firebase-tools 10.5.0 → 10.7.1

package/lib/extensions/extensionsHelper.js

@@ -1,6 +1,6 @@
 "use strict";
 Object.defineProperty(exports, "__esModule", { value: true });
-exports.diagnoseAndFixProject = exports.confirm = exports.getSourceOrigin = exports.isLocalOrURLPath = exports.isLocalPath = exports.isUrlPath = exports.instanceIdExists = exports.promptForRepeatInstance = exports.promptForOfficialExtension = exports.displayReleaseNotes = exports.getPublisherProjectFromName = exports.createSourceFromLocation = exports.publishExtensionVersionFromLocalSource = exports.ensureExtensionsApiEnabled = exports.promptForValidInstanceId = exports.validateSpec = exports.validateCommandLineParams = exports.populateDefaultParams = exports.substituteParams = exports.getFirebaseProjectParams = exports.getDBInstanceFromURL = exports.resourceTypeToNiceName = exports.AUTOPOULATED_PARAM_PLACEHOLDERS = exports.EXTENSIONS_BUCKET_NAME = exports.URL_REGEX = exports.logPrefix = exports.SourceOrigin = exports.SpecParamType = void 0;
+exports.canonicalizeRefInput = exports.diagnoseAndFixProject = exports.confirm = exports.getSourceOrigin = exports.isLocalOrURLPath = exports.isLocalPath = exports.isUrlPath = exports.instanceIdExists = exports.promptForRepeatInstance = exports.promptForOfficialExtension = exports.displayReleaseNotes = exports.getPublisherProjectFromName = exports.createSourceFromLocation = exports.publishExtensionVersionFromLocalSource = exports.ensureExtensionsApiEnabled = exports.promptForValidInstanceId = exports.validateSpec = exports.validateCommandLineParams = exports.populateDefaultParams = exports.substituteParams = exports.getFirebaseProjectParams = exports.getDBInstanceFromURL = exports.resourceTypeToNiceName = exports.AUTOPOULATED_PARAM_PLACEHOLDERS = exports.EXTENSIONS_BUCKET_NAME = exports.URL_REGEX = exports.logPrefix = exports.SourceOrigin = exports.SpecParamType = void 0;
 const _ = require("lodash");
 const clc = require("cli-color");
 const ora = require("ora");
@@ -305,7 +305,7 @@ async function publishExtensionVersionFromLocalSource(args) {
             "Please create one and add an entry for this version. " +
             marked("See https://firebase.google.com/docs/extensions/alpha/create-user-docs#writing-changelog for more details."));
     }
-    if (!notes && extension) {
+    if (!notes && !semver.prerelease(extensionSpec.version) && extension) {
         throw new error_1.FirebaseError(`No entry for version ${extensionSpec.version} found in CHANGELOG.md. ` +
             "Please add one so users know what has changed in this version. " +
             marked("See https://firebase.google.com/docs/extensions/alpha/create-user-docs#writing-changelog for more details."));
@@ -363,32 +363,26 @@ async function publishExtensionVersionFromLocalSource(args) {
