firebase-tools 14.27.0 → 15.1.0

package/lib/deploy/functions/validate.js

@@ -1,16 +1,22 @@
 "use strict";
 Object.defineProperty(exports, "__esModule", { value: true });
-exports.secretsAreValid = exports.functionIdsAreValid = exports.functionsDirectoryExists = exports.endpointsAreUnique = exports.cpuConfigIsValid = exports.endpointsAreValid = exports.MAX_V2_SCHEDULE_ATTEMPT_DEADLINE_SECONDS = exports.DEFAULT_V2_SCHEDULE_ATTEMPT_DEADLINE_SECONDS = void 0;
+exports.secretsAreValid = exports.functionIdsAreValid = exports.functionsDirectoryExists = exports.endpointsAreUnique = exports.validateTimeoutConfig = exports.cpuConfigIsValid = exports.endpointsAreValid = exports.MAX_V2_SCHEDULE_ATTEMPT_DEADLINE_SECONDS = exports.DEFAULT_V2_SCHEDULE_ATTEMPT_DEADLINE_SECONDS = void 0;
 const path = require("path");
 const clc = require("colorette");
 const error_1 = require("../../error");
 const secretManager_1 = require("../../gcp/secretManager");
 const logger_1 = require("../../logger");
+const functionsDeployHelper_1 = require("./functionsDeployHelper");
+const services_1 = require("./services");
 const fsutils = require("../../fsutils");
 const backend = require("./backend");
 const utils = require("../../utils");
 const secrets = require("../../functions/secrets");
-const services_1 = require("./services");
+const MAX_V1_TIMEOUT_SECONDS = 540;
+const MAX_V2_EVENTS_TIMEOUT_SECONDS = 540;
+const MAX_V2_SCHEDULE_TIMEOUT_SECONDS = 1800;
+const MAX_V2_TASK_QUEUE_TIMEOUT_SECONDS = 1800;
+const MAX_V2_HTTP_TIMEOUT_SECONDS = 3600;
 exports.DEFAULT_V2_SCHEDULE_ATTEMPT_DEADLINE_SECONDS = 180;
 exports.MAX_V2_SCHEDULE_ATTEMPT_DEADLINE_SECONDS = 1800;
 function matchingIds(endpoints, filter) {
@@ -39,6 +45,7 @@ function validateScheduledTimeout(ep) {
 function endpointsAreValid(wantBackend) {
     const endpoints = backend.allEndpoints(wantBackend);
     functionIdsAreValid(endpoints);
+    validateTimeoutConfig(endpoints);
     for (const ep of endpoints) {
         validateScheduledTimeout(ep);
         (0, services_1.serviceForEndpoint)(ep).validateTrigger(ep, wantBackend);
@@ -116,6 +123,46 @@ function cpuConfigIsValid(endpoints) {
     }
 }
 exports.cpuConfigIsValid = cpuConfigIsValid;
+function validateTimeoutConfig(endpoints) {
+    const invalidEndpoints = [];
+    for (const ep of endpoints) {
+        const timeout = ep.timeoutSeconds;
+        if (!timeout) {
+            continue;
+        }
+        let limit;
+        if (ep.platform === "gcfv1") {
+            limit = MAX_V1_TIMEOUT_SECONDS;
+        }
+        else if (backend.isEventTriggered(ep)) {
+            limit = MAX_V2_EVENTS_TIMEOUT_SECONDS;
+        }
+        else if (backend.isScheduleTriggered(ep)) {
+            limit = MAX_V2_SCHEDULE_TIMEOUT_SECONDS;
+        }
+        else if (backend.isTaskQueueTriggered(ep)) {
+            limit = MAX_V2_TASK_QUEUE_TIMEOUT_SECONDS;
+        }
+        else if (backend.isHttpsTriggered(ep) || backend.isCallableTriggered(ep)) {
+            limit = MAX_V2_HTTP_TIMEOUT_SECONDS;
+        }
+        if (limit !== undefined && timeout > limit) {
+            invalidEndpoints.push({ ep, limit });
+        }
+    }
+    if (invalidEndpoints.length === 0) {
+        return;
+    }
+    const invalidList = invalidEndpoints
+        .sort((a, b) => backend.compareFunctions(a.ep, b.ep))
+        .map(({ ep, limit }) => `\t${(0, functionsDeployHelper_1.getFunctionLabel)(ep)}: ${ep.timeoutSeconds}s (limit: ${limit}s)`)
+        .join("\n");
+    const msg = "The following functions have timeouts that exceed the maximum allowed for their trigger type:\n\n" +
+        invalidList +
+        "\n\nFor more information, see https://firebase.google.com/docs/functions/quotas#time_limits";
+    throw new error_1.FirebaseError(msg);
+}
+exports.validateTimeoutConfig = validateTimeoutConfig;
 function endpointsAreUnique(backends) {
     const endpointToCodebases = {};
     for (const [codebase, b] of Object.entries(backends)) {

