firebase-admin-edge 2.0.0 → 3.0.0

package/dist/auth/identity-write.d.ts

@@ -0,0 +1,41 @@
+import { type UserImportRecord, type UserMetadataRequest } from './user-import.js';
+import { type CreateRequest, type UpdateRequest } from './user-request.js';
+import { FirebaseEdgeError } from './errors.js';
+export type IdentityImportRecord<Claims extends object = Record<string, unknown>> = Omit<UserImportRecord, 'customClaims'> & {
+    customClaims?: Partial<Claims> | null;
+};
+export type IdentityCreateData<Claims extends object = Record<string, unknown>> = CreateRequest & {
+    customClaims?: Partial<Claims> | null;
+};
+export type IdentityUpdateData<Claims extends object = Record<string, unknown>> = Omit<UpdateRequest, 'password'> & {
+    password?: string | null;
+    customClaims?: Partial<Claims> | null;
+    metadata?: UserMetadataRequest;
+};
+export type IdentitySetData<Claims extends object = Record<string, unknown>> = Pick<IdentityUpdateData<Claims>, 'displayName' | 'photoURL' | 'phoneNumber' | 'disabled' | 'emailVerified' | 'customClaims'> & {
+    email?: string | null;
+    metadata?: {
+        creationTime?: string | null;
+        lastSignInTime?: string | null;
+    } | null;
+};
+export interface IdentityWriteResult {
+    uid: string;
+}
+/** Validate identity writes and combine supported fields in one request. @internal */
+export declare function buildIdentityWriteRequest(data: IdentityCreateData | IdentityUpdateData | IdentitySetData, operation: 'create' | 'update' | 'set'): {
+    data: null;
+    error: FirebaseEdgeError;
+} | {
+    error: null;
+    data: import("./firebase-types.js").UpdateAccountRequest;
+};
+/** Validate and serialize metadata for a dedicated UID update. @internal */
+export declare function buildIdentityMetadataRequest(metadata: UserMetadataRequest | IdentitySetData['metadata'], reset?: boolean): {
+    error: null;
+    data: Record<string, string>;
+} | {
+    data: null;
+    error: FirebaseEdgeError;
+};
+//# sourceMappingURL=identity-write.d.ts.map

package/dist/auth/identity-write.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"identity-write.d.ts","sourceRoot":"","sources":["../../src/auth/identity-write.ts"],"names":[],"mappings":"AAAA,OAAO,EAEH,KAAK,gBAAgB,EACrB,KAAK,mBAAmB,EAC3B,MAAM,kBAAkB,CAAC;AAC1B,OAAO,EAGH,KAAK,aAAa,EAClB,KAAK,aAAa,EACrB,MAAM,mBAAmB,CAAC;AAC3B,OAAO,EAAE,iBAAiB,EAAe,MAAM,aAAa,CAAC;AAE7D,MAAM,MAAM,oBAAoB,CAC5B,MAAM,SAAS,MAAM,GAAG,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,IAC/C,IAAI,CAAC,gBAAgB,EAAE,cAAc,CAAC,GAAG;IACzC,YAAY,CAAC,EAAE,OAAO,CAAC,MAAM,CAAC,GAAG,IAAI,CAAC;CACzC,CAAC;AACF,MAAM,MAAM,kBAAkB,CAC1B,MAAM,SAAS,MAAM,GAAG,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,IAC/C,aAAa,GAAG;IAChB,YAAY,CAAC,EAAE,OAAO,CAAC,MAAM,CAAC,GAAG,IAAI,CAAC;CACzC,CAAC;AACF,MAAM,MAAM,kBAAkB,CAC1B,MAAM,SAAS,MAAM,GAAG,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,IAC/C,IAAI,CAAC,aAAa,EAAE,UAAU,CAAC,GAAG;IAClC,QAAQ,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IACzB,YAAY,CAAC,EAAE,OAAO,CAAC,MAAM,CAAC,GAAG,IAAI,CAAC;IACtC,QAAQ,CAAC,EAAE,mBAAmB,CAAC;CAClC,CAAC;AACF,MAAM,MAAM,eAAe,CAAC,MAAM,SAAS,MAAM,GAAG,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,IACvE,IAAI,CACA,kBAAkB,CAAC,MAAM,CAAC,EACxB,aAAa,GACb,UAAU,GACV,aAAa,GACb,UAAU,GACV,eAAe,GACf,cAAc,CACnB,GAAG;IACA,KAAK,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IACtB,QAAQ,CAAC,EAAE;QACP,YAAY,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;QAC7B,cAAc,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;KAClC,GAAG,IAAI,CAAC;CACZ,CAAC;AACN,MAAM,WAAW,mBAAmB;IAChC,GAAG,EAAE,MAAM,CAAC;CACf;AAED,sFAAsF;AACtF,wBAAgB,yBAAyB,CACrC,IAAI,EAAE,kBAAkB,GAAG,kBAAkB,GAAG,eAAe,EAC/D,SAAS,EAAE,QAAQ,GAAG,QAAQ,GAAG,KAAK;;;;;;EA2HzC;AAED,4EAA4E;AAC5E,wBAAgB,4BAA4B,CACxC,QAAQ,EAAE,mBAAmB,GAAG,eAAe,CAAC,UAAU,CAAC,EAC3D,KAAK,UAAQ;;;;;;EAkChB"}

package/dist/auth/identity-write.js

@@ -0,0 +1,146 @@
+import { buildUserMetadata } from './user-import.js';
+import { buildUserRequest, buildCustomClaimsRequest } from './user-request.js';
+import { FirebaseEdgeError, ensureError } from './errors.js';
+/** Validate identity writes and combine supported fields in one request. @internal */
+export function buildIdentityWriteRequest(data, operation) {
+    if (!data || typeof data !== 'object' || Array.isArray(data)) {
+        return {
+            data: null,
+            error: new FirebaseEdgeError({
+                code: 'auth/invalid-argument',
+                message: 'User properties must be an object.'
+            })
+        };
+    }
+    const allowed = new Set([
+        'email',
+        'emailVerified',
+        'displayName',
+        'photoURL',
+        'phoneNumber',
+        'disabled',
+        ...(operation === 'set'
+            ? ['customClaims', 'metadata']
+            : [
+                'password',
+                'multiFactor',
+                ...(operation === 'create'
+                    ? ['uid', 'customClaims']
+                    : [
+                        'providerToLink',
+                        'providersToUnlink',
+                        'customClaims',
+                        'metadata'
+                    ])
+            ])
+    ]);
+    if (Object.keys(data).some((key) => !allowed.has(key))) {
+        return {
+            data: null,
+            error: new FirebaseEdgeError({
+                code: 'auth/invalid-argument',
+                message: 'Unsupported identity write field.'
+            })
+        };
+    }
+    if (operation === 'set' &&
+        data.email == null &&
+        data.emailVerified === true) {
+        return {
+            data: null,
+            error: new FirebaseEdgeError({
+                code: 'auth/invalid-argument',
+                message: 'A verified email requires an email in the replacement.'
