firebase-tools 10.7.1 → 10.9.0

package/lib/deploy/functions/runtimes/node/parseTriggers.js

@@ -1,6 +1,6 @@
 "use strict";
 Object.defineProperty(exports, "__esModule", { value: true });
-exports.addResourcesToBackend = exports.mergeRequiredAPIs = exports.discoverBackend = exports.useStrategy = void 0;
+exports.addResourcesToBackend = exports.addResourcesToBuild = exports.mergeRequiredAPIs = exports.discoverBackend = exports.discoverBuild = exports.useStrategy = void 0;
 const path = require("path");
 const _ = require("lodash");
 const child_process_1 = require("child_process");
@@ -49,6 +49,19 @@ function useStrategy(context) {
     return Promise.resolve(true);
 }
 exports.useStrategy = useStrategy;
+async function discoverBuild(projectId, sourceDir, runtime, configValues, envs) {
+    const triggerAnnotations = await parseTriggers(projectId, sourceDir, configValues, envs);
+    const want = {
+        requiredAPIs: [],
+        endpoints: {},
+        params: [],
+    };
+    for (const annotation of triggerAnnotations) {
+        addResourcesToBuild(projectId, runtime, annotation, want);
+    }
+    return want;
+}
+exports.discoverBuild = discoverBuild;
 async function discoverBackend(projectId, sourceDir, runtime, configValues, envs) {
     const triggerAnnotations = await parseTriggers(projectId, sourceDir, configValues, envs);
     const want = Object.assign(Object.assign({}, backend.empty()), { environmentVariables: envs });
@@ -74,6 +87,100 @@ function mergeRequiredAPIs(backend) {
     backend.requiredAPIs = merged;
 }
 exports.mergeRequiredAPIs = mergeRequiredAPIs;
+function addResourcesToBuild(projectId, runtime, annotation, want) {
+    var _a;
+    Object.freeze(annotation);
+    const regions = annotation.regions || [api.functionsDefaultRegion];
+    let triggered;
+    const triggerCount = +!!annotation.httpsTrigger +
+        +!!annotation.eventTrigger +
+        +!!annotation.taskQueueTrigger +
+        +!!annotation.blockingTrigger;
+    if (triggerCount !== 1) {
+        throw new error_1.FirebaseError("Unexpected annotation generated by the Firebase Functions SDK. This should never happen.");
+    }
+    if (annotation.taskQueueTrigger) {
+        want.requiredAPIs.push({
+            api: "cloudtasks.googleapis.com",
+            reason: "Needed for task queue functions.",
+        });
+        triggered = {
+            taskQueueTrigger: {},
+        };
+        proto.copyIfPresent(triggered.taskQueueTrigger, annotation.taskQueueTrigger, "invoker");
+        proto.copyIfPresent(triggered.taskQueueTrigger, annotation.taskQueueTrigger, "rateLimits");
+        if (annotation.taskQueueTrigger.retryConfig) {
+            triggered.taskQueueTrigger.retryConfig = Object.assign(annotation.taskQueueTrigger.retryConfig, {
+                maxRetryDurationSeconds: proto.secondsFromDuration(annotation.taskQueueTrigger.retryConfig.maxRetryDuration || "0"),
+            });
+        }
+    }
+    else if (annotation.httpsTrigger) {
+        if ((_a = annotation.labels) === null || _a === void 0 ? void 0 : _a["deployment-callable"]) {
+            delete annotation.labels["deployment-callable"];
+            triggered = { callableTrigger: {} };
+        }
+        else {
+            const trigger = {};
+            if (annotation.failurePolicy) {
+                logger_1.logger.warn(`Ignoring retry policy for HTTPS function ${annotation.name}`);
+            }
+            if (annotation.httpsTrigger.invoker) {
+                trigger.invoker = annotation.httpsTrigger.invoker[0];
+            }
+            triggered = { httpsTrigger: trigger };
+        }
+    }
+    else if (annotation.schedule) {
+        want.requiredAPIs.push({
+            api: "cloudscheduler.googleapis.com",
+            reason: "Needed for scheduled functions.",
+        });
+        triggered = {
+            scheduleTrigger: {
+                schedule: annotation.schedule.schedule,
+                timeZone: annotation.schedule.timeZone || "what's the default timezone?",
+                retryConfig: annotation.schedule.retryConfig || {},
+            },
+        };
+    }
+    else if (annotation.blockingTrigger) {
+        if (events.v1.AUTH_BLOCKING_EVENTS.includes(annotation.blockingTrigger.eventType)) {
+            want.requiredAPIs.push({
+                api: "identitytoolkit.googleapis.com",
+                reason: "Needed for auth blocking functions.",
+            });
+        }
+        triggered = {
+            blockingTrigger: {
+                eventType: annotation.blockingTrigger.eventType,
+            },
+        };
+    }
+    else {
+        triggered = {
+            eventTrigger: {
+                eventType: annotation.eventTrigger.eventType,
+                eventFilters: { resource: annotation.eventTrigger.resource },
+                retry: !!annotation.failurePolicy,
+            },
+        };
+    }
+    const endpointId = annotation.name;
+    const endpoint = Object.assign({ platform: annotation.platform || "gcfv1", region: regions, project: projectId, entryPoint: annotation.entryPoint, runtime: runtime, serviceAccount: annotation.serviceAccountEmail || "default" }, triggered);
+    if (annotation.vpcConnector != null) {
+        let maybeId = annotation.vpcConnector;
+        if (maybeId && !maybeId.includes("/")) {
+            maybeId = `projects/${projectId}/locations/$REGION/connectors/${maybeId}`;
+        }
+        endpoint.vpc = { connector: maybeId };
+        proto.renameIfPresent(endpoint.vpc, annotation, "egressSettings", "vpcConnectorEgressSettings");
+    }
+    proto.copyIfPresent(endpoint, annotation, "concurrency", "labels", "ingressSettings", "maxInstances", "minInstances", "availableMemoryMb");
+    proto.renameIfPresent(endpoint, annotation, "timeoutSeconds", "timeout", proto.secondsFromDuration);
+    want.endpoints[endpointId] = endpoint;
+}
+exports.addResourcesToBuild = addResourcesToBuild;
 function addResourcesToBackend(projectId, runtime, annotation, want) {
     var _a;
     Object.freeze(annotation);