 }
 exports.publishExtensionVersionFromLocalSource = publishExtensionVersionFromLocalSource;
 async function createSourceFromLocation(projectId, sourceUri) {
+    const extensionRoot = "/";
     let packageUri;
-    let extensionRoot;
     let objectPath = "";
-    if (!sourceUri.startsWith("https:")) {
-        const uploadSpinner = ora(" Archiving and uploading extension source code");
-        try {
-            uploadSpinner.start();
-            objectPath = await archiveAndUploadSource(sourceUri, exports.EXTENSIONS_BUCKET_NAME);
-            uploadSpinner.succeed(" Uploaded extension source code");
-            packageUri = api_1.storageOrigin + objectPath + "?alt=media";
-            extensionRoot = "/";
-        }
-        catch (err) {
-            uploadSpinner.fail();
-            throw new error_1.FirebaseError(`Failed to archive and upload extension source, ${err}`, {
-                original: err,
-            });
-        }
+    const spinner = ora(" Archiving and uploading extension source code");
+    try {
+        spinner.start();
+        objectPath = await archiveAndUploadSource(sourceUri, exports.EXTENSIONS_BUCKET_NAME);
+        spinner.succeed(" Uploaded extension source code");
+        packageUri = api_1.storageOrigin + objectPath + "?alt=media";
+        const res = await (0, extensionsApi_1.createSource)(projectId, packageUri, extensionRoot);
+        logger_1.logger.debug("Created new Extension Source %s", res.name);
+        await deleteUploadedSource(objectPath);
+        return res;
     }
-    else {
-        [packageUri, extensionRoot] = sourceUri.split("#");
+    catch (err) {
+        spinner.fail();
+        throw new error_1.FirebaseError(`Failed to archive and upload extension source from ${sourceUri}, ${err}`, {
+            original: err,
+        });
     }
-    const res = await (0, extensionsApi_1.createSource)(projectId, packageUri, extensionRoot);
-    logger_1.logger.debug("Created new Extension Source %s", res.name);
-    await deleteUploadedSource(objectPath);
-    return res;
 }
 exports.createSourceFromLocation = createSourceFromLocation;
 async function deleteUploadedSource(objectPath) {
@@ -535,3 +529,15 @@ async function diagnoseAndFixProject(options) {
     }
 }
 exports.diagnoseAndFixProject = diagnoseAndFixProject;
+function canonicalizeRefInput(extensionName) {
+    if (extensionName.split("/").length < 2) {
+        const [extensionID, version] = extensionName.split("@");
+        extensionName = `firebase/${extensionID}@${version || "latest"}`;
+    }
+    const ref = refs.parse(extensionName);
+    if (!ref.version) {
+        extensionName = `${extensionName}@latest`;
+    }
+    return extensionName;
+}
+exports.canonicalizeRefInput = canonicalizeRefInput;