package/lib/emulator/commandUtils.js

@@ -385,5 +385,5 @@ async function checkJavaMajorVersion() {
 }
 exports.checkJavaMajorVersion = checkJavaMajorVersion;
 exports.MIN_SUPPORTED_JAVA_MAJOR_VERSION = 21;
-exports.JAVA_DEPRECATION_WARNING = "firebase-tools will drop support for Java version < 21 soon in firebase-tools@15. " +
+exports.JAVA_DEPRECATION_WARNING = "firebase-tools no longer supports Java version before 21. " +
     "Please install a JDK at version 21 or above to get a compatible runtime.";

package/lib/emulator/controller.js

@@ -180,8 +180,7 @@ async function startAll(options, showUI = true, runningTestScript = false) {
     const deprecationNotices = [];
     if (targets.some(downloadableEmulators_1.requiresJava)) {
         if ((await commandUtils.checkJavaMajorVersion()) < commandUtils_1.MIN_SUPPORTED_JAVA_MAJOR_VERSION) {
-            utils.logLabeledError("emulators", commandUtils_1.JAVA_DEPRECATION_WARNING, "warn");
-            deprecationNotices.push(commandUtils_1.JAVA_DEPRECATION_WARNING);
+            throw new error_1.FirebaseError(commandUtils_1.JAVA_DEPRECATION_WARNING);
         }
     }
     if (options.logVerbosity) {

package/lib/emulator/databaseEmulator.js

@@ -12,7 +12,6 @@ const constants_1 = require("./constants");
 const registry_1 = require("./registry");
 const emulatorLogger_1 = require("./emulatorLogger");
 const error_1 = require("../error");
-const parseBoltRules_1 = require("../parseBoltRules");
 const utils_1 = require("../utils");
 class DatabaseEmulator {
     constructor(args) {
@@ -123,10 +122,7 @@ class DatabaseEmulator {
     }
     async updateRules(instance, rulesPath) {
         var _a;
-        const rulesExt = path.extname(rulesPath);
-        const content = rulesExt === ".bolt"
-            ? (0, parseBoltRules_1.parseBoltRules)(rulesPath).toString()
-            : fs.readFileSync(rulesPath, "utf8");
+        const content = fs.readFileSync(rulesPath, "utf8");
         try {
             await registry_1.EmulatorRegistry.client(types_1.Emulators.DATABASE).put(`/.settings/rules.json`, content, {
                 headers: { Authorization: "Bearer owner" },