package/lib/deploy/functions/services/storage.js

@@ -6,20 +6,14 @@ const logger_1 = require("../../../logger");
 const error_1 = require("../../../error");
 const location_1 = require("../../../gcp/location");
 const PUBSUB_PUBLISHER_ROLE = "roles/pubsub.publisher";
-async function obtainStorageBindings(projectNumber, existingPolicy) {
+async function obtainStorageBindings(projectNumber) {
     const storageResponse = await storage.getServiceAccount(projectNumber);
     const storageServiceAgent = `serviceAccount:${storageResponse.email_address}`;
-    let pubsubBinding = existingPolicy.bindings.find((b) => b.role === PUBSUB_PUBLISHER_ROLE);
-    if (!pubsubBinding) {
-        pubsubBinding = {
-            role: PUBSUB_PUBLISHER_ROLE,
-            members: [],
-        };
-    }
-    if (!pubsubBinding.members.find((m) => m === storageServiceAgent)) {
-        pubsubBinding.members.push(storageServiceAgent);
-    }
-    return [pubsubBinding];
+    const pubsubPublisherBinding = {
+        role: PUBSUB_PUBLISHER_ROLE,
+        members: [storageServiceAgent],
+    };
+    return [pubsubPublisherBinding];
 }
 exports.obtainStorageBindings = obtainStorageBindings;
 async function ensureStorageTriggerRegion(endpoint) {

