAED,MAAM,WAAW,WAAW;IAC1B,GAAG,EAAE,MAAM,CAAC;IACZ,KAAK,EAAE,MAAM,GAAG,IAAI,CAAC;IACrB,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;CACjC;AAED,eAAO,MAAM,UAAU;;;;;;;;CAQb,CAAC"}

package/dist/types.js

@@ -0,0 +1,11 @@
+const StatusCode = {
+  OK: 200,
+  CREATED: 201,
+  BAD_REQUEST: 400,
+  UNAUTHORIZED: 401,
+  FORBIDDEN: 403,
+  NOT_FOUND: 404,
+  INTERNAL_ERROR: 500
+};
+
+export { StatusCode };

package/package.json

@@ -0,0 +1,44 @@
+{
+  "name": "@progressive-development/pd-provider-firebase-functions",
+  "version": "0.1.0",
+  "description": "Firebase Functions v2 utilities for pd-spa-helper backend",
+  "author": "PD Progressive Development",
+  "license": "SEE LICENSE IN LICENSE",
+  "main": "./dist/index.js",
+  "module": "./dist/index.js",
+  "type": "module",
+  "types": "./dist/index.d.ts",
+  "exports": {
+    ".": "./dist/index.js"
+  },
+  "files": [
+    "dist/",
+    "package.json",
+    "README.md",
+    "LICENSE"
+  ],
+  "dependencies": {
+    "firebase-admin": "^12.6.0",
+    "firebase-functions": "^6.0.0"
+  },
+  "peerDependencies": {
+    "firebase-admin": "^12.6.0",
+    "firebase-functions": "^6.0.0"
+  },
+  "keywords": [
+    "pd",
+    "progressive",
+    "development",
+    "firebase",
+    "functions",
+    "backend"
+  ],
+  "scripts": {
+    "build": "vite build",
+    "clean": "rm -rf dist",
+    "clean:all": "rm -rf dist node_modules pnpm-lock.yaml",
+    "lint": "eslint --ext .ts src --ignore-path ../../.eslintignore && prettier \"**/*.ts\" --check --ignore-path ../../.eslintignore",
+    "format": "eslint --ext .ts src --fix --ignore-path ../../.eslintignore && prettier \"**/*.ts\" --write --ignore-path ../../.eslintignore",
+    "check": "pnpm run lint && pnpm run build"
+  }
+}