package/lib/extensions/manifest.js

@@ -1,10 +1,11 @@
 "use strict";
 Object.defineProperty(exports, "__esModule", { value: true });
-exports.showPreviewWarning = exports.showDeprecationWarning = exports.readInstanceParam = exports.getInstanceRef = exports.instanceExists = exports.loadConfig = exports.removeFromManifest = exports.writeLocalSecrets = exports.writeToManifest = exports.ENV_DIRECTORY = void 0;
+exports.showPreviewWarning = exports.showDeprecationWarning = exports.readInstanceParam = exports.getInstanceRef = exports.getInstanceTarget = exports.instanceExists = exports.loadConfig = exports.removeFromManifest = exports.writeLocalSecrets = exports.writeToManifest = exports.ENV_DIRECTORY = void 0;
 const clc = require("cli-color");
 const path = require("path");
 const refs = require("./refs");
 const config_1 = require("../config");
+const planner_1 = require("../deploy/extensions/planner");
 const logger_1 = require("../logger");
 const prompt_1 = require("../prompt");
 const paramHelper_1 = require("./paramHelper");
@@ -42,11 +43,12 @@ async function writeToManifest(specs, config, options, allowOverwrite = false) {
 exports.writeToManifest = writeToManifest;
 async function writeLocalSecrets(specs, config, force) {
     for (const spec of specs) {
-        if (!spec.paramSpecs) {
+        const extensionSpec = await (0, planner_1.getExtensionSpec)(spec);
+        if (!extensionSpec.params) {
             continue;
         }
         const writeBuffer = {};
-        const locallyOverridenSecretParams = spec.paramSpecs.filter((p) => p.type === extensionsApi_1.ParamType.SECRET && spec.params[p.param].local);
+        const locallyOverridenSecretParams = extensionSpec.params.filter((p) => p.type === extensionsApi_1.ParamType.SECRET && spec.params[p.param].local);
         for (const paramSpec of locallyOverridenSecretParams) {
             const key = paramSpec.param;
             const localValue = spec.params[key].local;
@@ -97,18 +99,35 @@ function instanceExists(instanceId, config) {
     return !!config.get("extensions", {})[instanceId];
 }
 exports.instanceExists = instanceExists;
-function getInstanceRef(instanceId, config) {
+function getInstanceTarget(instanceId, config) {
     if (!instanceExists(instanceId, config)) {
         throw new error_1.FirebaseError(`Could not find extension instance ${instanceId} in firebase.json`);
     }
-    const ref = config.get("extensions", {})[instanceId];
-    return refs.parse(ref);
+    return config.get("extensions", {})[instanceId];
+}
+exports.getInstanceTarget = getInstanceTarget;
+function getInstanceRef(instanceId, config) {
+    const source = getInstanceTarget(instanceId, config);
+    if ((0, extensionsHelper_1.isLocalPath)(source)) {
+        throw new error_1.FirebaseError(`Extension instance ${instanceId} doesn't have a ref because it is from a local source`);
+    }
+    return refs.parse(source);
 }
 exports.getInstanceRef = getInstanceRef;
 function writeExtensionsToFirebaseJson(specs, config) {
     const extensions = config.get("extensions", {});
     for (const s of specs) {
-        extensions[s.instanceId] = refs.toExtensionVersionRef(s.ref);
+        let target;
+        if (s.ref) {
+            target = refs.toExtensionVersionRef(s.ref);
+        }
+        else if (s.localPath) {
+            target = s.localPath;
+        }
+        else {
+            throw new error_1.FirebaseError(`Unable to resolve ManifestInstanceSpec, make sure you provide either extension ref or a local path to extension source code`);
+        }
+        extensions[s.instanceId] = target;
     }
     config.set("extensions", extensions);
     config.writeProjectFile("firebase.json", config.src);
@@ -117,6 +136,7 @@ function writeExtensionsToFirebaseJson(specs, config) {
 async function writeEnvFiles(specs, config, force) {
     for (const spec of specs) {
         const content = Object.entries(spec.params)
+            .filter((r) => r[1].baseValue !== "")
             .sort((a, b) => {
             return a[0].localeCompare(b[0]);
         })
@@ -170,7 +190,7 @@ function showDeprecationWarning() {
 }
 exports.showDeprecationWarning = showDeprecationWarning;
 function showPreviewWarning() {
-    utils.logLabeledWarning(extensionsHelper_1.logPrefix, "These changes will be reflected in your Firebase Emulator after restart. " +
+    utils.logLabeledWarning(extensionsHelper_1.logPrefix, `See these changes in your Firebase Emulator by running "firebase emulators:start". ` +
         `Run ${clc.bold("firebase deploy (--only extensions)")} to deploy the changes to your Firebase project. `);
 }
 exports.showPreviewWarning = showPreviewWarning;

