firebase-admin-edge 2.0.0 → 3.0.0

package/dist/auth/identity-query.js

@@ -0,0 +1,122 @@
+import { identityLookupIdentifiers, identityOrIdentifiers, validateIdentityQueryOptions } from './identity-filter.js';
+import { FirebaseEdgeError } from './errors.js';
+/** Execute one backend request, never follow a token or scan for more matches. @internal */
+export async function executeIdentityQuery(auth, options, last = false, pageToken) {
+    validateIdentityQueryOptions(options);
+    if (typeof last !== 'boolean' ||
+        (pageToken !== undefined &&
+            (typeof pageToken !== 'string' || pageToken.length === 0))) {
+        throw new FirebaseEdgeError({
+            code: 'auth/invalid-argument',
+            message: 'Use a boolean last flag and a nonempty page token.'
+        });
+    }
+    if (options.identifiers !== undefined ||
+        options.filter?.field === 'initialEmail' ||
+        options.filter?.operator === 'in') {
+        if ((options.identifiers !== undefined &&
+            options.filter !== undefined) ||
+            options.orderBy ||
+            options.offset !== undefined ||
+            options.limit !== undefined ||
+            last ||
+            pageToken !== undefined) {
+            throw new FirebaseEdgeError({
+                code: 'auth/invalid-argument',
+                message: 'Lookup filters do not support sorting, limits, offsets, or page tokens.'
+            });
+        }
+        const identifiers = options.identifiers !== undefined
+            ? identityOrIdentifiers(options.identifiers)
+            : identityLookupIdentifiers(options.filter.field, options.filter.operator === 'in'
+                ? options.filter.value
+                : [options.filter.value]);
+        const { error, data } = await auth.getUsers(identifiers);
+        if (error) {
+            return { error, data: null };
+        }
+        return {
+            error: null,
+            data: { users: data.users, nextOffset: null, nextPageToken: null }
+        };
+    }
+    const offset = options.offset ?? 0;
+    const limit = options.limit ?? 500;
+    const orderBy = options.orderBy ?? { field: 'uid', direction: 'asc' };
+    const useBatch = !options.filter &&
+        !last &&
+        offset === 0 &&
+        orderBy.field === 'uid' &&
+        orderBy.direction === 'asc';
+    if (pageToken !== undefined && !useBatch) {
+        throw new FirebaseEdgeError({
+            code: 'auth/invalid-argument',
+            message: 'Page tokens require an unfiltered UID-ascending listing without offset or limitToLast.'
+        });
+    }
+    if (limit > (useBatch ? 1000 : 500)) {
+        throw new FirebaseEdgeError({
+            code: 'auth/invalid-argument',
+            message: useBatch
+                ? 'Token listings support at most 1000 users per request.'
+                : 'Filtered, sorted, and offset queries support at most 500 users per request.'
+        });
+    }
+    if (last && offset + limit > 500) {
+        throw new FirebaseEdgeError({
+            code: 'auth/invalid-argument',
+            message: 'limitToLast plus offset must not exceed 500 for a single query request.'
+        });
+    }
+    if (useBatch) {
+        const { error, data } = await auth.listUsers(limit, pageToken);
+        if (error) {
+            return { data: null, error };
+        }
+        return {
+            data: {
+                users: data.users,
+                nextOffset: null,
+                nextPageToken: data.pageToken ?? null
+            },
+            error: null
+        };
+    }
+    const request = last
+        ? {
+            ...options,
+            offset: 0,
+            limit: limit + offset,
+            orderBy: {
+                field: orderBy.field,
+                direction: orderBy.direction === 'asc'
+                    ? 'desc'
+                    : 'asc'
+            }
+        }
+        : { ...options, orderBy };
+    const { error, data } = await auth._queryUsers(request);
+    if (error) {
+        return { data: null, error };
+    }
+    if (last) {
+        const count = Math.min(limit, Math.max(0, data.length - offset));
+        return {
+            data: {
+                users: data.slice(0, count).reverse(),
+                nextOffset: null,
+                nextPageToken: null
+            },
+            error: null
+        };
+    }
+    return {
+        data: {
+            users: data,
+            nextOffset: data.length === limit ? offset + data.length : null,
+            nextPageToken: null
+        },
+        error: null
+    };
+}
+//# sourceMappingURL=identity-query.js.map

