firebase-tools 10.4.0 → 10.5.0

package/lib/accountExporter.js

@@ -1,15 +1,17 @@
 "use strict";
-var os = require("os");
-var path = require("path");
-var _ = require("lodash");
-const { Client } = require("./apiv2");
-const { googleOrigin } = require("./api");
-var { FirebaseError } = require("./error");
-var utils = require("./utils");
-const apiClient = new Client({
-    urlPrefix: googleOrigin,
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.serialExportUsers = exports.validateOptions = void 0;
+const _ = require("lodash");
+const os = require("os");
+const path = require("path");
+const apiv2_1 = require("./apiv2");
+const error_1 = require("./error");
+const api_1 = require("./api");
+const utils = require("./utils");
+const apiClient = new apiv2_1.Client({
+    urlPrefix: api_1.googleOrigin,
 });
-var EXPORTED_JSON_KEYS = [
+const EXPORTED_JSON_KEYS = [
     "localId",
     "email",
     "emailVerified",
@@ -23,44 +25,53 @@ var EXPORTED_JSON_KEYS = [
     "disabled",
     "customAttributes",
 ];
-var EXPORTED_JSON_KEYS_RENAMING = {
+const EXPORTED_JSON_KEYS_RENAMING = {
     lastLoginAt: "lastSignedInAt",
 };
-var EXPORTED_PROVIDER_USER_INFO_KEYS = ["providerId", "rawId", "email", "displayName", "photoUrl"];
-var PROVIDER_ID_INDEX_MAP = {
-    "google.com": 7,
-    "facebook.com": 11,
-    "twitter.com": 15,
-    "github.com": 19,
-};
-var _escapeComma = function (str) {
-    if (str.indexOf(",") !== -1) {
+const EXPORTED_PROVIDER_USER_INFO_KEYS = [
+    "providerId",
+    "rawId",
+    "email",
+    "displayName",
+    "photoUrl",
+];
+const PROVIDER_ID_INDEX_MAP = new Map([
+    ["google.com", 7],
+    ["facebook.com", 11],
+    ["twitter.com", 15],
+    ["github.com", 19],
+]);
+function escapeComma(str) {
+    if (str.includes(",")) {
         return `"${str}"`;
     }
     return str;
-};
-var _convertToNormalBase64 = function (data) {
+}
+function convertToNormalBase64(data) {
     return data.replace(/_/g, "/").replace(/-/g, "+");
-};
-var _addProviderUserInfo = function (providerInfo, arr, startPos) {
+}
+function addProviderUserInfo(providerInfo, arr, startPos) {
     arr[startPos] = providerInfo.rawId;
     arr[startPos + 1] = providerInfo.email || "";
-    arr[startPos + 2] = _escapeComma(providerInfo.displayName || "");
+    arr[startPos + 2] = escapeComma(providerInfo.displayName || "");
     arr[startPos + 3] = providerInfo.photoUrl || "";
-};
-var _transUserToArray = function (user) {
-    var arr = Array(27).fill("");
+}
+function transUserToArray(user) {
+    const arr = Array(27).fill("");
     arr[0] = user.localId;
     arr[1] = user.email || "";
     arr[2] = user.emailVerified || false;
-    arr[3] = _convertToNormalBase64(user.passwordHash || "");
-    arr[4] = _convertToNormalBase64(user.salt || "");
-    arr[5] = _escapeComma(user.displayName || "");
+    arr[3] = convertToNormalBase64(user.passwordHash || "");
+    arr[4] = convertToNormalBase64(user.salt || "");
+    arr[5] = escapeComma(user.displayName || "");
     arr[6] = user.photoUrl || "";
-    for (var i = 0; i < (!user.providerUserInfo ? 0 : user.providerUserInfo.length); i++) {
-        var providerInfo = user.providerUserInfo[i];
-        if (providerInfo && PROVIDER_ID_INDEX_MAP[providerInfo.providerId]) {
-            _addProviderUserInfo(providerInfo, arr, PROVIDER_ID_INDEX_MAP[providerInfo.providerId]);
+    for (let i = 0; i < (!user.providerUserInfo ? 0 : user.providerUserInfo.length); i++) {
