firebase-tools 13.3.0 → 13.4.0

package/lib/init/features/apphosting/index.js

@@ -1,6 +1,6 @@
 "use strict";
 Object.defineProperty(exports, "__esModule", { value: true });
-exports.onboardRollout = exports.createBackend = exports.onboardBackend = exports.doSetup = void 0;
+exports.orchestrateRollout = exports.setDefaultTrafficPolicy = exports.createBackend = exports.doSetup = void 0;
 const clc = require("colorette");
 const repo = require("./repo");
 const poller = require("../../../operation-poller");
@@ -8,72 +8,60 @@ const apphosting = require("../../../gcp/apphosting");
 const utils_1 = require("../../../utils");
 const api_1 = require("../../../api");
 const apphosting_1 = require("../../../gcp/apphosting");
+const resourceManager_1 = require("../../../gcp/resourceManager");
+const iam_1 = require("../../../gcp/iam");
 const error_1 = require("../../../error");
 const prompt_1 = require("../../../prompt");
 const constants_1 = require("./constants");
 const ensureApiEnabled_1 = require("../../../ensureApiEnabled");
 const deploymentTool = require("../../../deploymentTool");
+const DEFAULT_COMPUTE_SERVICE_ACCOUNT_NAME = "firebase-app-hosting-compute";
 const apphostingPollerOptions = {
     apiOrigin: api_1.apphostingOrigin,
     apiVersion: apphosting_1.API_VERSION,
     masterTimeout: 25 * 60 * 1000,
     maxBackoff: 10000,
 };
-async function doSetup(setup, projectId) {
+async function doSetup(projectId, location, serviceAccount) {
     await Promise.all([
-        (0, ensureApiEnabled_1.ensure)(projectId, "cloudbuild.googleapis.com", "apphosting", true),
-        (0, ensureApiEnabled_1.ensure)(projectId, "secretmanager.googleapis.com", "apphosting", true),
-        (0, ensureApiEnabled_1.ensure)(projectId, "run.googleapis.com", "apphosting", true),
-        (0, ensureApiEnabled_1.ensure)(projectId, "artifactregistry.googleapis.com", "apphosting", true),
+        (0, ensureApiEnabled_1.ensure)(projectId, api_1.cloudbuildOrigin, "apphosting", true),
+        (0, ensureApiEnabled_1.ensure)(projectId, api_1.secretManagerOrigin, "apphosting", true),
+        (0, ensureApiEnabled_1.ensure)(projectId, api_1.cloudRunApiOrigin, "apphosting", true),
+        (0, ensureApiEnabled_1.ensure)(projectId, api_1.artifactRegistryDomain, "apphosting", true),
     ]);
     const allowedLocations = (await apphosting.listLocations(projectId)).map((loc) => loc.locationId);
-    if (setup.location) {
-        if (!allowedLocations.includes(setup.location)) {
-            throw new error_1.FirebaseError(`Invalid location ${setup.location}. Valid choices are ${allowedLocations.join(", ")}`);
+    if (location) {
+        if (!allowedLocations.includes(location)) {
+            throw new error_1.FirebaseError(`Invalid location ${location}. Valid choices are ${allowedLocations.join(", ")}`);
         }
     }
     (0, utils_1.logBullet)("First we need a few details to create your backend.");
-    const location = setup.location || (await promptLocation(projectId, allowedLocations));
+    location =
+        location ||
+            (await (0, prompt_1.promptOnce)({
+                name: "region",
+                type: "list",
+                default: constants_1.DEFAULT_REGION,
+                message: "Please select a region " +
+                    `(${clc.yellow("info")}: Your region determines where your backend is located):\n`,
+                choices: allowedLocations.map((loc) => ({ value: loc })),
+            }));
     (0, utils_1.logSuccess)(`Region set to ${location}.\n`);
-    let backendId;
-    while (true) {
-        backendId = await (0, prompt_1.promptOnce)({
-            name: "backendId",