package/dist/auth/identity-query.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"identity-query.js","sourceRoot":"","sources":["../../src/auth/identity-query.ts"],"names":[],"mappings":"AAAA,OAAO,EACH,yBAAyB,EACzB,qBAAqB,EACrB,4BAA4B,EAC/B,MAAM,sBAAsB,CAAC;AAE9B,OAAO,EAAE,iBAAiB,EAAE,MAAM,aAAa,CAAC;AAOhD,4FAA4F;AAC5F,MAAM,CAAC,KAAK,UAAU,oBAAoB,CACtC,IAAuB,EACvB,OAA6B,EAC7B,IAAI,GAAG,KAAK,EACZ,SAAkB;IAIlB,4BAA4B,CAAC,OAAO,CAAC,CAAC;IACtC,IACI,OAAO,IAAI,KAAK,SAAS;QACzB,CAAC,SAAS,KAAK,SAAS;YACpB,CAAC,OAAO,SAAS,KAAK,QAAQ,IAAI,SAAS,CAAC,MAAM,KAAK,CAAC,CAAC,CAAC,EAChE,CAAC;QACC,MAAM,IAAI,iBAAiB,CAAC;YACxB,IAAI,EAAE,uBAAuB;YAC7B,OAAO,EAAE,oDAAoD;SAChE,CAAC,CAAC;IACP,CAAC;IACD,IACI,OAAO,CAAC,WAAW,KAAK,SAAS;QACjC,OAAO,CAAC,MAAM,EAAE,KAAK,KAAK,cAAc;QACxC,OAAO,CAAC,MAAM,EAAE,QAAQ,KAAK,IAAI,EACnC,CAAC;QACC,IACI,CAAC,OAAO,CAAC,WAAW,KAAK,SAAS;YAC9B,OAAO,CAAC,MAAM,KAAK,SAAS,CAAC;YACjC,OAAO,CAAC,OAAO;YACf,OAAO,CAAC,MAAM,KAAK,SAAS;YAC5B,OAAO,CAAC,KAAK,KAAK,SAAS;YAC3B,IAAI;YACJ,SAAS,KAAK,SAAS,EACzB,CAAC;YACC,MAAM,IAAI,iBAAiB,CAAC;gBACxB,IAAI,EAAE,uBAAuB;gBAC7B,OAAO,EACH,yEAAyE;aAChF,CAAC,CAAC;QACP,CAAC;QACD,MAAM,WAAW,GACb,OAAO,CAAC,WAAW,KAAK,SAAS;YAC7B,CAAC,CAAC,qBAAqB,CAAC,OAAO,CAAC,WAAW,CAAC;YAC5C,CAAC,CAAC,yBAAyB,CACrB,OAAO,CAAC,MAAO,CAAC,KAAK,EACrB,OAAO,CAAC,MAAO,CAAC,QAAQ,KAAK,IAAI;gBAC7B,CAAC,CAAC,OAAO,CAAC,MAAO,CAAC,KAAK;gBACvB,CAAC,CAAC,CAAC,OAAO,CAAC,MAAO,CAAC,KAAe,CAAC,CAC1C,CAAC;QACZ,MAAM,EAAE,KAAK,EAAE,IAAI,EAAE,GAAG,MAAM,IAAI,CAAC,QAAQ,CAAC,WAAW,CAAC,CAAC;QACzD,IAAI,KAAK,EAAE,CAAC;YACR,OAAO,EAAE,KAAK,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC;QACjC,CAAC;QACD,OAAO;YACH,KAAK,EAAE,IAAI;YACX,IAAI,EAAE,EAAE,KAAK,EAAE,IAAI,CAAC,KAAK,EAAE,UAAU,EAAE,IAAI,EAAE,aAAa,EAAE,IAAI,EAAE;SACrE,CAAC;IACN,CAAC;IAED,MAAM,MAAM,GAAG,OAAO,CAAC,MAAM,IAAI,CAAC,CAAC;IACnC,MAAM,KAAK,GAAG,OAAO,CAAC,KAAK,IAAI,GAAG,CAAC;IACnC,MAAM,OAAO,GAAG,OAAO,CAAC,OAAO,IAAI,EAAE,KAAK,EAAE,KAAK,EAAE,SAAS,EAAE,KAAK,EAAE,CAAC;IAEtE,MAAM,QAAQ,GACV,CAAC,OAAO,CAAC,MAAM;QACf,CAAC,IAAI;QACL,MAAM,KAAK,CAAC;QACZ,OAAO,CAAC,KAAK,KAAK,KAAK;QACvB,OAAO,CAAC,SAAS,KAAK,KAAK,CAAC;IAEhC,IAAI,SAAS,KAAK,SAAS,IAAI,CAAC,QAAQ,EAAE,CAAC;QACvC,MAAM,IAAI,iBAAiB,CAAC;YACxB,IAAI,EAAE,uBAAuB;YAC7B,OAAO,EACH,wFAAwF;SAC/F,CAAC,CAAC;IACP,CAAC;IACD,IAAI,KAAK,GAAG,CAAC,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,GAAG,CAAC,EAAE,CAAC;QAClC,MAAM,IAAI,iBAAiB,CAAC;YACxB,IAAI,EAAE,uBAAuB;YAC7B,OAAO,EAAE,QAAQ;gBACb,CAAC,CAAC,wDAAwD;gBAC1D,CAAC,CAAC,6EAA6E;SACtF,CAAC,CAAC;IACP,CAAC;IACD,IAAI,IAAI,IAAI,MAAM,GAAG,KAAK,GAAG,GAAG,EAAE,CAAC;QAC/B,MAAM,IAAI,iBAAiB,CAAC;YACxB,IAAI,EAAE,uBAAuB;YAC7B,OAAO,EACH,yEAAyE;SAChF,CAAC,CAAC;IACP,CAAC;IAED,IAAI,QAAQ,EAAE,CAAC;QACX,MAAM,EAAE,KAAK,EAAE,IAAI,EAAE,GAAG,MAAM,IAAI,CAAC,SAAS,CAAC,KAAK,EAAE,SAAS,CAAC,CAAC;QAC/D,IAAI,KAAK,EAAE,CAAC;YACR,OAAO,EAAE,IAAI,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC;QACjC,CAAC;QACD,OAAO;YACH,IAAI,EAAE;gBACF,KAAK,EAAE,IAAI,CAAC,KAAK;gBACjB,UAAU,EAAE,IAAI;gBAChB,aAAa,EAAE,IAAI,CAAC,SAAS,IAAI,IAAI;aACxC;YACD,KAAK,EAAE,IAAI;SACd,CAAC;IACN,CAAC;IAED,MAAM,OAAO,GAAG,IAAI;QAChB,CAAC,CAAC;YACI,GAAG,OAAO;YACV,MAAM,EAAE,CAAC;YACT,KAAK,EAAE,KAAK,GAAG,MAAM;YACrB,OAAO,EAAE;gBACL,KAAK,EAAE,OAAO,CAAC,KAAK;gBACpB,SAAS,EACL,OAAO,CAAC,SAAS,KAAK,KAAK;oBACvB,CAAC,CAAE,MAAgB;oBACnB,CAAC,CAAE,KAAe;aAC7B;SACJ;QACH,CAAC,CAAC,EAAE,GAAG,OAAO,EAAE,OAAO,EAAE,CAAC;IAC9B,MAAM,EAAE,KAAK,EAAE,IAAI,EAAE,GAAG,MAAM,IAAI,CAAC,WAAW,CAAC,OAAO,CAAC,CAAC;IACxD,IAAI,KAAK,EAAE,CAAC;QACR,OAAO,EAAE,IAAI,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC;IACjC,CAAC;IACD,IAAI,IAAI,EAAE,CAAC;QACP,MAAM,KAAK,GAAG,IAAI,CAAC,GAAG,CAAC,KAAK,EAAE,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,IAAI,CAAC,MAAM,GAAG,MAAM,CAAC,CAAC,CAAC;QACjE,OAAO;YACH,IAAI,EAAE;gBACF,KAAK,EAAE,IAAI,CAAC,KAAK,CAAC,CAAC,EAAE,KAAK,CAAC,CAAC,OAAO,EAAE;gBACrC,UAAU,EAAE,IAAI;gBAChB,aAAa,EAAE,IAAI;aACtB;YACD,KAAK,EAAE,IAAI;SACd,CAAC;IACN,CAAC;IACD,OAAO;QACH,IAAI,EAAE;YACF,KAAK,EAAE,IAAI;YACX,UAAU,EAAE,IAAI,CAAC,MAAM,KAAK,KAAK,CAAC,CAAC,CAAC,MAAM,GAAG,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC,IAAI;YAC/D,aAAa,EAAE,IAAI;SACtB;QACD,KAAK,EAAE,IAAI;KACd,CAAC;AACN,CAAC"}