+        const providerInfo = user.providerUserInfo[i];
+        if (providerInfo) {
+            const providerIndex = PROVIDER_ID_INDEX_MAP.get(providerInfo.providerId);
+            if (providerIndex) {
+                addProviderUserInfo(providerInfo, arr, providerIndex);
+            }
         }
     }
     arr[23] = user.createdAt;
@@ -69,36 +80,35 @@ var _transUserToArray = function (user) {
     arr[26] = user.disabled;
     arr[27] = user.customAttributes;
     return arr;
-};
-var _transUserJson = function (user) {
-    var newUser = {};
-    _.each(_.pick(user, EXPORTED_JSON_KEYS), function (value, key) {
-        var newKey = EXPORTED_JSON_KEYS_RENAMING[key] || key;
+}
+function transUserJson(user) {
+    const newUser = {};
+    _.each(_.pick(user, EXPORTED_JSON_KEYS), (value, key) => {
+        const newKey = EXPORTED_JSON_KEYS_RENAMING[key] || key;
         newUser[newKey] = value;
     });
     if (newUser.passwordHash) {
-        newUser.passwordHash = _convertToNormalBase64(newUser.passwordHash);
+        newUser.passwordHash = convertToNormalBase64(newUser.passwordHash);
     }
     if (newUser.salt) {
-        newUser.salt = _convertToNormalBase64(newUser.salt);
+        newUser.salt = convertToNormalBase64(newUser.salt);
     }
     if (user.providerUserInfo) {
         newUser.providerUserInfo = [];
-        user.providerUserInfo.forEach(function (providerInfo) {
-            if (!_.includes(Object.keys(PROVIDER_ID_INDEX_MAP), providerInfo.providerId)) {
-                return;
+        for (const providerInfo of user.providerUserInfo) {
+            if (PROVIDER_ID_INDEX_MAP.has(providerInfo.providerId)) {
+                newUser.providerUserInfo.push(_.pick(providerInfo, EXPORTED_PROVIDER_USER_INFO_KEYS));
             }
-            newUser.providerUserInfo.push(_.pick(providerInfo, EXPORTED_PROVIDER_USER_INFO_KEYS));
-        });
+        }
     }
     return newUser;
-};
-var validateOptions = function (options, fileName) {
-    var exportOptions = {};
+}
+function validateOptions(options, fileName) {
+    const exportOptions = {};
     if (fileName === undefined) {
-        throw new FirebaseError("Must specify data file", { exit: 1 });
+        throw new error_1.FirebaseError("Must specify data file");
     }
-    var extName = path.extname(fileName.toLowerCase());
+    const extName = path.extname(fileName.toLowerCase());
     if (extName === ".csv") {
         exportOptions.format = "csv";
     }
@@ -106,44 +116,44 @@ var validateOptions = function (options, fileName) {
         exportOptions.format = "json";
     }
     else if (options.format) {
-        var format = options.format.toLowerCase();
+        const format = options.format.toLowerCase();
         if (format === "csv" || format === "json") {
             exportOptions.format = format;
         }
         else {
-            throw new FirebaseError("Unsupported data file format, should be csv or json", { exit: 1 });
+            throw new error_1.FirebaseError("Unsupported data file format, should be csv or json");
         }
     }
     else {
-        throw new FirebaseError("Please specify data file format in file name, or use `format` parameter", {
-            exit: 1,
-        });
+        throw new error_1.FirebaseError("Please specify data file format in file name, or use `format` parameter");
     }
