firebase-tools 10.4.2 → 10.7.0

package/lib/bin/firebase.js

@@ -20,7 +20,7 @@ marked.setOptions({
     renderer: new TerminalRenderer(),
 });
 const updateMessage = `Update available ${clc.xterm(240)("{currentVersion}")} → ${clc.green("{latestVersion}")}\n` +
-    `To update to the latest version using npm, run ${clc.cyan("npm install -g firebase-tools")}\n` +
+    `To update to the latest version using npm, run\n${clc.cyan("npm install -g firebase-tools")}\n` +
     `For other CLI management options, visit the ${marked("[CLI documentation](https://firebase.google.com/docs/cli#update-cli)")}`;
 updateNotifier.notify({ defer: true, isGlobal: true, message: updateMessage });
 const client = require("..");

package/lib/command.js

@@ -9,7 +9,7 @@ const rc_1 = require("./rc");
 const config_1 = require("./config");
 const configstore_1 = require("./configstore");
 const detectProjectRoot_1 = require("./detectProjectRoot");
-const track = require("./track");
+const track_1 = require("./track");
 const clc = require("cli-color");
 const auth_1 = require("./auth");
 const projects_1 = require("./management/projects");
@@ -85,7 +85,7 @@ class Command {
                     }, null, 2));
                 }
                 const duration = new Date().getTime() - start;
-                void track(this.name, "success", duration).then(() => process.exit());
+                void (0, track_1.track)(this.name, "success", duration).then(() => process.exit());
             })
                 .catch(async (err) => {
                 if ((0, utils_1.getInheritedOption)(options, "json")) {
@@ -96,7 +96,7 @@ class Command {
                 }
                 const duration = Date.now() - start;
                 const errorEvent = err.exit === 1 ? "Error (User)" : "Error (Unexpected)";
-                await Promise.all([track(this.name, "error", duration), track(errorEvent, "", duration)]);
+                await Promise.all([(0, track_1.track)(this.name, "error", duration), (0, track_1.track)(errorEvent, "", duration)]);
                 client.errorOut(err);
             });
         });
@@ -197,7 +197,7 @@ function validateProjectId(project) {
     if (PROJECT_ID_REGEX.test(project)) {
         return;
     }
-    track("Project ID Check", "invalid");
+    (0, track_1.track)("Project ID Check", "invalid");
     const invalidMessage = "Invalid project id: " + clc.bold(project) + ".";
     if (project.toLowerCase() !== project) {
         throw new error_1.FirebaseError(invalidMessage + "\nNote: Project id must be all lowercase.");

package/lib/commands/deploy.js

@@ -5,7 +5,7 @@ const { requirePermissions } = require("../requirePermissions");
 const { checkServiceAccountIam } = require("../deploy/functions/checkIam");
 const checkValidTargetFilters = require("../checkValidTargetFilters");
 const { Command } = require("../command");
-const deploy = require("../deploy");
+const { deploy } = require("../deploy");
 const { requireConfig } = require("../requireConfig");
 const { filterTargets } = require("../filterTargets");
 const { requireHostingSite } = require("../requireHostingSite");

package/lib/commands/emulators-start.js

@@ -8,6 +8,7 @@ const registry_1 = require("../emulator/registry");
 const types_1 = require("../emulator/types");
 const clc = require("cli-color");
 const constants_1 = require("../emulator/constants");
+const utils_1 = require("../utils");
 const Table = require("cli-table");
 function stylizeLink(url) {
     return clc.underline(clc.bold(url));
@@ -22,8 +23,9 @@ module.exports = new command_1.Command("emulators:start")
     .option(commandUtils.FLAG_EXPORT_ON_EXIT, commandUtils.DESC_EXPORT_ON_EXIT)
     .action(async (options) => {
     const killSignalPromise = commandUtils.shutdownWhenKilled(options);
+    let deprecationNotices;
     try {
-        await controller.startAll(options);
+        ({ deprecationNotices } = await controller.startAll(options));
     }
     catch (e) {
         await controller.cleanShutdown();
@@ -61,7 +63,7 @@ module.exports = new command_1.Command("emulators:start")
         .map((emulator) => {
         const emulatorName = constants_1.Constants.description(emulator).replace(/ emulator/i, "");
         const isSupportedByUi = types_1.EMULATORS_SUPPORTED_BY_UI.includes(emulator);
-        const info = registry_1.EmulatorRegistry.getInfo(emulator === types_1.Emulators.EXTENSIONS ? types_1.Emulators.FUNCTIONS : emulator);
+        const info = registry_1.EmulatorRegistry.getInfo(emulator);
         if (!info) {
             return [emulatorName, "Failed to initialize (see above)", "", ""];
         }
@@ -75,6 +77,11 @@ module.exports = new command_1.Command("emulators:start")
     })
         .map((col) => col.slice(0, head.length))
         .filter((v) => v));
+    let extensionsTable = "";
+    if (registry_1.EmulatorRegistry.isRunning(types_1.Emulators.EXTENSIONS)) {
+        const extensionsEmulatorInstance = registry_1.EmulatorRegistry.get(types_1.Emulators.EXTENSIONS);
+        extensionsTable = extensionsEmulatorInstance.extensionsInfoTable(options);
+    }
     logger_1.logger.info(`\n${successMessageTable}
 