package/lib/deploy/functions/validate.js

@@ -1,6 +1,6 @@
 "use strict";
 Object.defineProperty(exports, "__esModule", { value: true });
-exports.secretsAreValid = exports.functionIdsAreValid = exports.functionsDirectoryExists = exports.endpointsAreUnique = exports.endpointsAreValid = void 0;
+exports.secretsAreValid = exports.functionIdsAreValid = exports.functionsDirectoryExists = exports.endpointsAreUnique = exports.cpuConfigIsValid = exports.endpointsAreValid = void 0;
 const path = require("path");
 const clc = require("cli-color");
 const error_1 = require("../../error");
@@ -11,34 +11,98 @@ const backend = require("./backend");
 const utils = require("../../utils");
 const secrets = require("../../functions/secrets");
 const services_1 = require("./services");
+function matchingIds(endpoints, filter) {
+    return endpoints
+        .filter(filter)
+        .map((endpoint) => endpoint.id)
+        .join(",");
+}
+const mem = (endpoint) => endpoint.availableMemoryMb || backend.DEFAULT_MEMORY;
+const cpu = (endpoint) => {
+    var _a;
+    return endpoint.cpu === "gcf_gen1"
+        ? backend.memoryToGen1Cpu(mem(endpoint))
+        : (_a = endpoint.cpu) !== null && _a !== void 0 ? _a : backend.memoryToGen2Cpu(mem(endpoint));
+};
 function endpointsAreValid(wantBackend) {
     const endpoints = backend.allEndpoints(wantBackend);
     functionIdsAreValid(endpoints);
     for (const ep of endpoints) {
         (0, services_1.serviceForEndpoint)(ep).validateTrigger(ep, wantBackend);
     }
-    const gcfV1WithConcurrency = endpoints
-        .filter((endpoint) => (endpoint.concurrency || 1) !== 1 && endpoint.platform === "gcfv1")
-        .map((endpoint) => endpoint.id);
+    const gcfV1WithConcurrency = matchingIds(endpoints, (endpoint) => (endpoint.concurrency || 1) !== 1 && endpoint.platform === "gcfv1");
     if (gcfV1WithConcurrency.length) {
-        const msg = `Cannot set concurrency on the functions ${gcfV1WithConcurrency.join(",")} because they are GCF gen 1`;
+        const msg = `Cannot set concurrency on the functions ${gcfV1WithConcurrency} because they are GCF gen 1`;
         throw new error_1.FirebaseError(msg);
     }
-    const tooSmallForConcurrency = endpoints
-        .filter((endpoint) => {
+    const tooSmallForConcurrency = matchingIds(endpoints, (endpoint) => {
         if ((endpoint.concurrency || 1) === 1) {
             return false;
         }
-        const mem = endpoint.availableMemoryMb || backend.DEFAULT_MEMORY;
-        return mem < backend.MIN_MEMORY_FOR_CONCURRENCY;
-    })
-        .map((endpoint) => endpoint.id);
+        return cpu(endpoint) < backend.MIN_CPU_FOR_CONCURRENCY;
+    });
     if (tooSmallForConcurrency.length) {
-        const msg = `Cannot set concurency on the functions ${tooSmallForConcurrency.join(",")} because they have fewer than 2GB memory`;
+        const msg = "The following functions are configured to allow concurrent " +
+            "execution and less than one full CPU. This is not supported: " +
+            tooSmallForConcurrency;
         throw new error_1.FirebaseError(msg);
     }
+    cpuConfigIsValid(endpoints);
 }
 exports.endpointsAreValid = endpointsAreValid;
+function cpuConfigIsValid(endpoints) {
+    const gcfV1WithCPU = matchingIds(endpoints, (endpoint) => endpoint.platform === "gcfv1" && typeof endpoint["cpu"] !== "undefined");
+    if (gcfV1WithCPU.length) {
+        const msg = `Cannot set CPU on the functions ${gcfV1WithCPU} because they are GCF gen 1`;
+        throw new error_1.FirebaseError(msg);
+    }
+    const invalidCPU = matchingIds(endpoints, (endpoint) => {
+        const c = cpu(endpoint);
+        if (c < 0.08) {
+            return true;
+        }
+        if (c < 1) {
+            return false;
+        }
+        return ![1, 2, 4, 6, 8].includes(c);
+    });
+    if (invalidCPU.length) {
+        const msg = `The following functions have invalid CPU settings ${invalidCPU}. Valid CPU options are (0.08, 1], 2, 4, 6, 8, or "gcf_gen1"`;