     return exportOptions;
-};
-var _createWriteUsersToFile = function () {
-    var jsonSep = "";
-    return function (userList, format, writeStream) {
-        userList.map(function (user) {
+}
+exports.validateOptions = validateOptions;
+function createWriteUsersToFile() {
+    let jsonSep = "";
+    return (userList, format, writeStream) => {
+        userList.map((user) => {
             if (user.passwordHash && user.version !== 0) {
                 delete user.passwordHash;
                 delete user.salt;
             }
             if (format === "csv") {
-                writeStream.write(_transUserToArray(user).join(",") + "," + os.EOL, "utf8");
+                writeStream.write(transUserToArray(user).join(",") + "," + os.EOL, "utf8");
             }
             else {
-                writeStream.write(jsonSep + JSON.stringify(_transUserJson(user), null, 2), "utf8");
+                writeStream.write(jsonSep + JSON.stringify(transUserJson(user), null, 2), "utf8");
                 jsonSep = "," + os.EOL;
             }
         });
     };
-};
-var serialExportUsers = function (projectId, options) {
+}
+async function serialExportUsers(projectId, options) {
+    var _a;
     if (!options.writeUsersToFile) {
-        options.writeUsersToFile = _createWriteUsersToFile();
+        options.writeUsersToFile = createWriteUsersToFile();
     }
-    var postBody = {
+    const postBody = {
         targetProjectId: projectId,
         maxResults: options.batchSize,
     };
@@ -153,13 +163,12 @@ var serialExportUsers = function (projectId, options) {
     if (!options.timeoutRetryCount) {
         options.timeoutRetryCount = 0;
     }
-    return apiClient
-        .post("/identitytoolkit/v3/relyingparty/downloadAccount", postBody, {
-        skipLog: { resBody: true },
-    })
-        .then(function (ret) {
+    try {
+        const ret = await apiClient.post("/identitytoolkit/v3/relyingparty/downloadAccount", postBody, {
+            skipLog: { resBody: true },
+        });
         options.timeoutRetryCount = 0;
-        var userList = ret.body.users;
+        const userList = ret.body.users;
         if (userList && userList.length > 0) {
             options.writeUsersToFile(userList, options.format, options.writeStream);
             utils.logSuccess("Exported " + userList.length + " account(s) successfully.");
@@ -169,19 +178,21 @@ var serialExportUsers = function (projectId, options) {
             options.nextPageToken = ret.body.nextPageToken;
             return serialExportUsers(projectId, options);
         }
-    })
-        .catch((err) => {
-        if (err.original.code === "ETIMEDOUT") {
+    }
+    catch (err) {
+        if (((_a = err.original) === null || _a === void 0 ? void 0 : _a.code) === "ETIMEDOUT") {
             options.timeoutRetryCount++;
             if (options.timeoutRetryCount > 5) {
                 return err;
             }
             return serialExportUsers(projectId, options);
         }
-    });
-};
-var accountExporter = {
-    validateOptions: validateOptions,
-    serialExportUsers: serialExportUsers,
-};
-module.exports = accountExporter;
+        if (err instanceof error_1.FirebaseError) {
+            throw err;
+        }
+        else {
+            throw new error_1.FirebaseError(`Failed to export accounts: ${err}`, { original: err });
+        }
+    }
+}
+exports.serialExportUsers = serialExportUsers;