 ${emulatorsTable}
@@ -82,8 +89,11 @@ ${hubInfo
         ? clc.blackBright("  Emulator Hub running at ") + registry_1.EmulatorRegistry.getInfoHostString(hubInfo)
         : clc.blackBright("  Emulator Hub not running.")}
 ${clc.blackBright("  Other reserved ports:")} ${reservedPortsString}
-
+${extensionsTable}
 Issues? Report them at ${stylizeLink("https://github.com/firebase/firebase-tools/issues")} and attach the *-debug.log files.
  `);
+    for (const notice of deprecationNotices) {
+        (0, utils_1.logLabeledWarning)("emulators", notice, "warn");
+    }
     await killSignalPromise;
 });

package/lib/commands/ext-configure.js

@@ -41,13 +41,22 @@ exports.default = new command_1.Command("ext:configure <extensionInstanceId>")
             throw new error_1.FirebaseError(`Command not supported in non-interactive mode, edit ./extensions/${instanceId}.env directly instead`);
         }
         const config = manifest.loadConfig(options);
-        const targetRef = manifest.getInstanceRef(instanceId, config);
-        const extensionVersion = await extensionsApi.getExtensionVersion(refs.toExtensionVersionRef(targetRef));
+        const refOrPath = manifest.getInstanceTarget(instanceId, config);
+        const isLocalSource = (0, extensionsHelper_1.isLocalPath)(refOrPath);
+        let spec;
+        if (isLocalSource) {
+            const source = await (0, extensionsHelper_1.createSourceFromLocation)((0, projectUtils_1.needProjectId)({ projectId }), refOrPath);
+            spec = source.spec;
+        }
+        else {
+            const extensionVersion = await extensionsApi.getExtensionVersion(refOrPath);
+            spec = extensionVersion.spec;
+        }
         const oldParamValues = manifest.readInstanceParam({
             instanceId,
             projectDir: config.projectDir,
         });
-        const [immutableParams, tbdParams] = (0, functional_1.partition)(extensionVersion.spec.params, (param) => { var _a; return (_a = param.immutable) !== null && _a !== void 0 ? _a : false; });
+        const [immutableParams, tbdParams] = (0, functional_1.partition)(spec.params, (param) => { var _a; return (_a = param.immutable) !== null && _a !== void 0 ? _a : false; });
         infoImmutableParams(immutableParams, oldParamValues);
         paramHelper.setNewDefaults(tbdParams, oldParamValues);
         const mutableParamsBindingOptions = await paramHelper.getParams({
@@ -62,9 +71,10 @@ exports.default = new command_1.Command("ext:configure <extensionInstanceId>")
         await manifest.writeToManifest([
             {
                 instanceId,
-                ref: targetRef,
+                ref: !isLocalSource ? refs.parse(refOrPath) : undefined,
+                localPath: isLocalSource ? refOrPath : undefined,
                 params: newParamOptions,
-                paramSpecs: extensionVersion.spec.params,
+                extensionSpec: spec,
             },
         ], config, {
             nonInteractive: false,

package/lib/commands/ext-dev-emulators-start.js

@@ -19,9 +19,10 @@ module.exports = new command_1.Command("ext:dev:emulators:start")
     .action(async (options) => {
     const killSignalPromise = commandUtils.shutdownWhenKilled(options);
     const emulatorOptions = await optionsHelper.buildOptions(options);
+    let deprecationNotices;
     try {
         commandUtils.beforeEmulatorCommand(emulatorOptions);
-        await controller.startAll(emulatorOptions);
+        ({ deprecationNotices } = await controller.startAll(emulatorOptions));
     }
     catch (e) {
         await controller.cleanShutdown();
@@ -31,5 +32,8 @@ module.exports = new command_1.Command("ext:dev:emulators:start")
         throw e;
     }
     utils.logSuccess("All emulators ready, it is now safe to connect.");
+    for (const notice of deprecationNotices) {
+        utils.logLabeledWarning("emulators", notice, "warn");
+    }
     await killSignalPromise;
 });

