firebase-functions 7.2.5 → 7.3.0-rc.0

package/lib/esm/v2/providers/database.mjs

@@ -1,4 +1,6 @@
 import { __export } from "../../_virtual/rolldown_runtime.mjs";
+import { Expression } from "../../params/types.mjs";
+import "../../params/index.mjs";
 import { initV2Endpoint } from "../../runtime/manifest.mjs";
 import { getApp } from "../../common/app.mjs";
 import { withInit } from "../../common/onInit.mjs";
@@ -163,10 +165,12 @@ function makeV1Context(eventType, databaseEvent) {
 /** @internal */
 function makeEndpoint(eventType, opts, path, instance) {
 	const baseOpts = optionsToEndpoint(getGlobalOptions());
-	const specificOpts = optionsToEndpoint(opts);
+	const specificOpts = optionsToEndpoint(opts, "event");
 	const eventFilters = {};
 	const eventFilterPathPatterns = { ref: path.getValue() };
-	if (instance.hasWildcards()) {
+	if (instance instanceof Expression) {
+		eventFilterPathPatterns.instance = instance;
+	} else if (instance.hasWildcards()) {
 		eventFilterPathPatterns.instance = instance.getValue();
 	} else {
 		eventFilters.instance = instance.getValue();
@@ -188,15 +192,24 @@ function makeEndpoint(eventType, opts, path, instance) {
 		}
 	};
 }
+function resolveInstancePattern(instance) {
+	return instance instanceof Expression ? new PathPattern(instance.value()) : instance;
+}
+function makeInstancePattern(instance) {
+	return instance instanceof Expression ? instance : new PathPattern(instance);
+}
+function makeTypedParams(event, pathPattern, instancePattern) {
+	return makeParams(event, pathPattern, resolveInstancePattern(instancePattern));
+}
 /** @internal */
 function onChangedOperation(eventType, referenceOrOpts, handler) {
 	const { path, instance, opts } = getOpts(referenceOrOpts);
 	const pathPattern = new PathPattern(path);
-	const instancePattern = new PathPattern(instance);
+	const instancePattern = makeInstancePattern(instance);
 	const func = (raw) => {
 		const event = raw;
 		const instanceUrl = getInstance(event);
-		const params = makeParams(event, pathPattern, instancePattern);
+		const params = makeTypedParams(event, pathPattern, instancePattern);
 		const databaseEvent = makeChangedDatabaseEvent(event, instanceUrl, params);
 		const compatEvent = addV1Compat(databaseEvent, {
 			context: () => makeV1Context(eventType, databaseEvent),
@@ -212,11 +225,11 @@ function onChangedOperation(eventType, referenceOrOpts, handler) {
 function onOperation(eventType, referenceOrOpts, handler) {
 	const { path, instance, opts } = getOpts(referenceOrOpts);
 	const pathPattern = new PathPattern(path);
-	const instancePattern = new PathPattern(instance);
+	const instancePattern = makeInstancePattern(instance);
 	const func = (raw) => {
 		const event = raw;
 		const instanceUrl = getInstance(event);
-		const params = makeParams(event, pathPattern, instancePattern);
+		const params = makeTypedParams(event, pathPattern, instancePattern);
 		const data = eventType === deletedEventType ? event.data.data : event.data.delta;
 		const databaseEvent = makeDatabaseEvent(event, data, instanceUrl, params);
 		const compatEvent = addV1Compat(databaseEvent, {

package/lib/esm/v2/providers/dataconnect/graphql.mjs

@@ -78,7 +78,7 @@ function onGraphRequest(opts) {
 	})));
 	const globalOpts = getGlobalOptions();
 	const baseOpts = optionsToEndpoint(globalOpts);
-	const specificOpts = optionsToEndpoint(opts);
+	const specificOpts = optionsToEndpoint(opts, "https");
 	const endpoint = {
 		...initV2Endpoint(globalOpts, opts),
 		platform: "gcfv2",

package/lib/esm/v2/providers/dataconnect/index.mjs

@@ -56,7 +56,7 @@ function getOpts(mutationOrOpts) {
 }
 function makeEndpoint(eventType, opts, service, connector, operation) {
 	const baseOpts = optionsToEndpoint(getGlobalOptions());
-	const specificOpts = optionsToEndpoint(opts);
+	const specificOpts = optionsToEndpoint(opts, "event");
 	const eventFilters = {};
 	const eventFilterPathPatterns = {};
 	if (service) {