package/lib/bin/firebase.js

@@ -20,7 +20,7 @@ marked.setOptions({
     renderer: new TerminalRenderer(),
 });
 const updateMessage = `Update available ${clc.xterm(240)("{currentVersion}")} → ${clc.green("{latestVersion}")}\n` +
-    `To update to the latest version using npm, run ${clc.cyan("npm install -g firebase-tools")}\n` +
+    `To update to the latest version using npm, run\n${clc.cyan("npm install -g firebase-tools")}\n` +
     `For other CLI management options, visit the ${marked("[CLI documentation](https://firebase.google.com/docs/cli#update-cli)")}`;
 updateNotifier.notify({ defer: true, isGlobal: true, message: updateMessage });
 const client = require("..");

package/lib/commands/emulators-start.js

@@ -8,6 +8,7 @@ const registry_1 = require("../emulator/registry");
 const types_1 = require("../emulator/types");
 const clc = require("cli-color");
 const constants_1 = require("../emulator/constants");
+const utils_1 = require("../utils");
 const Table = require("cli-table");
 function stylizeLink(url) {
     return clc.underline(clc.bold(url));
@@ -22,8 +23,9 @@ module.exports = new command_1.Command("emulators:start")
     .option(commandUtils.FLAG_EXPORT_ON_EXIT, commandUtils.DESC_EXPORT_ON_EXIT)
     .action(async (options) => {
     const killSignalPromise = commandUtils.shutdownWhenKilled(options);
+    let deprecationNotices;
     try {
-        await controller.startAll(options);
+        ({ deprecationNotices } = await controller.startAll(options));
     }
     catch (e) {
         await controller.cleanShutdown();
@@ -85,5 +87,8 @@ ${clc.blackBright("  Other reserved ports:")} ${reservedPortsString}
 
 Issues? Report them at ${stylizeLink("https://github.com/firebase/firebase-tools/issues")} and attach the *-debug.log files.
  `);
+    for (const notice of deprecationNotices) {
+        (0, utils_1.logLabeledWarning)("emulators", notice, "warn");
+    }
     await killSignalPromise;
 });

package/lib/commands/ext-configure.js

@@ -35,7 +35,7 @@ exports.default = new command_1.Command("ext:configure <extensionInstanceId>")
     .before(extensionsHelper_1.diagnoseAndFixProject)
     .action(async (instanceId, options) => {
     var _a;
-    const projectId = (0, projectUtils_1.needProjectId)(options);
+    const projectId = (0, projectUtils_1.getProjectId)(options);
     if (options.local) {
         if (options.nonInteractive) {
             throw new error_1.FirebaseError(`Command not supported in non-interactive mode, edit ./extensions/${instanceId}.env directly instead`);
@@ -77,7 +77,7 @@ exports.default = new command_1.Command("ext:configure <extensionInstanceId>")
     try {
         let existingInstance;
         try {
-            existingInstance = await extensionsApi.getInstance(projectId, instanceId);
+            existingInstance = await extensionsApi.getInstance((0, projectUtils_1.needProjectId)({ projectId }), instanceId);
         }
         catch (err) {
             if (err.status === 404) {
@@ -113,13 +113,13 @@ exports.default = new command_1.Command("ext:configure <extensionInstanceId>")
         }
         spinner.start();
         const res = await extensionsApi.configureInstance({
-            projectId,
+            projectId: (0, projectUtils_1.needProjectId)({ projectId }),
             instanceId,
             params: paramBindings,
         });
         spinner.stop();
         utils.logLabeledSuccess(extensionsHelper_1.logPrefix, `successfully configured ${clc.bold(instanceId)}.`);
-        utils.logLabeledBullet(extensionsHelper_1.logPrefix, marked(`You can view your reconfigured instance in the Firebase console: ${utils.consoleUrl(projectId, `/extensions/instances/${instanceId}?tab=config`)}`));
+        utils.logLabeledBullet(extensionsHelper_1.logPrefix, marked(`You can view your reconfigured instance in the Firebase console: ${utils.consoleUrl((0, projectUtils_1.needProjectId)({ projectId }), `/extensions/instances/${instanceId}?tab=config`)}`));
         manifest.showDeprecationWarning();
         return res;
     }

package/lib/commands/ext-dev-emulators-start.js

@@ -19,9 +19,10 @@ module.exports = new command_1.Command("ext:dev:emulators:start")
     .action(async (options) => {
     const killSignalPromise = commandUtils.shutdownWhenKilled(options);
     const emulatorOptions = await optionsHelper.buildOptions(options);
+    let deprecationNotices;
     try {
         commandUtils.beforeEmulatorCommand(emulatorOptions);
-        await controller.startAll(emulatorOptions);
+        ({ deprecationNotices } = await controller.startAll(emulatorOptions));
     }
     catch (e) {
         await controller.cleanShutdown();
@@ -31,5 +32,8 @@ module.exports = new command_1.Command("ext:dev:emulators:start")
         throw e;
     }
     utils.logSuccess("All emulators ready, it is now safe to connect.");
+    for (const notice of deprecationNotices) {
+        utils.logLabeledWarning("emulators", notice, "warn");
+    }
     await killSignalPromise;
 });