package/lib/commands/ext-export.js

@@ -22,16 +22,17 @@ module.exports = new command_1.Command("ext:export")
     .action(async (options) => {
     const projectId = (0, projectUtils_1.needProjectId)(options);
     const projectNumber = await (0, getProjectNumber_1.getProjectNumber)(options);
-    const have = await Promise.all((await planner.have(projectId)).map(async (i) => {
-        const subbed = await (0, export_1.setSecretParamsToLatest)(i);
-        return (0, export_1.parameterizeProject)(projectId, projectNumber, subbed);
-    }));
+    const have = await Promise.all(await planner.have(projectId));
     if (have.length === 0) {
         logger_1.logger.info(`No extension instances installed on ${projectId}, so there is nothing to export.`);
         return;
     }
     const [withRef, withoutRef] = (0, functional_1.partition)(have, (s) => !!s.ref);
-    (0, export_1.displayExportInfo)(withRef, withoutRef);
+    const withRefSubbed = await Promise.all(withRef.map(async (i) => {
+        const subbed = await (0, export_1.setSecretParamsToLatest)(i);
+        return (0, export_1.parameterizeProject)(projectId, projectNumber, subbed);
+    }));
+    (0, export_1.displayExportInfo)(withRefSubbed, withoutRef);
     if (!options.nonInteractive &&
         !options.force &&
         !(await (0, prompt_1.promptOnce)({