package/lib/esm/v2/providers/eventarc.mjs

@@ -20,7 +20,7 @@ function onCustomEventPublished(eventTypeOrOpts, handler) {
 	func.run = handler;
 	const channel = opts.channel ?? "locations/us-central1/channels/firebase";
 	const baseOpts = optionsToEndpoint(getGlobalOptions());
-	const specificOpts = optionsToEndpoint(opts);
+	const specificOpts = optionsToEndpoint(opts, "event");
 	const endpoint = {
 		...initV2Endpoint(getGlobalOptions(), opts),
 		platform: "gcfv2",

package/lib/esm/v2/providers/firestore.mjs

@@ -234,7 +234,7 @@ function makeChangedFirestoreEvent(event, params) {
 /** @internal */
 function makeEndpoint(eventType, opts, document, database, namespace) {
 	const baseOpts = optionsToEndpoint(getGlobalOptions());
-	const specificOpts = optionsToEndpoint(opts);
+	const specificOpts = optionsToEndpoint(opts, "event");
 	const eventFilters = {
 		database,
 		namespace

package/lib/esm/v2/providers/https.mjs

@@ -6,7 +6,7 @@ import { initV2Endpoint } from "../../runtime/manifest.mjs";
 import { isDebugFeatureEnabled } from "../../common/debug.mjs";
 import { convertIfPresent, convertInvoker, copyIfPresent } from "../../common/encoding.mjs";
 import { withInit } from "../../common/onInit.mjs";
-import { HttpsError, onCallHandler, withErrorHandler } from "../../common/providers/https.mjs";
+import { HttpsError, onCallHandler, resolveCorsOrigin, withErrorHandler } from "../../common/providers/https.mjs";
 import { wrapTraceContext } from "../trace.mjs";
 import { getGlobalOptions, optionsToEndpoint, optionsToTriggerAnnotations } from "../options.mjs";
 import cors from "cors";
@@ -50,18 +50,12 @@ function onRequest(optsOrHandler, handler) {
 	}
 	handler = withErrorHandler(handler);
 	if (isDebugFeatureEnabled("enableCors") || "cors" in opts) {
-		let origin = opts.cors instanceof Expression ? opts.cors.value() : opts.cors;
-		if (isDebugFeatureEnabled("enableCors")) {
-			origin = opts.cors === false ? false : true;
-		}
-		if (Array.isArray(origin) && origin.length === 1) {
-			origin = origin[0];
-		}
-		const middleware = cors({ origin });
 		const userProvidedHandler = handler;
 		handler = (req, res) => {
 			return new Promise((resolve) => {
 				res.on("finish", resolve);
+				const origin = resolveCorsOrigin(opts.cors);
+				const middleware = cors({ origin });
 				middleware(req, res, () => {
 					resolve(userProvidedHandler(req, res));
 				});
@@ -71,7 +65,7 @@ function onRequest(optsOrHandler, handler) {
 	handler = wrapTraceContext(withInit(handler));
 	Object.defineProperty(handler, "__trigger", { get: () => {
 		const baseOpts$1 = optionsToTriggerAnnotations(getGlobalOptions());
-		const specificOpts$1 = optionsToTriggerAnnotations(opts);
+		const specificOpts$1 = optionsToTriggerAnnotations(opts, "https");
 		const trigger = {
 			platform: "gcfv2",
 			...baseOpts$1,
@@ -88,7 +82,7 @@ function onRequest(optsOrHandler, handler) {
 	} });
 	const globalOpts = getGlobalOptions();
 	const baseOpts = optionsToEndpoint(globalOpts);
-	const specificOpts = optionsToEndpoint(opts);
+	const specificOpts = optionsToEndpoint(opts, "https");
 	const endpoint = {
 		...initV2Endpoint(globalOpts, opts),
 		platform: "gcfv2",
@@ -115,18 +109,10 @@ function onCall(optsOrHandler, handler) {
 	}
 	let cors$1;
 	if ("cors" in opts) {
-		if (opts.cors instanceof Expression) {
-			cors$1 = opts.cors.value();
-		} else {
-			cors$1 = opts.cors;
-		}
+		cors$1 = opts.cors;
 	} else {
 		cors$1 = true;
 	}
-	let origin = isDebugFeatureEnabled("enableCors") ? true : cors$1;
-	if (Array.isArray(origin) && origin.length === 1) {
-		origin = origin[0];
-	}
 	const fixedLen = (req, resp) => handler(req, resp);
 	let enforceAppCheck = opts.enforceAppCheck ?? getGlobalOptions().enforceAppCheck;
 	if (enforceAppCheck instanceof Expression) {
@@ -138,7 +124,7 @@ function onCall(optsOrHandler, handler) {
 	}
 	let func = onCallHandler({
 		cors: {
-			origin,
+			origin: cors$1,
 			methods: "POST"
 		},
 		enforceAppCheck,
@@ -149,7 +135,7 @@ function onCall(optsOrHandler, handler) {
 	func = wrapTraceContext(withInit(func));
 	Object.defineProperty(func, "__trigger", { get: () => {
 		const baseOpts$1 = optionsToTriggerAnnotations(getGlobalOptions());
-		const specificOpts$1 = optionsToTriggerAnnotations(opts);
+		const specificOpts$1 = optionsToTriggerAnnotations(opts, "https");
 		return {
 			platform: "gcfv2",
 			...baseOpts$1,
@@ -163,7 +149,7 @@ function onCall(optsOrHandler, handler) {
 		};
 	} });
 	const baseOpts = optionsToEndpoint(getGlobalOptions());
-	const specificOpts = optionsToEndpoint(opts);
+	const specificOpts = optionsToEndpoint(opts, "https");
 	func.__endpoint = {
 		...initV2Endpoint(getGlobalOptions(), opts),
 		platform: "gcfv2",