package/dist/auth/identity-reference.d.ts

@@ -0,0 +1,131 @@
+import type { IdentityUpdateData, IdentitySetData, IdentityWriteResult } from './identity-write.js';
+import type { UserMetadataRequest } from './user-import.js';
+import type { FirebaseAdminAuth } from './firebase-admin-auth.js';
+import { type UserIdentifier } from './user-request.js';
+import type { UserRecord } from './user-record.js';
+import { FirebaseEdgeError } from './errors.js';
+export type IdentityUserRecord<Claims extends object = Record<string, unknown>> = Omit<UserRecord, 'customClaims'> & {
+    readonly customClaims?: Partial<Claims>;
+};
+type IdentityWriteResponse = {
+    error: null;
+    data: IdentityWriteResult;
+} | {
+    error: Error;
+    data: null;
+};
+export interface IdentityReferenceOptions<Multiple extends boolean = false, Uid extends boolean = false> {
+    /** Return an array of matches instead of one user or null. Defaults to false. */
+    multiple?: Multiple;
+    /** Enable mutations for a single UID identifier. Defaults to false. */
+    uidReference?: Uid;
+}
+/** Exact lookup with no query modifiers or count operation. */
+export declare class IdentityReference<Multiple extends boolean = false, Uid extends boolean = false, Claims extends object = Record<string, unknown>> {
+    private readonly auth;
+    private readonly identifier;
+    private readonly multiple;
+    private readonly uidReference;
+    private claimsResource?;
+    private metadataResource?;
+    constructor(auth: FirebaseAdminAuth, identifier: UserIdentifier, options?: IdentityReferenceOptions<Multiple, Uid>);
+    update(this: IdentityReference<false, true, Claims>, data: IdentityUpdateData<Claims>): Promise<{
+        data: null;
+        error: FirebaseEdgeError;
+    } | {
+        data: IdentityWriteResult;
+        error: null;
+    }>;
+    set(this: IdentityReference<false, true, Claims>, data: IdentitySetData<Claims>): Promise<{
+        data: null;
+        error: FirebaseEdgeError;
+    } | {
+        data: IdentityWriteResult;
+        error: null;
+    }>;
+    /** Custom-claims operations for a UID reference; accessing this performs no I/O. */
+    get claims(): Uid extends true ? Multiple extends false ? IdentityClaims<Claims> : never : never;
+    /** Writable timestamps for a UID reference; accessing this performs no I/O. */
+    get metadata(): Uid extends true ? Multiple extends false ? IdentityMetadata : never : never;
+    delete(this: IdentityReference<false, true, Claims>): Promise<IdentityWriteResponse>;
+    private requireUid;
+    /** Check whether an exact single-user lookup matches an account. */
+    exists(this: IdentityReference<false, Uid, Claims>): Promise<{
+        error: null;
+        data: boolean;
+    } | {
+        error: Error;
+        data: null;
+    }>;
+    get(): Promise<{
+        error: null;
+        data: Multiple extends true ? IdentityUserRecord<Claims>[] : IdentityUserRecord<Claims> | null;
+    } | {
+        error: Error;
+        data: null;
+    }>;
+}
+/** Update explicitly supplied account timestamps. Access through user.metadata. */
+declare class IdentityMetadata {
+    private readonly auth;
+    private readonly uid;
+    constructor(auth: FirebaseAdminAuth, uid: string);
+    update(metadata: UserMetadataRequest): Promise<{
+        data: null;
+        error: FirebaseEdgeError;
+    } | {
+        data: IdentityWriteResult;
+        error: null;
+    }>;
+    get(): Promise<{
+        error: Error;
+        data: null;
+    } | {
+        error: null;
+        data: import("./firebase-types.js").UserMetadata & {
+            toJSON(): object;
+        };
+    }>;
+    revokeTokens(): Promise<IdentityWriteResponse>;
+}
+/** Claims stored on one existing UID. Access through user.claims. */
+declare class IdentityClaims<Claims extends object> {
+    private readonly auth;
+    private readonly uid;
+    constructor(auth: FirebaseAdminAuth, uid: string);
+    /** Replace all custom claims; null clears them. No read is required. */
+    set(claims: Partial<Claims> | null): Promise<IdentityWriteResponse>;
+    get(): Promise<{
+        error: Error;
+        data: null;
+    } | {
+        error: null;
+        data: Partial<Claims>;
+    }>;
+    /** Select one literal top-level claim key, not a dotted path. */
+    byKey<Key extends Extract<keyof Claims, string>>(key: Key): IdentityClaimKey<Claims, Key>;
+    /** Shallow-merge claims using a non-atomic read followed by a write. */
+    update(claims: Partial<Claims>): Promise<IdentityWriteResponse>;
+    /** Clear all custom claims without deleting the user. */
+    delete(): Promise<IdentityWriteResponse>;
+}
+/** One claim value. Updates and deletion preserve other top-level claims. */
+declare class IdentityClaimKey<Claims extends object, Key extends Extract<keyof Claims, string>> {
+    private readonly claims;
+    private readonly key;
+    constructor(claims: IdentityClaims<Claims>, key: Key);
+    /** Set or replace this key's value while preserving the other claims. */
+    set(value: Exclude<Claims[Key], undefined>): Promise<IdentityWriteResponse>;
+    /** Read one own claim value; an absent key returns undefined. */
+    get(): Promise<{
+        error: null;
+        data: Claims[Key] | undefined;
+    } | {
+        error: Error;
+        data: null;
+    }>;
+    update(value: Exclude<Claims[Key], undefined>): Promise<IdentityWriteResponse>;
+    delete(): Promise<IdentityWriteResponse>;
+}
+export {};
+//# sourceMappingURL=identity-reference.d.ts.map