package/lib/commands/ext-install.js

@@ -47,7 +47,7 @@ exports.default = new command_1.Command("ext:install [extensionName]")
     .before(extensionsHelper_1.diagnoseAndFixProject)
     .action(async (extensionName, options) => {
     var _a;
-    const projectId = (0, projectUtils_1.needProjectId)(options);
+    const projectId = (0, projectUtils_1.getProjectId)(options);
     const paramsEnvPath = ((_a = options.params) !== null && _a !== void 0 ? _a : "");
     let learnMore = false;
     if (!extensionName) {
@@ -71,7 +71,7 @@ exports.default = new command_1.Command("ext:install [extensionName]")
         if (options.local) {
             throw new error_1.FirebaseError("Installing a local source locally is not supported yet, please use ext:dev:emulator commands");
         }
-        source = await infoInstallBySource(projectId, extensionName);
+        source = await infoInstallBySource((0, projectUtils_1.needProjectId)({ projectId }), extensionName);
     }
     else {
         void (0, track_1.track)("Extension Install", "Install by Extension Ref", options.interactive ? 1 : 0);
@@ -120,7 +120,7 @@ exports.default = new command_1.Command("ext:install [extensionName]")
     try {
         return installExtension({
             paramsEnvPath,
-            projectId,
+            projectId: projectId,
             extensionName,
             source,
             extVersion,
@@ -195,7 +195,8 @@ async function installToManifest(options) {
     manifest.showPreviewWarning();
 }
 async function installExtension(options) {
-    const { projectId, extensionName, source, extVersion, paramsEnvPath, nonInteractive, force } = options;
+    const { extensionName, source, extVersion, paramsEnvPath, nonInteractive, force } = options;
+    const projectId = (0, projectUtils_1.needProjectId)({ projectId: options.projectId });
     const spec = (source === null || source === void 0 ? void 0 : source.spec) || (extVersion === null || extVersion === void 0 ? void 0 : extVersion.spec);
     if (!spec) {
         throw new error_1.FirebaseError(`Could not find the extension.yaml for ${extensionName}. Please make sure this is a valid extension and try again.`);

package/lib/commands/ext-update.js

@@ -42,8 +42,8 @@ exports.default = new command_1.Command("ext:update <extensionInstanceId> [updat
     .option("--local", "save the update to firebase.json rather than directly update an existing Extension instance on a Firebase project")
     .action(async (instanceId, updateSource, options) => {
     var _a, _b;
-    const projectId = (0, projectUtils_1.needProjectId)(options);
     if (options.local) {
+        const projectId = (0, projectUtils_1.getProjectId)(options);
         const config = manifest.loadConfig(options);
         const oldRef = manifest.getInstanceRef(instanceId, config);
         const oldExtensionVersion = await extensionsApi.getExtensionVersion(refs.toExtensionVersionRef(oldRef));
@@ -95,6 +95,7 @@ exports.default = new command_1.Command("ext:update <extensionInstanceId> [updat
     }
     const spinner = ora(`Updating ${clc.bold(instanceId)}. This usually takes 3 to 5 minutes...`);
     try {
+        const projectId = (0, projectUtils_1.needProjectId)(options);
         let existingInstance;
         try {
             existingInstance = await extensionsApi.getInstance(projectId, instanceId);