package/lib/esm/v2/providers/identity.mjs

@@ -1,20 +1,24 @@
 import { __export } from "../../_virtual/rolldown_runtime.mjs";
+import { RESET_VALUE } from "../../common/options.mjs";
 import { initV2Endpoint } from "../../runtime/manifest.mjs";
 import { withInit } from "../../common/onInit.mjs";
 import { HttpsError } from "../../common/providers/https.mjs";
-import { wrapHandler } from "../../common/providers/identity.mjs";
+import { userRecordConstructor, wrapHandler } from "../../common/providers/identity.mjs";
 import { wrapTraceContext } from "../trace.mjs";
 import { getGlobalOptions, optionsToEndpoint } from "../options.mjs";
 
 //#region src/v2/providers/identity.ts
 var identity_exports = /* @__PURE__ */ __export({
 	HttpsError: () => HttpsError,
+	IS_NOT_TENANT: () => IS_NOT_TENANT,
 	beforeEmailSent: () => beforeEmailSent,
 	beforeOperation: () => beforeOperation,
 	beforeSmsSent: () => beforeSmsSent,
 	beforeUserCreated: () => beforeUserCreated,
 	beforeUserSignedIn: () => beforeUserSignedIn,
-	getOpts: () => getOpts
+	getOpts: () => getOpts,
+	onUserCreated: () => onUserCreated,
+	onUserDeleted: () => onUserDeleted
 });
 /**
 * Handles an event that is triggered before a user is created.
@@ -60,7 +64,7 @@ function beforeOperation(eventType, optsOrHandler, handler) {
 	const legacyEventType = `providers/cloud.auth/eventTypes/user.${eventType}`;
 	/** Endpoint */
 	const baseOptsEndpoint = optionsToEndpoint(getGlobalOptions());
-	const specificOptsEndpoint = optionsToEndpoint(opts);
+	const specificOptsEndpoint = optionsToEndpoint(opts, "identity");
 	func.__endpoint = {
 		...initV2Endpoint(getGlobalOptions(), opts),
 		platform: "gcfv2",
@@ -98,6 +102,87 @@ function getOpts(blockingOptions) {
 		refreshToken
 	};
 }
+const IS_NOT_TENANT = RESET_VALUE;
+function getOptsAndHandler(optsOrHandler, handler) {
+	if (typeof optsOrHandler === "function") {
+		return {
+			opts: {},
+			handler: optsOrHandler
+		};
+	}
+	return {
+		opts: optsOrHandler,
+		handler
+	};
+}
+const PROJECT_ID_REGEX = /(?:^|\/)projects\/([^\/]+)/;
+/** @hidden */
+function getAuthEvent(raw) {
+	const event = { ...raw };
+	if (raw.data) {
+		event.data = userRecordConstructor(raw.data);
+	}
+	const rawAny = raw;
+	const tenantId = rawAny.tenantid || rawAny.tenantId;
+	if (tenantId) {
+		event.tenantId = tenantId;
+	}
+	if (raw.source) {
+		const match = raw.source.match(PROJECT_ID_REGEX);
+		if (match) {
+			event.project = match[1];
+		}
+	}
+	return event;
+}
+/** @hidden */
+function makeAuthTrigger(eventType, optsOrHandler, handler) {
+	const { opts, handler: handlerFunc } = getOptsAndHandler(optsOrHandler, handler);
+	if (typeof handlerFunc !== "function") {
+		throw new Error("The handler must be a function.");
+	}
+	const wrappedHandler = wrapTraceContext(withInit(handlerFunc));
+	const func = ((raw) => {
+		const event = getAuthEvent(raw);
+		return wrappedHandler(event);
+	});
+	func.run = handlerFunc;
+	const baseOptsEndpoint = optionsToEndpoint(getGlobalOptions());
+	const specificOptsEndpoint = optionsToEndpoint(opts);
+	const endpoint = {
+		...initV2Endpoint(getGlobalOptions(), opts),
+		platform: "gcfv2",
+		...baseOptsEndpoint,
+		...specificOptsEndpoint,
+		labels: {
+			...baseOptsEndpoint?.labels,
+			...specificOptsEndpoint?.labels
+		},
+		eventTrigger: {
+			eventType,
+			eventFilters: {},
+			retry: opts.retry ?? false,
+			region: "global"
+		}
+	};
+	if (opts.tenantId !== undefined) {
+		if (opts.tenantId === IS_NOT_TENANT) {
+			endpoint.eventTrigger.eventFilters["tenantid"] = "";
+		} else {
+			endpoint.eventTrigger.eventFilters["tenantid"] = opts.tenantId;
+		}
+	}
+	func.__endpoint = endpoint;
+	return func;
+}
+const USER_CREATED_EVENT = "google.firebase.auth.user.v2.created";
+function onUserCreated(optsOrHandler, handler) {
+	return makeAuthTrigger(USER_CREATED_EVENT, optsOrHandler, handler);
+}
+const USER_DELETED_EVENT = "google.firebase.auth.user.v2.deleted";
+function onUserDeleted(optsOrHandler, handler) {
+	return makeAuthTrigger(USER_DELETED_EVENT, optsOrHandler, handler);
+}
 