package/lib/commands/ext-install.js

@@ -46,7 +46,7 @@ exports.default = new command_1.Command("ext:install [extensionName]")
     .before(checkMinRequiredVersion_1.checkMinRequiredVersion, "extMinVersion")
     .before(extensionsHelper_1.diagnoseAndFixProject)
     .action(async (extensionName, options) => {
-    var _a;
+    var _a, _b;
     const projectId = (0, projectUtils_1.getProjectId)(options);
     const paramsEnvPath = ((_a = options.params) !== null && _a !== void 0 ? _a : "");
     let learnMore = false;
@@ -62,20 +62,23 @@ exports.default = new command_1.Command("ext:install [extensionName]")
         }
     }
     let source;
-    let extVersion;
+    let extensionVersion;
     if ((0, extensionsHelper_1.isUrlPath)(extensionName)) {
-        void (0, track_1.track)("Extension Install", "Install by url path", options.interactive ? 1 : 0);
+        throw new error_1.FirebaseError(`Installing with a source url is no longer supported in the CLI. Please use Firebase Console instead.`);
     }
-    if ((0, extensionsHelper_1.isLocalOrURLPath)(extensionName)) {
+    if ((0, extensionsHelper_1.isLocalPath)(extensionName)) {
+        source = await (0, extensionsHelper_1.createSourceFromLocation)((0, projectUtils_1.needProjectId)({ projectId }), extensionName);
+        (0, displayExtensionInfo_1.displayExtInfo)(extensionName, "", source.spec);
         void (0, track_1.track)("Extension Install", "Install by Source", options.interactive ? 1 : 0);
-        if (options.local) {
-            throw new error_1.FirebaseError("Installing a local source locally is not supported yet, please use ext:dev:emulator commands");
-        }
-        source = await infoInstallBySource((0, projectUtils_1.needProjectId)({ projectId }), extensionName);
     }
     else {
         void (0, track_1.track)("Extension Install", "Install by Extension Ref", options.interactive ? 1 : 0);
-        extVersion = await infoInstallByReference(extensionName, options.interactive);
+        extensionName = (0, extensionsHelper_1.canonicalizeRefInput)(extensionName);
+        extensionVersion = await extensionsApi.getExtensionVersion(extensionName);
+        await infoExtensionVersion({
+            extensionName,
+            extensionVersion,
+        });
     }
     if (!(await (0, extensionsHelper_1.confirm)({
         nonInteractive: options.nonInteractive,
@@ -84,10 +87,10 @@ exports.default = new command_1.Command("ext:install [extensionName]")
     }))) {
         return;
     }
-    if (!source && !extVersion) {
+    if (!source && !extensionVersion) {
         throw new error_1.FirebaseError("Could not find a source. Please specify a valid source to continue.");
     }
-    const spec = (source === null || source === void 0 ? void 0 : source.spec) || (extVersion === null || extVersion === void 0 ? void 0 : extVersion.spec);
+    const spec = (_b = source === null || source === void 0 ? void 0 : source.spec) !== null && _b !== void 0 ? _b : extensionVersion === null || extensionVersion === void 0 ? void 0 : extensionVersion.spec;
     if (!spec) {
         throw new error_1.FirebaseError(`Could not find the extension.yaml for extension '${clc.bold(extensionName)}'. Please make sure this is a valid extension and try again.`);
     }
@@ -103,7 +106,7 @@ exports.default = new command_1.Command("ext:install [extensionName]")
                 projectId,
                 extensionName,
                 source,
-                extVersion,
+                extVersion: extensionVersion,
                 nonInteractive: options.nonInteractive,
                 force: options.force,
             });
@@ -123,7 +126,7 @@ exports.default = new command_1.Command("ext:install [extensionName]")
             projectId: projectId,
             extensionName,
             source,
-            extVersion,
+            extVersion: extensionVersion,
             nonInteractive: options.nonInteractive,
             force: options.force,
         });
@@ -137,37 +140,17 @@ exports.default = new command_1.Command("ext:install [extensionName]")
         throw err;
     }
 });
-async function infoInstallBySource(projectId, extensionName) {
-    let source;
-    try {
-        source = await (0, extensionsHelper_1.createSourceFromLocation)(projectId, extensionName);
-    }
-    catch (err) {
-        throw new error_1.FirebaseError(`Unable to find published extension '${clc.bold(extensionName)}', ` +
-            `and encountered the following error when trying to create an instance of extension '${clc.bold(extensionName)}':\n ${err.message}`);
-    }
-    (0, displayExtensionInfo_1.displayExtInfo)(extensionName, "", source.spec);
-    return source;
-}
-async function infoInstallByReference(extensionName, interactive) {
-    if (extensionName.split("/").length < 2) {
-        const [extensionID, version] = extensionName.split("@");
-        extensionName = `firebase/${extensionID}@${version || "latest"}`;
-    }
-    const ref = refs.parse(extensionName);
+async function infoExtensionVersion(args) {
+    const ref = refs.parse(args.extensionName);
     const extension = await extensionsApi.getExtension(refs.toExtensionRef(ref));
-    if (!ref.version) {
-        void (0, track_1.track)("Extension Install", "Install by Extension Version Ref", interactive ? 1 : 0);
-        extensionName = `${extensionName}@latest`;
-    }
-    const extVersion = await extensionsApi.getExtensionVersion(extensionName);
-    (0, displayExtensionInfo_1.displayExtInfo)(extensionName, ref.publisherId, extVersion.spec, true);
-    await (0, warnings_1.displayWarningPrompts)(ref.publisherId, extension.registryLaunchStage, extVersion);
-    return extVersion;
+    (0, displayExtensionInfo_1.displayExtInfo)(args.extensionName, ref.publisherId, args.extensionVersion.spec, true);
+    await (0, warnings_1.displayWarningPrompts)(ref.publisherId, extension.registryLaunchStage, args.extensionVersion);
 }
 async function installToManifest(options) {
-    const { projectId, extensionName, extVersion, paramsEnvPath, nonInteractive, force } = options;
-    const spec = extVersion === null || extVersion === void 0 ? void 0 : extVersion.spec;
+    var _a;
+    const { projectId, extensionName, extVersion, source, paramsEnvPath, nonInteractive, force } = options;
+    const isLocalSource = (0, extensionsHelper_1.isLocalPath)(extensionName);
+    const spec = (_a = extVersion === null || extVersion === void 0 ? void 0 : extVersion.spec) !== null && _a !== void 0 ? _a : source === null || source === void 0 ? void 0 : source.spec;
     if (!spec) {
         throw new error_1.FirebaseError(`Could not find the extension.yaml for ${extensionName}. Please make sure this is a valid extension and try again.`);
     }
@@ -183,13 +166,14 @@ async function installToManifest(options) {
         paramsEnvPath,
         instanceId,
     });
-    const ref = refs.parse(extVersion.ref);
+    const ref = extVersion ? refs.parse(extVersion.ref) : undefined;
     await manifest.writeToManifest([
         {
             instanceId,
-            ref,
+            ref: !isLocalSource ? ref : undefined,
+            localPath: isLocalSource ? extensionName : undefined,
             params: paramBindingOptions,
-            paramSpecs: spec.params,
+            extensionSpec: spec,
         },
     ], config, { nonInteractive, force: force !== null && force !== void 0 ? force : false });
     manifest.showPreviewWarning();

