firebase-tools 14.3.0 → 14.4.0

package/lib/api.js

@@ -1,7 +1,7 @@
 "use strict";
 Object.defineProperty(exports, "__esModule", { value: true });
-exports.hostingApiOrigin = exports.firebaseStorageOrigin = exports.storageOrigin = exports.runtimeconfigOrigin = exports.rulesOrigin = exports.resourceManagerOrigin = exports.remoteConfigApiOrigin = exports.rtdbMetadataOrigin = exports.rtdbManagementOrigin = exports.realtimeOrigin = exports.extensionsTOSOrigin = exports.extensionsPublisherOrigin = exports.extensionsOrigin = exports.iamOrigin = exports.identityOrigin = exports.hostingOrigin = exports.googleOrigin = exports.pubsubOrigin = exports.cloudTasksOrigin = exports.cloudschedulerOrigin = exports.cloudCompanionOrigin = exports.cloudbuildOrigin = exports.functionsDefaultRegion = exports.runOrigin = exports.functionsV2Origin = exports.functionsOrigin = exports.firestoreOrigin = exports.firestoreOriginOrEmulator = exports.firedataOrigin = exports.firebaseExtensionsRegistryOrigin = exports.firebaseApiOrigin = exports.eventarcOrigin = exports.dynamicLinksKey = exports.dynamicLinksOrigin = exports.consoleOrigin = exports.authOrigin = exports.apphostingGitHubAppInstallationURL = exports.apphostingP4SADomain = exports.apphostingOrigin = exports.appDistributionOrigin = exports.artifactRegistryDomain = exports.developerConnectP4SADomain = exports.developerConnectOrigin = exports.containerRegistryDomain = exports.cloudMonitoringOrigin = exports.cloudloggingOrigin = exports.cloudbillingOrigin = exports.clientSecret = exports.clientId = exports.authProxyOrigin = void 0;
-exports.setScopes = exports.getScopes = exports.vertexAIOrigin = exports.cloudSQLAdminOrigin = exports.dataConnectLocalConnString = exports.dataconnectP4SADomain = exports.dataconnectOrigin = exports.githubClientSecret = exports.githubClientId = exports.computeOrigin = exports.secretManagerOrigin = exports.githubApiOrigin = exports.githubOrigin = exports.serviceUsageOrigin = exports.cloudRunApiOrigin = void 0;
+exports.runtimeconfigOrigin = exports.rulesOrigin = exports.resourceManagerOrigin = exports.crashlyticsApiOrigin = exports.messagingApiOrigin = exports.remoteConfigApiOrigin = exports.rtdbMetadataOrigin = exports.rtdbManagementOrigin = exports.realtimeOrigin = exports.extensionsTOSOrigin = exports.extensionsPublisherOrigin = exports.extensionsOrigin = exports.iamOrigin = exports.identityOrigin = exports.hostingOrigin = exports.googleOrigin = exports.pubsubOrigin = exports.cloudTasksOrigin = exports.cloudschedulerOrigin = exports.cloudCompanionOrigin = exports.cloudbuildOrigin = exports.functionsDefaultRegion = exports.runOrigin = exports.functionsV2Origin = exports.functionsOrigin = exports.firestoreOrigin = exports.firestoreOriginOrEmulator = exports.firedataOrigin = exports.firebaseExtensionsRegistryOrigin = exports.firebaseApiOrigin = exports.eventarcOrigin = exports.dynamicLinksKey = exports.dynamicLinksOrigin = exports.consoleOrigin = exports.authManagementOrigin = exports.authOrigin = exports.apphostingGitHubAppInstallationURL = exports.apphostingP4SADomain = exports.apphostingOrigin = exports.appDistributionOrigin = exports.artifactRegistryDomain = exports.developerConnectP4SADomain = exports.developerConnectOrigin = exports.containerRegistryDomain = exports.cloudMonitoringOrigin = exports.cloudloggingOrigin = exports.cloudbillingOrigin = exports.clientSecret = exports.clientId = exports.authProxyOrigin = void 0;
+exports.setScopes = exports.getScopes = exports.cloudAiCompanionOrigin = exports.vertexAIOrigin = exports.cloudSQLAdminOrigin = exports.dataConnectLocalConnString = exports.dataconnectP4SADomain = exports.dataconnectOrigin = exports.githubClientSecret = exports.githubClientId = exports.computeOrigin = exports.secretManagerOrigin = exports.githubApiOrigin = exports.githubOrigin = exports.serviceUsageOrigin = exports.cloudRunApiOrigin = exports.hostingApiOrigin = exports.firebaseStorageOrigin = exports.storageOrigin = void 0;