 //#endregion
-export { HttpsError, beforeEmailSent, beforeOperation, beforeSmsSent, beforeUserCreated, beforeUserSignedIn, getOpts, identity_exports };
+export { HttpsError, IS_NOT_TENANT, beforeEmailSent, beforeOperation, beforeSmsSent, beforeUserCreated, beforeUserSignedIn, getOpts, identity_exports, onUserCreated, onUserDeleted };

package/lib/esm/v2/providers/pubsub.mjs

@@ -90,7 +90,7 @@ var Message = class {
 function onMessagePublished(topicOrOptions, handler) {
 	let topic;
 	let opts;
-	if (typeof topicOrOptions === "string") {
+	if (typeof topicOrOptions === "string" || "value" in topicOrOptions) {
 		topic = topicOrOptions;
 		opts = {};
 	} else {
@@ -145,7 +145,7 @@ function onMessagePublished(topicOrOptions, handler) {
 	func.run = handler;
 	Object.defineProperty(func, "__trigger", { get: () => {
 		const baseOpts$1 = optionsToTriggerAnnotations(getGlobalOptions());
-		const specificOpts$1 = optionsToTriggerAnnotations(opts);
+		const specificOpts$1 = optionsToTriggerAnnotations(opts, "event");
 		return {
 			platform: "gcfv2",
 			...baseOpts$1,
@@ -156,12 +156,12 @@ function onMessagePublished(topicOrOptions, handler) {
 			},
 			eventTrigger: {
 				eventType: "google.cloud.pubsub.topic.v1.messagePublished",
-				resource: `projects/${process.env.GCLOUD_PROJECT}/topics/${topic}`
+				...typeof topic === "string" && { resource: `projects/${process.env.GCLOUD_PROJECT}/topics/${topic}` }
 			}
 		};
 	} });
 	const baseOpts = optionsToEndpoint(getGlobalOptions());
-	const specificOpts = optionsToEndpoint(opts);
+	const specificOpts = optionsToEndpoint(opts, "event");
 	const endpoint = {
 		...initV2Endpoint(getGlobalOptions(), opts),
 		platform: "gcfv2",