package/lib/extensions/paramHelper.js

@@ -1,7 +1,6 @@
 "use strict";
 Object.defineProperty(exports, "__esModule", { value: true });
 exports.readEnvFile = exports.promptForNewParams = exports.getParamsForUpdate = exports.getParams = exports.getParamsWithCurrentValuesAsDefaults = exports.setNewDefaults = exports.buildBindingOptionsWithBaseValue = exports.getBaseParamBindings = void 0;
-const _ = require("lodash");
 const path = require("path");
 const clc = require("cli-color");
 const fs = require("fs-extra");
@@ -9,8 +8,9 @@ const error_1 = require("../error");
 const logger_1 = require("../logger");
 const extensionsHelper_1 = require("./extensionsHelper");
 const askUserForParam = require("./askUserForParam");
-const track = require("../track");
+const track_1 = require("../track");
 const env = require("../functions/env");
+const utils_1 = require("../utils");
 function getBaseParamBindings(params) {
     let ret = {};
     for (const [k, v] of Object.entries(params)) {
@@ -37,8 +37,9 @@ function setNewDefaults(params, newDefaults) {
 }
 exports.setNewDefaults = setNewDefaults;
 function getParamsWithCurrentValuesAsDefaults(extensionInstance) {
-    const specParams = _.cloneDeep(_.get(extensionInstance, "config.source.spec.params", []));
-    const currentParams = _.cloneDeep(_.get(extensionInstance, "config.params", {}));
+    var _a, _b, _c, _d;
+    const specParams = (0, utils_1.cloneDeep)(((_c = (_b = (_a = extensionInstance === null || extensionInstance === void 0 ? void 0 : extensionInstance.config) === null || _a === void 0 ? void 0 : _a.source) === null || _b === void 0 ? void 0 : _b.spec) === null || _c === void 0 ? void 0 : _c.params) || []);
+    const currentParams = (0, utils_1.cloneDeep)(((_d = extensionInstance === null || extensionInstance === void 0 ? void 0 : extensionInstance.config) === null || _d === void 0 ? void 0 : _d.params) || {});
     return setNewDefaults(specParams, currentParams);
 }
 exports.getParamsWithCurrentValuesAsDefaults = getParamsWithCurrentValuesAsDefaults;
@@ -71,7 +72,8 @@ async function getParams(args) {
             reconfiguring: !!args.reconfiguring,
         });
     }
-    void track("Extension Params", _.isEmpty(params) ? "Not Present" : "Present", _.size(params));
+    const paramNames = Object.keys(params);
+    void (0, track_1.track)("Extension Params", paramNames.length ? "Not Present" : "Present", paramNames.length);
     return params;
 }
 exports.getParams = getParams;
@@ -103,27 +105,31 @@ async function getParamsForUpdate(args) {
             instanceId: args.instanceId,
         });
     }
-    void track("Extension Params", _.isEmpty(params) ? "Not Present" : "Present", _.size(params));
+    const paramNames = Object.keys(params);
+    void (0, track_1.track)("Extension Params", paramNames.length ? "Not Present" : "Present", paramNames.length);
     return params;
 }
 exports.getParamsForUpdate = getParamsForUpdate;
 async function promptForNewParams(args) {
     const newParamBindingOptions = buildBindingOptionsWithBaseValue(args.currentParams);
     const firebaseProjectParams = await (0, extensionsHelper_1.getFirebaseProjectParams)(args.projectId);
-    const comparer = (param1, param2) => {
+    const sameParam = (param1) => (param2) => {
         return param1.type === param2.type && param1.param === param2.param;
     };
+    const paramDiff = (left, right) => {
+        return left.filter((aLeft) => !right.find(sameParam(aLeft)));
+    };
     const oldParams = args.spec.params.filter((p) => Object.keys(args.currentParams).includes(p.param));
-    let paramsDiffDeletions = _.differenceWith(oldParams, args.newSpec.params, comparer);
+    let paramsDiffDeletions = paramDiff(oldParams, args.newSpec.params);
     paramsDiffDeletions = (0, extensionsHelper_1.substituteParams)(paramsDiffDeletions, firebaseProjectParams);
-    let paramsDiffAdditions = _.differenceWith(args.newSpec.params, oldParams, comparer);
+    let paramsDiffAdditions = paramDiff(args.newSpec.params, oldParams);
     paramsDiffAdditions = (0, extensionsHelper_1.substituteParams)(paramsDiffAdditions, firebaseProjectParams);
     if (paramsDiffDeletions.length) {
         logger_1.logger.info("The following params will no longer be used:");
-        paramsDiffDeletions.forEach((param) => {
+        for (const param of paramsDiffDeletions) {
             logger_1.logger.info(clc.red(`- ${param.param}: ${args.currentParams[param.param.toUpperCase()]}`));
             delete newParamBindingOptions[param.param.toUpperCase()];
-        });
+        }
     }
     if (paramsDiffAdditions.length) {
         logger_1.logger.info("To update this instance, configure the following new parameters:");
@@ -144,10 +150,10 @@ function getParamsFromFile(args) {
     let envParams;
     try {
         envParams = readEnvFile(args.paramsEnvPath);
-        void track("Extension Env File", "Present");
+        void (0, track_1.track)("Extension Env File", "Present");
     }
     catch (err) {
-        void track("Extension Env File", "Invalid");
+        void (0, track_1.track)("Extension Env File", "Invalid");
         throw new error_1.FirebaseError(`Error reading env file: ${err.message}\n`, { original: err });
     }
     const params = (0, extensionsHelper_1.populateDefaultParams)(envParams, args.paramSpecs);