 const constants_1 = require("./emulator/constants");
 const logger_1 = require("./logger");
 const scopes = require("./scopes");
@@ -37,6 +37,8 @@ const apphostingGitHubAppInstallationURL = () => utils.envOverride("FIREBASE_APP
 exports.apphostingGitHubAppInstallationURL = apphostingGitHubAppInstallationURL;
 const authOrigin = () => utils.envOverride("FIREBASE_AUTH_URL", "https://accounts.google.com");
 exports.authOrigin = authOrigin;
+const authManagementOrigin = () => utils.envOverride("FIREBASE_AUTH_MANAGEMENT_URL", "https://identitytoolkit.googleapis.com");
+exports.authManagementOrigin = authManagementOrigin;
 const consoleOrigin = () => utils.envOverride("FIREBASE_CONSOLE_URL", "https://console.firebase.google.com");
 exports.consoleOrigin = consoleOrigin;
 const dynamicLinksOrigin = () => utils.envOverride("FIREBASE_DYNAMIC_LINKS_URL", "https://firebasedynamiclinks.googleapis.com");
@@ -100,6 +102,10 @@ const rtdbMetadataOrigin = () => utils.envOverride("FIREBASE_RTDB_METADATA_URL",
 exports.rtdbMetadataOrigin = rtdbMetadataOrigin;
 const remoteConfigApiOrigin = () => utils.envOverride("FIREBASE_REMOTE_CONFIG_URL", "https://firebaseremoteconfig.googleapis.com");
 exports.remoteConfigApiOrigin = remoteConfigApiOrigin;
+const messagingApiOrigin = () => utils.envOverride("FIREBASE_MESSAGING_CONFIG_URL", "https://fcm.googleapis.com");
+exports.messagingApiOrigin = messagingApiOrigin;
+const crashlyticsApiOrigin = () => utils.envOverride("FIREBASE_CRASHLYTICS_URL", "https://firebasecrashlytics.googleapis.com");
+exports.crashlyticsApiOrigin = crashlyticsApiOrigin;
 const resourceManagerOrigin = () => utils.envOverride("FIREBASE_RESOURCEMANAGER_URL", "https://cloudresourcemanager.googleapis.com");
 exports.resourceManagerOrigin = resourceManagerOrigin;
 const rulesOrigin = () => utils.envOverride("FIREBASE_RULES_URL", "https://firebaserules.googleapis.com");
@@ -138,6 +144,8 @@ const cloudSQLAdminOrigin = () => utils.envOverride("CLOUD_SQL_URL", "https://sq
 exports.cloudSQLAdminOrigin = cloudSQLAdminOrigin;
 const vertexAIOrigin = () => utils.envOverride("VERTEX_AI_URL", "https://aiplatform.googleapis.com");
 exports.vertexAIOrigin = vertexAIOrigin;
+const cloudAiCompanionOrigin = () => utils.envOverride("CLOUD_AI_COMPANION_URL", "https://cloudaicompanion.googleapis.com");
+exports.cloudAiCompanionOrigin = cloudAiCompanionOrigin;
 function getScopes() {
     return Array.from(commandScopes);
 }

package/lib/apphosting/backend.js

@@ -1,6 +1,6 @@
 "use strict";
 Object.defineProperty(exports, "__esModule", { value: true });
-exports.getBackend = exports.getBackendForAmbiguousLocation = exports.chooseBackends = exports.getBackendForLocation = exports.promptLocation = exports.deleteBackendAndPoll = exports.setDefaultTrafficPolicy = exports.createBackend = exports.ensureAppHostingComputeServiceAccount = exports.createGitRepoLink = exports.doSetup = void 0;
+exports.getBackend = exports.getBackendForAmbiguousLocation = exports.chooseBackends = exports.promptExistingBackend = exports.getBackendForLocation = exports.promptLocation = exports.deleteBackendAndPoll = exports.setDefaultTrafficPolicy = exports.createBackend = exports.promptNewBackendId = exports.ensureAppHostingComputeServiceAccount = exports.createGitRepoLink = exports.ensureRequiredApisEnabled = exports.doSetupSourceDeploy = exports.doSetup = void 0;
 const clc = require("colorette");
 const poller = require("../operation-poller");
 const apphosting = require("../gcp/apphosting");
@@ -19,6 +19,7 @@ const app_1 = require("./app");
 const ora = require("ora");
 const node_fetch_1 = require("node-fetch");
 const rollout_1 = require("./rollout");
+const fuzzy = require("fuzzy");