package/lib/emulator/downloadableEmulatorInfo.json

@@ -8,12 +8,12 @@
         "downloadPathRelativeToCacheDir": "firebase-database-emulator-v4.11.2.jar"
     },
     "firestore": {
-        "version": "1.19.8",
-        "expectedSize": 63634791,
-        "expectedChecksum": "9b43a6daa590678de9b7df6d68260395",
-        "expectedChecksumSHA256": "9d43599ed6151199e8d604dc87fac51218e49e5f3a48519b1ae560bbe5e3382d",
-        "remoteUrl": "https://storage.googleapis.com/firebase-preview-drop/emulator/cloud-firestore-emulator-v1.19.8.jar",
-        "downloadPathRelativeToCacheDir": "cloud-firestore-emulator-v1.19.8.jar"
+        "version": "1.20.2",
+        "expectedSize": 123046947,
+        "expectedChecksum": "3b04168138ff8ab17025fe7756e05dc9",
+        "expectedChecksumSHA256": "4a117fc297b1441eac1b7756e80442e86ef88865b9e3caf6f59eabf83da574f8",
+        "remoteUrl": "https://storage.googleapis.com/firebase-preview-drop/emulator/cloud-firestore-emulator-v1.20.2.jar",
+        "downloadPathRelativeToCacheDir": "cloud-firestore-emulator-v1.20.2.jar"
     },
     "storage": {
         "version": "1.1.3",
@@ -54,36 +54,36 @@
     },
     "dataconnect": {
         "darwin": {
-            "version": "2.17.3",
-            "expectedSize": 30053216,
-            "expectedChecksum": "b9bc9fefd65143b8ed3a5b0f0e1f26fa",
-            "expectedChecksumSHA256": "03766907fdbd513e333602f989ebaf486cd53a73d9cdefd221a02988f757a7cc",
-            "remoteUrl": "https://storage.googleapis.com/firemat-preview-drop/emulator/dataconnect-emulator-macos-amd64-v2.17.3",
-            "downloadPathRelativeToCacheDir": "dataconnect-emulator-2.17.3"
+            "version": "3.0.1",
+            "expectedSize": 30212960,
+            "expectedChecksum": "5a556a6e52d8e4707be9e65555cf6fc0",
+            "expectedChecksumSHA256": "04507e034d26a9e1053a246508351881473c82daf86357a28472e112f50e0128",
+            "remoteUrl": "https://storage.googleapis.com/firemat-preview-drop/emulator/dataconnect-emulator-macos-amd64-v3.0.1",
+            "downloadPathRelativeToCacheDir": "dataconnect-emulator-3.0.1"
         },
         "darwin_arm64": {
-            "version": "2.17.3",
-            "expectedSize": 29510226,
-            "expectedChecksum": "a585f578ac6891366059a6c4814b10cc",
-            "expectedChecksumSHA256": "c1b6ad2976d6399435a11a9079a5e63e19b0af04c792cdb843a7464be793618c",
-            "remoteUrl": "https://storage.googleapis.com/firemat-preview-drop/emulator/dataconnect-emulator-macos-arm64-v2.17.3",
-            "downloadPathRelativeToCacheDir": "dataconnect-emulator-2.17.3"
+            "version": "3.0.1",
+            "expectedSize": 29680322,
+            "expectedChecksum": "31b21517979ce3acc408c432023a97e5",
+            "expectedChecksumSHA256": "36e2db3abf7a024436ba045805153a5f7ae2845f34658c187c38aeff329c6626",
+            "remoteUrl": "https://storage.googleapis.com/firemat-preview-drop/emulator/dataconnect-emulator-macos-arm64-v3.0.1",
+            "downloadPathRelativeToCacheDir": "dataconnect-emulator-3.0.1"
         },
         "win32": {
-            "version": "2.17.3",
-            "expectedSize": 30547968,
-            "expectedChecksum": "5a9d3490a1de85978441afff8582e7c3",
-            "expectedChecksumSHA256": "8f2b8d38cbad8138cc33479456c91c5e4b046c689a4209a63fbb0c4dca9c6af8",
-            "remoteUrl": "https://storage.googleapis.com/firemat-preview-drop/emulator/dataconnect-emulator-windows-amd64-v2.17.3",
-            "downloadPathRelativeToCacheDir": "dataconnect-emulator-2.17.3.exe"
+            "version": "3.0.1",
+            "expectedSize": 30712832,
+            "expectedChecksum": "953603294bf7112a5100936db813f928",
+            "expectedChecksumSHA256": "4a71d6ce535302a28215e08cc3b645818cf8d8204f4bb2512455d3b7d3c17df1",
+            "remoteUrl": "https://storage.googleapis.com/firemat-preview-drop/emulator/dataconnect-emulator-windows-amd64-v3.0.1",
+            "downloadPathRelativeToCacheDir": "dataconnect-emulator-3.0.1.exe"
         },
         "linux": {
-            "version": "2.17.3",
-            "expectedSize": 29974712,
-            "expectedChecksum": "aacf4f08de500df0913ff8ec6261a0ad",
-            "expectedChecksumSHA256": "2d593500745c4ce0d522d6f5f75c89ed413ad4853891b8afafb5cbfbb45d4abd",
-            "remoteUrl": "https://storage.googleapis.com/firemat-preview-drop/emulator/dataconnect-emulator-linux-amd64-v2.17.3",
-            "downloadPathRelativeToCacheDir": "dataconnect-emulator-2.17.3"
+            "version": "3.0.1",
+            "expectedSize": 30138552,
+            "expectedChecksum": "48d5f03c2edea8d4c6b200dccc9bf8a8",
+            "expectedChecksumSHA256": "cdf2d37f69b4372c0757afcc6c6ed4d7c6162fe7d29d9191e20e1411e116a665",
+            "remoteUrl": "https://storage.googleapis.com/firemat-preview-drop/emulator/dataconnect-emulator-linux-amd64-v3.0.1",
+            "downloadPathRelativeToCacheDir": "dataconnect-emulator-3.0.1"
         }
     }
 }