package/dist/auth/identity-reference.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"identity-reference.d.ts","sourceRoot":"","sources":["../../src/auth/identity-reference.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EACR,kBAAkB,EAClB,eAAe,EACf,mBAAmB,EACtB,MAAM,qBAAqB,CAAC;AAC7B,OAAO,KAAK,EAAE,mBAAmB,EAAE,MAAM,kBAAkB,CAAC;AAC5D,OAAO,KAAK,EAAE,iBAAiB,EAAE,MAAM,0BAA0B,CAAC;AAClE,OAAO,EAGH,KAAK,cAAc,EACtB,MAAM,mBAAmB,CAAC;AAC3B,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,kBAAkB,CAAC;AACnD,OAAO,EAAe,iBAAiB,EAAE,MAAM,aAAa,CAAC;AAE7D,MAAM,MAAM,kBAAkB,CAC1B,MAAM,SAAS,MAAM,GAAG,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,IAC/C,IAAI,CAAC,UAAU,EAAE,cAAc,CAAC,GAAG;IACnC,QAAQ,CAAC,YAAY,CAAC,EAAE,OAAO,CAAC,MAAM,CAAC,CAAC;CAC3C,CAAC;AAEF,KAAK,qBAAqB,GACpB;IAAE,KAAK,EAAE,IAAI,CAAC;IAAC,IAAI,EAAE,mBAAmB,CAAA;CAAE,GAC1C;IAAE,KAAK,EAAE,KAAK,CAAC;IAAC,IAAI,EAAE,IAAI,CAAA;CAAE,CAAC;AAEnC,MAAM,WAAW,wBAAwB,CACrC,QAAQ,SAAS,OAAO,GAAG,KAAK,EAChC,GAAG,SAAS,OAAO,GAAG,KAAK;IAE3B,iFAAiF;IACjF,QAAQ,CAAC,EAAE,QAAQ,CAAC;IACpB,uEAAuE;IACvE,YAAY,CAAC,EAAE,GAAG,CAAC;CACtB;AAED,+DAA+D;AAC/D,qBAAa,iBAAiB,CAC1B,QAAQ,SAAS,OAAO,GAAG,KAAK,EAChC,GAAG,SAAS,OAAO,GAAG,KAAK,EAC3B,MAAM,SAAS,MAAM,GAAG,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC;IAS3C,OAAO,CAAC,QAAQ,CAAC,IAAI;IAPzB,OAAO,CAAC,QAAQ,CAAC,UAAU,CAAiB;IAC5C,OAAO,CAAC,QAAQ,CAAC,QAAQ,CAAW;IACpC,OAAO,CAAC,QAAQ,CAAC,YAAY,CAAM;IACnC,OAAO,CAAC,cAAc,CAAC,CAAyB;IAChD,OAAO,CAAC,gBAAgB,CAAC,CAAmB;gBAGvB,IAAI,EAAE,iBAAiB,EACxC,UAAU,EAAE,cAAc,EAC1B,OAAO,GAAE,wBAAwB,CAAC,QAAQ,EAAE,GAAG,CAAM;IA0BzD,MAAM,CACF,IAAI,EAAE,iBAAiB,CAAC,KAAK,EAAE,IAAI,EAAE,MAAM,CAAC,EAC5C,IAAI,EAAE,kBAAkB,CAAC,MAAM,CAAC;;;;;;;IAMpC,GAAG,CACC,IAAI,EAAE,iBAAiB,CAAC,KAAK,EAAE,IAAI,EAAE,MAAM,CAAC,EAC5C,IAAI,EAAE,eAAe,CAAC,MAAM,CAAC;;;;;;;IAMjC,oFAAoF;IACpF,IAAI,MAAM,IAAI,GAAG,SAAS,IAAI,GACxB,QAAQ,SAAS,KAAK,GAClB,cAAc,CAAC,MAAM,CAAC,GACtB,KAAK,GACT,KAAK,CAQV;IAED,+EAA+E;IAC/E,IAAI,QAAQ,IAAI,GAAG,SAAS,IAAI,GAC1B,QAAQ,SAAS,KAAK,GAClB,gBAAgB,GAChB,KAAK,GACT,KAAK,CAQV;IAED,MAAM,CAAC,IAAI,EAAE,iBAAiB,CAAC,KAAK,EAAE,IAAI,EAAE,MAAM,CAAC;IAKnD,OAAO,CAAC,UAAU;IAclB,oEAAoE;IAC9D,MAAM,CACR,IAAI,EAAE,iBAAiB,CAAC,KAAK,EAAE,GAAG,EAAE,MAAM,CAAC,GAC5C,OAAO,CAAC;QAAE,KAAK,EAAE,IAAI,CAAC;QAAC,IAAI,EAAE,OAAO,CAAA;KAAE,GAAG;QAAE,KAAK,EAAE,KAAK,CAAC;QAAC,IAAI,EAAE,IAAI,CAAA;KAAE,CAAC;IAiBnE,GAAG,IAAI,OAAO,CACd;QACI,KAAK,EAAE,IAAI,CAAC;QACZ,IAAI,EAAE,QAAQ,SAAS,IAAI,GACrB,kBAAkB,CAAC,MAAM,CAAC,EAAE,GAC5B,kBAAkB,CAAC,MAAM,CAAC,GAAG,IAAI,CAAC;KAC3C,GACD;QAAE,KAAK,EAAE,KAAK,CAAC;QAAC,IAAI,EAAE,IAAI,CAAA;KAAE,CACjC;CAkBJ;AAED,mFAAmF;AACnF,cAAM,gBAAgB;IAEd,OAAO,CAAC,QAAQ,CAAC,IAAI;IACrB,OAAO,CAAC,QAAQ,CAAC,GAAG;gBADH,IAAI,EAAE,iBAAiB,EACvB,GAAG,EAAE,MAAM;IAGhC,MAAM,CAAC,QAAQ,EAAE,mBAAmB;;;;;;;IAI9B,GAAG;;;;;;;;;IAQT,YAAY;CAMf;AAED,qEAAqE;AACrE,cAAM,cAAc,CAAC,MAAM,SAAS,MAAM;IAElC,OAAO,CAAC,QAAQ,CAAC,IAAI;IACrB,OAAO,CAAC,QAAQ,CAAC,GAAG;gBADH,IAAI,EAAE,iBAAiB,EACvB,GAAG,EAAE,MAAM;IAGhC,wEAAwE;IACxE,GAAG,CAAC,MAAM,EAAE,OAAO,CAAC,MAAM,CAAC,GAAG,IAAI;IAO5B,GAAG;;;;;cAOkC,OAAO,CAAC,MAAM,CAAC;;IAI1D,iEAAiE;IACjE,KAAK,CAAC,GAAG,SAAS,OAAO,CAAC,MAAM,MAAM,EAAE,MAAM,CAAC,EAAE,GAAG,EAAE,GAAG;IAczD,wEAAwE;IAClE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,MAAM,CAAC;IA+BpC,yDAAyD;IACzD,MAAM;CAGT;AAED,6EAA6E;AAC7E,cAAM,gBAAgB,CAClB,MAAM,SAAS,MAAM,EACrB,GAAG,SAAS,OAAO,CAAC,MAAM,MAAM,EAAE,MAAM,CAAC;IAGrC,OAAO,CAAC,QAAQ,CAAC,MAAM;IACvB,OAAO,CAAC,QAAQ,CAAC,GAAG;gBADH,MAAM,EAAE,cAAc,CAAC,MAAM,CAAC,EAC9B,GAAG,EAAE,GAAG;IAG7B,yEAAyE;IACzE,GAAG,CAAC,KAAK,EAAE,OAAO,CAAC,MAAM,CAAC,GAAG,CAAC,EAAE,SAAS,CAAC;IAI1C,iEAAiE;IAC3D,GAAG,IAAI,OAAO,CACd;QAAE,KAAK,EAAE,IAAI,CAAC;QAAC,IAAI,EAAE,MAAM,CAAC,GAAG,CAAC,GAAG,SAAS,CAAA;KAAE,GAC9C;QAAE,KAAK,EAAE,KAAK,CAAC;QAAC,IAAI,EAAE,IAAI,CAAA;KAAE,CACjC;IAWK,MAAM,CAAC,KAAK,EAAE,OAAO,CAAC,MAAM,CAAC,GAAG,CAAC,EAAE,SAAS,CAAC;IAsC7C,MAAM;CASf"}