-            type: "input",
-            default: "my-web-app",
-            message: "Create a name for your backend [1-30 characters]",
-        });
-        try {
-            await apphosting.getBackend(projectId, location, backendId);
-        }
-        catch (err) {
-            if (err.status === 404) {
-                break;
-            }
-            throw new error_1.FirebaseError(`Failed to check if backend with id ${backendId} already exists in ${location}`, { original: err });
-        }
-        (0, utils_1.logWarning)(`Backend with id ${backendId} already exists in ${location}`);
-    }
-    const backend = await onboardBackend(projectId, location, backendId);
+    const backendId = await promptNewBackendId(projectId, location, {
+        name: "backendId",
+        type: "input",
+        default: "my-web-app",
+        message: "Create a name for your backend [1-30 characters]",
+    });
+    const cloudBuildConnRepo = await repo.linkGitHubRepository(projectId, location);
+    const backend = await createBackend(projectId, location, backendId, cloudBuildConnRepo, serviceAccount);
     const branch = await (0, prompt_1.promptOnce)({
         name: "branch",
         type: "input",
         default: "main",
         message: "Pick a branch for continuous deployment",
     });
-    const traffic = {
-        rolloutPolicy: {
-            codebaseBranch: branch,
-            stages: [
-                {
-                    progression: "IMMEDIATE",
-                    targetPercent: 100,
-                },
-            ],
-        },
-    };
-    const op = await apphosting.updateTraffic(projectId, location, backendId, traffic);
-    await poller.pollOperation(Object.assign(Object.assign({}, apphostingPollerOptions), { pollerName: `updateTraffic-${projectId}-${location}-${backendId}`, operationResourceName: op.name }));
+    await setDefaultTrafficPolicy(projectId, location, backendId, branch);
     const confirmRollout = await (0, prompt_1.promptOnce)({
         type: "confirm",
         name: "rollout",
@@ -85,68 +73,141 @@ async function doSetup(setup, projectId) {
         (0, utils_1.logSuccess)(`Your site will be deployed at:\n\thttps://${backend.uri}`);
         return;
     }
-    const { build } = await onboardRollout(projectId, location, backendId, {
+    await orchestrateRollout(projectId, location, backendId, {
         source: {
             codebase: {
                 branch,
             },
         },
     });
-    if (build.state !== "READY") {
-        if (!build.buildLogsUri) {
-            throw new error_1.FirebaseError("Failed to build your app, but failed to get build logs as well. " +
-                "This is an internal error and should be reported");
-        }
-        throw new error_1.FirebaseError(`Failed to build your app. Please inspect the build logs at ${build.buildLogsUri}.`, { children: [build.error] });
-    }
     (0, utils_1.logSuccess)(`Successfully created backend:\n\t${backend.name}`);
     (0, utils_1.logSuccess)(`Your site is now deployed at:\n\thttps://${backend.uri}`);
-    (0, utils_1.logSuccess)(`View the rollout status by running:\n\tfirebase apphosting:backends:get ${backendId} --project ${projectId}`);
 }
 exports.doSetup = doSetup;
-async function promptLocation(projectId, locations) {
-    return (await (0, prompt_1.promptOnce)({
-        name: "region",
-        type: "list",
-        default: constants_1.DEFAULT_REGION,
-        message: "Please select a region " +
-            `(${clc.yellow("info")}: Your region determines where your backend is located):\n`,
-        choices: locations.map((loc) => ({ value: loc })),
-    }));