package/lib/emulator/functionsEmulator.js

@@ -6,7 +6,6 @@ const path = require("path");
 const express = require("express");
 const clc = require("colorette");
 const http = require("http");
-const jwt = require("jsonwebtoken");
 const cors = require("cors");
 const semver = require("semver");
 const url_1 = require("url");
@@ -1098,31 +1097,6 @@ class FunctionsEmulator {
         }
         return registry_1.EmulatorRegistry.getInfo(emulator);
     }
-    tokenFromAuthHeader(authHeader) {
-        const match = /^Bearer (.*)$/.exec(authHeader);
-        if (!match) {
-            return;
-        }
-        let idToken = match[1];
-        logger_1.logger.debug(`ID Token: ${idToken}`);
-        if (idToken && idToken.includes("=")) {
-            idToken = idToken.replace(/[=]+?\./g, ".");
-            logger_1.logger.debug(`ID Token contained invalid padding, new value: ${idToken}`);
-        }
-        try {
-            const decoded = jwt.decode(idToken, { complete: true });
-            if (!decoded || typeof decoded !== "object") {
-                logger_1.logger.debug(`Failed to decode ID Token: ${decoded}`);
-                return;
-            }
-            const claims = decoded.payload;
-            claims.uid = claims.sub;
-            return claims;
-        }
-        catch (e) {
-            return;
-        }
-    }
     async handleHttpsTrigger(req, res) {
         var _a;
         const method = req.method;
@@ -1150,20 +1124,6 @@ class FunctionsEmulator {
                 req.headers["content-length"] = reqBody.length.toString();
             }
         }
-        const isCallable = trigger.labels && trigger.labels["deployment-callable"] === "true";
-        const authHeader = req.header("Authorization");
-        if (authHeader && isCallable && trigger.platform !== "gcfv2") {
-            const token = this.tokenFromAuthHeader(authHeader);
-            if (token) {
-                const contextAuth = {
-                    uid: token.uid,
-                    token: token,
-                };
-                req.headers[functionsEmulatorShared_1.HttpConstants.ORIGINAL_AUTH_HEADER] = req.headers["authorization"];
-                delete req.headers["authorization"];
-                req.headers[functionsEmulatorShared_1.HttpConstants.CALLABLE_AUTH_HEADER] = encodeURIComponent(JSON.stringify(contextAuth));
-            }
-        }
         void (0, track_1.trackEmulator)(EVENT_INVOKE_GA4, {
             function_service: (0, functionsEmulatorShared_1.getFunctionService)(trigger),
         });