 const DEFAULT_COMPUTE_SERVICE_ACCOUNT_NAME = "firebase-app-hosting-compute";
 const apphostingPollerOptions = {
     apiOrigin: (0, api_1.apphostingOrigin)(),
@@ -51,14 +52,7 @@ async function awaitTlsReady(url) {
     } while (!ready);
 }
 async function doSetup(projectId, webAppName, serviceAccount) {
-    await Promise.all([
-        (0, ensureApiEnabled_1.ensure)(projectId, (0, api_1.developerConnectOrigin)(), "apphosting", true),
-        (0, ensureApiEnabled_1.ensure)(projectId, (0, api_1.cloudbuildOrigin)(), "apphosting", true),
-        (0, ensureApiEnabled_1.ensure)(projectId, (0, api_1.secretManagerOrigin)(), "apphosting", true),
-        (0, ensureApiEnabled_1.ensure)(projectId, (0, api_1.cloudRunApiOrigin)(), "apphosting", true),
-        (0, ensureApiEnabled_1.ensure)(projectId, (0, api_1.artifactRegistryDomain)(), "apphosting", true),
-        (0, ensureApiEnabled_1.ensure)(projectId, (0, api_1.iamOrigin)(), "apphosting", true),
-    ]);
+    await ensureRequiredApisEnabled(projectId);
     await ensureAppHostingComputeServiceAccount(projectId, serviceAccount);
     const location = await promptLocation(projectId, "Select a primary region to host your backend:\n");
     const gitRepositoryLink = await githubConnections.linkGitHubRepository(projectId, location);
@@ -76,7 +70,7 @@ async function doSetup(projectId, webAppName, serviceAccount) {
         (0, utils_1.logWarning)(`Firebase web app not set`);
     }
     const createBackendSpinner = ora("Creating your new backend...").start();
-    const backend = await createBackend(projectId, location, backendId, gitRepositoryLink, serviceAccount, webApp === null || webApp === void 0 ? void 0 : webApp.id, rootDir);
+    const backend = await createBackend(projectId, location, backendId, serviceAccount, gitRepositoryLink, webApp === null || webApp === void 0 ? void 0 : webApp.id, rootDir);
     createBackendSpinner.succeed(`Successfully created backend!\n\t${backend.name}\n`);
     await setDefaultTrafficPolicy(projectId, location, backendId, branch);
     const confirmRollout = await (0, prompt_1.confirm)({
@@ -112,6 +106,32 @@ async function doSetup(projectId, webAppName, serviceAccount) {
     (0, utils_1.logSuccess)(`Your backend is now deployed at:\n\thttps://${backend.uri}`);
 }
 exports.doSetup = doSetup;
+async function doSetupSourceDeploy(projectId, backendId) {
+    const location = await promptLocation(projectId, "Select a primary region to host your backend:\n");
+    const webApp = await app_1.webApps.getOrCreateWebApp(projectId, null, backendId);
+    if (!webApp) {
+        (0, utils_1.logWarning)(`Firebase web app not set`);
+    }
+    const createBackendSpinner = ora("Creating your new backend...").start();
+    const backend = await createBackend(projectId, location, backendId, null, undefined, webApp === null || webApp === void 0 ? void 0 : webApp.id);
+    createBackendSpinner.succeed(`Successfully created backend!\n\t${backend.name}\n`);
+    return {
+        backend,
+        location,
+    };
+}
+exports.doSetupSourceDeploy = doSetupSourceDeploy;
+async function ensureRequiredApisEnabled(projectId) {
+    await Promise.all([
+        (0, ensureApiEnabled_1.ensure)(projectId, (0, api_1.developerConnectOrigin)(), "apphosting", true),
+        (0, ensureApiEnabled_1.ensure)(projectId, (0, api_1.cloudbuildOrigin)(), "apphosting", true),
+        (0, ensureApiEnabled_1.ensure)(projectId, (0, api_1.secretManagerOrigin)(), "apphosting", true),
+        (0, ensureApiEnabled_1.ensure)(projectId, (0, api_1.cloudRunApiOrigin)(), "apphosting", true),
+        (0, ensureApiEnabled_1.ensure)(projectId, (0, api_1.artifactRegistryDomain)(), "apphosting", true),
+        (0, ensureApiEnabled_1.ensure)(projectId, (0, api_1.iamOrigin)(), "apphosting", true),
+    ]);
+}
+exports.ensureRequiredApisEnabled = ensureRequiredApisEnabled;