+            })
+        };
+    }
+    const properties = operation === 'set'
+        ? {
+            email: data.email ?? undefined,
+            displayName: data.displayName ?? null,
+            photoURL: data.photoURL ?? null,
+            phoneNumber: data.phoneNumber ?? null,
+            disabled: data.disabled === undefined ? false : data.disabled,
+            emailVerified: data.emailVerified === undefined
+                ? false
+                : data.emailVerified
+        }
+        : operation === 'update'
+            ? {
+                ...data,
+                password: data.password ?? undefined
+            }
+            : data;
+    const { error, data: body } = buildUserRequest(properties, operation === 'create' ? 'create' : 'update');
+    if (error) {
+        return { error, data: null };
+    }
+    if (operation === 'update') {
+        const update = data;
+        if (update.password === null) {
+            body.deleteAttribute = [
+                ...(body.deleteAttribute ?? []),
+                'PASSWORD'
+            ];
+        }
+        if (update.metadata !== undefined) {
+            const { error: metadataError, data: metadataBody } = buildIdentityMetadataRequest(update.metadata);
+            if (metadataError) {
+                return { error: metadataError, data: null };
+            }
+            Object.assign(body, metadataBody);
+        }
+    }
+    if (operation === 'set' && data.email == null) {
+        body.deleteAttribute = [...(body.deleteAttribute ?? []), 'EMAIL'];
+    }
+    if (operation === 'set') {
+        const { error: metadataError, data: metadataBody } = buildIdentityMetadataRequest(data.metadata ?? null, true);
+        if (metadataError) {
+            return { error: metadataError, data: null };
+        }
+        Object.assign(body, metadataBody);
+    }
+    const { customClaims } = data;
+    if (operation === 'set' || customClaims !== undefined) {
+        const { error: claimsError, data: claimsBody } = buildCustomClaimsRequest(customClaims ?? null);
+        if (claimsError) {
+            return { error: claimsError, data: null };
+        }
+        Object.assign(body, claimsBody);
+    }
+    return { error: null, data: body };
+}
+/** Validate and serialize metadata for a dedicated UID update. @internal */
+export function buildIdentityMetadataRequest(metadata, reset = false) {
+    try {
+        if (reset &&
+            metadata != null &&
+            (typeof metadata !== 'object' || Array.isArray(metadata))) {
+            throw new Error('metadata must be an object or null.');
+        }
+        const properties = reset
+            ? {
+                ...metadata,
+                creationTime: metadata?.creationTime ?? '1970-01-01T00:00:00.000Z',
+                lastSignInTime: metadata?.lastSignInTime ?? '1970-01-01T00:00:00.000Z'
+            }
+            : metadata;
+        const timestamps = buildUserMetadata(properties);
+        const body = {};
+        for (const [field, value] of Object.entries(timestamps)) {
+            body[field] = String(value);
+        }
+        return { error: null, data: body };
+    }
+    catch (cause) {
+        return {
+            data: null,
+            error: new FirebaseEdgeError({
+                code: 'auth/invalid-argument',
+                message: ensureError(cause).message
+            })
+        };
+    }
+}
+//# sourceMappingURL=identity-write.js.map

package/dist/auth/identity-write.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"identity-write.js","sourceRoot":"","sources":["../../src/auth/identity-write.ts"],"names":[],"mappings":"AAAA,OAAO,EACH,iBAAiB,EAGpB,MAAM,kBAAkB,CAAC;AAC1B,OAAO,EACH,gBAAgB,EAChB,wBAAwB,EAG3B,MAAM,mBAAmB,CAAC;AAC3B,OAAO,EAAE,iBAAiB,EAAE,WAAW,EAAE,MAAM,aAAa,CAAC;AAuC7D,sFAAsF;AACtF,MAAM,UAAU,yBAAyB,CACrC,IAA+D,EAC/D,SAAsC;IAEtC,IAAI,CAAC,IAAI,IAAI,OAAO,IAAI,KAAK,QAAQ,IAAI,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,EAAE,CAAC;QAC3D,OAAO;YACH,IAAI,EAAE,IAAI;YACV,KAAK,EAAE,IAAI,iBAAiB,CAAC;gBACzB,IAAI,EAAE,uBAAuB;gBAC7B,OAAO,EAAE,oCAAoC;aAChD,CAAC;SACL,CAAC;IACN,CAAC;IACD,MAAM,OAAO,GAAG,IAAI,GAAG,CAAC;QACpB,OAAO;QACP,eAAe;QACf,aAAa;QACb,UAAU;QACV,aAAa;QACb,UAAU;QACV,GAAG,CAAC,SAAS,KAAK,KAAK;YACnB,CAAC,CAAC,CAAC,cAAc,EAAE,UAAU,CAAC;YAC9B,CAAC,CAAC;gBACI,UAAU;gBACV,aAAa;gBACb,GAAG,CAAC,SAAS,KAAK,QAAQ;oBACtB,CAAC,CAAC,CAAC,KAAK,EAAE,cAAc,CAAC;oBACzB,CAAC,CAAC;wBACI,gBAAgB;wBAChB,mBAAmB;wBACnB,cAAc;wBACd,UAAU;qBACb,CAAC;aACX,CAAC;KACX,CAAC,CAAC;IACH,IAAI,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,IAAI,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,CAAC,OAAO,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,EAAE,CAAC;QACrD,OAAO;YACH,IAAI,EAAE,IAAI;YACV,KAAK,EAAE,IAAI,iBAAiB,CAAC;gBACzB,IAAI,EAAE,uBAAuB;gBAC7B,OAAO,EAAE,mCAAmC;aAC/C,CAAC;SACL,CAAC;IACN,CAAC;IACD,IACI,SAAS,KAAK,KAAK;QACnB,IAAI,CAAC,KAAK,IAAI,IAAI;QAClB,IAAI,CAAC,aAAa,KAAK,IAAI,EAC7B,CAAC;QACC,OAAO;YACH,IAAI,EAAE,IAAI;YACV,KAAK,EAAE,IAAI,iBAAiB,CAAC;gBACzB,IAAI,EAAE,uBAAuB;gBAC7B,OAAO,EACH,wDAAwD;aAC/D,CAAC;SACL,CAAC;IACN,CAAC;IACD,MAAM,UAAU,GACZ,SAAS,KAAK,KAAK;QACf,CAAC,CAAC;YACI,KAAK,EAAE,IAAI,CAAC,KAAK,IAAI,SAAS;YAC9B,WAAW,EAAE,IAAI,CAAC,WAAW,IAAI,IAAI;YACrC,QAAQ,EAAE,IAAI,CAAC,QAAQ,IAAI,IAAI;YAC/B,WAAW,EAAE,IAAI,CAAC,WAAW,IAAI,IAAI;YACrC,QAAQ,EAAE,IAAI,CAAC,QAAQ,KAAK,SAAS,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,CAAC,QAAQ;YAC7D,aAAa,EACT,IAAI,CAAC,aAAa,KAAK,SAAS;gBAC5B,CAAC,CAAC,KAAK;gBACP,CAAC,CAAC,IAAI,CAAC,aAAa;SAC/B;QACH,CAAC,CAAC,SAAS,KAAK,QAAQ;YACtB,CAAC,CAAC;gBACI,GAAI,IAA2B;gBAC/B,QAAQ,EAAG,IAA2B,CAAC,QAAQ,IAAI,SAAS;aAC/D;YACH,CAAC,CAAE,IAA2B,CAAC;IACzC,MAAM,EAAE,KAAK,EAAE,IAAI,EAAE,IAAI,EAAE,GAAG,gBAAgB,CAC1C,UAAU,EACV,SAAS,KAAK,QAAQ,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,QAAQ,CAC/C,CAAC;IACF,IAAI,KAAK,EAAE,CAAC;QACR,OAAO,EAAE,KAAK,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC;IACjC,CAAC;IACD,IAAI,SAAS,KAAK,QAAQ,EAAE,CAAC;QACzB,MAAM,MAAM,GAAG,IAA0B,CAAC;QAC1C,IAAI,MAAM,CAAC,QAAQ,KAAK,IAAI,EAAE,CAAC;YAC3B,IAAI,CAAC,eAAe,GAAG;gBACnB,GAAG,CAAC,IAAI,CAAC,eAAe,IAAI,EAAE,CAAC;gBAC/B,UAAU;aACb,CAAC;QACN,CAAC;QACD,IAAI,MAAM,CAAC,QAAQ,KAAK,SAAS,EAAE,CAAC;YAChC,MAAM,EAAE,KAAK,EAAE,aAAa,EAAE,IAAI,EAAE,YAAY,EAAE,GAC9C,4BAA4B,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC;YAClD,IAAI,aAAa,EAAE,CAAC;gBAChB,OAAO,EAAE,KAAK,EAAE,aAAa,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC;YAChD,CAAC;YACD,MAAM,CAAC,MAAM,CAAC,IAAI,EAAE,YAAY,CAAC,CAAC;QACtC,CAAC;IACL,CAAC;IACD,IAAI,SAAS,KAAK,KAAK,IAAI,IAAI,CAAC,KAAK,IAAI,IAAI,EAAE,CAAC;QAC5C,IAAI,CAAC,eAAe,GAAG,CAAC,GAAG,CAAC,IAAI,CAAC,eAAe,IAAI,EAAE,CAAC,EAAE,OAAO,CAAC,CAAC;IACtE,CAAC;IACD,IAAI,SAAS,KAAK,KAAK,EAAE,CAAC;QACtB,MAAM,EAAE,KAAK