+        throw new error_1.FirebaseError(msg);
+    }
+    const smallCPURegions = ["australia-southeast2", "asia-northeast3", "asia-south2"];
+    const tooBigCPUForRegion = matchingIds(endpoints, (endpoint) => smallCPURegions.includes(endpoint.region) && cpu(endpoint) > 4);
+    if (tooBigCPUForRegion) {
+        const msg = `The functions ${tooBigCPUForRegion} have > 4 CPU in a region that supports a maximum 4 CPU`;
+        throw new error_1.FirebaseError(msg);
+    }
+    const tooSmallCPUSmall = matchingIds(endpoints, (endpoint) => mem(endpoint) > 512 && cpu(endpoint) < 0.5);
+    if (tooSmallCPUSmall) {
+        const msg = `The functions ${tooSmallCPUSmall} have too little CPU for their memory allocation. A minimum of 0.5 CPU is needed to set a memory limit greater than 512MiB`;
+        throw new error_1.FirebaseError(msg);
+    }
+    const tooSmallCPUBig = matchingIds(endpoints, (endpoint) => mem(endpoint) > 1024 && cpu(endpoint) < 1);
+    if (tooSmallCPUBig) {
+        const msg = `The functions ${tooSmallCPUSmall} have too little CPU for their memory allocation. A minimum of 1 CPU is needed to set a memory limit greater than 1GiB`;
+        throw new error_1.FirebaseError(msg);
+    }
+    const tooSmallMemory4CPU = matchingIds(endpoints, (endpoint) => cpu(endpoint) === 4 && mem(endpoint) < 2 << 10);
+    if (tooSmallMemory4CPU) {
+        const msg = `The functions ${tooSmallMemory4CPU} have too little memory for their CPU. Functions with 4 CPU require at least 2GiB`;
+        throw new error_1.FirebaseError(msg);
+    }
+    const tooSmallMemory6CPU = matchingIds(endpoints, (endpoint) => cpu(endpoint) === 6 && mem(endpoint) < 3 << 10);
+    if (tooSmallMemory6CPU) {
+        const msg = `The functions ${tooSmallMemory6CPU} have too little memory for their CPU. Functions with 6 CPU require at least 3GiB`;
+        throw new error_1.FirebaseError(msg);
+    }
+    const tooSmallMemory8CPU = matchingIds(endpoints, (endpoint) => cpu(endpoint) === 8 && mem(endpoint) < 4 << 10);
+    if (tooSmallMemory8CPU) {
+        const msg = `The functions ${tooSmallMemory8CPU} have too little memory for their CPU. Functions with 8 CPU require at least 4GiB`;
+        throw new error_1.FirebaseError(msg);
+    }
+}
+exports.cpuConfigIsValid = cpuConfigIsValid;
 function endpointsAreUnique(backends) {
     const endpointToCodebases = {};
     for (const [codebase, b] of Object.entries(backends)) {
@@ -86,7 +150,7 @@ function functionIdsAreValid(functions) {
         return fn.platform === "gcfv2" && !v2FunctionName.test(fn.id);
     });
     if (invalidV2Ids.length !== 0) {
-        const msg = `${invalidV2Ids.map((f) => f.id).join(", ")} v2 function name(s) can only contin lower ` +
+        const msg = `${invalidV2Ids.map((f) => f.id).join(", ")} v2 function name(s) can only contain lower ` +
             `case letters, numbers, hyphens, and not exceed 62 characters in length`;
         throw new error_1.FirebaseError(msg);
     }
@@ -100,13 +164,13 @@ async function secretsAreValid(projectId, wantBackend) {
     await validateSecretVersions(projectId, endpoints);
 }
 exports.secretsAreValid = secretsAreValid;
+const secretsSupportedPlatforms = ["gcfv1", "gcfv2"];
 function validatePlatformTargets(endpoints) {
-    const supportedPlatforms = ["gcfv1"];
-    const unsupported = endpoints.filter((e) => !supportedPlatforms.includes(e.platform));
+    const unsupported = endpoints.filter((e) => !secretsSupportedPlatforms.includes(e.platform));
     if (unsupported.length > 0) {
         const errs = unsupported.map((e) => `${e.id}[platform=${e.platform}]`);
         throw new error_1.FirebaseError(`Tried to set secret environment variables on ${errs.join(", ")}. ` +
-            `Only ${supportedPlatforms.join(", ")} support secret environments.`);
+            `Only ${secretsSupportedPlatforms.join(", ")} support secret environments.`);
     }
 }
 async function validateSecretVersions(projectId, endpoints) {