+async function promptNewBackendId(projectId, location, prompt) {
+    while (true) {
+        const backendId = await (0, prompt_1.promptOnce)(prompt);
+        try {
+            await apphosting.getBackend(projectId, location, backendId);
+        }
+        catch (err) {
+            if (err.status === 404) {
+                return backendId;
+            }
+            throw new error_1.FirebaseError(`Failed to check if backend with id ${backendId} already exists in ${location}`, { original: err });
+        }
+        (0, utils_1.logWarning)(`Backend with id ${backendId} already exists in ${location}`);
+    }
+}
+function defaultComputeServiceAccountEmail(projectId) {
+    return `${DEFAULT_COMPUTE_SERVICE_ACCOUNT_NAME}@${projectId}.iam.gserviceaccount.com`;
 }
-function toBackend(cloudBuildConnRepo) {
-    return {
+async function createBackend(projectId, location, backendId, repository, serviceAccount) {
+    const defaultServiceAccount = defaultComputeServiceAccountEmail(projectId);
+    const backendReqBody = {
         servingLocality: "GLOBAL_ACCESS",
         codebase: {
-            repository: `${cloudBuildConnRepo.name}`,
+            repository: `${repository.name}`,
             rootDirectory: "/",
         },
         labels: deploymentTool.labels(),
+        computeServiceAccount: serviceAccount || defaultServiceAccount,
     };
+    delete backendReqBody.computeServiceAccount;
+    async function createBackendAndPoll() {
+        const op = await apphosting.createBackend(projectId, location, backendReqBody, backendId);
+        return await poller.pollOperation(Object.assign(Object.assign({}, apphostingPollerOptions), { pollerName: `create-${projectId}-${location}-${backendId}`, operationResourceName: op.name }));
+    }
+    try {
+        return await createBackendAndPoll();
+    }
+    catch (err) {
+        if (err.status === 403) {
+            if (err.message.includes(defaultServiceAccount)) {
+                await provisionDefaultComputeServiceAccount(projectId);
+                return await createBackendAndPoll();
+            }
+            else if (serviceAccount && err.message.includes(serviceAccount)) {
+                throw new error_1.FirebaseError(`Failed to create backend due to missing delegation permissions for ${serviceAccount}. Make sure you have the iam.serviceAccounts.actAs permission.`, { children: [err] });
+            }
+        }
+        throw err;
+    }
 }
-async function onboardBackend(projectId, location, backendId) {
-    const cloudBuildConnRepo = await repo.linkGitHubRepository(projectId, location);
-    const backendDetails = toBackend(cloudBuildConnRepo);
-    return await createBackend(projectId, location, backendDetails, backendId);
+exports.createBackend = createBackend;
+async function provisionDefaultComputeServiceAccount(projectId) {
+    try {
+        await (0, iam_1.createServiceAccount)(projectId, DEFAULT_COMPUTE_SERVICE_ACCOUNT_NAME, "Firebase App Hosting compute service account", "Default service account used to run builds and deploys for Firebase App Hosting");
+    }
+    catch (err) {
+        if (err.status !== 409) {
+            throw err;
+        }
+    }
+    await (0, resourceManager_1.addServiceAccountToRoles)(projectId, defaultComputeServiceAccountEmail(projectId), [
+        "roles/firebaseapphosting.viewer",
+        "roles/artifactregistry.createOnPushWriter",
+        "roles/logging.logWriter",
+        "roles/storage.objectAdmin",
+        "roles/firebase.sdkAdminServiceAgent",
+    ], true);
 }
-exports.onboardBackend = onboardBackend;
-async function createBackend(projectId, location, backendReqBoby, backendId) {