,EAAE,aAAa,EAAE,IAAI,EAAE,YAAY,EAAE,GAC9C,4BAA4B,CACvB,IAAwB,CAAC,QAAQ,IAAI,IAAI,EAC1C,IAAI,CACP,CAAC;QACN,IAAI,aAAa,EAAE,CAAC;YAChB,OAAO,EAAE,KAAK,EAAE,aAAa,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC;QAChD,CAAC;QACD,MAAM,CAAC,MAAM,CAAC,IAAI,EAAE,YAAY,CAAC,CAAC;IACtC,CAAC;IACD,MAAM,EAAE,YAAY,EAAE,GAAG,IAAI,CAAC;IAC9B,IAAI,SAAS,KAAK,KAAK,IAAI,YAAY,KAAK,SAAS,EAAE,CAAC;QACpD,MAAM,EAAE,KAAK,EAAE,WAAW,EAAE,IAAI,EAAE,UAAU,EAAE,GAC1C,wBAAwB,CAAC,YAAY,IAAI,IAAI,CAAC,CAAC;QACnD,IAAI,WAAW,EAAE,CAAC;YACd,OAAO,EAAE,KAAK,EAAE,WAAW,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC;QAC9C,CAAC;QACD,MAAM,CAAC,MAAM,CAAC,IAAI,EAAE,UAAU,CAAC,CAAC;IACpC,CAAC;IACD,OAAO,EAAE,KAAK,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC;AACvC,CAAC;AAED,4EAA4E;AAC5E,MAAM,UAAU,4BAA4B,CACxC,QAA2D,EAC3D,KAAK,GAAG,KAAK;IAEb,IAAI,CAAC;QACD,IACI,KAAK;YACL,QAAQ,IAAI,IAAI;YAChB,CAAC,OAAO,QAAQ,KAAK,QAAQ,IAAI,KAAK,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC,EAC3D,CAAC;YACC,MAAM,IAAI,KAAK,CAAC,qCAAqC,CAAC,CAAC;QAC3D,CAAC;QACD,MAAM,UAAU,GAAG,KAAK;YACpB,CAAC,CAAC;gBACI,GAAG,QAAQ;gBACX,YAAY,EACR,QAAQ,EAAE,YAAY,IAAI,0BAA0B;gBACxD,cAAc,EACV,QAAQ,EAAE,cAAc,IAAI,0BAA0B;aAC7D;YACH,CAAC,CAAC,QAAQ,CAAC;QACf,MAAM,UAAU,GAAG,iBAAiB,CAAC,UAAiC,CAAC,CAAC;QACxE,MAAM,IAAI,GAA2B,EAAE,CAAC;QACxC,KAAK,MAAM,CAAC,KAAK,EAAE,KAAK,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,UAAU,CAAC,EAAE,CAAC;YACtD,IAAI,CAAC,KAAK,CAAC,GAAG,MAAM,CAAC,KAAK,CAAC,CAAC;QAChC,CAAC;QACD,OAAO,EAAE,KAAK,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC;IACvC,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACb,OAAO;YACH,IAAI,EAAE,IAAI;YACV,KAAK,EAAE,IAAI,iBAAiB,CAAC;gBACzB,IAAI,EAAE,uBAAuB;gBAC7B,OAAO,EAAE,WAAW,CAAC,KAAK,CAAC,CAAC,OAAO;aACtC,CAAC;SACL,CAAC;IACN,CAAC;AACL,CAAC"}

package/dist/auth/identity.d.ts

@@ -0,0 +1,84 @@
+import type { IdentityCreateData, IdentityImportRecord } from './identity-write.js';
+import type { UserImportOptions } from './user-import.js';
+export type { IdentityCreateData, IdentityImportRecord, IdentityUpdateData, IdentitySetData, IdentityWriteResult } from './identity-write.js';
+import type { ProviderIdentifier } from './user-request.js';
+import { FirebaseAdminAuth, type FirebaseAdminAuthOptions } from './firebase-admin-auth.js';
+import type { ServiceAccount } from './firebase-types.js';
+import { FirebaseEdgeError } from './errors.js';
+import { IdentityCountQuery } from './identity-count-query.js';
+import { IdentityReference } from './identity-reference.js';
+export { IdentityReference, type IdentityReferenceOptions, type IdentityUserRecord } from './identity-reference.js';
+export { IdentityCountQuery } from './identity-count-query.js';
+import type { IdentityDirection, IdentityStringFilterField, IdentityOrderField, IdentityQueryOptions, IdentityQueryResult } from './identity-types.js';
+export type { IdentityDirection, IdentityIdentifier, IdentityFilterField, IdentityStringFilterField, IdentityOrderField, IdentityQueryResult, IdentityCountResult } from './identity-types.js';
+import type { IdentityQueryBuilder, IdentityTokenSort } from './identity-builder-types.js';
+export type { IdentityQueryBuilder, IdentityNativeFilterField } from './identity-builder-types.js';
+export type IdentityOptions = FirebaseAdminAuthOptions;
+/** Fluent Firebase Authentication queries with automatic endpoint selection. */
+export declare class Identity<Claims extends object = Record<string, unknown>> {
+    private readonly auth;
+    constructor(serviceAccount: ServiceAccount, options?: IdentityOptions);
+    users<Schema extends object = Claims>(): IdentityQueryBuilder<'base', false, true, Schema>;
+}
+/** Immutable query. Invalid builder arguments throw before any network request. */
+export declare class IdentityQuery<Claims extends object = Record<string, unknown>> {
+    private readonly auth;
+    private readonly options;
+    private readonly last;
+    private readonly token?;
+    constructor(auth: FirebaseAdminAuth, options?: IdentityQueryOptions, last?: boolean, token?: string | undefined);
+    /** Append exact-match alternatives to one lookup request. */
+    or(field: IdentityStringFilterField, operator: '==', value: string): IdentityQueryBuilder<'or', false, true, Claims>;
+    or(field: IdentityStringFilterField, operator: 'in', value: readonly string[]): IdentityQueryBuilder<'or', false, true, Claims>;
+    or(field: 'provider', operator: '==', value: ProviderIdentifier): IdentityQueryBuilder<'or', false, true, Claims>;
+    or(field: 'provider', operator: 'in', value: readonly ProviderIdentifier[]): IdentityQueryBuilder<'or', false, true, Claims>;
+    add(data: IdentityCreateData<Claims>): Promise<{
+        data: null;
+        error: FirebaseEdgeError;
+    } | {
+        data: import("./identity-write.js").IdentityWriteResult;
+        error: null;
+    }>;
+    import(records: IdentityImportRecord<Claims>[], options?: UserImportOptions): Promise<{
+        data: null;
+        error: FirebaseEdgeError;
+    } | {
+        data: import("./user-batch.js").UserImportResult;
+        error: null;
+    }>;
+    delete(): Promise<{
+        data: null;
+        error: FirebaseEdgeError;
+    } | {
+        data: import("./user-batch.js").DeleteUsersResult;
+        error: null;
+    }>;
+    byUid<LookupClaims extends object = Claims>(uid: string): IdentityReference<false, true, LookupClaims>;
+    byEmail(email: string): IdentityReference<false, false, Claims>;
+    byPhoneNumber(phoneNumber: string): IdentityReference<false, false, Claims>;
+    byProvider(providerId: string, providerUid: string): IdentityReference<false, false, Claims>;
+    private assertLookupAllowed;
+    where(field: 'provider', operator: 'in', value: readonly ProviderIdentifier[]): IdentityQueryBuilder<'lookup', false, true, Claims>;
+    where<F extends IdentityStringFilterField>(field: F, operator: 'in', value: readonly string[]): IdentityQueryBuilder<F extends 'uid' ? 'uidBatch' : 'lookup', false, true, Claims>;
+    where<F extends IdentityStringFilterField>(field: F, operator: '==', value: string): IdentityQueryBuilder<F extends 'initialEmail' ? 'lookup' : 'filtered', false, false, Claims>;
+    orderBy<F extends IdentityOrderField, D extends IdentityDirection = 'asc'>(field: F, direction?: D): IdentityQueryBuilder<'query', true, IdentityTokenSort<F, D>, Claims>;
+    offset<N extends number>(value: N): IdentityQueryBuilder<'query', false, N extends 0 ? true : false, Claims>;
+    limit(value: number): IdentityQueryBuilder<'query', false, true, Claims>;
+    /** Return the last matching users in the query's original order. */
+    limitToLast(value: number): IdentityQueryBuilder<'query', false, false, Claims>;