package/lib/deploy/index.js

@@ -18,6 +18,7 @@ const FunctionsTarget = require("./functions");
 const StorageTarget = require("./storage");
 const RemoteConfigTarget = require("./remoteconfig");
 const ExtensionsTarget = require("./extensions");
+const frameworks_1 = require("../frameworks");
 const TARGETS = {
     hosting: HostingTarget,
     database: DatabaseTarget,
@@ -45,7 +46,7 @@ const deploy = async function (targetNames, options, customContext = {}) {
     if (previews_1.previews.frameworkawareness && targetNames.includes("hosting")) {
         const config = options.config.get("hosting");
         if (Array.isArray(config) ? config.some((it) => it.source) : config.source) {
-            await require("firebase-frameworks").prepare(targetNames, context, options);
+            await (0, frameworks_1.prepareFrameworks)(targetNames, context, options);
         }
     }
     for (const targetName of targetNames) {

package/lib/emulator/auth/cloudFunctions.js

@@ -62,8 +62,12 @@ class AuthCloudFunction {
             phoneNumber: user.phoneNumber,
             disabled: user.disabled,
             metadata: {
-                creationTime: user.createdAt,
-                lastSignInTime: user.lastLoginAt,
+                creationTime: user.createdAt
+                    ? new Date(parseInt(user.createdAt, 10)).toISOString()
+                    : undefined,
+                lastSignInTime: user.lastLoginAt
+                    ? new Date(parseInt(user.lastLoginAt, 10)).toISOString()
+                    : undefined,
             },
             customClaims: JSON.parse(user.customAttributes || "{}"),
             providerData: user.providerUserInfo,

package/lib/emulator/auth/operations.js

@@ -1210,7 +1210,6 @@ function grantToken(state, reqBody) {
     (0, errors_1.assert)(reqBody.grantType === "refresh_token", "INVALID_GRANT_TYPE");
     (0, errors_1.assert)(reqBody.refreshToken, "MISSING_REFRESH_TOKEN");
     const refreshTokenRecord = state.validateRefreshToken(reqBody.refreshToken);
-    (0, errors_1.assert)(refreshTokenRecord, "INVALID_REFRESH_TOKEN");
     (0, errors_1.assert)(!refreshTokenRecord.user.disabled, "USER_DISABLED");
     const tokens = issueTokens(state, refreshTokenRecord.user, refreshTokenRecord.provider, {
         extraClaims: refreshTokenRecord.extraClaims,

package/lib/emulator/auth/server.js

@@ -342,7 +342,7 @@ function toExegesisController(ops, getProjectStateById) {
     }
     function toExegesisOperation(operation) {
         return (ctx) => {
-            var _a, _b, _c, _d, _e, _f, _g;
+            var _a, _b, _c, _d, _e, _f, _g, _h;
             let targetProjectId = ctx.params.path.targetProjectId || ((_a = ctx.requestBody) === null || _a === void 0 ? void 0 : _a.targetProjectId);
             if (targetProjectId) {
                 if ((_b = ctx.api.operationObject.security) === null || _b === void 0 ? void 0 : _b.some((sec) => sec.Oauth2)) {
@@ -365,6 +365,13 @@ function toExegesisController(ops, getProjectStateById) {
                 }
                 targetTenantId = targetTenantId || (decoded === null || decoded === void 0 ? void 0 : decoded.payload.firebase.tenant);
             }
+            if ((_h = ctx.requestBody) === null || _h === void 0 ? void 0 : _h.refreshToken) {
+                const refreshTokenRecord = (0, state_1.decodeRefreshToken)(ctx.requestBody.refreshToken);
+                if (refreshTokenRecord.tenantId && targetTenantId) {
+                    (0, errors_2.assert)(refreshTokenRecord.tenantId === targetTenantId, "TENANT_ID_MISMATCH: ((Refresh token tenant ID does not match target tenant ID.))");
+                }
+                targetTenantId = targetTenantId || refreshTokenRecord.tenantId;
+            }
             return operation(getProjectStateById(targetProjectId, targetTenantId), ctx.requestBody, ctx);
         };
     }