package/lib/commands/functions-config-export.js

@@ -13,6 +13,7 @@ const utils_1 = require("../utils");
 const functional_1 = require("../functional");
 const configExport = require("../functions/runtimeConfigExport");
 const requireConfig_1 = require("../requireConfig");
+const projectConfig_1 = require("../functions/projectConfig");
 const REQUIRED_PERMISSIONS = [
     "runtimeconfig.configs.list",
     "runtimeconfig.configs.get",
@@ -79,6 +80,8 @@ exports.default = new command_1.Command("functions:config:export")
     .before(requireConfig_1.requireConfig)
     .before(requireInteractive_1.default)
     .action(async (options) => {
+    const config = (0, projectConfig_1.normalizeAndValidate)(options.config.src.functions)[0];
+    const functionsDir = config.source;
     let pInfos = configExport.getProjectInfos(options);
     checkReservedAliases(pInfos);
     (0, utils_1.logBullet)("Importing functions configs from projects [" +
@@ -108,7 +111,6 @@ exports.default = new command_1.Command("functions:config:export")
     const filesToWrite = fromEntries((0, functional_1.zip)(filenames, dotEnvs));
     filesToWrite[".env.local"] = `${header}\n# .env.local file contains environment variables for the Functions Emulator.\n`;
     filesToWrite[".env"] = `${header}# .env file contains environment variables that applies to all projects.\n`;
-    const functionsDir = options.config.get("functions.source", ".");
     for (const [filename, content] of Object.entries(filesToWrite)) {
         await options.config.askWriteProjectFile(path.join(functionsDir, filename), content);
     }

package/lib/config.js

@@ -39,10 +39,17 @@ class Config {
                 _.set(this.data, target, this.materialize(target));
             }
         });
-        if (this.projectDir &&
-            !this.get("functions.source") &&
-            fsutils.dirExistsSync(this.path("functions"))) {
-            this.set("functions.source", Config.DEFAULT_FUNCTIONS_SOURCE);
+        if (this.projectDir && fsutils.dirExistsSync(this.path(Config.DEFAULT_FUNCTIONS_SOURCE))) {
+            if (Array.isArray(this.get("functions"))) {
+                if (!this.get("functions.[0].source")) {
+                    this.set("functions.[0].source", Config.DEFAULT_FUNCTIONS_SOURCE);
+                }
+            }
+            else {
+                if (!this.get("functions.source")) {
+                    this.set("functions.source", Config.DEFAULT_FUNCTIONS_SOURCE);
+                }
+            }
         }
     }
     materialize(target) {