+    private withLimit;
+    /** Resume a UID-ascending listing using the previous result's opaque token. */
+    pageToken(token: string): IdentityQueryBuilder<'token', false, true, Claims>;
+    /** Count the matching query with one count-only request. */
+    count(): IdentityCountQuery;
+    private assertNativeQuery;
+    /** Execute at most one account-data request; unsupported combinations fail before I/O. */
+    get(): Promise<{
+        data: IdentityQueryResult<Claims>;
+        error: null;
+    } | {
+        data: null;
+        error: Error;
+    }>;
+}
+//# sourceMappingURL=identity.d.ts.map

package/dist/auth/identity.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"identity.d.ts","sourceRoot":"","sources":["../../src/auth/identity.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EACR,kBAAkB,EAClB,oBAAoB,EACvB,MAAM,qBAAqB,CAAC;AAC7B,OAAO,KAAK,EAAoB,iBAAiB,EAAE,MAAM,kBAAkB,CAAC;AAC5E,YAAY,EACR,kBAAkB,EAClB,oBAAoB,EACpB,kBAAkB,EAClB,eAAe,EACf,mBAAmB,EACtB,MAAM,qBAAqB,CAAC;AAC7B,OAAO,KAAK,EAAE,kBAAkB,EAAE,MAAM,mBAAmB,CAAC;AAK5D,OAAO,EACH,iBAAiB,EACjB,KAAK,wBAAwB,EAChC,MAAM,0BAA0B,CAAC;AAClC,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,qBAAqB,CAAC;AAC1D,OAAO,EAAE,iBAAiB,EAAe,MAAM,aAAa,CAAC;AAE7D,OAAO,EAAE,kBAAkB,EAAE,MAAM,2BAA2B,CAAC;AAC/D,OAAO,EAAE,iBAAiB,EAAE,MAAM,yBAAyB,CAAC;AAC5D,OAAO,EACH,iBAAiB,EACjB,KAAK,wBAAwB,EAC7B,KAAK,kBAAkB,EAC1B,MAAM,yBAAyB,CAAC;AACjC,OAAO,EAAE,kBAAkB,EAAE,MAAM,2BAA2B,CAAC;AAC/D,OAAO,KAAK,EACR,iBAAiB,EAEjB,yBAAyB,EACzB,kBAAkB,EAClB,oBAAoB,EACpB,mBAAmB,EACtB,MAAM,qBAAqB,CAAC;AAC7B,YAAY,EACR,iBAAiB,EACjB,kBAAkB,EAClB,mBAAmB,EACnB,yBAAyB,EACzB,kBAAkB,EAClB,mBAAmB,EACnB,mBAAmB,EACtB,MAAM,qBAAqB,CAAC;AAC7B,OAAO,KAAK,EACR,oBAAoB,EACpB,iBAAiB,EACpB,MAAM,6BAA6B,CAAC;AACrC,YAAY,EACR,oBAAoB,EACpB,yBAAyB,EAC5B,MAAM,6BAA6B,CAAC;AACrC,MAAM,MAAM,eAAe,GAAG,wBAAwB,CAAC;AAEvD,gFAAgF;AAChF,qBAAa,QAAQ,CAAC,MAAM,SAAS,MAAM,GAAG,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC;IACjE,OAAO,CAAC,QAAQ,CAAC,IAAI,CAAoB;gBAE7B,cAAc,EAAE,cAAc,EAAE,OAAO,GAAE,eAAoB;IAIzE,KAAK,CAAC,MAAM,SAAS,MAAM,GAAG,MAAM,KAAK,oBAAoB,CACzD,MAAM,EACN,KAAK,EACL,IAAI,EACJ,MAAM,CACT;CAKJ;AAED,mFAAmF;AACnF,qBAAa,aAAa,CAAC,MAAM,SAAS,MAAM,GAAG,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC;IAElE,OAAO,CAAC,QAAQ,CAAC,IAAI;IACrB,OAAO,CAAC,QAAQ,CAAC,OAAO;IACxB,OAAO,CAAC,QAAQ,CAAC,IAAI;IACrB,OAAO,CAAC,QAAQ,CAAC,KAAK,CAAC;gBAHN,IAAI,EAAE,iBAAiB,EACvB,OAAO,GAAE,oBAAyB,EAClC,IAAI,UAAQ,EACZ,KAAK,CAAC,EAAE,MAAM,YAAA;IAGnC,6DAA6D;IAC7D,EAAE,CACE,KAAK,EAAE,yBAAyB,EAChC,QAAQ,EAAE,IAAI,EACd,KAAK,EAAE,MAAM,GACd,oBAAoB,CAAC,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,MAAM,CAAC;IAClD,EAAE,CACE,KAAK,EAAE,yBAAyB,EAChC,QAAQ,EAAE,IAAI,EACd,KAAK,EAAE,SAAS,MAAM,EAAE,GACzB,oBAAoB,CAAC,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,MAAM,CAAC;IAClD,EAAE,CACE,KAAK,EAAE,UAAU,EACjB,QAAQ,EAAE,IAAI,EACd,KAAK,EAAE,kBAAkB,GAC1B,oBAAoB,CAAC,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,MAAM,CAAC;IAClD,EAAE,CACE,KAAK,EAAE,UAAU,EACjB,QAAQ,EAAE,IAAI,EACd,KAAK,EAAE,SAAS,kBAAkB,EAAE,GACrC,oBAAoB,CAAC,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,MAAM,CAAC;IA0ClD,GAAG,CAAC,IAAI,EAAE,kBAAkB,CAAC,MAAM,CAAC;;;;;;;IAKpC,MAAM,CACF,OAAO,EAAE,oBAAoB,CAAC,MAAM,CAAC,EAAE,EACvC,OAAO,CAAC,EAAE,iBAAiB;;;;;;;IAkC/B,MAAM;;;;;;;IAkBN,KAAK,CAAC,YAAY,SAAS,MAAM,GAAG,MAAM,EACtC,GAAG,EAAE,MAAM,GACZ,iBAAiB,CAAC,KAAK,EAAE,IAAI,EAAE,YAAY,CAAC;IAS/C,OAAO,CAAC,KAAK,EAAE,MAAM,GAAG,iBAAiB,CAAC,KAAK,EAAE,KAAK,EAAE,MAAM,CAAC;IAO/D,aAAa,CACT,WAAW,EAAE,MAAM,GACpB,iBAAiB,CAAC,KAAK,EAAE,KAAK,EAAE,MAAM,CAAC;IAO1C,UAAU,CACN,UAAU,EAAE,MAAM,EAClB,WAAW,EAAE,MAAM,GACpB,iBAAiB,CAAC,KAAK,EAAE,KAAK,EAAE,MAAM,CAAC;IAQ1C,OAAO,CAAC,mBAAmB;IAc3B,KAAK,CACD,KAAK,EAAE,UAAU,EACjB,QAAQ,EAAE,IAAI,EACd,KAAK,EAAE,SAAS,kBAAkB,EAAE,GACrC,oBAAoB,CAAC,QAAQ,EAAE,KAAK,EAAE,IAAI,EAAE,MAAM,CAAC;IACtD,KAAK,CAAC,CAAC,SAAS,yBAAyB,EACrC,KAAK,EAAE,CAAC,EACR,QAAQ,EAAE,IAAI,EACd,KAAK,EAAE,SAAS,MAAM,EAAE,GACzB,oBAAoB,CACnB,CAAC,SAAS,KAAK,GAAG,UAAU,GAAG,QAAQ,EACvC,KAAK,EACL,IAAI,EACJ,MAAM,CACT;IACD,KAAK,CAAC,CAAC,SAAS,yBAAyB,EACrC,KAAK,EAAE,CAAC,EACR,QAAQ,EAAE,IAAI,EACd,KAAK,EAAE,MAAM,GACd,oBAAoB,CACnB,CAAC,SAAS,cAAc,GAAG,QAAQ,GAAG,UAAU,EAChD,KAAK,EACL,KAAK,EACL,MAAM,CACT;IAkFD,OAAO,CAAC,CAAC,SAAS,kBAAkB,EAAE,CAAC,SAAS,iBAAiB,GAAG,KAAK,EACrE,KAAK,EAAE,CAAC,EACR,SAAS,GAAE,CAAc,GAC1B,oBAAoB,CAAC,OAAO,EAAE,IAAI,EAAE,iBAAiB,CAAC,CAAC,EAAE,CAAC,CAAC,EAAE,MAAM,CAAC;IAyCvE,MAAM,CAAC,CAAC,SAAS,MAAM,EACnB,KAAK,EAAE,CAAC,GACT,oBAAoB,CACnB,OAAO,EACP,KAAK,EACL,CAAC,SAAS,CAAC,GAAG,IAAI,GAAG,KAAK,EAC1B,MAAM,CACT;IA2BD,KAAK,CAAC,KAAK,EAAE,MAAM,GAAG,oBAAoB,CAAC,OAAO,EAAE,KAAK,EAAE,IAAI,EAAE,MAAM,CAAC;IASxE,oEAAoE;IACpE,WAAW,CACP,KAAK,EAAE,MAAM,GACd,oBAAoB,CAAC,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,MAAM,CAAC;IAStD,OAAO,CAAC,SAAS;IA4BjB,+EAA+E;IAC/E,SAAS,CACL,KAAK,EAAE,MAAM,GACd,oBAAoB,CAAC,OAAO,EAAE,KAAK,EAAE,IAAI,EAAE,MAAM,CAAC;IA+BrD,4DAA4D;IAC5D,KAAK,IAAI,kBAAkB;IAW3B,OAAO,CAAC,iBAAiB;IAazB,0FAA0F;IACpF,GAAG,IAAI,OAAO,CACd;QAAE,IAAI,EAAE,mBAAmB,CAAC,MAAM,CAAC,CAAC;QAAC,KAAK,EAAE,IAAI,CAAA;KAAE,GAClD;QAAE,IAAI,EAAE,IAAI,CAAC;QAAC,KAAK,EAAE,KAAK,CAAA;KAAE,CACjC;CAgBJ"}

package/dist/auth/identity.js

@@ -0,0 +1,319 @@
+import { identityLookupIdentifiers, identityOrIdentifiers } from './identity-filter.js';
+import { FirebaseAdminAuth } from './firebase-admin-auth.js';
+import { FirebaseEdgeError, ensureError } from './errors.js';
+import { executeIdentityQuery } from './identity-query.js';
+import { IdentityCountQuery } from './identity-count-query.js';
+import { IdentityReference } from './identity-reference.js';
+export { IdentityReference } from './identity-reference.js';
+export { IdentityCountQuery } from './identity-count-query.js';
+/** Fluent Firebase Authentication queries with automatic endpoint selection. */
+export class Identity {
+    auth;
+    constructor(serviceAccount, options = {}) {
+        this.auth = new FirebaseAdminAuth(serviceAccount, options);
+    }
+    users() {
+        return new IdentityQuery(this.auth);
+    }
+}
+/** Immutable query. Invalid builder arguments throw before any network request. */
+export class IdentityQuery {
+    auth;
+    options;
+    last;
+    token;
+    constructor(auth, options = {}, last = false, token) {
+        this.auth = auth;
+        this.options = options;
+        this.last = last;
+        this.token = token;
+    }
+    or(field, operator, value) {
+        if (Object.keys(this.options).some((key) => key !== 'identifiers') ||
+            this.last ||
+            this.token !== undefined) {
+            throw new FirebaseEdgeError({
+                code: 'auth/invalid-argument',
+                message: 'OR clauses cannot be combined with where clauses, sorting, limits, offsets, or page tokens.'