package/lib/commands/ext-update.js

@@ -45,6 +45,13 @@ exports.default = new command_1.Command("ext:update <extensionInstanceId> [updat
     if (options.local) {
         const projectId = (0, projectUtils_1.getProjectId)(options);
         const config = manifest.loadConfig(options);
+        const oldRefOrPath = manifest.getInstanceTarget(instanceId, config);
+        if ((0, extensionsHelper_1.isLocalPath)(oldRefOrPath)) {
+            throw new error_1.FirebaseError(`Updating an extension with local source is not neccessary. ` +
+                `Rerun "firebase deploy" or restart the emulator after making changes to your local extension source. ` +
+                `If you've edited the extension param spec, you can edit an extension instance's params ` +
+                `interactively by running "firebase ext:configure --local {instance-id}"`);
+        }
         const oldRef = manifest.getInstanceRef(instanceId, config);
         const oldExtensionVersion = await extensionsApi.getExtensionVersion(refs.toExtensionVersionRef(oldRef));
         updateSource = (0, updateHelper_1.inferUpdateSource)(updateSource, refs.toExtensionRef(oldRef));
@@ -84,7 +91,8 @@ exports.default = new command_1.Command("ext:update <extensionInstanceId> [updat
                 instanceId,
                 ref: refs.parse(newExtensionVersion.ref),
                 params: newParamBindingOptions,
-                paramSpecs: newExtensionVersion.spec.params,
+                extensionSpec: newExtensionVersion.spec,
+                extensionVersion: newExtensionVersion,
             },
         ], config, {
             nonInteractive: options.nonInteractive,

package/lib/commands/functions-delete.js

@@ -29,7 +29,7 @@ exports.default = new command_1.Command("functions:delete [filters...]")
     }
     const context = {
         projectId: (0, projectUtils_1.needProjectId)(options),
-        filters: filters.map((f) => f.split(".")),
+        filters: filters.map((f) => ({ idChunks: f.split(".") })),
     };
     const [config, existingBackend] = await Promise.all([
         functionsConfig.getFirebaseConfig(options),
@@ -40,10 +40,7 @@ exports.default = new command_1.Command("functions:delete [filters...]")
     if (options.region) {
         existingBackend.endpoints = { [options.region]: existingBackend.endpoints[options.region] };
     }
-    const plan = planner.createDeploymentPlan(backend.empty(), existingBackend, {
-        filters: context.filters,
-        deleteAll: true,
-    });
+    const plan = planner.createDeploymentPlan(backend.empty(), existingBackend, context.filters, true);
     const allEpToDelete = Object.values(plan)
         .map((changes) => changes.endpointsToDelete)
         .reduce(functional_1.reduceFlat, [])

package/lib/commands/functions-secrets-destroy.js

@@ -1,21 +1,41 @@
 "use strict";
 Object.defineProperty(exports, "__esModule", { value: true });
 const command_1 = require("../command");
-const logger_1 = require("../logger");
 const projectUtils_1 = require("../projectUtils");
 const secretManager_1 = require("../gcp/secretManager");
 const prompt_1 = require("../prompt");
+const utils_1 = require("../utils");
 const secrets = require("../functions/secrets");
+const backend = require("../deploy/functions/backend");
 exports.default = new command_1.Command("functions:secrets:destroy <KEY>[@version]")
     .description("Destroy a secret. Defaults to destroying the latest version.")
     .withForce("Destroys a secret without confirmation.")
     .action(async (key, options) => {
     const projectId = (0, projectUtils_1.needProjectId)(options);
+    const projectNumber = await (0, projectUtils_1.needProjectNumber)(options);
+    const haveBackend = await backend.existingBackend({ projectId });
     let [name, version] = key.split("@");
     if (!version) {
         version = "latest";
     }
     const sv = await (0, secretManager_1.getSecretVersion)(projectId, name, version);
+    if (sv.state === "DESTROYED") {
+        (0, utils_1.logBullet)(`Secret ${sv.secret.name}@${version} is already destroyed. Nothing to do.`);
+        return;
+    }
+    const boundEndpoints = backend
+        .allEndpoints(haveBackend)
+        .filter((e) => secrets.inUse({ projectId, projectNumber }, sv.secret, e));
+    if (boundEndpoints.length > 0) {
+        const endpointsMsg = boundEndpoints
+            .map((e) => `${e.id}[${e.platform}](${e.region})`)
+            .join("\t\n");
+        (0, utils_1.logWarning)(`Secret ${name}@${version} is currently in use by following functions:\n\t${endpointsMsg}`);
+        if (!options.force) {
+            (0, utils_1.logWarning)("Refusing to destroy secret in use. Use -f to destroy the secret anyway.");
+            return;
+        }
+    }
     if (!options.force) {
         const confirm = await (0, prompt_1.promptOnce)({
             name: "destroy",
@@ -28,12 +48,12 @@ exports.default = new command_1.Command("functions:secrets:destroy <KEY>[@versio
         }
     }
     await (0, secretManager_1.destroySecretVersion)(projectId, name, version);
-    logger_1.logger.info(`Destroyed secret version ${name}@${sv.versionId}`);
+    (0, utils_1.logBullet)(`Destroyed secret version ${name}@${sv.versionId}`);
     const secret = await (0, secretManager_1.getSecret)(projectId, name);
     if (secrets.isFirebaseManaged(secret)) {
         const versions = await (0, secretManager_1.listSecretVersions)(projectId, name);
         if (versions.filter((v) => v.state === "ENABLED").length === 0) {
-            logger_1.logger.info(`No active secret versions left. Destroying secret ${name}`);
+            (0, utils_1.logBullet)(`No active secret versions left. Destroying secret ${name}`);
             await (0, secretManager_1.deleteSecret)(projectId, name);
         }
     }