package/lib/emulator/functionsEmulatorRuntime.js

@@ -1,6 +1,5 @@
 "use strict";
 Object.defineProperty(exports, "__esModule", { value: true });
-const fs = require("fs");
 const express = require("express");
 const path = require("path");
 const bodyParser = require("body-parser");
@@ -138,7 +137,7 @@ async function assertResolveDeveloperNodeModule(name) {
 async function verifyDeveloperNodeModules() {
     const modBundles = [
         { name: "firebase-admin", isDev: false, minVersion: "8.9.0" },
-        { name: "firebase-functions", isDev: false, minVersion: "3.13.1" },
+        { name: "firebase-functions", isDev: false, minVersion: "3.16.0" },
     ];
     for (const modBundle of modBundles) {
         const resolution = await resolveDeveloperNodeModule(modBundle.name);
@@ -264,87 +263,10 @@ async function initializeFirebaseFunctionsStubs() {
     httpsProvider.onRequest = (handler) => {
         return httpsProvider[onRequestInnerMethodName](handler, {});
     };
-    const onCallInnerMethodName = "_onCallWithOptions";
-    const onCallMethodOriginal = httpsProvider[onCallInnerMethodName];
-    if (onCallMethodOriginal.length === 3) {
-        httpsProvider[onCallInnerMethodName] = (opts, handler, deployOpts) => {
-            const wrapped = wrapCallableHandler(handler);
-            const cf = onCallMethodOriginal(opts, wrapped, deployOpts);
-            return cf;
-        };
-    }
-    else {
-        httpsProvider[onCallInnerMethodName] = (handler, opts) => {
-            const wrapped = wrapCallableHandler(handler);
-            const cf = onCallMethodOriginal(wrapped, opts);
-            return cf;
-        };
-    }
-    httpsProvider.onCall = function (optsOrHandler, handler) {
-        if (onCallMethodOriginal.length === 3) {
-            let opts;
-            if (arguments.length === 1) {
-                opts = {};
-                handler = optsOrHandler;
-            }
-            else {
-                opts = optsOrHandler;
-            }
-            return httpsProvider[onCallInnerMethodName](opts, handler, {});
-        }
-        else {
-            return httpsProvider[onCallInnerMethodName](optsOrHandler, {});
-        }
-    };
-}
-function wrapCallableHandler(handler) {
-    const newHandler = (data, context) => {
-        if (context.rawRequest) {
-            const authContext = context.rawRequest.header(functionsEmulatorShared_1.HttpConstants.CALLABLE_AUTH_HEADER);
-            if (authContext) {
-                logDebug("Callable functions auth override", {
-                    key: functionsEmulatorShared_1.HttpConstants.CALLABLE_AUTH_HEADER,
-                    value: authContext,
-                });
-                context.auth = JSON.parse(decodeURIComponent(authContext));
-                delete context.rawRequest.headers[functionsEmulatorShared_1.HttpConstants.CALLABLE_AUTH_HEADER];
-            }
-            else {
-                logDebug("No callable functions auth found");
-            }
-            const originalAuth = context.rawRequest.header(functionsEmulatorShared_1.HttpConstants.ORIGINAL_AUTH_HEADER);
-            if (originalAuth) {
-                context.rawRequest.headers["authorization"] = originalAuth;
-                delete context.rawRequest.headers[functionsEmulatorShared_1.HttpConstants.ORIGINAL_AUTH_HEADER];
-            }
-        }
-        return handler(data, context);
-    };
-    return newHandler;
 }
 function getDefaultConfig() {
     return JSON.parse(process.env.FIREBASE_CONFIG || "{}");
 }
-function initializeRuntimeConfig() {
-    if (!process.env.CLOUD_RUNTIME_CONFIG) {
-        const configPath = `${process.cwd()}/.runtimeconfig.json`;
-        try {
-            const configContent = fs.readFileSync(configPath, "utf8");
-            if (configContent) {
-                try {
-                    JSON.parse(configContent.toString());
-                    logDebug(`Found local functions config: ${configPath}`);
-                    process.env.CLOUD_RUNTIME_CONFIG = configContent.toString();
-                }
-                catch (e) {
-                    new types_1.EmulatorLog("SYSTEM", "function-runtimeconfig-json-invalid", "").log();
-                }
-            }
-        }
-        catch (e) {
-        }
-    }
-}
 async function initializeFirebaseAdminStubs() {
     const adminResolution = await assertResolveDeveloperNodeModule("firebase-admin");
     const localAdminModule = require(adminResolution.resolution);
@@ -453,43 +375,6 @@ function warnAboutStorageProd() {
     }
     new types_1.EmulatorLog("WARN_ONCE", "runtime-status", "The Firebase Storage emulator is not running, so calls to Firebase Storage will affect production.").log();
 }
-async function initializeFunctionsConfigHelper() {
-    const functionsResolution = await assertResolveDeveloperNodeModule("firebase-functions");
-    if ((0, functionsEmulatorUtils_1.compareVersionStrings)(functionsResolution.version, "7.0.0") >= 0) {
-        logDebug("Detected firebase-functions v7+, skipping config helper.");
-        return;
-    }
-    const localFunctionsModule = require(functionsResolution.resolution);
-    logDebug("Checked functions.config()", {
-        config: localFunctionsModule.config(),
-    });
-    const originalConfig = localFunctionsModule.config();
-    const proxiedConfig = new Proxied(originalConfig)
-        .any((parentConfig, parentKey) => {
-        const isInternal = parentKey.startsWith("Symbol(") || parentKey.startsWith("inspect");
-        if (!parentConfig[parentKey] && !isInternal) {
-            new types_1.EmulatorLog("SYSTEM", "functions-config-missing-value", "", {
-                key: parentKey,
-            }).log();
-        }
-        return parentConfig[parentKey];
-    })
-        .finalize();
-    const functionsModuleProxy = new Proxied(localFunctionsModule);
-    const proxiedFunctionsModule = functionsModuleProxy
-        .when("config", () => () => {
-        return proxiedConfig;
-    })
-        .finalize();
-    const v = require.cache[functionsResolution.resolution];
-    require.cache[functionsResolution.resolution] = Object.assign(v, {
-        exports: proxiedFunctionsModule,
-        path: path.dirname(functionsResolution.resolution),
-    });
-    logDebug("firebase-functions has been stubbed.", {
-        functionsResolution,
-    });
-}
 function rawBodySaver(req, res, buf) {
     req.rawBody = buf;
 }
@@ -580,9 +465,7 @@ async function initializeRuntime() {
         new types_1.EmulatorLog("INFO", "runtime-status", `Your functions could not be parsed due to an issue with your node_modules (see above)`).log();
         return;
     }
-    initializeRuntimeConfig();
     initializeNetworkFiltering();
-    await initializeFunctionsConfigHelper();
     await initializeFirebaseFunctionsStubs();
     await initializeFirebaseAdminStubs();
 }