+            });
+        }
+        if (operator !== '==' && operator !== 'in') {
+            throw new FirebaseEdgeError({
+                code: 'auth/invalid-argument',
+                message: 'OR clauses support only == and in.'
+            });
+        }
+        const identifiers = identityLookupIdentifiers(field, operator === 'in'
+            ? value
+            : [value]);
+        const validated = identityOrIdentifiers([
+            ...(this.options.identifiers ?? []),
+            ...identifiers
+        ]);
+        return new IdentityQuery(this.auth, {
+            identifiers: validated
+        });
+    }
+    add(data) {
+        this.assertLookupAllowed();
+        return this.auth._writeIdentityUser(undefined, data);
+    }
+    import(records, options) {
+        this.assertLookupAllowed();
+        if (!Array.isArray(records)) {
+            throw new FirebaseEdgeError({
+                code: 'auth/invalid-argument',
+                message: 'Import records must be an array.'
+            });
+        }
+        const users = records.map((record) => {
+            if (!record ||
+                typeof record !== 'object' ||
+                Array.isArray(record)) {
+                return record;
+            }
+            if ('claims' in record) {
+                throw new FirebaseEdgeError({
+                    code: 'auth/invalid-argument',
+                    message: 'Use customClaims in Identity import records.'
+                });
+            }
+            const { customClaims, ...data } = record;
+            return {
+                ...data,
+                ...(customClaims !== undefined && {
+                    customClaims: customClaims === null ? {} : customClaims
+                })
+            };
+        });
+        return this.auth.importUsers(users, options);
+    }
+    delete() {
+        if (this.options.filter?.field !== 'uid' ||
+            this.options.filter.operator !== 'in' ||
+            this.options.orderBy ||
+            this.options.offset !== undefined ||
+            this.options.limit !== undefined ||
+            this.last ||
+            this.token !== undefined) {
+            throw new FirebaseEdgeError({
+                code: 'auth/invalid-argument',
+                message: 'Batch deletion requires only a UID in filter.'
+            });
+        }
+        return this.auth.deleteUsers([...this.options.filter.value]);
+    }
+    byUid(uid) {
+        this.assertLookupAllowed();
+        return new IdentityReference(this.auth, { uid }, { uidReference: true });
+    }
+    byEmail(email) {
+        this.assertLookupAllowed();
+        return new IdentityReference(this.auth, {
+            email
+        });
+    }
+    byPhoneNumber(phoneNumber) {
+        this.assertLookupAllowed();
+        return new IdentityReference(this.auth, {
+            phoneNumber
+        });
+    }
+    byProvider(providerId, providerUid) {
+        this.assertLookupAllowed();
+        return new IdentityReference(this.auth, {
+            providerId,
+            providerUid
+        });
+    }
+    assertLookupAllowed() {
+        if (Object.keys(this.options).length > 0 ||
+            this.last ||
+            this.token !== undefined) {
+            throw new FirebaseEdgeError({
+                code: 'auth/invalid-argument',
+                message: 'Exact lookups cannot be combined with filters, sorting, limits, offsets, or page tokens.'
+            });
+        }
+    }
+    where(field, operator, value) {
+        if (this.options.filter !== undefined) {
+            throw new FirebaseEdgeError({
+                code: 'auth/invalid-argument',
+                message: 'Only one where clause is supported: Firebase ignores additional query expressions instead of applying AND.'
+            });
+        }
+        if (this.options.identifiers !== undefined ||
+            this.token !== undefined ||
+            ((field === 'initialEmail' || operator === 'in') &&
+                (Object.keys(this.options).length > 0 || this.last))) {
+            throw new FirebaseEdgeError({
+                code: 'auth/invalid-argument',
+                message: 'This filter cannot be combined with existing query options or a page token.'
+            });
+        }
+        if (operator !== '==' && operator !== 'in') {
+            throw new FirebaseEdgeError({
+                code: 'auth/invalid-argument',
+                message: 'Identity queries support only == and in filters.'
+            });
+        }
+        if (![
+            'uid',
+            'email',
+            'phoneNumber',
+            'initialEmail',
+            'provider'
+        ].includes(field) ||
+            (field === 'provider' && operator !== 'in') ||
+            (operator === '==' &&
+                (typeof value !== 'string' || value.length === 0))) {
+            throw new FirebaseEdgeError({
+                code: 'auth/invalid-argument',
+                message: 'Specify one supported filter with a string for == or a string array for in.'
+            });
+        }
+        const identifiers = operator === 'in'
+            ? identityLookupIdentifiers(field, value)
+            : identityLookupIdentifiers(field, [value]);
+        const filter = field === 'provider'
+            ? {
+                field,
+                operator: 'in',
+                value: identifiers
+            }
+            : operator === 'in'
+                ? {
+                    field,
+                    operator,
+                    value: [...value]
+                }
+                : { field, value: value };
+        return new IdentityQuery(this.auth, { ...this.options, filter }, this.last, this.token);
+    }
+    orderBy(field, direction = 'asc') {
+        this.assertNativeQuery();
+        if (this.token !== undefined &&
+            (field !== 'uid' || direction !== 'asc')) {
+            throw new FirebaseEdgeError({
+                code: 'auth/invalid-argument',
+                message: 'Page tokens require UID ascending order.'
+            });
+        }
+        if (![
+            'uid',
+            'displayName',
+            'createdAt',
+            'lastLoginAt',
+            'email'
+        ].includes(field) ||
+            !['asc', 'desc'].includes(direction) ||
+            this.options.orderBy) {
+            throw new FirebaseEdgeError({
+                code: 'auth/invalid-argument',
+                message: 'Specify one supported sort field and an asc or desc direction.'
+            });
+        }
+        return new IdentityQuery(this.auth, { ...this.options, orderBy: { field, direction } }, this.last, this.token);
+    }
+    offset(value) {
+        this.assertNativeQuery();
+        if (this.token !== undefined && value !== 0) {
+            throw new FirebaseEdgeError({
+                code: 'auth/invalid-argument',
+                message: 'Page tokens cannot be combined with a nonzero offset.'
+            });
+        }
+        if (!Number.isSafeInteger(value) || value < 0) {
+            throw new FirebaseEdgeError({
+                code: 'auth/invalid-argument',
+                message: 'offset must be a nonnegative safe integer.'
+            });
+        }
+        return new IdentityQuery(this.auth, { ...this.options, offset: value }, this.last, this.token);
+    }
+    limit(value) {
+        return this.withLimit(value, false);
+    }
+    /** Return the last matching users in the query's original order. */
+    limitToLast(value) {
+        return this.withLimit(value, true);
+    }
+    withLimit(value, last) {
+        this.assertNativeQuery();
+        if (last && this.token !== undefined) {
+            throw new FirebaseEdgeError({
+                code: 'auth/invalid-argument',
+                message: 'Page tokens cannot be combined with limitToLast.'