package/lib/extensions/provisioningHelper.js

@@ -19,8 +19,8 @@ async function checkProductsProvisioned(projectId, spec) {
 exports.checkProductsProvisioned = checkProductsProvisioned;
 async function bulkCheckProductsProvisioned(projectId, instanceSpecs) {
     const usedProducts = await Promise.all(instanceSpecs.map(async (i) => {
-        const extensionVersion = await (0, planner_1.getExtensionVersion)(i);
-        return getUsedProducts(extensionVersion.spec);
+        const extensionSpec = await (0, planner_1.getExtensionSpec)(i);
+        return getUsedProducts(extensionSpec);
     }));
     await checkProducts(projectId, [...(0, functional_1.flattenArray)(usedProducts)]);
 }

package/lib/extensions/warnings.js

@@ -49,11 +49,11 @@ const toListEntry = (i) => {
 };
 async function displayWarningsForDeploy(instancesToCreate) {
     const trustedPublishers = await (0, resolveSource_1.getTrustedPublishers)();
-    for (const i of instancesToCreate) {
+    const publishedExtensionInstances = instancesToCreate.filter((i) => i.ref);
+    for (const i of publishedExtensionInstances) {
         await (0, planner_1.getExtension)(i);
-        await (0, planner_1.getExtensionVersion)(i);
     }
-    const [eapExtensions, nonEapExtensions] = (0, functional_1.partition)(instancesToCreate, (i) => { var _a, _b; return !trustedPublishers.includes((_b = (_a = i.ref) === null || _a === void 0 ? void 0 : _a.publisherId) !== null && _b !== void 0 ? _b : ""); });
+    const [eapExtensions, nonEapExtensions] = (0, functional_1.partition)(publishedExtensionInstances, (i) => { var _a, _b; return !trustedPublishers.includes((_b = (_a = i.ref) === null || _a === void 0 ? void 0 : _a.publisherId) !== null && _b !== void 0 ? _b : ""); });
     const experimental = nonEapExtensions.filter((i) => i.extension.registryLaunchStage === extensionsApi_1.RegistryLaunchStage.EXPERIMENTAL);
     if (experimental.length) {
         const humanReadableList = experimental.map((i) => `\t${(0, deploymentSummary_1.humanReadable)(i)}`).join("\n");

package/lib/functions/env.js

@@ -42,6 +42,15 @@ const LINE_RE = new RegExp("^" +
     "\\s*" +
     "(?:#[^\\n]*)?" +
     "$", "gms");
+const ESCAPE_SEQUENCES_TO_CHARACTERS = {
+    "\\n": "\n",
+    "\\r": "\r",
+    "\\t": "\t",
+    "\\v": "\v",
+    "\\\\": "\\",
+    "\\'": "'",
+    '\\"': '"',
+};
 function parse(data) {
     const envs = {};
     const errors = [];
@@ -54,8 +63,7 @@ function parse(data) {
         if ((quotesMatch = /^(["'])(.*)\1$/ms.exec(v)) != null) {
             v = quotesMatch[2];
             if (quotesMatch[1] === '"') {
-                v = v.replace("\\n", "\n").replace("\\r", "\r").replace("\\t", "\t").replace("\\v", "\v");
-                v = v.replace(/\\([\\'"])/g, "$1");
+                v = v.replace(/\\[nrtv\\'"]/g, (match) => ESCAPE_SEQUENCES_TO_CHARACTERS[match]);
             }
         }
         envs[k] = v;