package/lib/deploy/functions/checkIam.js

@@ -1,6 +1,6 @@
 "use strict";
 Object.defineProperty(exports, "__esModule", { value: true });
-exports.ensureServiceAgentRoles = exports.mergeBindings = exports.checkHttpIam = exports.checkServiceAccountIam = void 0;
+exports.ensureServiceAgentRoles = exports.mergeBindings = exports.obtainEventarcServiceAgentBindings = exports.obtainDefaultComputeServiceAgentBindings = exports.obtainPubSubServiceAgentBindings = exports.obtainBinding = exports.checkHttpIam = exports.checkServiceAccountIam = exports.EVENTARC_SERVICE_AGENT_ROLE = exports.EVENTARC_EVENT_RECEIVER_ROLE = exports.RUN_INVOKER_ROLE = exports.SERVICE_ACCOUNT_TOKEN_CREATOR_ROLE = void 0;
 const cli_color_1 = require("cli-color");
 const logger_1 = require("../../logger");
 const functionsDeployHelper_1 = require("./functionsDeployHelper");
@@ -12,6 +12,10 @@ const utils = require("../../utils");
 const resourceManager_1 = require("../../gcp/resourceManager");
 const services_1 = require("./services");
 const PERMISSION = "cloudfunctions.functions.setIamPolicy";
+exports.SERVICE_ACCOUNT_TOKEN_CREATOR_ROLE = "roles/iam.serviceAccountTokenCreator";
+exports.RUN_INVOKER_ROLE = "roles/run.invoker";
+exports.EVENTARC_EVENT_RECEIVER_ROLE = "roles/eventarc.eventReceiver";
+exports.EVENTARC_SERVICE_AGENT_ROLE = "roles/eventarc.serviceAgent";
 async function checkServiceAccountIam(projectId) {
     const saEmail = `${projectId}@appspot.gserviceaccount.com`;
     let passed = false;
@@ -67,6 +71,37 @@ function reduceEventsToServices(services, endpoint) {
     }
     return services;
 }
+function obtainBinding(existingPolicy, serviceAccount, role) {
+    let binding = existingPolicy.bindings.find((b) => b.role === role);
+    if (!binding) {
+        binding = {
+            role,
+            members: [],
+        };
+    }
+    if (!binding.members.find((m) => m === serviceAccount)) {
+        binding.members.push(serviceAccount);
+    }
+    return binding;
+}
+exports.obtainBinding = obtainBinding;
+function obtainPubSubServiceAgentBindings(projectNumber, existingPolicy) {
+    const pubsubServiceAgent = `serviceAccount:service-${projectNumber}@gcp-sa-pubsub.iam.gserviceaccount.com`;
+    return [obtainBinding(existingPolicy, pubsubServiceAgent, exports.SERVICE_ACCOUNT_TOKEN_CREATOR_ROLE)];
+}
+exports.obtainPubSubServiceAgentBindings = obtainPubSubServiceAgentBindings;
+function obtainDefaultComputeServiceAgentBindings(projectNumber, existingPolicy) {
+    const defaultComputeServiceAgent = `serviceAccount:${projectNumber}-compute@developer.gserviceaccount.com`;
+    const invokerBinding = obtainBinding(existingPolicy, defaultComputeServiceAgent, exports.RUN_INVOKER_ROLE);
+    const eventReceiverBinding = obtainBinding(existingPolicy, defaultComputeServiceAgent, exports.EVENTARC_EVENT_RECEIVER_ROLE);
+    return [invokerBinding, eventReceiverBinding];
+}
+exports.obtainDefaultComputeServiceAgentBindings = obtainDefaultComputeServiceAgentBindings;
+function obtainEventarcServiceAgentBindings(projectNumber, existingPolicy) {
+    const eventarcServiceAgent = `serviceAccount:service-${projectNumber}@gcp-sa-eventarc.iam.gserviceaccount.com`;
+    return [obtainBinding(existingPolicy, eventarcServiceAgent, exports.EVENTARC_SERVICE_AGENT_ROLE)];
+}
+exports.obtainEventarcServiceAgentBindings = obtainEventarcServiceAgentBindings;
 function mergeBindings(policy, allRequiredBindings) {
     for (const requiredBindings of allRequiredBindings) {
         if (requiredBindings.length === 0) {
@@ -107,6 +142,14 @@ async function ensureServiceAgentRoles(projectNumber, want, have) {
     const findRequiredBindings = [];
     newServices.forEach((service) => findRequiredBindings.push(service.requiredProjectBindings(projectNumber, policy)));
     const allRequiredBindings = await Promise.all(findRequiredBindings);
+    if (haveServices.length === 0) {
+        allRequiredBindings.push(obtainPubSubServiceAgentBindings(projectNumber, policy));
+        allRequiredBindings.push(obtainDefaultComputeServiceAgentBindings(projectNumber, policy));
+        allRequiredBindings.push(obtainEventarcServiceAgentBindings(projectNumber, policy));
+    }
+    if (!allRequiredBindings.find((bindings) => bindings.length > 0)) {
+        return;
+    }
     mergeBindings(policy, allRequiredBindings);
     try {
         await (0, resourceManager_1.setIamPolicy)(projectNumber, policy, "bindings");