+            });
+        }
+        if (!Number.isInteger(value) ||
+            value < 1 ||
+            value > (last ? 500 : 1000)) {
+            throw new FirebaseEdgeError({
+                code: 'auth/invalid-argument',
+                message: last
+                    ? 'limitToLast must be an integer from 1 through 500.'
+                    : 'limit must be an integer from 1 through 1000; query pagination supports at most 500.'
+            });
+        }
+        return new IdentityQuery(this.auth, { ...this.options, limit: value }, last, this.token);
+    }
+    /** Resume a UID-ascending listing using the previous result's opaque token. */
+    pageToken(token) {
+        this.assertNativeQuery();
+        if (this.options.filter ||
+            this.last ||
+            (this.options.offset ?? 0) !== 0 ||
+            (this.options.orderBy &&
+                (this.options.orderBy.field !== 'uid' ||
+                    this.options.orderBy.direction !== 'asc'))) {
+            throw new FirebaseEdgeError({
+                code: 'auth/invalid-argument',
+                message: 'Page tokens require an unfiltered UID-ascending listing without offset or limitToLast.'
+            });
+        }
+        if (typeof token !== 'string' || token.length === 0) {
+            throw new FirebaseEdgeError({
+                code: 'auth/invalid-argument',
+                message: 'pageToken must be a nonempty string returned by a previous listing.'
+            });
+        }
+        return new IdentityQuery(this.auth, this.options, this.last, token);
+    }
+    /** Count the matching query with one count-only request. */
+    count() {
+        this.assertNativeQuery();
+        if (this.token !== undefined) {
+            throw new FirebaseEdgeError({
+                code: 'auth/invalid-argument',
+                message: 'Cannot count from a page token.'
+            });
+        }
+        return new IdentityCountQuery(this.auth, this.options, this.token);
+    }
+    assertNativeQuery() {
+        if (this.options.identifiers !== undefined ||
+            this.options.filter?.field === 'initialEmail' ||
+            this.options.filter?.operator === 'in') {
+            throw new FirebaseEdgeError({
+                code: 'auth/invalid-argument',
+                message: 'Lookup filters support only get().'
+            });
+        }
+    }
+    /** Execute at most one account-data request; unsupported combinations fail before I/O. */
+    async get() {
+        try {
+            const { error, data } = await executeIdentityQuery(this.auth, this.options, this.last, this.token);
+            if (error) {
+                return { error, data: null };
+            }
+            return { error: null, data: data };
+        }
+        catch (cause) {
+            return { data: null, error: ensureError(cause) };
+        }
+    }
+}
+//# sourceMappingURL=identity.js.map

package/dist/auth/identity.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"identity.js","sourceRoot":"","sources":["../../src/auth/identity.ts"],"names":[],"mappings":"AAaA,OAAO,EACH,yBAAyB,EACzB,qBAAqB,EACxB,MAAM,sBAAsB,CAAC;AAC9B,OAAO,EACH,iBAAiB,EAEpB,MAAM,0BAA0B,CAAC;AAElC,OAAO,EAAE,iBAAiB,EAAE,WAAW,EAAE,MAAM,aAAa,CAAC;AAC7D,OAAO,EAAE,oBAAoB,EAAE,MAAM,qBAAqB,CAAC;AAC3D,OAAO,EAAE,kBAAkB,EAAE,MAAM,2BAA2B,CAAC;AAC/D,OAAO,EAAE,iBAAiB,EAAE,MAAM,yBAAyB,CAAC;AAC5D,OAAO,EACH,iBAAiB,EAGpB,MAAM,yBAAyB,CAAC;AACjC,OAAO,EAAE,kBAAkB,EAAE,MAAM,2BAA2B,CAAC;AA4B/D,gFAAgF;AAChF,MAAM,OAAO,QAAQ;IACA,IAAI,CAAoB;IAEzC,YAAY,cAA8B,EAAE,UAA2B,EAAE;QACrE,IAAI,CAAC,IAAI,GAAG,IAAI,iBAAiB,CAAC,cAAc,EAAE,OAAO,CAAC,CAAC;IAC/D,CAAC;IAED,KAAK;QAMD,OAAO,IAAI,aAAa,CACpB,IAAI,CAAC,IAAI,CACoD,CAAC;IACtE,CAAC;CACJ;AAED,mFAAmF;AACnF,MAAM,OAAO,aAAa;IAED;IACA;IACA;IACA;IAJrB,YACqB,IAAuB,EACvB,UAAgC,EAAE,EAClC,OAAO,KAAK,EACZ,KAAc;QAHd,SAAI,GAAJ,IAAI,CAAmB;QACvB,YAAO,GAAP,OAAO,CAA2B;QAClC,SAAI,GAAJ,IAAI,CAAQ;QACZ,UAAK,GAAL,KAAK,CAAS;IAChC,CAAC;IAuBJ,EAAE,CACE,KAA0B,EAC1B,QAAqB,EACrB,KAImC;QAEnC,IACI,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,IAAI,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,GAAG,KAAK,aAAa,CAAC;YAC9D,IAAI,CAAC,IAAI;YACT,IAAI,CAAC,KAAK,KAAK,SAAS,EAC1B,CAAC;YACC,MAAM,IAAI,iBAAiB,CAAC;gBACxB,IAAI,EAAE,uBAAuB;gBAC7B,OAAO,EACH,6FAA6F;aACpG,CAAC,CAAC;QACP,CAAC;QACD,IAAI,QAAQ,KAAK,IAAI,IAAI,QAAQ,KAAK,IAAI,EAAE,CAAC;YACzC,MAAM,IAAI,iBAAiB,CAAC;gBACxB,IAAI,EAAE,uBAAuB;gBAC7B,OAAO,EAAE,oCAAoC;aAChD,CAAC,CAAC;QACP,CAAC;QACD,MAAM,WAAW,GAAG,yBAAyB,CACzC,KAAK,EACL,QAAQ,KAAK,IAAI;YACb,CAAC,CAAE,KAAkD;YACrD,CAAC,CAAC,CAAC,KAAoC,CAAC,CAC/C,CAAC;QACF,MAAM,SAAS,GAAG,qBAAqB,CAAC;YACpC,GAAG,CAAC,IAAI,CAAC,OAAO,CAAC,WAAW,IAAI,EAAE,CAAC;YACnC,GAAG,WAAW;SACjB,CAAC,CAAC;QACH,OAAO,IAAI,aAAa,CAAS,IAAI,CAAC,IAAI,EAAE;YACxC,WAAW,EAAE,SAAS;SACzB,CAA+D,CAAC;IACrE,CAAC;IAED,GAAG,CAAC,IAAgC;QAChC,IAAI,CAAC,mBAAmB,EAAE,CAAC;QAC3B,OAAO,IAAI,CAAC,IAAI,CAAC,kBAAkB,CAAC,SAAS,EAAE,IAAI,CAAC,CAAC;IACzD,CAAC;IAED,MAAM,CACF,OAAuC,EACvC,OAA2B;QAE3B,IAAI,CAAC,mBAAmB,EAAE,CAAC;QAC3B,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,OAAO,CAAC,EAAE,CAAC;YAC1B,MAAM,IAAI,iBAAiB,CAAC;gBACxB,IAAI,EAAE,uBAAuB;gBAC7B,OAAO,EAAE,kCAAkC;aAC9C,CAAC,CAAC;QACP,CAAC;QACD,MAAM,KAAK,GAAG,OAAO,CAAC,GAAG,CAAC,CAAC,MAAM,EAAE,EAAE;YACjC,IACI,CAAC,MAAM;gBACP,OAAO,MAAM,KAAK,QAAQ;gBAC1B,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC,EACvB,CAAC;gBACC,OAAO,MAA0B,CAAC;YACtC,CAAC;YACD,IAAI,QAAQ,IAAI,MAAM,EAAE,CAAC;gBACrB,MAAM,IAAI,iBAAiB,CAAC;oBACxB,IAAI,EAAE,uBAAuB;oBAC7B,OAAO,EAAE,8CAA8C;iBAC1D,CAAC,CAAC;YACP,CAAC;YACD,MAAM,EAAE,YAAY,EAAE,GAAG,IAAI,EAAE,GAAG,MAAM,CAAC;YACzC,OAAO;gBACH,GAAG,IAAI;gBACP,GAAG,CAAC,YAAY,KAAK,SAAS,IAAI;oBAC9B,YAAY,EAAE,YAAY,KAAK,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,YAAY;iBAC1D,CAAC;aACL,CAAC;QACN,CAAC,CAAC,CAAC;QACH,OAAO,IAAI,CAAC,IAAI,CAAC,WAAW,CAAC,KAAK,EAAE,OAAO,CAAC,CAAC;IACjD,CAAC;IAED,MAAM;QACF,IACI,IAAI,CAAC,OAAO,CAAC,MAAM,EAAE,KAAK,KAAK,KAAK;YACpC,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,QAAQ,KAAK,IAAI;YACrC,IAAI,CAAC,OAAO,CAAC,OAAO;YACpB,IAAI,CAAC,OAAO,CAAC,MAAM,KAAK,SAAS;YACjC,IAAI,CAAC,OAAO,CAAC,KAAK,KAAK,SAAS;YAChC,IAAI,CAAC,IAAI;YACT,IAAI,CAAC,KAAK,KAAK,SAAS,EAC1B,CAAC;YACC,MAAM,IAAI,iBAAiB,CAAC;gBACxB,IAAI,EAAE,uBAAuB;gBAC7B,OAAO,EAAE,+CAA+C;aAC3D,CAAC,CAAC;QACP,CAAC;QACD,OAAO,IAAI,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC,GAAG,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC;IACjE,CAAC;IAED,KAAK,CACD,GAAW;QAEX,IAAI,CAAC,mBAAmB,EAAE,CAAC;QAC3B,OAAO,IAAI,iBAAiB,CACxB,IAAI,CAAC,IAAI,EACT,EAAE,GAAG,EAAE,EACP,EAAE,YAAY,EAAE,IAAI,EAAE,CACzB,CAAC;IACN,CAAC;IAED,OAAO,CAAC,KAAa;QACjB,IAAI,CAAC,mBAAmB,EAAE,CAAC;QAC3B,OAAO,IAAI,iBAAiB,CAAuB,IAAI,CAAC,IAAI,EAAE;YAC1D,KAAK;SACR,CAAC,CAAC;IACP,CAAC;IAED,aAAa,CACT,WAAmB;QAEnB,IAAI,CAAC,mBAAmB,EAAE,CAAC;QAC3B,OAAO,IAAI,iBAAiB,CAAuB,IAAI,CAAC,IAAI,EAAE;YAC1D,WAAW;SACd,CAAC,CAAC;IACP,CAAC;IAED,UAAU,CACN,UAAkB,EAClB,WAAmB;QAEnB,IAAI,CAAC,mBAAmB,EAAE,CAAC;QAC3B,OAAO,IAAI,iBAAiB,CAAuB,IAAI,CAAC,IAAI,EAAE;YAC1D,UAAU;YACV,WAAW;SACd,CAAC,CAAC;IACP,CAAC;IAEO,mBAAmB;QACvB,IACI,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,MAAM,GAAG,CAAC;YACpC,IAAI,CAAC,IAAI;YACT,IAAI,CAAC,KAAK,KAAK,SAAS,EAC1B,CAAC;YACC,MAAM,IAAI,iBAAiB,CAAC;gBACxB,IAAI,EAAE,uBAAuB;gBAC7B,OAAO,EACH,0FAA0F;aACjG,CAAC,CAAC;QACP,CAAC;IACL,CAAC;IA2BD,KAAK,CACD,KAA0B,EAC1B,QAAqB,EACrB,KAAiE;QAIjE,IAAI,IAAI,CAAC,OAAO,CAAC,MAAM,KAAK,SAAS,EAAE,CAAC;YACpC,MAAM,IAAI,iBAAiB,CAAC;gBACxB,IAAI,EAAE,uBAAuB;gBAC7B,OAAO,EACH,4GAA4G;aACnH,CAAC,CAAC;QACP,CAAC;QACD,IACI,IAAI,CAAC,OAAO,CAAC,WAAW,KAAK,SAAS;YACtC,IAAI,CAAC,KAAK,KAAK,SAAS;YACxB,CAAC,CAAC,KAAK,KAAK,cAAc,IAAI,QAAQ,KAAK,IAAI,CAAC;gBAC5C,CAAC,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,MAAM,GAAG,CAAC,IAAI,IAAI,CAAC,IAAI,CAAC,CAAC,EAC1D,CAAC;YACC,MAAM,IAAI,iBAAiB,CAAC;gBACxB,IAAI,EAAE,uBAAuB;gBAC7B,OAAO,EACH,6EAA6E;aACpF,CAAC,CAAC;QACP,CAAC;QACD,IAAI,QAAQ,KAAK,IAAI,IAAI,QAAQ,KAAK,IAAI,EAAE,CAAC;YACzC,MAAM,IAAI,iBAAiB,CAAC;gBACxB,IAAI,EAAE,uBAAuB;gBAC7B,OAAO,EAAE,kDAAkD;aAC9D,CAAC,CAAC;QACP,CAAC;QACD,IACI,CAAC;YACG,KAAK;YACL,OAAO;YACP,aAAa;YACb,cAAc;YACd,UAAU;SACb,CAAC,QAAQ,CAAC,KAAK,CAAC;YACjB,CAAC,KAAK,KAAK,UAAU,IAAI,QAAQ,KAAK,IAAI,CAAC;YAC3C,CAAC,QAAQ,KAAK,IAAI;gBACd,CAAC,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC,CAAC,CAAC,EACxD,CAAC;YACC,MAAM,IAAI,iBAAiB,CAAC;gBACxB,IAAI,EAAE,uBAAuB;gBAC7B,OAAO,EACH,6EAA6E;aACpF,CAAC,CAAC;QACP,CAAC;QACD,MAAM,WAAW,GACb,QAAQ,KAAK,IAAI;YACb,CAAC,CAAC,yBAAyB,CACrB,KAAK,EACL,KAAiD,CACpD;YACH,CAAC,CAAC,yBAAyB,CAAC,KAAK,EAAE,CAAC,KAAe,CAAC,CAAC,CAAC;QAC9D,MAAM,MAAM,GACR,KAAK,KAAK,UAAU;YAChB,CAAC,CAAC;gBACI,KAAK;gBACL,QAAQ,EAAE,IAAI;gBACd,KAAK,EAAE,WAAmC;aAC7C;YACH,CAAC,CAAC,QAAQ,KAAK,IAAI;gBACjB,CAAC,CAAC;oBACI,KAAK;oBACL,QAAQ;oBACR,KAAK,EAAE,CAAC,GAAI,KAA2B,CAAC;iBAC3C;gBACH,CAAC,CAAC,EAAE,KAAK,EAAE,KAAK,EAAE,KAAe,EAAE,CAAC;QAC9C,OAAO,IAAI,aAAa,CACpB,IAAI,CAAC,IAAI,EACT,EAAE,GAAG,IAAI,CAAC,OAAO,EAAE,MAAM,EAAE,EAC3B,IAAI,CAAC,IAAI,EACT,IAAI,CAAC,KAAK,CAG8C,CAAC;IACjE,CAAC;IAED,OAAO,CACH,KAAQ,EACR,YAAe,KAAU;QAEzB,IAAI,CAAC,iBAAiB,EAAE,CAAC;QACzB,IACI,IAAI,CAAC,KAAK,KAAK,SAAS;YACxB,CAAC,KAAK,KAAK,KAAK,IAAI,SAAS,KAAK,KAAK,CAAC,EAC1C,CAAC;YACC,MAAM,IAAI,iBAAiB,CAAC;gBACxB,IAAI,EAAE,uBAAuB;gBAC7B,OAAO,EAAE,0CAA0C;aACtD,CAAC,CAAC;QACP,CAAC;QACD,IACI,CAAC;YACG,KAAK;YACL,aAAa;YACb,WAAW;YACX,aAAa;YACb,OAAO;SACV,CAAC,QAAQ,CAAC,KAAK,CAAC;YACjB,CAAC,CAAC,KAAK,EAAE,MAAM,CAAC,CAAC,QAAQ,CAAC,SAAS,CAAC;YACpC,IAAI,CAAC,OAAO,CAAC,OAAO,EACtB,CAAC;YACC,MAAM,IAAI,iBAAiB,CAAC;gBACxB,IAAI,EAAE,uBAAuB;gBAC7B,OAAO,EACH,gEAAgE;aACvE,CAAC,CAAC;QACP,CAAC;QACD,OAAO,IAAI,aAAa,CACpB,IAAI,CAAC,IAAI,EACT,EAAE,GAAG,IAAI,CAAC,OAAO,EAAE,OAAO,EAAE,EAAE,KAAK,EAAE,SAAS,EAAE,EAAE,EAClD,IAAI,CAAC,IAAI,EACT,IAAI,CAAC,KAAK,CAMb,CAAC;IACN,CAAC;IAED,MAAM,CACF,KAAQ;QAOR,IAAI,CAAC,iBAAiB,EAAE,CAAC;QACzB,IAAI,IAAI,CAAC,KAAK,KAAK,SAAS,IAAI,KAAK,KAAK,CAAC,EAAE,CAAC;YAC1C,MAAM,IAAI,iBAAiB,CAAC;gBACxB,IAAI,EAAE,uBAAuB;gBAC7B,OAAO,EAAE,uDAAuD;aACnE,CAAC,CAAC;QACP,CAAC;QACD,IAAI,CAAC,MAAM,CAAC,aAAa,CAAC,KAAK,CAAC,IAAI,KAAK,GAAG,CAAC,EAAE,CAAC;YAC5C,MAAM,IAAI,iBAAiB,CAAC;gBACxB,IAAI,EAAE,uBAAuB;gBAC7B,OAAO,EAAE,4CAA4C;aACxD,CAAC,CAAC;QACP,CAAC;QACD,OAAO,IAAI,aAAa,CACpB,IAAI,CAAC,IAAI,EACT,EAAE,GAAG,IAAI,CAAC,OAAO,EAAE,MAAM,EAAE,KAAK,EAAE,EAClC,IAAI,CAAC,IAAI,EACT,IAAI,CAAC,KAAK,CAMb,CAAC;IACN,CAAC;IAED,KAAK,CAAC,KAAa;QACf,OAAO,IAAI,CAAC,SAAS,CAAC,KAAK,EAAE,KAAK,CAKjC,CAAC;IACN,CAAC;IAED,oEAAoE;IACpE,WAAW,CACP,KAAa;QAEb,OAAO,IAAI,CAAC,SAAS,CAAC,KAAK,EAAE,IAAI,CAKhC,CAAC;IACN,CAAC;IAEO,SAAS,CAAC,KAAa,EAAE,IAAa;QAC1C,IAAI,CAAC,iBAAiB,EAAE,CAAC;QACzB,IAAI,IAAI,IAAI,IAAI,CAAC,KAAK,KAAK,SAAS,EAAE,CAAC;YACnC,MAAM,IAAI,iBAAiB,CAAC;gBACxB,IAAI,EAAE,uBAAuB;gBAC7B,OAAO,EAAE,kDAAkD;aAC9D,CAAC,CAAC;QACP,CAAC;QACD,IACI,CAAC,MAAM,CAAC,SAAS,CAAC,KAAK,CAAC;YACxB,KAAK,GAAG,CAAC;YACT,KAAK,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC,EAC7B,CAAC;YACC,MAAM,IAAI,iBAAiB,CAAC;gBACxB,IAAI,EAAE,uBAAuB;gBAC7B,OAAO,EAAE,IAAI;oBACT,CAAC,CAAC,oDAAoD;oBACtD,CAAC,CAAC,sFAAsF;aAC/F,CAAC,CAAC;QACP,CAAC;QACD,OAAO,IAAI,aAAa,CACpB,IAAI,CAAC,IAAI,EACT,EAAE,GAAG,IAAI,CAAC,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,EACjC,IAAI,EACJ,IAAI,CAAC,KAAK,CACb,CAAC;IACN,CAAC;IAED,+EAA+E;IAC/E,SAAS,CACL,KAAa;QAEb,IAAI,CAAC,iBAAiB,EAAE,CAAC;QACzB,IACI,IAAI,CAAC,OAAO,CAAC,MAAM;YACnB,IAAI,CAAC,IAAI;YACT,CAAC,IAAI,CAAC,OAAO,CAAC,MAAM,IAAI,CAAC,CAAC,KAAK,CAAC;YAChC,CAAC,IAAI,CAAC,OAAO,CAAC,OAAO;gBACjB,CAAC,IAAI,CAAC,OAAO,CAAC,OAAO,CAAC,KAAK,KAAK,KAAK;oBACjC,IAAI,CAAC,OAAO,CAAC,OAAO,CAAC,SAAS,KAAK,KAAK,CAAC,CAAC,EACpD,CAAC;YACC,MAAM,IAAI,iBAAiB,CAAC;gBACxB,IAAI,EAAE,uBAAuB;gBAC7B,OAAO,EACH,wFAAwF;aAC/F,CAAC,CAAC;QACP,CAAC;QACD,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YAClD,MAAM,IAAI,iBAAiB,CAAC;gBACxB,IAAI,EAAE,uBAAuB;gBAC7B,OAAO,EACH,qEAAqE;aAC5E,CAAC,CAAC;QACP,CAAC;QACD,OAAO,IAAI,aAAa,CACpB,IAAI,CAAC,IAAI,EACT,IAAI,CAAC,OAAO,EACZ,IAAI,CAAC,IAAI,EACT,KAAK,CACyD,CAAC;IACvE,CAAC;IAED,4DAA4D;IAC5D,KAAK;QACD,IAAI,CAAC,iBAAiB,EAAE,CAAC;QACzB,IAAI,IAAI,CAAC,KAAK,KAAK,SAAS,EAAE,CAAC;YAC3B,MAAM,IAAI,iBAAiB,CAAC;gBACxB,IAAI,EAAE,uBAAuB;gBAC7B,OAAO,EAAE,iCAAiC;aAC7C,CAAC,CAAC;QACP,CAAC;QACD,OAAO,IAAI,kBAAkB,CAAC,IAAI,CAAC,IAAI,EAAE,IAAI,CAAC,OAAO,EAAE,IAAI,CAAC,KAAK,CAAC,CAAC;IACvE,CAAC;IAEO,iBAAiB;QACrB,IACI,IAAI,CAAC,OAAO,CAAC,WAAW,KAAK,SAAS;YACtC,IAAI,CAAC,OAAO,CAAC,MAAM,EAAE,KAAK,KAAK,cAAc;YAC7C,IAAI,CAAC,OAAO,CAAC,MAAM,EAAE,QAAQ,KAAK,IAAI,EACxC,CAAC;YACC,MAAM,IAAI,iBAAiB,CAAC;gBACxB,IAAI,EAAE,uBAAuB;gBAC7B,OAAO,EAAE,oCAAoC;aAChD,CAAC,CAAC;QACP,CAAC;IACL,CAAC;IAED,0FAA0F;IAC1F,KAAK,CAAC,GAAG;QAIL,IAAI,CAAC;YACD,MAAM,EAAE,KAAK,EAAE,IAAI,EAAE,GAAG,MAAM,oBAAoB,CAC9C,IAAI,CAAC,IAAI,EACT,IAAI,CAAC,OAAO,EACZ,IAAI,CAAC,IAAI,EACT,IAAI,CAAC,KAAK,CACb,CAAC;YACF,IAAI,KAAK,EAAE,CAAC;gBACR,OAAO,EAAE,KAAK,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC;YACjC,CAAC;YACD,OAAO,EAAE,KAAK,EAAE,IAAI,EAAE,IAAI,EAAE,IAAmC,EAAE,CAAC;QACtE,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACb,OAAO,EAAE,IAAI,EAAE,IAAI,EAAE,KAAK,EAAE,WAAW,CAAC,KAAK,CAAC,EAAE,CAAC;QACrD,CAAC;IACL,CAAC;CACJ"}

package/dist/auth/user-import.d.ts

@@ -3,7 +3,11 @@ import { type CreateRequest, type UpdateRequest, type UserProvider } from './use
 import type { FirebaseArrayIndexError } from './user-batch.js';
 export type HashAlgorithmType = 'SCRYPT' | 'STANDARD_SCRYPT' | 'HMAC_SHA512' | 'HMAC_SHA256' | 'HMAC_SHA1' | 'HMAC_MD5' | 'MD5' | 'PBKDF_SHA1' | 'BCRYPT' | 'PBKDF2_SHA256' | 'SHA512' | 'SHA256' | 'SHA1';
 export interface UserImportOptions {
-    hash: {
+    /** Overwrite existing accounts with matching UIDs rather than rejecting them. */
+    allowOverwrite?: boolean;
+    /** Check duplicate emails, duplicate federated IDs, and provider validity. */
+    sanityCheck?: boolean;
+    hash?: {
         algorithm: HashAlgorithmType;
         key?: Uint8Array;
         saltSeparator?: Uint8Array;
@@ -40,6 +44,8 @@ export interface PreparedUserImport {
     indices: number[];
     errors: FirebaseArrayIndexError[];
 }
+/** Validate writable user metadata and translate timestamps to milliseconds. @internal */
+export declare function buildUserMetadata(metadata: UserMetadataRequest): Record<string, number>;
 /** Translate the supported Firebase Admin hash options without hashing on the edge. */
 export declare function buildImportHashOptions(options?: UserImportOptions): Record<string, unknown>;
 /** Convert one imported record, reusing the existing profile and MFA validation. */