package/lib/functions/events/index.js

@@ -0,0 +1,7 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.v2 = exports.v1 = void 0;
+const v1 = require("./v1");
+exports.v1 = v1;
+const v2 = require("./v2");
+exports.v2 = v2;

package/lib/functions/events/v1.js

@@ -0,0 +1,6 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.AUTH_BLOCKING_EVENTS = exports.BEFORE_SIGN_IN_EVENT = exports.BEFORE_CREATE_EVENT = void 0;
+exports.BEFORE_CREATE_EVENT = "providers/cloud.auth/eventTypes/user.beforeCreate";
+exports.BEFORE_SIGN_IN_EVENT = "providers/cloud.auth/eventTypes/user.beforeSignIn";
+exports.AUTH_BLOCKING_EVENTS = [exports.BEFORE_CREATE_EVENT, exports.BEFORE_SIGN_IN_EVENT];

package/lib/functions/projectConfig.js

@@ -1,7 +1,8 @@
 "use strict";
 Object.defineProperty(exports, "__esModule", { value: true });
-exports.normalizeAndValidate = exports.validate = exports.normalize = void 0;
+exports.configForCodebase = exports.normalizeAndValidate = exports.validate = exports.normalize = exports.DEFAULT_CODEBASE = void 0;
 const error_1 = require("../error");
+exports.DEFAULT_CODEBASE = "default";
 function normalize(config) {
     if (!config) {
         throw new error_1.FirebaseError("No valid functions configuration detected in firebase.json");
@@ -19,16 +20,41 @@ function validateSingle(config) {
     if (!config.source) {
         throw new error_1.FirebaseError("functions.source must be specified");
     }
-    return Object.assign(Object.assign({}, config), { source: config.source });
+    if (!config.codebase) {
+        config.codebase = exports.DEFAULT_CODEBASE;
+    }
+    if (config.codebase.length > 63 || !/^[a-z0-9_-]+$/.test(config.codebase)) {
+        throw new error_1.FirebaseError("Invalid codebase name. Codebase must be less than 63 characters and " +
+            "can contain only lowercase letters, numeric characters, underscores, and dashes.");
+    }
+    return Object.assign(Object.assign({}, config), { source: config.source, codebase: config.codebase });
 }
-function validate(config) {
-    if (config.length > 1) {
-        throw new error_1.FirebaseError("More than one functions.source detected in firebase.json.");
+function assertUnique(config, property) {
+    const values = new Set();
+    for (const single of config) {
+        const value = single[property];
+        if (values.has(value)) {
+            throw new error_1.FirebaseError(`functions.${property} must be unique but '${value}' was used more than once.`);
+        }
+        values.add(value);
     }
-    return [validateSingle(config[0])];
+}
+function validate(config) {
+    const validated = config.map((cfg) => validateSingle(cfg));
+    assertUnique(validated, "source");
+    assertUnique(validated, "codebase");
+    return validated;
 }
 exports.validate = validate;
 function normalizeAndValidate(config) {
     return validate(normalize(config));
 }
 exports.normalizeAndValidate = normalizeAndValidate;
+function configForCodebase(config, codebase) {
+    const codebaseCfg = config.find((c) => c.codebase === codebase);
+    if (!codebaseCfg) {
+        throw new error_1.FirebaseError(`No functions config found for codebase ${codebase}`);
+    }
+    return codebaseCfg;
+}
+exports.configForCodebase = configForCodebase;