package/dist/auth/identity-reference.js

@@ -0,0 +1,293 @@
+import { buildUsersLookupRequest, buildCustomClaimsRequest } from './user-request.js';
+import { ensureError, FirebaseEdgeError } from './errors.js';
+/** Exact lookup with no query modifiers or count operation. */
+export class IdentityReference {
+    auth;
+    identifier;
+    multiple;
+    uidReference;
+    claimsResource;
+    metadataResource;
+    constructor(auth, identifier, options = {}) {
+        this.auth = auth;
+        if (!options ||
+            typeof options !== 'object' ||
+            Array.isArray(options) ||
+            (options.multiple !== undefined &&
+                typeof options.multiple !== 'boolean') ||
+            (options.uidReference !== undefined &&
+                typeof options.uidReference !== 'boolean')) {
+            throw new FirebaseEdgeError({
+                code: 'auth/invalid-argument',
+                message: 'IdentityReference options must be an object with boolean multiple and uidReference settings.'
+            });
+        }
+        const { error } = buildUsersLookupRequest([identifier]);
+        if (error) {
+            throw error;
+        }
+        this.identifier = { ...identifier };
+        this.multiple = options.multiple ?? false;
+        this.uidReference = options.uidReference ?? false;
+    }
+    update(data) {
+        const uid = this.requireUid();
+        return this.auth._writeIdentityUser(uid, data);
+    }
+    set(data) {
+        const uid = this.requireUid();
+        return this.auth._writeIdentityUser(uid, data, 'set');
+    }
+    /** Custom-claims operations for a UID reference; accessing this performs no I/O. */
+    get claims() {
+        const uid = this.requireUid();
+        this.claimsResource ??= new IdentityClaims(this.auth, uid);
+        return this.claimsResource;
+    }
+    /** Writable timestamps for a UID reference; accessing this performs no I/O. */
+    get metadata() {
+        const uid = this.requireUid();
+        this.metadataResource ??= new IdentityMetadata(this.auth, uid);
+        return this.metadataResource;
+    }
+    delete() {
+        const uid = this.requireUid();
+        return identityWriteResult(uid, this.auth.deleteUser(uid));
+    }
+    requireUid() {
+        if (this.multiple ||
+            !this.uidReference ||
+            !('uid' in this.identifier)) {
+            throw new FirebaseEdgeError({
+                code: 'auth/invalid-argument',
+                message: 'This mutation requires a UID reference.'
+            });
+        }
+        return this.identifier.uid;
+    }
+    /** Check whether an exact single-user lookup matches an account. */
+    async exists() {
+        if (this.multiple) {
+            return {
+                error: new FirebaseEdgeError({
+                    code: 'auth/invalid-argument',
+                    message: 'exists requires a single-user lookup.'
+                }),
+                data: null
+            };
+        }
+        const { error, data } = await this.get();
+        if (error) {
+            return { error, data: null };
+        }
+        return { error: null, data: data !== null };
+    }
+    async get() {
+        try {
+            const { error, data } = await this.auth.getUsers([this.identifier]);
+            if (error) {
+                return { error, data: null };
+            }
+            return {
+                error: null,
+                data: (this.multiple
+                    ? data.users
+                    : (data.users[0] ?? null))
+            };
+        }
+        catch (cause) {
+            return { error: ensureError(cause), data: null };
+        }
+    }
+}
+/** Update explicitly supplied account timestamps. Access through user.metadata. */
+class IdentityMetadata {
+    auth;
+    uid;
+    constructor(auth, uid) {
+        this.auth = auth;
+        this.uid = uid;
+    }
+    update(metadata) {
+        return this.auth._writeIdentityUser(this.uid, metadata, 'metadata');
+    }
+    async get() {
+        const { error, data } = await readIdentityUser(this.auth, this.uid);
+        if (error) {
+            return { error, data: null };
+        }
+        return { error: null, data: data.metadata };
+    }
+    revokeTokens() {
+        return identityWriteResult(this.uid, this.auth.revokeRefreshTokens(this.uid));
+    }
+}
+/** Claims stored on one existing UID. Access through user.claims. */
+class IdentityClaims {
+    auth;
+    uid;
+    constructor(auth, uid) {
+        this.auth = auth;
+        this.uid = uid;
+    }
+    /** Replace all custom claims; null clears them. No read is required. */
+    set(claims) {
+        return identityWriteResult(this.uid, this.auth.setCustomUserClaims(this.uid, claims));
+    }
+    async get() {
+        const { error, data } = await readIdentityUser(this.auth, this.uid);
+        if (error) {
+            return { error, data: null };
+        }
+        return {
+            error: null,
+            data: (data.customClaims ?? {})
+        };
+    }
+    /** Select one literal top-level claim key, not a dotted path. */
+    byKey(key) {
+        if (typeof key !== 'string' || key.length === 0) {
+            throw new FirebaseEdgeError({
+                code: 'auth/invalid-argument',
+                message: 'A claim key must be a nonempty string.'
+            });
+        }
+        const { error } = buildCustomClaimsRequest({ [key]: null });
+        if (error) {
+            throw error;
+        }
+        return new IdentityClaimKey(this, key);
+    }
+    /** Shallow-merge claims using a non-atomic read followed by a write. */
+    async update(claims) {
+        if (claims === null) {
+            return {
+                data: null,
+                error: new FirebaseEdgeError({
+                    code: 'auth/invalid-argument',
+                    message: 'claims.update requires an object; use claims.delete() to clear claims.'
+                })
+            };
+        }
+        const { error, data } = buildCustomClaimsRequest(claims);
+        if (error) {
+            return { data: null, error };
+        }
+        // Snapshot the patch before the read so caller mutations cannot change it.
+        const patch = JSON.parse(data.customAttributes);
+        try {
+            const { error: readError, data: claims } = await this.get();
+            if (readError) {
+                return { data: null, error: readError };
+            }
+            return await this.set({ ...claims, ...patch });
+        }
+        catch (cause) {
+            return { data: null, error: ensureError(cause) };
+        }
+    }
+    /** Clear all custom claims without deleting the user. */
+    delete() {
+        return this.set(null);
+    }
+}
+/** One claim value. Updates and deletion preserve other top-level claims. */
+class IdentityClaimKey {
+    claims;
+    key;
+    constructor(claims, key) {
+        this.claims = claims;
+        this.key = key;
+    }
+    /** Set or replace this key's value while preserving the other claims. */
+    set(value) {
+        return this.update(value);
+    }
+    /** Read one own claim value; an absent key returns undefined. */
+    async get() {
+        const { error, data } = await this.claims.get();
+        if (error) {
+            return { error, data: null };
+        }
+        return {
+            error: null,
+            data: Object.hasOwn(data, this.key) ? data[this.key] : undefined
+        };
+    }
+    async update(value) {
+        if (value === undefined ||
+            typeof value === 'function' ||
+            typeof value === 'symbol') {
+            return {
+                data: null,
+                error: new FirebaseEdgeError({
+                    code: 'auth/invalid-argument',
+                    message: 'A claim value must be JSON-serializable. Use delete() to remove the field.'
+                })
+            };
+        }
+        const { error, data } = buildCustomClaimsRequest({
+            [this.key]: value
+        });
+        if (error) {
+            return { error, data: null };
+        }
+        const patch = JSON.parse(data.customAttributes);
+        if (!Object.hasOwn(patch, this.key)) {
+            return {
+                data: null,
+                error: new FirebaseEdgeError({
+                    code: 'auth/invalid-argument',
+                    message: 'The claim value was omitted during JSON serialization.'
+                })
+            };
+        }
+        return this.claims.update(patch);
+    }
+    async delete() {
+        const { error, data } = await this.claims.get();
+        if (error) {
+            return { error, data: null };
+        }
+        const remaining = { ...data };
+        delete remaining[this.key];
+        return this.claims.set(remaining);
+    }
+}
+/** Read one existing account for a claims or metadata operation. */
+async function readIdentityUser(auth, uid) {
+    try {
+        const { error, data } = await auth.getUsers([{ uid }]);
+        if (error) {
+            return { error, data: null };
+        }
+        const user = data.users[0];
+        if (!user) {
+            return {
+                data: null,
+                error: new FirebaseEdgeError({
+                    code: 'auth/user-not-found',
+                    message: 'The requested user does not exist.'
+                })
+            };
+        }
+        return { error: null, data: user };
+    }
+    catch (cause) {
+        return { data: null, error: ensureError(cause) };
+    }
+}
+/** Normalize successful single-user writes without reading the account back. */
+async function identityWriteResult(uid, operation) {
+    try {
+        const { error } = await operation;
+        if (error) {
+            return { error, data: null };
+        }
+        return { error: null, data: { uid } };
+    }
+    catch (cause) {
+        return { error: ensureError(cause), data: null };
+    }
+}
+//# sourceMappingURL=identity-reference.js.map