package/lib/commands/functions-secrets-prune.js

@@ -10,6 +10,7 @@ const utils_1 = require("../utils");
 const prompt_1 = require("../prompt");
 const secretManager_1 = require("../gcp/secretManager");
 exports.default = new command_1.Command("functions:secrets:prune")
+    .withForce("Destroys unused secrets without prompt")
     .description("Destroys unused secrets")
     .before(requirePermissions_1.requirePermissions, [
     "cloudfunctions.functions.list",
@@ -32,18 +33,20 @@ exports.default = new command_1.Command("functions:secrets:prune")
     }
     (0, utils_1.logBullet)(`Found ${pruned.length} unused active secret versions:\n\t` +
         pruned.map((sv) => `${sv.secret}@${sv.version}`).join("\n\t"));
-    const confirm = await (0, prompt_1.promptOnce)({
-        name: "destroy",
-        type: "confirm",
-        default: true,
-        message: `Do you want to destroy unused secret versions?`,
-    }, options);
-    if (!confirm) {
-        (0, utils_1.logBullet)("Run the following commands to destroy each unused secret version:\n\t" +
-            pruned
-                .map((sv) => `firebase functions:secrets:destroy ${sv.secret}@${sv.version}`)
-                .join("\n\t"));
-        return;
+    if (!options.force) {
+        const confirm = await (0, prompt_1.promptOnce)({
+            name: "destroy",
+            type: "confirm",
+            default: true,
+            message: `Do you want to destroy unused secret versions?`,
+        }, options);
+        if (!confirm) {
+            (0, utils_1.logBullet)("Run the following commands to destroy each unused secret version:\n\t" +
+                pruned
+                    .map((sv) => `firebase functions:secrets:destroy ${sv.secret}@${sv.version}`)
+                    .join("\n\t"));
+            return;
+        }
     }
     await Promise.all(pruned.map((sv) => (0, secretManager_1.destroySecretVersion)(projectId, sv.secret, sv.version)));
     (0, utils_1.logSuccess)("Destroyed all unused secrets!");