package/lib/functions/runtimeConfigExport.js

@@ -115,13 +115,17 @@ function hydrateEnvs(pInfos, prefix) {
     return errMsg;
 }
 exports.hydrateEnvs = hydrateEnvs;
+const CHARACTERS_TO_ESCAPE_SEQUENCES = {
+    "\n": "\\n",
+    "\r": "\\r",
+    "\t": "\\t",
+    "\v": "\\v",
+    "\\": "\\\\",
+    '"': '\\"',
+    "'": "\\'",
+};
 function escape(s) {
-    const result = s
-        .replace("\n", "\\n")
-        .replace("\r", "\\r")
-        .replace("\t", "\\t")
-        .replace("\v", "\\v");
-    return result.replace(/(['"])/g, "\\$1");
+    return s.replace(/[\n\r\t\v\\"']/g, (ch) => CHARACTERS_TO_ESCAPE_SEQUENCES[ch]);
 }
 function toDotenvFormat(envs, header = "") {
     const lines = envs.map(({ newKey, value }) => `${newKey}="${escape(value)}"`);

package/lib/functions/secrets.js

@@ -1,11 +1,17 @@
 "use strict";
 Object.defineProperty(exports, "__esModule", { value: true });
-exports.pruneSecrets = exports.of = exports.ensureSecret = exports.ensureValidKey = exports.labels = exports.isFirebaseManaged = void 0;
+exports.updateEndpointSecret = exports.pruneAndDestroySecrets = exports.pruneSecrets = exports.inUse = exports.of = exports.ensureSecret = exports.ensureValidKey = exports.labels = exports.isFirebaseManaged = void 0;
+const utils = require("../utils");
+const poller = require("../operation-poller");
+const gcf = require("../gcp/cloudfunctions");
 const secretManager_1 = require("../gcp/secretManager");
 const error_1 = require("../error");
 const utils_1 = require("../utils");
 const prompt_1 = require("../prompt");
 const env_1 = require("./env");
+const logger_1 = require("../logger");
+const api_1 = require("../api");
+const functional_1 = require("../functional");
 const FIREBASE_MANGED = "firebase-managed";
 function isFirebaseManaged(secret) {
     return Object.keys(secret.labels || []).includes(FIREBASE_MANGED);
@@ -17,8 +23,7 @@ function labels() {
 exports.labels = labels;
 function toUpperSnakeCase(key) {
     return key
-        .replace("-", "_")
-        .replace(".", "_")
+        .replace(/[.-]/g, "_")
         .replace(/([a-z])([A-Z])/g, "$1_$2")
         .toUpperCase();
 }
@@ -80,19 +85,40 @@ function of(endpoints) {
     return endpoints.reduce((envs, endpoint) => [...envs, ...(endpoint.secretEnvironmentVariables || [])], []);
 }
 exports.of = of;
+function inUse(projectInfo, secret, endpoint) {
+    const { projectId, projectNumber } = projectInfo;
+    for (const sev of of([endpoint])) {
+        if ((sev.projectId === projectId || sev.projectId === projectNumber) &&
+            sev.secret === secret.name) {
+            return true;
+        }
+    }
+    return false;
+}
+exports.inUse = inUse;
 async function pruneSecrets(projectInfo, endpoints) {
     const { projectId, projectNumber } = projectInfo;
     const pruneKey = (name, version) => `${name}@${version}`;
     const prunedSecrets = new Set();
     const haveSecrets = await (0, secretManager_1.listSecrets)(projectId, `labels.${FIREBASE_MANGED}=true`);
     for (const secret of haveSecrets) {
-        const versions = await (0, secretManager_1.listSecretVersions)(projectId, secret.name, `state: ENABLED`);
+        const versions = await (0, secretManager_1.listSecretVersions)(projectId, secret.name, `NOT state: DESTROYED`);
         for (const version of versions) {
             prunedSecrets.add(pruneKey(secret.name, version.versionId));
         }
     }
-    const sevs = of(endpoints).filter((sev) => sev.projectId === projectId || sev.projectId === projectNumber);
-    for (const sev of sevs) {
+    const secrets = [];
+    for (const secret of of(endpoints)) {
+        if (!secret.version) {
+            throw new error_1.FirebaseError(`Secret ${secret.secret} version is unexpectedly empty.`);
+        }
+        if (secret.projectId === projectId || secret.projectId === projectNumber) {