package/dist/auth/identity-reference.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"identity-reference.js","sourceRoot":"","sources":["../../src/auth/identity-reference.ts"],"names":[],"mappings":"AAOA,OAAO,EACH,uBAAuB,EACvB,wBAAwB,EAE3B,MAAM,mBAAmB,CAAC;AAE3B,OAAO,EAAE,WAAW,EAAE,iBAAiB,EAAE,MAAM,aAAa,CAAC;AAsB7D,+DAA+D;AAC/D,MAAM,OAAO,iBAAiB;IAYL;IAPJ,UAAU,CAAiB;IAC3B,QAAQ,CAAW;IACnB,YAAY,CAAM;IAC3B,cAAc,CAA0B;IACxC,gBAAgB,CAAoB;IAE5C,YACqB,IAAuB,EACxC,UAA0B,EAC1B,UAAmD,EAAE;QAFpC,SAAI,GAAJ,IAAI,CAAmB;QAIxC,IACI,CAAC,OAAO;YACR,OAAO,OAAO,KAAK,QAAQ;YAC3B,KAAK,CAAC,OAAO,CAAC,OAAO,CAAC;YACtB,CAAC,OAAO,CAAC,QAAQ,KAAK,SAAS;gBAC3B,OAAO,OAAO,CAAC,QAAQ,KAAK,SAAS,CAAC;YAC1C,CAAC,OAAO,CAAC,YAAY,KAAK,SAAS;gBAC/B,OAAO,OAAO,CAAC,YAAY,KAAK,SAAS,CAAC,EAChD,CAAC;YACC,MAAM,IAAI,iBAAiB,CAAC;gBACxB,IAAI,EAAE,uBAAuB;gBAC7B,OAAO,EACH,8FAA8F;aACrG,CAAC,CAAC;QACP,CAAC;QACD,MAAM,EAAE,KAAK,EAAE,GAAG,uBAAuB,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC;QACxD,IAAI,KAAK,EAAE,CAAC;YACR,MAAM,KAAK,CAAC;QAChB,CAAC;QACD,IAAI,CAAC,UAAU,GAAG,EAAE,GAAG,UAAU,EAAE,CAAC;QACpC,IAAI,CAAC,QAAQ,GAAG,OAAO,CAAC,QAAQ,IAAK,KAAkB,CAAC;QACxD,IAAI,CAAC,YAAY,GAAG,OAAO,CAAC,YAAY,IAAK,KAAa,CAAC;IAC/D,CAAC;IAED,MAAM,CAEF,IAAgC;QAEhC,MAAM,GAAG,GAAG,IAAI,CAAC,UAAU,EAAE,CAAC;QAC9B,OAAO,IAAI,CAAC,IAAI,CAAC,kBAAkB,CAAC,GAAG,EAAE,IAAI,CAAC,CAAC;IACnD,CAAC;IAED,GAAG,CAEC,IAA6B;QAE7B,MAAM,GAAG,GAAG,IAAI,CAAC,UAAU,EAAE,CAAC;QAC9B,OAAO,IAAI,CAAC,IAAI,CAAC,kBAAkB,CAAC,GAAG,EAAE,IAAI,EAAE,KAAK,CAAC,CAAC;IAC1D,CAAC;IAED,oFAAoF;IACpF,IAAI,MAAM;QAKN,MAAM,GAAG,GAAG,IAAI,CAAC,UAAU,EAAE,CAAC;QAC9B,IAAI,CAAC,cAAc,KAAK,IAAI,cAAc,CAAS,IAAI,CAAC,IAAI,EAAE,GAAG,CAAC,CAAC;QACnE,OAAO,IAAI,CAAC,cAID,CAAC;IAChB,CAAC;IAED,+EAA+E;IAC/E,IAAI,QAAQ;QAKR,MAAM,GAAG,GAAG,IAAI,CAAC,UAAU,EAAE,CAAC;QAC9B,IAAI,CAAC,gBAAgB,KAAK,IAAI,gBAAgB,CAAC,IAAI,CAAC,IAAI,EAAE,GAAG,CAAC,CAAC;QAC/D,OAAO,IAAI,CAAC,gBAID,CAAC;IAChB,CAAC;IAED,MAAM;QACF,MAAM,GAAG,GAAG,IAAI,CAAC,UAAU,EAAE,CAAC;QAC9B,OAAO,mBAAmB,CAAC,GAAG,EAAE,IAAI,CAAC,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,CAAC,CAAC;IAC/D,CAAC;IAEO,UAAU;QACd,IACI,IAAI,CAAC,QAAQ;YACb,CAAC,IAAI,CAAC,YAAY;YAClB,CAAC,CAAC,KAAK,IAAI,IAAI,CAAC,UAAU,CAAC,EAC7B,CAAC;YACC,MAAM,IAAI,iBAAiB,CAAC;gBACxB,IAAI,EAAE,uBAAuB;gBAC7B,OAAO,EAAE,yCAAyC;aACrD,CAAC,CAAC;QACP,CAAC;QACD,OAAO,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC;IAC/B,CAAC;IAED,oEAAoE;IACpE,KAAK,CAAC,MAAM;QAGR,IAAI,IAAI,CAAC,QAAQ,EAAE,CAAC;YAChB,OAAO;gBACH,KAAK,EAAE,IAAI,iBAAiB,CAAC;oBACzB,IAAI,EAAE,uBAAuB;oBAC7B,OAAO,EAAE,uCAAuC;iBACnD,CAAC;gBACF,IAAI,EAAE,IAAI;aACb,CAAC;QACN,CAAC;QACD,MAAM,EAAE,KAAK,EAAE,IAAI,EAAE,GAAG,MAAM,IAAI,CAAC,GAAG,EAAE,CAAC;QACzC,IAAI,KAAK,EAAE,CAAC;YACR,OAAO,EAAE,KAAK,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC;QACjC,CAAC;QACD,OAAO,EAAE,KAAK,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,KAAK,IAAI,EAAE,CAAC;IAChD,CAAC;IAED,KAAK,CAAC,GAAG;QASL,IAAI,CAAC;YACD,MAAM,EAAE,KAAK,EAAE,IAAI,EAAE,GAAG,MAAM,IAAI,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC,CAAC;YACpE,IAAI,KAAK,EAAE,CAAC;gBACR,OAAO,EAAE,KAAK,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC;YACjC,CAAC;YACD,OAAO;gBACH,KAAK,EAAE,IAAI;gBACX,IAAI,EAAE,CAAC,IAAI,CAAC,QAAQ;oBAChB,CAAC,CAAC,IAAI,CAAC,KAAK;oBACZ,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,IAAI,CAAC,CAEU;aAC1C,CAAC;QACN,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACb,OAAO,EAAE,KAAK,EAAE,WAAW,CAAC,KAAK,CAAC,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC;QACrD,CAAC;IACL,CAAC;CACJ;AAED,mFAAmF;AACnF,MAAM,gBAAgB;IAEG;IACA;IAFrB,YACqB,IAAuB,EACvB,GAAW;QADX,SAAI,GAAJ,IAAI,CAAmB;QACvB,QAAG,GAAH,GAAG,CAAQ;IAC7B,CAAC;IAEJ,MAAM,CAAC,QAA6B;QAChC,OAAO,IAAI,CAAC,IAAI,CAAC,kBAAkB,CAAC,IAAI,CAAC,GAAG,EAAE,QAAQ,EAAE,UAAU,CAAC,CAAC;IACxE,CAAC;IAED,KAAK,CAAC,GAAG;QACL,MAAM,EAAE,KAAK,EAAE,IAAI,EAAE,GAAG,MAAM,gBAAgB,CAAC,IAAI,CAAC,IAAI,EAAE,IAAI,CAAC,GAAG,CAAC,CAAC;QACpE,IAAI,KAAK,EAAE,CAAC;YACR,OAAO,EAAE,KAAK,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC;QACjC,CAAC;QACD,OAAO,EAAE,KAAK,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,CAAC,QAAQ,EAAE,CAAC;IAChD,CAAC;IAED,YAAY;QACR,OAAO,mBAAmB,CACtB,IAAI,CAAC,GAAG,EACR,IAAI,CAAC,IAAI,CAAC,mBAAmB,CAAC,IAAI,CAAC,GAAG,CAAC,CAC1C,CAAC;IACN,CAAC;CACJ;AAED,qEAAqE;AACrE,MAAM,cAAc;IAEK;IACA;IAFrB,YACqB,IAAuB,EACvB,GAAW;QADX,SAAI,GAAJ,IAAI,CAAmB;QACvB,QAAG,GAAH,GAAG,CAAQ;IAC7B,CAAC;IAEJ,wEAAwE;IACxE,GAAG,CAAC,MAA8B;QAC9B,OAAO,mBAAmB,CACtB,IAAI,CAAC,GAAG,EACR,IAAI,CAAC,IAAI,CAAC,mBAAmB,CAAC,IAAI,CAAC,GAAG,EAAE,MAAM,CAAC,CAClD,CAAC;IACN,CAAC;IAED,KAAK,CAAC,GAAG;QACL,MAAM,EAAE,KAAK,EAAE,IAAI,EAAE,GAAG,MAAM,gBAAgB,CAAC,IAAI,CAAC,IAAI,EAAE,IAAI,CAAC,GAAG,CAAC,CAAC;QACpE,IAAI,KAAK,EAAE,CAAC;YACR,OAAO,EAAE,KAAK,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC;QACjC,CAAC;QACD,OAAO;YACH,KAAK,EAAE,IAAI;YACX,IAAI,EAAE,