package/lib/emulator/auth/state.js

@@ -1,6 +1,6 @@
 "use strict";
 Object.defineProperty(exports, "__esModule", { value: true });
-exports.BlockingFunctionEvents = exports.UsageMode = exports.TenantProjectState = exports.AgentProjectState = exports.ProjectState = exports.SIGNIN_METHOD_EMAIL_LINK = exports.PROVIDER_GAME_CENTER = exports.PROVIDER_CUSTOM = exports.PROVIDER_ANONYMOUS = exports.PROVIDER_PHONE = exports.PROVIDER_PASSWORD = void 0;
+exports.decodeRefreshToken = exports.encodeRefreshToken = exports.BlockingFunctionEvents = exports.UsageMode = exports.TenantProjectState = exports.AgentProjectState = exports.ProjectState = exports.SIGNIN_METHOD_EMAIL_LINK = exports.PROVIDER_GAME_CENTER = exports.PROVIDER_CUSTOM = exports.PROVIDER_ANONYMOUS = exports.PROVIDER_PHONE = exports.PROVIDER_PASSWORD = void 0;
 const utils_1 = require("./utils");
 const cloudFunctions_1 = require("./cloudFunctions");
 const errors_1 = require("./errors");
@@ -19,8 +19,6 @@ class ProjectState {
         this.localIdForPhoneNumber = new Map();
         this.localIdsForProviderEmail = new Map();
         this.userIdForProviderRawId = new Map();
-        this.refreshTokens = new Map();
-        this.refreshTokensForLocalId = new Map();
         this.oobs = new Map();
         this.verificationCodes = new Map();
         this.temporaryProofs = new Map();
@@ -73,13 +71,6 @@ class ProjectState {
     deleteUser(user) {
         this.users.delete(user.localId);
         this.removeUserFromIndex(user);
-        const refreshTokens = this.refreshTokensForLocalId.get(user.localId);
-        if (refreshTokens) {
-            this.refreshTokensForLocalId.delete(user.localId);
-            for (const refreshToken of refreshTokens) {
-                this.refreshTokens.delete(refreshToken);
-            }
-        }
         this.authCloudFunction.dispatch("delete", user);
     }
     updateUserByLocalId(localId, fields, options = {}) {
@@ -282,26 +273,23 @@ class ProjectState {
     }
     createRefreshTokenFor(userInfo, provider, { extraClaims = {}, secondFactor, } = {}) {
         const localId = userInfo.localId;
-        const refreshToken = (0, utils_1.randomBase64UrlStr)(204);
-        this.refreshTokens.set(refreshToken, {
+        const refreshTokenRecord = {
+            _AuthEmulatorRefreshToken: "DO NOT MODIFY",
             localId,
             provider,
             extraClaims,
+            projectId: this.projectId,
             secondFactor,
             tenantId: userInfo.tenantId,
-        });
-        let refreshTokens = this.refreshTokensForLocalId.get(localId);
-        if (!refreshTokens) {
-            refreshTokens = new Set();
-            this.refreshTokensForLocalId.set(localId, refreshTokens);
-        }
-        refreshTokens.add(refreshToken);
+        };
+        const refreshToken = encodeRefreshToken(refreshTokenRecord);
         return refreshToken;
     }
     validateRefreshToken(refreshToken) {
-        const record = this.refreshTokens.get(refreshToken);
-        if (!record) {
-            return undefined;
+        const record = decodeRefreshToken(refreshToken);
+        (0, errors_1.assert)(record.projectId === this.projectId, "INVALID_REFRESH_TOKEN");
+        if (this instanceof TenantProjectState) {
+            (0, errors_1.assert)(record.tenantId === this.tenantId, "TENANT_ID_MISMATCH");
         }
         return {
             user: this.getUserByLocalIdAssertingExists(record.localId),
@@ -356,8 +344,6 @@ class ProjectState {
         this.localIdForPhoneNumber.clear();
         this.localIdsForProviderEmail.clear();
         this.userIdForProviderRawId.clear();
-        this.refreshTokens.clear();
-        this.refreshTokensForLocalId.clear();
     }
     getUserCount() {
         return this.users.size;
@@ -617,6 +603,23 @@ var BlockingFunctionEvents;
     BlockingFunctionEvents["BEFORE_CREATE"] = "beforeCreate";
     BlockingFunctionEvents["BEFORE_SIGN_IN"] = "beforeSignIn";
 })(BlockingFunctionEvents = exports.BlockingFunctionEvents || (exports.BlockingFunctionEvents = {}));
+function encodeRefreshToken(refreshTokenRecord) {
+    return Buffer.from(JSON.stringify(refreshTokenRecord), "utf8").toString("base64");
+}
+exports.encodeRefreshToken = encodeRefreshToken;
+function decodeRefreshToken(refreshTokenString) {
+    let refreshTokenRecord;
+    try {
+        const json = Buffer.from(refreshTokenString, "base64").toString("utf8");
+        refreshTokenRecord = JSON.parse(json);
+    }
+    catch (_a) {
+        throw new errors_1.BadRequestError("INVALID_REFRESH_TOKEN");
+    }
+    (0, errors_1.assert)(refreshTokenRecord._AuthEmulatorRefreshToken, "INVALID_REFRESH_TOKEN");
+    return refreshTokenRecord;
+}
+exports.decodeRefreshToken = decodeRefreshToken;
 function getProviderEmailsForUser(user) {
     var _a;
     const emails = new Set();