-    const op = await apphosting.createBackend(projectId, location, backendReqBoby, backendId);
-    const backend = await poller.pollOperation(Object.assign(Object.assign({}, apphostingPollerOptions), { pollerName: `create-${projectId}-${location}-${backendId}`, operationResourceName: op.name }));
-    return backend;
+async function setDefaultTrafficPolicy(projectId, location, backendId, codebaseBranch) {
+    const traffic = {
+        rolloutPolicy: {
+            codebaseBranch: codebaseBranch,
+            stages: [
+                {
+                    progression: "IMMEDIATE",
+                    targetPercent: 100,
+                },
+            ],
+        },
+    };
+    const op = await apphosting.updateTraffic(projectId, location, backendId, traffic);
+    await poller.pollOperation(Object.assign(Object.assign({}, apphostingPollerOptions), { pollerName: `updateTraffic-${projectId}-${location}-${backendId}`, operationResourceName: op.name }));
 }
-exports.createBackend = createBackend;
-async function onboardRollout(projectId, location, backendId, buildInput) {
+exports.setDefaultTrafficPolicy = setDefaultTrafficPolicy;
+async function orchestrateRollout(projectId, location, backendId, buildInput) {
     (0, utils_1.logBullet)("Starting a new rollout... this may take a few minutes.");
     const buildId = await apphosting.getNextRolloutId(projectId, location, backendId, 1);
     const buildOp = await apphosting.createBuild(projectId, location, backendId, buildId, buildInput);
-    const rolloutOp = await apphosting.createRollout(projectId, location, backendId, buildId, {
+    const rolloutBody = {
         build: `projects/${projectId}/locations/${location}/backends/${backendId}/builds/${buildId}`,
-    });
+    };
+    let tries = 0;
+    let done = false;
+    while (!done) {
+        tries++;
+        try {
+            const validateOnly = true;
+            await apphosting.createRollout(projectId, location, backendId, buildId, rolloutBody, validateOnly);
+            done = true;
+        }
+        catch (err) {
+            if (err instanceof error_1.FirebaseError && err.status === 400) {
+                if (tries >= 5) {
+                    throw err;
+                }
+                await new Promise((resolve) => setTimeout(resolve, 1000));
+            }
+            else {
+                throw err;
+            }
+        }
+    }
+    const rolloutOp = await apphosting.createRollout(projectId, location, backendId, buildId, rolloutBody);
     const rolloutPoll = poller.pollOperation(Object.assign(Object.assign({}, apphostingPollerOptions), { pollerName: `create-${projectId}-${location}-backend-${backendId}-rollout-${buildId}`, operationResourceName: rolloutOp.name }));
     const buildPoll = poller.pollOperation(Object.assign(Object.assign({}, apphostingPollerOptions), { pollerName: `create-${projectId}-${location}-backend-${backendId}-build-${buildId}`, operationResourceName: buildOp.name }));
     const [rollout, build] = await Promise.all([rolloutPoll, buildPoll]);
     (0, utils_1.logSuccess)("Rollout completed.");
+    if (build.state !== "READY") {
+        if (!build.buildLogsUri) {
+            throw new error_1.FirebaseError("Failed to build your app, but failed to get build logs as well. " +
+                "This is an internal error and should be reported");
+        }
+        throw new error_1.FirebaseError(`Failed to build your app. Please inspect the build logs at ${build.buildLogsUri}.`, { children: [build.error] });
+    }
     return { rollout, build };
 }
-exports.onboardRollout = onboardRollout;
+exports.orchestrateRollout = orchestrateRollout;