+            if (secret.version) {
+                secrets.push(Object.assign(Object.assign({}, secret), { version: secret.version }));
+            }
+        }
+    }
+    for (const sev of secrets) {
         let name = sev.secret;
         if (name.includes("/")) {
             const secret = (0, secretManager_1.parseSecretResourceName)(name);
@@ -110,3 +136,70 @@ async function pruneSecrets(projectInfo, endpoints) {
         .map(([secret, version]) => ({ projectId, version, secret, key: secret }));
 }
 exports.pruneSecrets = pruneSecrets;
+async function pruneAndDestroySecrets(projectInfo, endpoints) {
+    const { projectId, projectNumber } = projectInfo;
+    logger_1.logger.debug("Pruning secrets to find unused secret versions...");
+    const unusedSecrets = await module.exports.pruneSecrets({ projectId, projectNumber }, endpoints);
+    if (unusedSecrets.length === 0) {
+        return { destroyed: [], erred: [] };
+    }
+    const destroyed = [];
+    const erred = [];
+    const msg = unusedSecrets.map((s) => `${s.secret}@${s.version}`);
+    logger_1.logger.debug(`Found unused secret versions: ${msg}. Destroying them...`);
+    const destroyResults = await utils.allSettled(unusedSecrets.map(async (sev) => {
+        await (0, secretManager_1.destroySecretVersion)(sev.projectId, sev.secret, sev.version);
+        return sev;
+    }));
+    for (const result of destroyResults) {
+        if (result.status === "fulfilled") {
+            destroyed.push(result.value);
+        }
+        else {
+            erred.push(result.reason);
+        }
+    }
+    return { destroyed, erred };
+}
+exports.pruneAndDestroySecrets = pruneAndDestroySecrets;
+async function updateEndpointSecret(projectInfo, secretVersion, endpoint) {
+    const { projectId, projectNumber } = projectInfo;
+    if (!inUse(projectInfo, secretVersion.secret, endpoint)) {
+        return endpoint;
+    }
+    const updatedSevs = [];
+    for (const sev of of([endpoint])) {
+        const updatedSev = Object.assign({}, sev);
+        if ((updatedSev.projectId === projectId || updatedSev.projectId === projectNumber) &&
+            updatedSev.secret === secretVersion.secret.name) {
+            updatedSev.version = secretVersion.versionId;
+        }
+        updatedSevs.push(updatedSev);
+    }
+    if (endpoint.platform === "gcfv1") {
+        const fn = gcf.functionFromEndpoint(endpoint, "");
+        const op = await gcf.updateFunction({
+            name: fn.name,
+            runtime: fn.runtime,
+            entryPoint: fn.entryPoint,
+            secretEnvironmentVariables: updatedSevs,
+        });
+        const gcfV1PollerOptions = {
+            apiOrigin: api_1.functionsOrigin,
+            apiVersion: gcf.API_VERSION,
+            masterTimeout: 25 * 60 * 1000,
+            maxBackoff: 10000,
+            pollerName: `update-${endpoint.region}-${endpoint.id}`,
+            operationResourceName: op.name,
+        };
+        const cfn = await poller.pollOperation(gcfV1PollerOptions);
+        return gcf.endpointFromFunction(cfn);
+    }
+    else if (endpoint.platform === "gcfv2") {
+        throw new error_1.FirebaseError(`Unsupported platform ${endpoint.platform}`);
+    }
+    else {
+        (0, functional_1.assertExhaustive)(endpoint.platform);
+    }
+}
+exports.updateEndpointSecret = updateEndpointSecret;

package/lib/functionsShellCommandAction.js

@@ -55,7 +55,7 @@ const actionFunction = async (options) => {
     })
         .then(() => {
         const instance = serveFunctions.get();
-        const emulator = new shell.FunctionsEmulatorShell(instance, serveFunctions.getBackend());
+        const emulator = new shell.FunctionsEmulatorShell(instance);
         if (emulator.emulatedFunctions && emulator.emulatedFunctions.length === 0) {
             logger_1.logger.info("No functions emulated.");
             process.exit();