package/lib/commands/functions-secrets-set.js

@@ -10,9 +10,11 @@ const prompt_1 = require("../prompt");
 const utils_1 = require("../utils");
 const projectUtils_1 = require("../projectUtils");
 const secretManager_1 = require("../gcp/secretManager");
+const secrets = require("../functions/secrets");
+const backend = require("../deploy/functions/backend");
 exports.default = new command_1.Command("functions:secrets:set <KEY>")
-    .description("Create or update a secret for use in Cloud Functions for Firebase")
-    .withForce("Does not ensure input keys are valid or upgrade existing secrets to have Firebase manage them.")
+    .description("Create or update a secret for use in Cloud Functions for Firebase.")
+    .withForce("Automatically updates functions to use the new secret.")
     .before(requirePermissions_1.requirePermissions, [
     "secretmanager.secrets.create",
     "secretmanager.secrets.get",
@@ -22,6 +24,7 @@ exports.default = new command_1.Command("functions:secrets:set <KEY>")
     .option("--data-file <dataFile>", 'File path from which to read secret data. Set to "-" to read the secret data from stdin.')
     .action(async (unvalidatedKey, options) => {
     const projectId = (0, projectUtils_1.needProjectId)(options);
+    const projectNumber = await (0, projectUtils_1.needProjectNumber)(options);
     const key = await (0, secrets_1.ensureValidKey)(unvalidatedKey, options);
     const secret = await (0, secrets_1.ensureSecret)(projectId, key, options);
     let secretValue;
@@ -41,6 +44,50 @@ exports.default = new command_1.Command("functions:secrets:set <KEY>")
     }
     const secretVersion = await (0, secretManager_1.addVersion)(projectId, key, secretValue);
     (0, utils_1.logSuccess)(`Created a new secret version ${(0, secretManager_1.toSecretVersionResourceName)(secretVersion)}`);
-    (0, utils_1.logBullet)("Please deploy your functions for the change to take effect by running:\n\t" +
-        clc.bold("firebase deploy --only functions"));
+    if (!secrets.isFirebaseManaged(secret)) {
+        (0, utils_1.logBullet)("Please deploy your functions for the change to take effect by running:\n\t" +
+            clc.bold("firebase deploy --only functions"));
+        return;
+    }
+    const haveBackend = await backend.existingBackend({ projectId });
+    const endpointsToUpdate = backend
+        .allEndpoints(haveBackend)
+        .filter((e) => secrets.inUse({ projectId, projectNumber }, secret, e));
+    if (endpointsToUpdate.length === 0) {
+        return;
+    }
+    (0, utils_1.logBullet)(`${endpointsToUpdate.length} functions are using stale version of secret ${secret.name}:\n\t` +
+        endpointsToUpdate.map((e) => `${e.id}(${e.region})`).join("\n\t"));
+    if (!options.force) {
+        const confirm = await (0, prompt_1.promptOnce)({
+            name: "redeploy",
+            type: "confirm",
+            default: true,
+            message: `Do you want to re-deploy the functions and destroy the stale version of secret ${secret.name}?`,
+        }, options);
+        if (!confirm) {
+            (0, utils_1.logBullet)("Please deploy your functions for the change to take effect by running:\n\t" +
+                clc.bold("firebase deploy --only functions"));
+            return;
+        }
+    }
+    const updateOps = endpointsToUpdate.map(async (e) => {
+        (0, utils_1.logBullet)(`Updating function ${e.id}(${e.region})...`);
+        const updated = await secrets.updateEndpointSecret({ projectId, projectNumber }, secretVersion, e);
+        (0, utils_1.logBullet)(`Updated function ${e.id}(${e.region}).`);
+        return updated;
+    });
+    const updatedEndpoints = await Promise.all(updateOps);
+    (0, utils_1.logBullet)(`Pruning stale secrets...`);
+    const prunedResult = await (0, secrets_1.pruneAndDestroySecrets)({ projectId, projectNumber }, updatedEndpoints);
+    if (prunedResult.destroyed.length > 0) {
+        (0, utils_1.logBullet)(`Detroyed unused secret versions: ${prunedResult.destroyed
+            .map((s) => `${s.secret}@${s.version}`)
+            .join(", ")}`);
+    }
+    if (prunedResult.erred.length > 0) {
+        (0, utils_1.logWarning)(`Failed to destroy unused secret versions:\n\t${prunedResult.erred
+            .map((err) => err.message)
+            .join("\n\t")}`);
+    }
 });

package/lib/commands/hosting-channel-deploy.js

@@ -6,7 +6,7 @@ const error_1 = require("../error");
 const api_1 = require("../hosting/api");
 const normalizedHostingConfigs_1 = require("../hosting/normalizedHostingConfigs");
 const requirePermissions_1 = require("../requirePermissions");
-const deploy = require("../deploy");
+const deploy_1 = require("../deploy");
 const projectUtils_1 = require("../projectUtils");
 const logger_1 = require("../logger");
 const requireConfig_1 = require("../requireConfig");
@@ -82,7 +82,7 @@ exports.default = new command_1.Command("hosting:channel:deploy [channelId]")
         siteInfo.expireTime = chan.expireTime;
         return;
     }));
-    const { hosting } = await deploy(["hosting"], options, { hostingChannel: channelId });
+    const { hosting } = await (0, deploy_1.deploy)(["hosting"], options, { hostingChannel: channelId });
     const versionNames = [];
     if (typeof hosting === "string") {
         versionNames.push(hosting);