package/lib/emulator/controller.js

@@ -37,9 +37,10 @@ const config_1 = require("./storage/rules/config");
 const getDefaultDatabaseInstance_1 = require("../getDefaultDatabaseInstance");
 const auth_2 = require("../auth");
 const extensionsEmulator_1 = require("./extensionsEmulator");
-const previews_1 = require("../previews");
 const projectConfig_1 = require("../functions/projectConfig");
 const downloadableEmulators_1 = require("./downloadableEmulators");
+const frameworks_1 = require("../frameworks");
+const previews_1 = require("../previews");
 const START_LOGGING_EMULATOR = utils.envOverride("START_LOGGING_EMULATOR", "false", (val) => val === "true");
 async function getAndCheckAddress(emulator, options) {
     var _a, _b, _c, _d;
@@ -125,9 +126,7 @@ async function cleanShutdown() {
 exports.cleanShutdown = cleanShutdown;
 function filterEmulatorTargets(options) {
     let targets = [...types_1.ALL_SERVICE_EMULATORS];
-    if (previews_1.previews.extensionsemulator) {
-        targets.push(types_1.Emulators.EXTENSIONS);
-    }
+    targets.push(types_1.Emulators.EXTENSIONS);
     targets = targets.filter((e) => {
         return options.config.has(e) || options.config.has(`emulators.${e}`);
     });
@@ -245,6 +244,12 @@ async function startAll(options, showUI = true) {
             }
         }
     }
+    if (previews_1.previews.frameworkawareness) {
+        const config = options.config.get("hosting");
+        if (Array.isArray(config) ? config.some((it) => it.source) : config.source) {
+            await (0, frameworks_1.prepareFrameworks)(targets, options, options);
+        }
+    }
     if (shouldStart(options, types_1.Emulators.HUB)) {
         const hubAddr = await getAndCheckAddress(types_1.Emulators.HUB, options);
         const hub = new hub_1.EmulatorHub(Object.assign({ projectId }, hubAddr));
@@ -282,7 +287,7 @@ async function startAll(options, showUI = true) {
             });
         }
     }
-    if (shouldStart(options, types_1.Emulators.EXTENSIONS) && previews_1.previews.extensionsemulator) {
+    if (shouldStart(options, types_1.Emulators.EXTENSIONS)) {
         const projectNumber = constants_1.Constants.isDemoProject(projectId)
             ? constants_1.Constants.FAKE_PROJECT_NUMBER
             : await (0, projectUtils_1.needProjectNumber)(options);

package/lib/emulator/databaseEmulator.js

@@ -56,7 +56,15 @@ class DatabaseEmulator {
                 if (!c.instance) {
                     continue;
                 }
-                await this.updateRules(c.instance, c.rules);
+                try {
+                    await this.updateRules(c.instance, c.rules);
+                }
+                catch (e) {
+                    const rulesError = this.prettyPrintRulesError(c.rules, e);
+                    this.logger.logLabeled("WARN", "database", rulesError);
+                    this.logger.logLabeled("WARN", "database", "Failed to update rules");
+                    throw new error_1.FirebaseError(`Failed to load initial ${constants_1.Constants.description(this.getName())} rules:\n${rulesError}`);
+                }
             }
         }
     }
@@ -114,6 +122,7 @@ class DatabaseEmulator {
         });
     }
     async updateRules(instance, rulesPath) {
+        var _a;
         const rulesExt = path.extname(rulesPath);
         const content = rulesExt === ".bolt"
             ? parseBoltRules(rulesPath).toString()
@@ -131,12 +140,36 @@ class DatabaseEmulator {
             if (e.context && e.context.body) {
                 throw e.context.body.error;
             }
-            throw e.original;
+            throw (_a = e.original) !== null && _a !== void 0 ? _a : e;
         }
     }
     prettyPrintRulesError(filePath, error) {
+        let errStr;
+        switch (typeof error) {
+            case "string":
+                errStr = error;
+                break;
+            case "object":
+                if (error != null && "message" in error) {
+                    const message = error.message;
+                    errStr = `${message}`;
+                    if (typeof message === "string") {
+                        try {
+                            const parsed = JSON.parse(message);
+                            if (typeof parsed === "object" && parsed.error) {
+                                errStr = `${parsed.error}`;
+                            }
+                        }
+                        catch (_) {
+                        }
+                    }
+                    break;
+                }
+            default:
+                errStr = `Unknown error: ${JSON.stringify(error)}`;
+        }
         const relativePath = path.relative(process.cwd(), filePath);
-        return `${clc.cyan(relativePath)}:${error.trim()}`;
+        return `${clc.cyan(relativePath)}:${errStr.trim()}`;
     }
 }
 exports.DatabaseEmulator = DatabaseEmulator;