package/lib/deploy/functions/deploy.js

@@ -9,7 +9,6 @@ const utils_1 = require("../../utils");
 const gcs = require("../../gcp/storage");
 const gcf = require("../../gcp/cloudfunctions");
 const gcfv2 = require("../../gcp/cloudfunctionsv2");
-const utils = require("../../utils");
 const backend = require("./backend");
 (0, tmp_1.setGracefulCleanup)();
 async function uploadSourceV1(context, region) {
@@ -33,7 +32,7 @@ async function uploadSourceV2(context, region) {
     context.storage = Object.assign(Object.assign({}, context.storage), { [region]: res.storageSource });
 }
 async function deploy(context, options, payload) {
-    if (!options.config.src.functions) {
+    if (!context.config) {
         return;
     }
     if (!context.functionsSourceV1 && !context.functionsSourceV2) {
@@ -53,12 +52,9 @@ async function deploy(context, options, payload) {
             }
         }
         await Promise.all(uploads);
-        utils.assertDefined(options.config.src.functions.source, "Error: 'functions.source' is not defined");
+        const source = context.config.source;
         if (uploads.length) {
-            (0, utils_1.logSuccess)(clc.green.bold("functions:") +
-                " " +
-                clc.bold(options.config.src.functions.source) +
-                " folder uploaded successfully");
+            (0, utils_1.logSuccess)(`${clc.green.bold("functions:")} ${clc.bold(source)} folder uploaded successfully`);
         }
     }
     catch (err) {

package/lib/deploy/functions/prepare.js

@@ -19,6 +19,7 @@ const logger_1 = require("../../logger");
 const triggerRegionHelper_1 = require("./triggerRegionHelper");
 const checkIam_1 = require("./checkIam");
 const error_1 = require("../../error");
+const projectConfig_1 = require("../../functions/projectConfig");
 function hasUserConfig(config) {
     return Object.keys(config).length > 1;
 }
@@ -28,16 +29,17 @@ function hasDotenv(opts) {
 async function prepare(context, options, payload) {
     const projectId = (0, projectUtils_1.needProjectId)(options);
     const projectNumber = await (0, projectUtils_1.needProjectNumber)(options);
-    const sourceDirName = options.config.get("functions.source");
+    context.config = (0, projectConfig_1.normalizeAndValidate)(options.config.src.functions)[0];
+    const sourceDirName = context.config.source;
     if (!sourceDirName) {
-        throw new error_1.FirebaseError(`No functions code detected at default location (./functions), and no functions.source defined in firebase.json`);
+        throw new error_1.FirebaseError(`No functions code detected at default location (./functions), and no functions source defined in firebase.json`);
     }
     const sourceDir = options.config.path(sourceDirName);
     const delegateContext = {
         projectId,
         sourceDir,
         projectDir: options.config.projectDir,
-        runtime: options.config.get("functions.runtime") || "",
+        runtime: context.config.runtime || "",
     };
     const runtimeDelegate = await runtimes.getRuntimeDelegate(delegateContext);
     logger_1.logger.debug(`Validating ${runtimeDelegate.name} source`);
@@ -95,10 +97,10 @@ async function prepare(context, options, payload) {
             " directory for uploading...");
     }
     if (backend.someEndpoint(wantBackend, (e) => e.platform === "gcfv1")) {
-        context.functionsSourceV1 = await (0, prepareFunctionsUpload_1.prepareFunctionsUpload)(runtimeConfig, options);
+        context.functionsSourceV1 = await (0, prepareFunctionsUpload_1.prepareFunctionsUpload)(sourceDir, context.config, runtimeConfig);
     }
     if (backend.someEndpoint(wantBackend, (e) => e.platform === "gcfv2")) {
-        context.functionsSourceV2 = await (0, prepareFunctionsUpload_1.prepareFunctionsUpload)(undefined, options);
+        context.functionsSourceV2 = await (0, prepareFunctionsUpload_1.prepareFunctionsUpload)(sourceDir, context.config);
     }
     for (const endpoint of backend.allEndpoints(wantBackend)) {
         endpoint.environmentVariables = wantBackend.environmentVariables;