package/lib/init/features/apphosting/repo.js

@@ -1,6 +1,6 @@
 "use strict";
 Object.defineProperty(exports, "__esModule", { value: true });
-exports.listAppHostingConnections = exports.getOrCreateRepository = exports.getOrCreateConnection = exports.createConnection = exports.linkGitHubRepository = exports.parseConnectionName = void 0;
+exports.fetchAllRepositories = exports.listAppHostingConnections = exports.getOrCreateRepository = exports.getOrCreateConnection = exports.createConnection = exports.linkGitHubRepository = exports.parseConnectionName = void 0;
 const clc = require("colorette");
 const gcb = require("../../../gcp/cloudbuild");
 const rm = require("../../../gcp/resourceManager");
@@ -10,11 +10,13 @@ const api_1 = require("../../../api");
 const error_1 = require("../../../error");
 const prompt_1 = require("../../../prompt");
 const getProjectNumber_1 = require("../../../getProjectNumber");
+const fuzzy = require("fuzzy");
+const inquirer = require("inquirer");
 const APPHOSTING_CONN_PATTERN = /.+\/apphosting-github-conn-.+$/;
 const APPHOSTING_OAUTH_CONN_NAME = "apphosting-github-oauth";
 const CONNECTION_NAME_REGEX = /^projects\/(?<projectId>[^\/]+)\/locations\/(?<location>[^\/]+)\/connections\/(?<id>[^\/]+)$/;
 function parseConnectionName(name) {
-    const match = name.match(CONNECTION_NAME_REGEX);
+    const match = CONNECTION_NAME_REGEX.exec(name);
     if (!match || typeof match.groups === undefined) {
         return;
     }
@@ -47,19 +49,22 @@ function generateConnectionId() {
     const randomHash = Math.random().toString(36).slice(6);
     return `apphosting-github-conn-${randomHash}`;
 }
+const ADD_REPO_CHOICE = "@ADD_REPO";
+const ADD_CONN_CHOICE = "@ADD_CONN";
+const CONFIGURE_REMOTE_URI_CHOICES = [ADD_REPO_CHOICE, ADD_CONN_CHOICE];
 async function linkGitHubRepository(projectId, location) {
-    var _a, _b, _c;
+    var _a, _b, _c, _d;
     utils.logBullet(clc.bold(`${clc.yellow("===")} Set up a GitHub connection`));
+    let oauthConn = await getOrCreateConnection(projectId, location, APPHOSTING_OAUTH_CONN_NAME);
+    while (oauthConn.installationState.stage === "PENDING_USER_OAUTH") {
+        oauthConn = await promptConnectionAuth(oauthConn);
+    }
     const existingConns = await listAppHostingConnections(projectId);
     if (existingConns.length < 1) {
         const grantSuccess = await promptSecretManagerAdminGrant(projectId);
         if (!grantSuccess) {
             throw new error_1.FirebaseError("Insufficient IAM permissions to create a new connection to GitHub");
         }
-        let oauthConn = await getOrCreateConnection(projectId, location, APPHOSTING_OAUTH_CONN_NAME);
-        while (oauthConn.installationState.stage === "PENDING_USER_OAUTH") {
-            oauthConn = await promptConnectionAuth(oauthConn);
-        }
         const connectionId = generateConnectionId();
         const conn = await createConnection(projectId, location, connectionId, {
             authorizerCredential: (_a = oauthConn.githubConfig) === null || _a === void 0 ? void 0 : _a.authorizerCredential,
@@ -71,20 +76,33 @@ async function linkGitHubRepository(projectId, location) {
         existingConns.push(refreshedConn);
     }
     let { remoteUri, connection } = await promptRepositoryUri(projectId, existingConns);
-    while (remoteUri === "") {
-        await utils.openInBrowser("https://github.com/apps/google-cloud-build/installations/new");
-        await (0, prompt_1.promptOnce)({
-            type: "input",
-            message: "Press ENTER once you have finished configuring your installation's access settings.",
-        });
+    while (CONFIGURE_REMOTE_URI_CHOICES.includes(remoteUri)) {
+        if (remoteUri === ADD_REPO_CHOICE) {
+            await utils.openInBrowser("https://github.com/apps/google-cloud-build/installations/new");
+            await (0, prompt_1.promptOnce)({
+                type: "input",
+                message: "Press ENTER once you have provided the GitHub app installation with access to your desired repository.",
+            });
+        }
+        else if (remoteUri === ADD_CONN_CHOICE) {
+            const connectionId = generateConnectionId();
+            const conn = await createConnection(projectId, location, connectionId, {
+                authorizerCredential: (_b = oauthConn.githubConfig) === null || _b === void 0 ? void 0 : _b.authorizerCredential,
+            });
+            let refreshedConn = conn;
+            while (refreshedConn.installationState.stage !== "COMPLETE") {