package/lib/esm/v2/providers/remoteConfig.mjs

@@ -25,7 +25,7 @@ function onConfigUpdated(optsOrHandler, handler) {
 		optsOrHandler = {};
 	}
 	const baseOpts = optionsToEndpoint(getGlobalOptions());
-	const specificOpts = optionsToEndpoint(optsOrHandler);
+	const specificOpts = optionsToEndpoint(optsOrHandler, "event");
 	const func = wrapTraceContext(withInit((raw) => {
 		const event = raw;
 		const patchedEvent = addV1Compat(event, {

package/lib/esm/v2/providers/scheduler.mjs

@@ -70,7 +70,7 @@ function onSchedule(args, handler) {
 	func.run = handler;
 	const globalOpts = getGlobalOptions();
 	const baseOptsEndpoint = optionsToEndpoint(globalOpts);
-	const specificOptsEndpoint = optionsToEndpoint(separatedOpts.opts);
+	const specificOptsEndpoint = optionsToEndpoint(separatedOpts.opts, "event");
 	const ep = {
 		...initV2Endpoint(globalOpts, separatedOpts.opts),
 		platform: "gcfv2",

package/lib/esm/v2/providers/storage.mjs

@@ -114,7 +114,7 @@ function onOperation(eventType, bucketOrOptsOrHandler, handler) {
 	func.run = handler;
 	Object.defineProperty(func, "__trigger", { get: () => {
 		const baseOpts = optionsToTriggerAnnotations(getGlobalOptions());
-		const specificOpts = optionsToTriggerAnnotations(opts);
+		const specificOpts = optionsToTriggerAnnotations(opts, "event");
 		return {
 			platform: "gcfv2",
 			...baseOpts,
@@ -132,7 +132,7 @@ function onOperation(eventType, bucketOrOptsOrHandler, handler) {
 	func.__endpoint = {};
 	Object.defineProperty(func, "__endpoint", { get: () => {
 		const baseOpts = optionsToEndpoint(getGlobalOptions());
-		const specificOpts = optionsToEndpoint(opts);
+		const specificOpts = optionsToEndpoint(opts, "event");
 		const endpoint = {
 			platform: "gcfv2",
 			...initV2Endpoint(getGlobalOptions(), opts),

package/lib/esm/v2/providers/tasks.mjs

@@ -20,7 +20,7 @@ function onTaskDispatched(optsOrHandler, handler) {
 	const func = wrapTraceContext(withInit(onDispatchHandler(fixedLen)));
 	Object.defineProperty(func, "__trigger", { get: () => {
 		const baseOpts$1 = optionsToTriggerAnnotations(getGlobalOptions());
-		const specificOpts$1 = optionsToTriggerAnnotations(opts);
+		const specificOpts$1 = optionsToTriggerAnnotations(opts, "task");
 		const taskQueueTrigger = {};
 		copyIfPresent(taskQueueTrigger, opts, "retryConfig", "rateLimits");
 		convertIfPresent(taskQueueTrigger, getGlobalOptions(), "invoker", "invoker", convertInvoker);
@@ -37,7 +37,7 @@ function onTaskDispatched(optsOrHandler, handler) {
 		};
 	} });
 	const baseOpts = optionsToEndpoint(getGlobalOptions());
-	const specificOpts = optionsToEndpoint(opts);
+	const specificOpts = optionsToEndpoint(opts, "task");
 	func.__endpoint = {
 		platform: "gcfv2",
 		...initV2Endpoint(getGlobalOptions(), opts),

package/lib/esm/v2/providers/testLab.mjs

@@ -25,7 +25,7 @@ function onTestMatrixCompleted(optsOrHandler, handler) {
 		optsOrHandler = {};
 	}
 	const baseOpts = optionsToEndpoint(getGlobalOptions());
-	const specificOpts = optionsToEndpoint(optsOrHandler);
+	const specificOpts = optionsToEndpoint(optsOrHandler, "event");
 	const func = (raw) => {
 		return wrapTraceContext(withInit(handler))(raw);
 	};