package/lib/deploy/database/deploy.js

@@ -0,0 +1,4 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+async function default_1() { }
+exports.default = default_1;

package/lib/deploy/database/index.js

@@ -2,4 +2,5 @@
 module.exports = {
     prepare: require("./prepare"),
     release: require("./release"),
+    deploy: require("./deploy").default,
 };

package/lib/deploy/extensions/deploy.js

@@ -10,7 +10,7 @@ const provisioningHelper_1 = require("../../extensions/provisioningHelper");
 const secrets_1 = require("./secrets");
 const validate_1 = require("./validate");
 async function deploy(context, options, payload) {
-    var _a, _b, _c, _d, _e, _f;
+    var _a, _b, _c, _d, _e, _f, _g, _h, _j;
     const projectId = (0, projectUtils_1.needProjectId)(options);
     await (0, validate_1.checkBilling)(projectId, options.nonInteractive);
     await (0, provisioningHelper_1.bulkCheckProductsProvisioned)(projectId, [
@@ -25,15 +25,15 @@ async function deploy(context, options, payload) {
         concurrency: 5,
         handler: tasks.extensionsDeploymentHandler(errorHandler),
     });
-    for (const create of (_d = payload.instancesToCreate) !== null && _d !== void 0 ? _d : []) {
+    for (const create of (_e = (_d = payload.instancesToCreate) === null || _d === void 0 ? void 0 : _d.filter((i) => !!i.ref)) !== null && _e !== void 0 ? _e : []) {
         const task = tasks.createExtensionInstanceTask(projectId, create, true);
         void validationQueue.run(task);
     }
-    for (const update of (_e = payload.instancesToUpdate) !== null && _e !== void 0 ? _e : []) {
+    for (const update of (_g = (_f = payload.instancesToUpdate) === null || _f === void 0 ? void 0 : _f.filter((i) => !!i.ref)) !== null && _g !== void 0 ? _g : []) {
         const task = tasks.updateExtensionInstanceTask(projectId, update, true);
         void validationQueue.run(task);
     }
-    for (const configure of (_f = payload.instancesToConfigure) !== null && _f !== void 0 ? _f : []) {
+    for (const configure of (_j = (_h = payload.instancesToConfigure) === null || _h === void 0 ? void 0 : _h.filter((i) => !!i.ref)) !== null && _j !== void 0 ? _j : []) {
         const task = tasks.configureExtensionInstanceTask(projectId, configure, true);
         void validationQueue.run(task);
     }

package/lib/deploy/extensions/deploymentSummary.js

@@ -6,16 +6,19 @@ const refs = require("../../extensions/refs");
 const humanReadable = (dep) => `${clc.bold(dep.instanceId)} (${dep.ref ? `${refs.toExtensionVersionRef(dep.ref)}` : `Installed from local source`})`;
 exports.humanReadable = humanReadable;
 const humanReadableUpdate = (from, to) => {
-    var _a, _b, _c, _d, _e;
-    if (((_a = from.ref) === null || _a === void 0 ? void 0 : _a.publisherId) === ((_b = to.ref) === null || _b === void 0 ? void 0 : _b.publisherId) &&
-        ((_c = from.ref) === null || _c === void 0 ? void 0 : _c.extensionId) === ((_d = to.ref) === null || _d === void 0 ? void 0 : _d.extensionId)) {
-        return `\t${clc.bold(from.instanceId)} (${refs.toExtensionVersionRef(from.ref)} => ${(_e = to.ref) === null || _e === void 0 ? void 0 : _e.version})`;
+    var _a;
+    if (from.ref &&
+        to.ref &&
+        from.ref.publisherId === to.ref.publisherId &&
+        from.ref.extensionId === to.ref.extensionId) {
+        return `\t${clc.bold(from.instanceId)} (${refs.toExtensionVersionRef(from.ref)} => ${(_a = to.ref) === null || _a === void 0 ? void 0 : _a.version})`;
     }
     else {
         const fromRef = from.ref
             ? `${refs.toExtensionVersionRef(from.ref)}`
             : `Installed from local source`;
-        return `\t${clc.bold(from.instanceId)} (${fromRef} => ${refs.toExtensionVersionRef(to.ref)})`;
+        const toRef = to.ref ? `${refs.toExtensionVersionRef(to.ref)}` : `Installed from local source`;
+        return `\t${clc.bold(from.instanceId)} (${fromRef} => ${toRef})`;
     }
 };
 function createsSummary(toCreate) {