+                refreshedConn = await promptAppInstall(conn);
+            }
+            existingConns.push(refreshedConn);
+        }
         const selection = await promptRepositoryUri(projectId, existingConns);
         remoteUri = selection.remoteUri;
         connection = selection.connection;
     }
     const { id: connectionId } = parseConnectionName(connection.name);
     await getOrCreateConnection(projectId, location, connectionId, {
-        authorizerCredential: (_b = connection.githubConfig) === null || _b === void 0 ? void 0 : _b.authorizerCredential,
-        appInstallationId: (_c = connection.githubConfig) === null || _c === void 0 ? void 0 : _c.appInstallationId,
+        authorizerCredential: (_c = connection.githubConfig) === null || _c === void 0 ? void 0 : _c.authorizerCredential,
+        appInstallationId: (_d = connection.githubConfig) === null || _d === void 0 ? void 0 : _d.appInstallationId,
     });
     const repo = await getOrCreateRepository(projectId, location, connectionId, remoteUri);
     utils.logSuccess(`Successfully linked GitHub repository at remote URI`);
@@ -93,28 +111,36 @@ async function linkGitHubRepository(projectId, location) {
 }
 exports.linkGitHubRepository = linkGitHubRepository;
 async function promptRepositoryUri(projectId, connections) {
-    const remoteUriToConnection = {};
-    for (const conn of connections) {
-        const { location, id } = parseConnectionName(conn.name);
-        const resp = await gcb.fetchLinkableRepositories(projectId, location, id);
-        if (resp.repositories && resp.repositories.length > 0) {
-            for (const repo of resp.repositories) {
-                remoteUriToConnection[repo.remoteUri] = conn;
-            }
-        }
-    }
-    const choices = Object.keys(remoteUriToConnection).map((remoteUri) => ({
-        name: extractRepoSlugFromUri(remoteUri) || remoteUri,
-        value: remoteUri,
-    }));
-    choices.push({
-        name: "Missing a repo? Select this option to configure your installation's access settings",
-        value: "",
-    });
+    const { repos, remoteUriToConnection } = await fetchAllRepositories(projectId, connections);
+    const searchRepos = (repos) => async (_, input = "") => {
+        return [
+            new inquirer.Separator(),
+            {
+                name: "Missing a repo? Select this option to configure your installation's access settings",
+                value: ADD_REPO_CHOICE,
+            },
+            {
+                name: "Missing an account or org? Select this option to create a new connection",
+                value: ADD_CONN_CHOICE,
+            },
+            new inquirer.Separator(),
+            ...fuzzy
+                .filter(input, repos, {
+                extract: (repo) => extractRepoSlugFromUri(repo.remoteUri) || "",
+            })
+                .map((result) => {
+                return {
+                    name: extractRepoSlugFromUri(result.original.remoteUri) || "",
+                    value: result.original.remoteUri,
+                };
+            }),
+        ];
+    };
     const remoteUri = await (0, prompt_1.promptOnce)({
-        type: "list",
+        type: "autocomplete",
+        name: "remoteUri",
         message: "Which of the following repositories would you like to deploy?",
-        choices,
+        source: searchRepos(repos),
     });
     return { remoteUri, connection: remoteUriToConnection[remoteUri] };
 }
@@ -217,3 +243,25 @@ async function listAppHostingConnections(projectId) {
         !conn.disabled);
 }
 exports.listAppHostingConnections = listAppHostingConnections;
+async function fetchAllRepositories(projectId, connections) {
+    const repos = [];
+    const remoteUriToConnection = {};
+    const getNextPage = async (conn, pageToken = "") => {
+        const { location, id } = parseConnectionName(conn.name);
+        const resp = await gcb.fetchLinkableRepositories(projectId, location, id, pageToken);
+        if (resp.repositories && resp.repositories.length > 0) {
+            for (const repo of resp.repositories) {
+                repos.push(repo);
+                remoteUriToConnection[repo.remoteUri] = conn;
+            }
+        }
+        if (resp.nextPageToken) {
+            await getNextPage(conn, resp.nextPageToken);
+        }
+    };
+    for (const conn of connections) {
+        await getNextPage(conn);
+    }
+    return { repos, remoteUriToConnection };
+}
+exports.fetchAllRepositories = fetchAllRepositories;