package/lib/esm/v2/security.mjs

@@ -0,0 +1,19 @@
+import { registerRole } from "../security/roles.mjs";
+
+//#region src/v2/security.ts
+/**
+* Declares that this codebase requires the specified IAM role to operate.
+* When deployed, the Firebase CLI will automatically provision a managed service account
+* with this role and attach it to all functions in this codebase.
+* @param role The IAM role required (e.g. "roles/bigquery.dataEditor")
+*/
+function requiresRole(role) {
+	const roleRegex = /^(roles\/[a-zA-Z0-9_.-]+|projects\/[a-zA-Z0-9_-]+\/roles\/[a-zA-Z0-9_.-]+|organizations\/[a-zA-Z0-9_-]+\/roles\/[a-zA-Z0-9_.-]+)$/;
+	if (!roleRegex.test(role)) {
+		throw new Error(`Invalid role: "${role}". Role must be a valid GCP IAM role format (e.g., "roles/viewer", "projects/<project-id>/roles/<custom-role>", or "organizations/<org-id>/roles/<custom-role>").`);
+	}
+	registerRole(role);
+}
+
+//#endregion
+export { requiresRole };

package/lib/lifecycle/index.d.ts

@@ -0,0 +1,44 @@
+export interface TaskAction {
+    function: string;
+    body?: Record<string, unknown>;
+}
+export interface CallAction {
+    function: string;
+    params?: Record<string, unknown>;
+}
+export type HttpAction = ({
+    function: string;
+} | {
+    url: string;
+}) & {
+    method?: "GET" | "POST" | "PUT" | "DELETE";
+    headers?: Record<string, string>;
+    body?: unknown;
+};
+export type LifecycleAction = {
+    task: TaskAction;
+    call?: never;
+    http?: never;
+} | {
+    call: CallAction;
+    task?: never;
+    http?: never;
+} | {
+    http: HttpAction;
+    task?: never;
+    call?: never;
+};
+/**
+ * Registers an action to be executed automatically post-deployment when resources in this codebase
+ * are deployed for the first time.
+ *
+ * @param action The lifecycle action to execute.
+ */
+export declare function afterFirstDeploy(action: LifecycleAction): void;
+/**
+ * Registers an action to be executed automatically post-deployment when resources in this codebase
+ * are updated.
+ *
+ * @param action The lifecycle action to execute.
+ */
+export declare function afterRedeploy(action: LifecycleAction): void;

package/lib/lifecycle/index.js

@@ -0,0 +1,59 @@
+
+//#region src/lifecycle/index.ts
+/**
+* Use a global singleton to manage the list of declared lifecycle hooks.
+*
+* This ensures that lifecycle hooks are shared between CJS and ESM builds,
+* avoiding the "dual-package hazard" where the src/bin/firebase-functions.ts (CJS) sees
+* an empty list while the user's code (ESM) populates a different list.
+*/
+const majorVersion = typeof "7" !== "undefined" ? "7" : "0";
+const GLOBAL_SYMBOL = Symbol.for(`firebase-functions:lifecycle:declaredHooks:v${majorVersion}`);
+const globalSymbols = globalThis;
+if (!globalSymbols[GLOBAL_SYMBOL]) {
+	globalSymbols[GLOBAL_SYMBOL] = {};
+}
+/**
+* Singleton dictionary of declared lifecycle hooks.
+* @internal
+*/
+const declaredLifecycleHooks = globalSymbols[GLOBAL_SYMBOL];
+/**
+* Registers an action to be executed automatically post-deployment when resources in this codebase
+* are deployed for the first time.
+*
+* @param action The lifecycle action to execute.
+*/
+function afterFirstDeploy(action) {
+	if (declaredLifecycleHooks.afterFirstDeploy) {
+		throw new Error("Only one afterFirstDeploy lifecycle hook is allowed per codebase.");
+	}
+	declaredLifecycleHooks.afterFirstDeploy = action;
+}
+/**
+* Registers an action to be executed automatically post-deployment when resources in this codebase
+* are updated.
+*
+* @param action The lifecycle action to execute.
+*/
+function afterRedeploy(action) {
+	if (declaredLifecycleHooks.afterRedeploy) {
+		throw new Error("Only one afterRedeploy lifecycle hook is allowed per codebase.");
+	}
+	declaredLifecycleHooks.afterRedeploy = action;
+}
+/**
+* Helper to clear declared lifecycle hooks.
+* @internal
+*/
+function clearDeclaredLifecycleHooks() {
+	for (const key of Object.keys(declaredLifecycleHooks)) {
+		delete declaredLifecycleHooks[key];
+	}
+}
+
+//#endregion
+exports.afterFirstDeploy = afterFirstDeploy;
+exports.afterRedeploy = afterRedeploy;
+exports.clearDeclaredLifecycleHooks = clearDeclaredLifecycleHooks;
+exports.declaredLifecycleHooks = declaredLifecycleHooks;