package/lib/emulator/functionsEmulatorShared.js

@@ -1,6 +1,6 @@
 "use strict";
 Object.defineProperty(exports, "__esModule", { value: true });
-exports.toBackendInfo = exports.getSecretLocalPath = exports.getSignatureType = exports.formatHost = exports.findModuleRoot = exports.waitForBody = exports.getServiceFromEventType = exports.getFunctionService = exports.getTemporarySocketPath = exports.getEmulatedTriggersFromDefinitions = exports.emulatedFunctionsByRegion = exports.emulatedFunctionsFromEndpoints = exports.prepareEndpoints = exports.eventServiceImplemented = exports.EmulatedTrigger = exports.HttpConstants = exports.EVENTARC_SOURCE_ENV = void 0;
+exports.toBackendInfo = exports.getSecretLocalPath = exports.getSignatureType = exports.formatHost = exports.findModuleRoot = exports.waitForBody = exports.getServiceFromEventType = exports.getFunctionService = exports.getTemporarySocketPath = exports.getEmulatedTriggersFromDefinitions = exports.emulatedFunctionsByRegion = exports.emulatedFunctionsFromEndpoints = exports.prepareEndpoints = exports.eventServiceImplemented = exports.EmulatedTrigger = exports.EVENTARC_SOURCE_ENV = void 0;
 const os = require("os");
 const path = require("path");
 const fs = require("fs");
@@ -23,11 +23,6 @@ const V2_EVENTS = [
     ...events.v2.FIRESTORE_EVENTS,
 ];
 exports.EVENTARC_SOURCE_ENV = "EVENTARC_CLOUD_EVENT_SOURCE";
-class HttpConstants {
-}
-exports.HttpConstants = HttpConstants;
-HttpConstants.CALLABLE_AUTH_HEADER = "x-callable-context-auth";
-HttpConstants.ORIGINAL_AUTH_HEADER = "x-original-auth";
 class EmulatedTrigger {
     constructor(definition, module) {
         this.definition = definition;

package/lib/experiments.js

@@ -26,7 +26,7 @@ exports.ALL_EXPERIMENTS = experiments({
             "of deploys. This has been made an experiment due to backend bugs that are " +
             "temporarily causing failures in some regions with this optimization enabled",
         public: true,
-        default: true,
+        default: false,
     },
     deletegcfartifacts: {
         shortDescription: `Add the ${(0, colorette_1.bold)("functions:deletegcfartifacts")} command to purge docker build images`,
@@ -39,6 +39,13 @@ exports.ALL_EXPERIMENTS = experiments({
             `Registry. The ${(0, colorette_1.bold)("functions:deletegcfartifacts")} command ` +
             "will delete all Docker images created by Google Cloud Functions irrespective " +
             "of how that image was created.",
+        public: false,
+    },
+    legacyRuntimeConfigCommands: {
+        shortDescription: "Expose legacy functions.config() CLI commands",
+        fullDescription: "The Cloud Runtime Config API is deprecated. Enable this experiment to continue using the " +
+            "`functions:config:*` commands while you migrate to the Firebase Functions params APIs.",
+        default: true,
         public: true,
     },
     runfunctions: {

package/lib/extensions/extensionsHelper.js

@@ -411,7 +411,6 @@ async function ensureExtensionsPublisherApiEnabled(options) {
 exports.ensureExtensionsPublisherApiEnabled = ensureExtensionsPublisherApiEnabled;
 async function archiveAndUploadSource(extPath, bucketName) {
     const zippedSource = await (0, archiveDirectory_1.archiveDirectory)(extPath, {
-        type: "zip",
         ignore: ["node_modules", ".git"],
     });
     const res = await (0, storage_1.uploadObject)(zippedSource, bucketName);

package/lib/frameworks/constants.js

@@ -22,7 +22,7 @@ exports.FIREBASE_FUNCTIONS_VERSION = "^6.0.1";
 exports.FIREBASE_ADMIN_VERSION = "^11.11.1";
 exports.SHARP_VERSION = "^0.32 || ^0.33";
 exports.NODE_VERSION = parseInt(process.versions.node, 10);
-exports.VALID_ENGINES = { node: [16, 18, 20] };
+exports.VALID_ENGINES = { node: [20, 22, 24] };
 exports.VALID_LOCALE_FORMATS = [/^ALL_[a-z]+$/, /^[a-z]+_ALL$/, /^[a-z]+(_[a-z]+)?$/];
 exports.DEFAULT_REGION = "us-central1";
 exports.ALLOWED_SSR_REGIONS = [