CAAC,IAAI,CAAC,YAAY,IAAI,EAAE,CAAoB;SACrD,CAAC;IACN,CAAC;IAED,iEAAiE;IACjE,KAAK,CAA4C,GAAQ;QACrD,IAAI,OAAO,GAAG,KAAK,QAAQ,IAAI,GAAG,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YAC9C,MAAM,IAAI,iBAAiB,CAAC;gBACxB,IAAI,EAAE,uBAAuB;gBAC7B,OAAO,EAAE,wCAAwC;aACpD,CAAC,CAAC;QACP,CAAC;QACD,MAAM,EAAE,KAAK,EAAE,GAAG,wBAAwB,CAAC,EAAE,CAAC,GAAG,CAAC,EAAE,IAAI,EAAE,CAAC,CAAC;QAC5D,IAAI,KAAK,EAAE,CAAC;YACR,MAAM,KAAK,CAAC;QAChB,CAAC;QACD,OAAO,IAAI,gBAAgB,CAAc,IAAI,EAAE,GAAG,CAAC,CAAC;IACxD,CAAC;IAED,wEAAwE;IACxE,KAAK,CAAC,MAAM,CAAC,MAAuB;QAChC,IAAI,MAAM,KAAK,IAAI,EAAE,CAAC;YAClB,OAAO;gBACH,IAAI,EAAE,IAAI;gBACV,KAAK,EAAE,IAAI,iBAAiB,CAAC;oBACzB,IAAI,EAAE,uBAAuB;oBAC7B,OAAO,EACH,wEAAwE;iBAC/E,CAAC;aACL,CAAC;QACN,CAAC;QACD,MAAM,EAAE,KAAK,EAAE,IAAI,EAAE,GAAG,wBAAwB,CAAC,MAAM,CAAC,CAAC;QACzD,IAAI,KAAK,EAAE,CAAC;YACR,OAAO,EAAE,IAAI,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC;QACjC,CAAC;QACD,2EAA2E;QAC3E,MAAM,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,gBAAgB,CAG7C,CAAC;QACF,IAAI,CAAC;YACD,MAAM,EAAE,KAAK,EAAE,SAAS,EAAE,IAAI,EAAE,MAAM,EAAE,GAAG,MAAM,IAAI,CAAC,GAAG,EAAE,CAAC;YAC5D,IAAI,SAAS,EAAE,CAAC;gBACZ,OAAO,EAAE,IAAI,EAAE,IAAI,EAAE,KAAK,EAAE,SAAS,EAAE,CAAC;YAC5C,CAAC;YACD,OAAO,MAAM,IAAI,CAAC,GAAG,CAAC,EAAE,GAAG,MAAM,EAAE,GAAG,KAAK,EAAE,CAAC,CAAC;QACnD,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACb,OAAO,EAAE,IAAI,EAAE,IAAI,EAAE,KAAK,EAAE,WAAW,CAAC,KAAK,CAAC,EAAE,CAAC;QACrD,CAAC;IACL,CAAC;IAED,yDAAyD;IACzD,MAAM;QACF,OAAO,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;IAC1B,CAAC;CACJ;AAED,6EAA6E;AAC7E,MAAM,gBAAgB;IAKG;IACA;IAFrB,YACqB,MAA8B,EAC9B,GAAQ;QADR,WAAM,GAAN,MAAM,CAAwB;QAC9B,QAAG,GAAH,GAAG,CAAK;IAC1B,CAAC;IAEJ,yEAAyE;IACzE,GAAG,CAAC,KAAsC;QACtC,OAAO,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;IAC9B,CAAC;IAED,iEAAiE;IACjE,KAAK,CAAC,GAAG;QAIL,MAAM,EAAE,KAAK,EAAE,IAAI,EAAE,GAAG,MAAM,IAAI,CAAC,MAAM,CAAC,GAAG,EAAE,CAAC;QAChD,IAAI,KAAK,EAAE,CAAC;YACR,OAAO,EAAE,KAAK,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC;QACjC,CAAC;QACD,OAAO;YACH,KAAK,EAAE,IAAI;YACX,IAAI,EAAE,MAAM,CAAC,MAAM,CAAC,IAAI,EAAE,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,SAAS;SACnE,CAAC;IACN,CAAC;IAED,KAAK,CAAC,MAAM,CAAC,KAAsC;QAC/C,IACI,KAAK,KAAK,SAAS;YACnB,OAAO,KAAK,KAAK,UAAU;YAC3B,OAAO,KAAK,KAAK,QAAQ,EAC3B,CAAC;YACC,OAAO;gBACH,IAAI,EAAE,IAAI;gBACV,KAAK,EAAE,IAAI,iBAAiB,CAAC;oBACzB,IAAI,EAAE,uBAAuB;oBAC7B,OAAO,EACH,4EAA4E;iBACnF,CAAC;aACL,CAAC;QACN,CAAC;QACD,MAAM,EAAE,KAAK,EAAE,IAAI,EAAE,GAAG,wBAAwB,CAAC;YAC7C,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,KAAK;SACpB,CAAC,CAAC;QACH,IAAI,KAAK,EAAE,CAAC;YACR,OAAO,EAAE,KAAK,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC;QACjC,CAAC;QACD,MAAM,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,gBAAgB,CAG7C,CAAC;QACF,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC,KAAK,EAAE,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC;YAClC,OAAO;gBACH,IAAI,EAAE,IAAI;gBACV,KAAK,EAAE,IAAI,iBAAiB,CAAC;oBACzB,IAAI,EAAE,uBAAuB;oBAC7B,OAAO,EACH,wDAAwD;iBAC/D,CAAC;aACL,CAAC;QACN,CAAC;QACD,OAAO,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC,KAAwB,CAAC,CAAC;IACxD,CAAC;IAED,KAAK,CAAC,MAAM;QACR,MAAM,EAAE,KAAK,EAAE,IAAI,EAAE,GAAG,MAAM,IAAI,CAAC,MAAM,CAAC,GAAG,EAAE,CAAC;QAChD,IAAI,KAAK,EAAE,CAAC;YACR,OAAO,EAAE,KAAK,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC;QACjC,CAAC;QACD,MAAM,SAAS,GAAG,EAAE,GAAG,IAAI,EAAE,CAAC;QAC9B,OAAO,SAAS,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;QAC3B,OAAO,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC;IACtC,CAAC;CACJ;AAED,oEAAoE;AACpE,KAAK,UAAU,gBAAgB,CAC3B,IAAuB,EACvB,GAAW;IAEX,IAAI,CAAC;QACD,MAAM,EAAE,KAAK,EAAE,IAAI,EAAE,GAAG,MAAM,IAAI,CAAC,QAAQ,CAAC,CAAC,EAAE,GAAG,EAAE,CAAC,CAAC,CAAC;QACvD,IAAI,KAAK,EAAE,CAAC;YACR,OAAO,EAAE,KAAK,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC;QACjC,CAAC;QACD,MAAM,IAAI,GAAG,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;QAC3B,IAAI,CAAC,IAAI,EAAE,CAAC;YACR,OAAO;gBACH,IAAI,EAAE,IAAI;gBACV,KAAK,EAAE,IAAI,iBAAiB,CAAC;oBACzB,IAAI,EAAE,qBAAqB;oBAC3B,OAAO,EAAE,oCAAoC;iBAChD,CAAC;aACL,CAAC;QACN,CAAC;QACD,OAAO,EAAE,KAAK,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC;IACvC,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACb,OAAO,EAAE,IAAI,EAAE,IAAI,EAAE,KAAK,EAAE,WAAW,CAAC,KAAK,CAAC,EAAE,CAAC;IACrD,CAAC;AACL,CAAC;AAED,gFAAgF;AAChF,KAAK,UAAU,mBAAmB,CAC9B,GAAW,EACX,SAA2C;IAE3C,IAAI,CAAC;QACD,MAAM,EAAE,KAAK,EAAE,GAAG,MAAM,SAAS,CAAC;QAClC,IAAI,KAAK,EAAE,CAAC;YACR,OAAO,EAAE,KAAK,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC;QACjC,CAAC;QACD,OAAO,EAAE,KAAK,EAAE,IAAI,EAAE,IAAI,EAAE,EAAE,GAAG,EAAE,EAAE,CAAC;IAC1C,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACb,OAAO,EAAE,KAAK,EAAE,WAAW,CAAC,KAAK,CAAC,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC;IACrD,CAAC;AACL,CAAC"}