package/lib/logger/common.d.ts

@@ -4,9 +4,24 @@ export declare const CONSOLE_SEVERITY: {
 };
 /** @hidden */
 export declare const UNPATCHED_CONSOLE: {
-    debug: (message?: any, ...optionalParams: any[]) => void;
-    info: (message?: any, ...optionalParams: any[]) => void;
-    log: (message?: any, ...optionalParams: any[]) => void;
-    warn: (message?: any, ...optionalParams: any[]) => void;
-    error: (message?: any, ...optionalParams: any[]) => void;
+    debug: {
+        (...data: any[]): void;
+        (message?: any, ...optionalParams: any[]): void;
+    };
+    info: {
+        (...data: any[]): void;
+        (message?: any, ...optionalParams: any[]): void;
+    };
+    log: {
+        (...data: any[]): void;
+        (message?: any, ...optionalParams: any[]): void;
+    };
+    warn: {
+        (...data: any[]): void;
+        (message?: any, ...optionalParams: any[]): void;
+    };
+    error: {
+        (...data: any[]): void;
+        (message?: any, ...optionalParams: any[]): void;
+    };
 };

package/lib/params/types.d.ts

@@ -84,7 +84,9 @@ export interface TextInput<T = unknown> {
          * failing to conform to the validationRegex,
          */
         validationErrorMessage?: string;
-    };
+    } & (T extends string | string[] ? {
+        nonEmpty?: boolean;
+    } : {});
 }
 /**
  * Specifies that a parameter's value should be determined by having the user
@@ -117,6 +119,12 @@ export interface SelectInput<T = unknown> {
 export interface MultiSelectInput {
     multiSelect: {
         options: Array<SelectOptions<string>>;
+        /**
+         * If set on an input for a string or string list param, nonEmpty prevents
+         * the prompt from accepting the empty string or empty list as valid input.
+         * Syntactic sugar over setting validationRegex to /.+/
+         */
+        nonEmpty?: boolean;
     };
 }
 /**
@@ -144,10 +152,8 @@ export type ParamSpec<T extends string | number | boolean | string[]> = {
 };
 /**
  * Representation of parameters for the stack over the wire.
- *
  * @remarks
  * N.B: a WireParamSpec is just a ParamSpec with default expressions converted into a CEL literal
- *
  * @alpha
  */
 export type WireParamSpec<T extends string | number | boolean | string[]> = {

package/lib/runtime/loader.js

@@ -1,5 +1,8 @@
 const require_rolldown_runtime = require('../_virtual/rolldown_runtime.js');
 const require_params_index = require('../params/index.js');
+const require_security_roles = require('../security/roles.js');
+const require_common_api = require('../common/api.js');
+const require_lifecycle_index = require('../lifecycle/index.js');
 let path = require("path");
 path = require_rolldown_runtime.__toESM(path);
 let url = require("url");
@@ -9,9 +12,7 @@ url = require_rolldown_runtime.__toESM(url);
 /**
 * Dynamically load import function to prevent TypeScript from
 * transpiling into a require.
-*
 * See https://github.com/microsoft/TypeScript/issues/43329.
-*
 */
 const dynamicImport = new Function("modulePath", "return import(modulePath)");
 async function loadModule(functionsDir) {
@@ -118,6 +119,8 @@ async function loadStack(functionsDir) {
 	const extensions = {};
 	const mod = await loadModule(functionsDir);
 	extractStack(mod, endpoints, requiredAPIs, extensions);
+	requiredAPIs.push(...require_common_api.getGlobalRequiredAPIs());
+	require_common_api.clearGlobalRequiredAPIs();
 	const stack = {
 		endpoints,
 		specVersion: "v1alpha1",
@@ -127,6 +130,13 @@ async function loadStack(functionsDir) {
 	if (require_params_index.declaredParams.length > 0) {
 		stack.params = require_params_index.declaredParams.map((p) => p.toSpec());
 	}
+	if (require_security_roles.declaredRoles.size > 0) {
+		stack.requiredRoles = Array.from(require_security_roles.declaredRoles);
+	}
+	if (Object.keys(require_lifecycle_index.declaredLifecycleHooks).length > 0) {
+		stack.lifecycleHooks = { ...require_lifecycle_index.declaredLifecycleHooks };
+	}
+	require_lifecycle_index.clearDeclaredLifecycleHooks();
 	return stack;
 }