package/lib/fsAsync.js

@@ -7,8 +7,10 @@ const _ = require("lodash");
 const minimatch = require("minimatch");
 const path_1 = require("path");
 async function readdirRecursiveHelper(options) {
-    const dirContents = (0, fs_extra_1.readdirSync)(options.path);
-    const fullPaths = dirContents.map((n) => (0, path_1.join)(options.path, n));
+    const dirContents = (0, fs_extra_1.readdirSync)(options.path, { withFileTypes: true });
+    const fullPaths = dirContents
+        .filter((n) => !options.ignoreSymlinks || !n.isSymbolicLink())
+        .map((n) => (0, path_1.join)(options.path, n.name));
     const filteredPaths = fullPaths.filter((p) => !options.filter(p));
     const filePromises = [];
     for (const p of filteredPaths) {
@@ -20,7 +22,12 @@ async function readdirRecursiveHelper(options) {
             continue;
         }
         if (options.maxDepth > 1) {
-            filePromises.push(readdirRecursiveHelper({ path: p, filter: options.filter, maxDepth: options.maxDepth - 1 }));
+            filePromises.push(readdirRecursiveHelper({
+                path: p,
+                filter: options.filter,
+                maxDepth: options.maxDepth - 1,
+                ignoreSymlinks: options.ignoreSymlinks,
+            }));
         }
     }
     const files = await Promise.all(filePromises);
@@ -49,6 +56,7 @@ async function readdirRecursive(options) {
         path: options.path,
         filter: filter,
         maxDepth,
+        ignoreSymlinks: !!options.ignoreSymlinks,
     });
 }
 exports.readdirRecursive = readdirRecursive;

package/lib/functionsConfig.js

@@ -1,6 +1,6 @@
 "use strict";
 Object.defineProperty(exports, "__esModule", { value: true });
-exports.parseUnsetArgs = exports.parseSetArgs = exports.materializeAll = exports.materializeConfig = exports.setVariablesRecursive = exports.getFirebaseConfig = exports.getAppEngineLocation = exports.idsToVarName = exports.varNameToIds = exports.ensureApi = exports.RESERVED_NAMESPACES = void 0;
+exports.parseUnsetArgs = exports.parseSetArgs = exports.materializeAll = exports.materializeConfig = exports.setVariablesRecursive = exports.getFirebaseConfig = exports.getAppEngineLocation = exports.idsToVarName = exports.varNameToIds = exports.ensureApi = exports.ensureLegacyRuntimeConfigCommandsEnabled = exports.logFunctionsConfigDeprecationWarning = exports.getFunctionsConfigDeprecationMessage = exports.RESERVED_NAMESPACES = void 0;
 const _ = require("lodash");
 const clc = require("colorette");
 const api_1 = require("./api");
@@ -9,8 +9,46 @@ const ensureApiEnabled_1 = require("./ensureApiEnabled");
 const error_1 = require("./error");
 const projectUtils_1 = require("./projectUtils");
 const runtimeconfig = require("./gcp/runtimeconfig");
+const experiments = require("./experiments");
+const utils_1 = require("./utils");
 exports.RESERVED_NAMESPACES = ["firebase"];
 const apiClient = new apiv2_1.Client({ urlPrefix: (0, api_1.firebaseApiOrigin)() });
+const LEGACY_RUNTIME_CONFIG_EXPERIMENT = "legacyRuntimeConfigCommands";
+const FUNCTIONS_CONFIG_DEPRECATION_MESSAGE = `DEPRECATION NOTICE: Action required before March 2026
+
+The functions.config() API and the Cloud Runtime Config service are deprecated. Deploys that rely on functions.config() will fail once Runtime Config shuts down in March 2026.
+
+The legacy functions:config:* CLI commands are deprecated and will be removed before March 2026.
+
+Learn how to migrate from functions.config() to the params package:
+
+https://firebase.google.com/docs/functions/config-env#migrate-config
+
+To convert existing functions.config() values to params, try the interactive migration command:
+
+  firebase functions:config:export
+`;
+const LEGACY_GUIDANCE_MESSAGE = `${FUNCTIONS_CONFIG_DEPRECATION_MESSAGE}
+
+To run this legacy command temporarily, run the following command and try again:
+
+  firebase experiments:enable ${LEGACY_RUNTIME_CONFIG_EXPERIMENT}
+`;
+function getFunctionsConfigDeprecationMessage() {
+    return FUNCTIONS_CONFIG_DEPRECATION_MESSAGE;
+}
+exports.getFunctionsConfigDeprecationMessage = getFunctionsConfigDeprecationMessage;
+function logFunctionsConfigDeprecationWarning() {
+    (0, utils_1.logWarningToStderr)(FUNCTIONS_CONFIG_DEPRECATION_MESSAGE);
+}
+exports.logFunctionsConfigDeprecationWarning = logFunctionsConfigDeprecationWarning;
+function ensureLegacyRuntimeConfigCommandsEnabled() {
+    if (experiments.isEnabled(LEGACY_RUNTIME_CONFIG_EXPERIMENT)) {
+        return;
+    }
+    throw new error_1.FirebaseError(LEGACY_GUIDANCE_MESSAGE, { exit: 1 });
+}
+exports.ensureLegacyRuntimeConfigCommandsEnabled = ensureLegacyRuntimeConfigCommandsEnabled;
 function keyToIds(key) {
     const keyParts = key.split(".");
     const variable = keyParts.slice(1).join("/");