package/dist/auth/identity-types.d.ts

@@ -0,0 +1,44 @@
+import type { ProviderIdentifier, UserIdentifier } from './user-request.js';
+import type { IdentityUserRecord } from './identity-reference.js';
+export type IdentityFilterField = IdentityStringFilterField | 'provider';
+export type IdentityStringFilterField = 'uid' | 'email' | 'phoneNumber' | 'initialEmail';
+export type IdentityOrderField = 'uid' | 'displayName' | 'createdAt' | 'lastLoginAt' | 'email';
+export type IdentityDirection = 'asc' | 'desc';
+/** One exact identity, never an implicit conjunction of several identifiers. */
+export type IdentityIdentifier = {
+    [K in IdentityStringFilterField]: Record<K, string> & Partial<Record<Exclude<IdentityStringFilterField, K> | 'providerId' | 'providerUid', never>>;
+}[IdentityStringFilterField] | (ProviderIdentifier & Partial<Record<IdentityStringFilterField, never>>);
+/** @internal Validated options passed from the fluent query to the endpoint. */
+export interface IdentityQueryOptions {
+    identifiers?: readonly UserIdentifier[];
+    filter?: {
+        field: IdentityStringFilterField;
+        operator?: '==';
+        value: string;
+    } | {
+        field: IdentityStringFilterField;
+        operator: 'in';
+        value: readonly string[];
+    } | {
+        field: 'provider';
+        operator: 'in';
+        value: readonly ProviderIdentifier[];
+    };
+    orderBy?: {
+        field: IdentityOrderField;
+        direction: IdentityDirection;
+    };
+    offset?: number;
+    limit?: number;
+}
+export interface IdentityCountResult {
+    count: number;
+}
+export interface IdentityQueryResult<Claims extends object = Record<string, unknown>> {
+    users: IdentityUserRecord<Claims>[];
+    /** Continuation hint for offset queries; null for listings and limitToLast. */
+    nextOffset: number | null;
+    /** Opaque continuation token for UID-ascending listings; otherwise null. */
+    nextPageToken: string | null;
+}
+//# sourceMappingURL=identity-types.d.ts.map

package/dist/auth/identity-types.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"identity-types.d.ts","sourceRoot":"","sources":["../../src/auth/identity-types.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,kBAAkB,EAAE,cAAc,EAAE,MAAM,mBAAmB,CAAC;AAC5E,OAAO,KAAK,EAAE,kBAAkB,EAAE,MAAM,yBAAyB,CAAC;AAElE,MAAM,MAAM,mBAAmB,GAAG,yBAAyB,GAAG,UAAU,CAAC;AACzE,MAAM,MAAM,yBAAyB,GAC/B,KAAK,GACL,OAAO,GACP,aAAa,GACb,cAAc,CAAC;AACrB,MAAM,MAAM,kBAAkB,GACxB,KAAK,GACL,aAAa,GACb,WAAW,GACX,aAAa,GACb,OAAO,CAAC;AACd,MAAM,MAAM,iBAAiB,GAAG,KAAK,GAAG,MAAM,CAAC;AAE/C,gFAAgF;AAChF,MAAM,MAAM,kBAAkB,GACxB;KACK,CAAC,IAAI,yBAAyB,GAAG,MAAM,CAAC,CAAC,EAAE,MAAM,CAAC,GAC/C,OAAO,CACH,MAAM,CACA,OAAO,CAAC,yBAAyB,EAAE,CAAC,CAAC,GACrC,YAAY,GACZ,aAAa,EACf,KAAK,CACR,CACJ;CACR,CAAC,yBAAyB,CAAC,GAC5B,CAAC,kBAAkB,GAAG,OAAO,CAAC,MAAM,CAAC,yBAAyB,EAAE,KAAK,CAAC,CAAC,CAAC,CAAC;AAE/E,gFAAgF;AAChF,MAAM,WAAW,oBAAoB;IACjC,WAAW,CAAC,EAAE,SAAS,cAAc,EAAE,CAAC;IACxC,MAAM,CAAC,EACD;QAAE,KAAK,EAAE,yBAAyB,CAAC;QAAC,QAAQ,CAAC,EAAE,IAAI,CAAC;QAAC,KAAK,EAAE,MAAM,CAAA;KAAE,GACpE;QACI,KAAK,EAAE,yBAAyB,CAAC;QACjC,QAAQ,EAAE,IAAI,CAAC;QACf,KAAK,EAAE,SAAS,MAAM,EAAE,CAAC;KAC5B,GACD;QACI,KAAK,EAAE,UAAU,CAAC;QAClB,QAAQ,EAAE,IAAI,CAAC;QACf,KAAK,EAAE,SAAS,kBAAkB,EAAE,CAAC;KACxC,CAAC;IACR,OAAO,CAAC,EAAE;QAAE,KAAK,EAAE,kBAAkB,CAAC;QAAC,SAAS,EAAE,iBAAiB,CAAA;KAAE,CAAC;IACtE,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,KAAK,CAAC,EAAE,MAAM,CAAC;CAClB;AAED,MAAM,WAAW,mBAAmB;IAChC,KAAK,EAAE,MAAM,CAAC;CACjB;AAED,MAAM,WAAW,mBAAmB,CAChC,MAAM,SAAS,MAAM,GAAG,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC;IAE/C,KAAK,EAAE,kBAAkB,CAAC,MAAM,CAAC,EAAE,CAAC;IACpC,+EAA+E;IAC/E,UAAU,EAAE,MAAM,GAAG,IAAI,CAAC;IAC1B,4EAA4E;IAC5E,aAAa,EAAE,MAAM,GAAG,IAAI,CAAC;CAChC"}

package/dist/auth/identity-types.js

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=identity-types.js.map

package/dist/auth/identity-types.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"identity-types.js","sourceRoot":"","sources":["../../src/auth/identity-types.ts"],"names":[],"mappings":""}