package/lib/init/features/database.js

@@ -12,6 +12,7 @@ const ensureApiEnabled_1 = require("../../ensureApiEnabled");
 const getDefaultDatabaseInstance_1 = require("../../getDefaultDatabaseInstance");
 const error_1 = require("../../error");
 const apiv2_1 = require("../../apiv2");
+const api_1 = require("../../api");
 const DEFAULT_RULES = JSON.stringify({ rules: { ".read": "auth != null", ".write": "auth != null" } }, null, 2);
 async function getDBRules(instanceDetails) {
     if (!instanceDetails || !instanceDetails.name) {
@@ -70,7 +71,7 @@ async function doSetup(setup, config) {
     setup.config = setup.config || {};
     let instanceDetails;
     if (setup.projectId) {
-        await (0, ensureApiEnabled_1.ensure)(setup.projectId, "firebasedatabase.googleapis.com", "database", false);
+        await (0, ensureApiEnabled_1.ensure)(setup.projectId, api_1.rtdbManagementOrigin, "database", false);
         logger_1.logger.info();
         setup.instance =
             setup.instance || (await (0, getDefaultDatabaseInstance_1.getDefaultDatabaseInstance)({ project: setup.projectId }));

package/lib/init/features/extensions/index.js

@@ -4,12 +4,13 @@ exports.doSetup = void 0;
 const requirePermissions_1 = require("../../../requirePermissions");
 const ensureApiEnabled_1 = require("../../../ensureApiEnabled");
 const manifest = require("../../../extensions/manifest");
+const api_1 = require("../../../api");
 async function doSetup(setup, config, options) {
     var _a, _b;
     const projectId = (_b = (_a = setup === null || setup === void 0 ? void 0 : setup.rcfile) === null || _a === void 0 ? void 0 : _a.projects) === null || _b === void 0 ? void 0 : _b.default;
     if (projectId) {
         await (0, requirePermissions_1.requirePermissions)(Object.assign(Object.assign({}, options), { project: projectId }));
-        await Promise.all([(0, ensureApiEnabled_1.ensure)(projectId, "firebaseextensions.googleapis.com", "unused", true)]);
+        await Promise.all([(0, ensureApiEnabled_1.ensure)(projectId, api_1.extensionsOrigin, "unused", true)]);
     }
     return manifest.writeEmptyManifest(config, options);
 }

package/lib/init/features/functions/index.js

@@ -8,6 +8,7 @@ const requirePermissions_1 = require("../../../requirePermissions");
 const ensureApiEnabled_1 = require("../../../ensureApiEnabled");
 const projectConfig_1 = require("../../../functions/projectConfig");
 const error_1 = require("../../../error");
+const api_1 = require("../../../api");
 const MAX_ATTEMPTS = 5;
 async function doSetup(setup, config, options) {
     var _a, _b;
@@ -15,8 +16,8 @@ async function doSetup(setup, config, options) {
     if (projectId) {
         await (0, requirePermissions_1.requirePermissions)(Object.assign(Object.assign({}, options), { project: projectId }));
         await Promise.all([
-            (0, ensureApiEnabled_1.ensure)(projectId, "cloudfunctions.googleapis.com", "unused", true),
-            (0, ensureApiEnabled_1.ensure)(projectId, "runtimeconfig.googleapis.com", "unused", true),
+            (0, ensureApiEnabled_1.ensure)(projectId, api_1.functionsOrigin, "unused", true),
+            (0, ensureApiEnabled_1.ensure)(projectId, api_1.runtimeconfigOrigin, "unused", true),
         ]);
     }
     setup.functions = {};

package/lib/init/features/hosting/github.js

@@ -160,6 +160,11 @@ function writeChannelActionYMLFile(ymlPath, secretName, projectId, script) {
     const workflowConfig = {
         name: "Deploy to Firebase Hosting on PR",
         on: "pull_request",
+        permissions: {
+            checks: "write",
+            contents: "read",
+            "pull-requests": "write",
+        },
         jobs: {
             ["build_and_preview"]: {
                 if: "${{ github.event.pull_request.head.repo.full_name == github.repository }}",

package/lib/prompt.js

@@ -3,6 +3,7 @@ Object.defineProperty(exports, "__esModule", { value: true });
 exports.confirm = exports.promptOnce = exports.prompt = void 0;
 const inquirer = require("inquirer");
 const error_1 = require("./error");
+inquirer.registerPrompt("autocomplete", require("inquirer-autocomplete-prompt"));
 async function prompt(options, questions) {
     const prompts = [];
     for (const question of questions) {

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "firebase-tools",
-  "version": "13.3.0",
+  "version": "13.4.0",
   "description": "Command-Line Interface for Firebase",
   "main": "./lib/index.js",
   "bin": {
@@ -74,15 +74,18 @@
     "cross-env": "^5.1.3",
     "cross-spawn": "^7.0.3",
     "csv-parse": "^5.0.4",
+    "deep-equal-in-any-order": "^2.0.6",
     "exegesis": "^4.1.0",
     "exegesis-express": "^4.0.0",
     "express": "^4.16.4",
     "filesize": "^6.1.0",
     "form-data": "^4.0.0",
     "fs-extra": "^10.1.0",
+    "fuzzy": "^0.1.3",
     "glob": "^7.1.2",
     "google-auth-library": "^7.11.0",
-    "inquirer": "^8.2.0",
+    "inquirer": "^8.2.6",
+    "inquirer-autocomplete-prompt": "^2.0.1",
     "js-yaml": "^3.13.1",
     "jsonwebtoken": "^9.0.0",
     "leven": "^3.1.0",