package/lib/gcp/cloudsql/cloudsqladmin.js

@@ -51,7 +51,7 @@ function instanceConsoleLink(projectId, instanceId) {
     return `https://console.cloud.google.com/sql/instances/${instanceId}/overview?project=${projectId}`;
 }
 exports.instanceConsoleLink = instanceConsoleLink;
-exports.DEFAULT_DATABASE_VERSION = "POSTGRES_15";
+exports.DEFAULT_DATABASE_VERSION = "POSTGRES_17";
 async function createInstance(args) {
     const databaseFlags = [{ name: "cloudsql.iam_authentication", value: "on" }];
     if (args.enableGoogleMlIntegration) {

package/lib/index.js

@@ -3,6 +3,7 @@ const program = require("commander");
 const clc = require("colorette");
 const leven = require("leven");
 const logger_1 = require("./logger");
+const command_1 = require("./command");
 const pkg = require("../package.json");
 program.version(pkg.version);
 program.option("-P, --project <alias_or_project_id>", "the Firebase project to use for this command");
@@ -13,6 +14,7 @@ program.option("--non-interactive", "error out of the command instead of waiting
 program.option("-i, --interactive", "force prompts to be displayed");
 program.option("--debug", "print verbose debug output and keep a debug log file");
 program.option("-c, --config <path>", "path to the firebase.json file to use for configuration");
+program.allowUnknownOption();
 const client = {
     cli: program,
     logger: require("./logger"),
@@ -23,6 +25,26 @@ const client = {
                 return client.cli.commands[i];
             }
         }
+        const keys = name.split(":");
+        let obj = client;
+        for (const key of keys) {
+            if (!obj || (typeof obj !== "object" && typeof obj !== "function")) {
+                return;
+            }
+            const nextKey = Object.keys(obj).find((k) => k.toLowerCase() === key.toLowerCase());
+            if (!nextKey) {
+                return;
+            }
+            obj = obj[nextKey];
+        }
+        if ((0, command_1.isCommandModule)(obj)) {
+            obj.load();
+            for (let i = 0; i < client.cli.commands.length; i++) {
+                if (client.cli.commands[i]._name === name) {
+                    return client.cli.commands[i];
+                }
+            }
+        }
         return;
     },
 };
@@ -53,8 +75,29 @@ const RENAMED_COMMANDS = {
     "prefs:token": "login:ci",
 };
 program.action((_, args) => {
-    (0, logger_1.useConsoleLoggers)();
     const cmd = args[0];
+    const keys = cmd.split(":");
+    let obj = client;
+    let hit = true;
+    for (const key of keys) {
+        if (!obj || (typeof obj !== "object" && typeof obj !== "function")) {
+            hit = false;
+            break;
+        }
+        const nextKey = Object.keys(obj).find((k) => k.toLowerCase() === key.toLowerCase());
+        if (!nextKey) {
+            hit = false;
+            break;
+        }
+        obj = obj[nextKey];
+    }
+    if (hit && (0, command_1.isCommandModule)(obj)) {
+        obj.load();
+        client.cli.allowUnknownOption(false);
+        client.cli.parse(process.argv);
+        return;
+    }
+    (0, logger_1.useConsoleLoggers)();
     logger_1.logger.error(clc.bold(clc.red("Error:")), clc.bold(cmd), "is not a Firebase command");
     if (RENAMED_COMMANDS[cmd]) {
         logger_1.logger.error();