package/lib/emulator/downloadableEmulators.js

@@ -50,15 +50,15 @@ exports.DownloadDetails = {
             namePrefix: "cloud-storage-rules-emulator",
         },
     },
-    ui: previews_1.previews.extensionsemulator
+    ui: previews_1.previews.emulatoruisnapshot
         ? {
-            version: "EXTENSIONS",
-            downloadPath: path.join(CACHE_DIR, "ui-vEXTENSIONS.zip"),
-            unzipDir: path.join(CACHE_DIR, "ui-vEXTENSIONS"),
-            binaryPath: path.join(CACHE_DIR, "ui-vEXTENSIONS", "server.bundle.js"),
+            version: "SNAPSHOT",
+            downloadPath: path.join(CACHE_DIR, "ui-vSNAPSHOT.zip"),
+            unzipDir: path.join(CACHE_DIR, "ui-vSNAPSHOT"),
+            binaryPath: path.join(CACHE_DIR, "ui-vSNAPSHOT", "server.bundle.js"),
             opts: {
                 cacheDir: CACHE_DIR,
-                remoteUrl: "https://storage.googleapis.com/firebase-preview-drop/emulator/ui-vEXTENSIONS.zip",
+                remoteUrl: "https://storage.googleapis.com/firebase-preview-drop/emulator/ui-vSNAPSHOT.zip",
                 expectedSize: -1,
                 expectedChecksum: "",
                 skipCache: true,
@@ -66,35 +66,19 @@ exports.DownloadDetails = {
                 namePrefix: "ui",
             },
         }
-        : previews_1.previews.emulatoruisnapshot
-            ? {
-                version: "SNAPSHOT",
-                downloadPath: path.join(CACHE_DIR, "ui-vSNAPSHOT.zip"),
-                unzipDir: path.join(CACHE_DIR, "ui-vSNAPSHOT"),
-                binaryPath: path.join(CACHE_DIR, "ui-vSNAPSHOT", "server.bundle.js"),
-                opts: {
-                    cacheDir: CACHE_DIR,
-                    remoteUrl: "https://storage.googleapis.com/firebase-preview-drop/emulator/ui-vSNAPSHOT.zip",
-                    expectedSize: -1,
-                    expectedChecksum: "",
-                    skipCache: true,
-                    skipChecksumAndSize: true,
-                    namePrefix: "ui",
-                },
-            }
-            : {
-                version: "1.6.5",
-                downloadPath: path.join(CACHE_DIR, "ui-v1.6.5.zip"),
-                unzipDir: path.join(CACHE_DIR, "ui-v1.6.5"),
-                binaryPath: path.join(CACHE_DIR, "ui-v1.6.5", "server.bundle.js"),
-                opts: {
-                    cacheDir: CACHE_DIR,
-                    remoteUrl: "https://storage.googleapis.com/firebase-preview-drop/emulator/ui-v1.6.5.zip",
-                    expectedSize: 3816994,
-                    expectedChecksum: "92dfff4b2ef8ab616e8a60cc93e0a00b",
-                    namePrefix: "ui",
-                },
+        : {
+            version: "1.7.0",
+            downloadPath: path.join(CACHE_DIR, "ui-v1.7.0.zip"),
+            unzipDir: path.join(CACHE_DIR, "ui-v1.7.0"),
+            binaryPath: path.join(CACHE_DIR, "ui-v1.7.0", "server.bundle.js"),
+            opts: {
+                cacheDir: CACHE_DIR,
+                remoteUrl: "https://storage.googleapis.com/firebase-preview-drop/emulator/ui-v1.7.0.zip",
+                expectedSize: 4053708,
+                expectedChecksum: "aea9ae19091df5974a88a8847aaf127c",
+                namePrefix: "ui",
             },
+        },
     pubsub: {
         downloadPath: path.join(CACHE_DIR, "pubsub-emulator-0.1.0.zip"),
         version: "0.1.0",