 async function createGitRepoLink(projectId, location, connectionId) {
     await Promise.all([
         (0, ensureApiEnabled_1.ensure)(projectId, (0, api_1.developerConnectOrigin)(), "apphosting", true),
@@ -130,7 +150,7 @@ async function createGitRepoLink(projectId, location, connectionId) {
     await githubConnections.linkGitHubRepository(projectId, location, connectionId);
 }
 exports.createGitRepoLink = createGitRepoLink;
-async function ensureAppHostingComputeServiceAccount(projectId, serviceAccount) {
+async function ensureAppHostingComputeServiceAccount(projectId, serviceAccount, deployFromSource = false) {
     const sa = serviceAccount || defaultComputeServiceAccountEmail(projectId);
     const name = `projects/${projectId}/serviceAccounts/${sa}`;
     try {
@@ -147,6 +167,14 @@ async function ensureAppHostingComputeServiceAccount(projectId, serviceAccount)
             throw new error_1.FirebaseError(`Failed to create backend due to missing delegation permissions for ${sa}. Make sure you have the iam.serviceAccounts.actAs permission.`, { original: err });
         }
     }
+    if (deployFromSource) {
+        const policy = await (0, resourceManager_1.getIamPolicy)(projectId);
+        const objectViewerBinding = policy.bindings.find((binding) => binding.role === "roles/storage.objectViewer");
+        if (!objectViewerBinding ||
+            !objectViewerBinding.members.includes(`serviceAccount:${defaultComputeServiceAccountEmail(projectId)}`)) {
+            await (0, resourceManager_1.addServiceAccountToRoles)(projectId, defaultComputeServiceAccountEmail(projectId), ["roles/storage.objectViewer"], true);
+        }
+    }
 }
 exports.ensureAppHostingComputeServiceAccount = ensureAppHostingComputeServiceAccount;
 async function promptNewBackendId(projectId, location) {
@@ -168,17 +196,20 @@ async function promptNewBackendId(projectId, location) {
         (0, utils_1.logWarning)(`Backend with id ${backendId} already exists in ${location}`);
     }
 }
+exports.promptNewBackendId = promptNewBackendId;
 function defaultComputeServiceAccountEmail(projectId) {
     return `${DEFAULT_COMPUTE_SERVICE_ACCOUNT_NAME}@${projectId}.iam.gserviceaccount.com`;
 }
-async function createBackend(projectId, location, backendId, repository, serviceAccount, webAppId, rootDir = "/") {
+async function createBackend(projectId, location, backendId, serviceAccount, repository, webAppId, rootDir = "/") {
     const defaultServiceAccount = defaultComputeServiceAccountEmail(projectId);
     const backendReqBody = {
         servingLocality: "GLOBAL_ACCESS",
-        codebase: {
-            repository: `${repository.name}`,
-            rootDirectory: rootDir,
-        },
+        codebase: repository
+            ? {
+                repository: `${repository.name}`,
+                rootDirectory: rootDir,
+            }
+            : undefined,
         labels: deploymentTool.labels(),
         serviceAccount: serviceAccount || defaultServiceAccount,
         appId: webAppId,
@@ -203,6 +234,7 @@ async function provisionDefaultComputeServiceAccount(projectId) {
         "roles/firebaseapphosting.computeRunner",
         "roles/firebase.sdkAdminServiceAgent",
         "roles/developerconnect.readTokenAccessor",
+        "roles/storage.objectViewer",
     ], true);
 }
 async function setDefaultTrafficPolicy(projectId, location, backendId, codebaseBranch) {
@@ -225,11 +257,11 @@ async function promptLocation(projectId, prompt = "Please select a location:") {
     if (allowedLocations.length === 1) {
         return allowedLocations[0];
     }
-    const location = (await (0, prompt_1.select)({
+    const location = await (0, prompt_1.select)({
         default: constants_1.DEFAULT_LOCATION,
         message: prompt,
         choices: allowedLocations,
-    }));
+    });
     (0, utils_1.logSuccess)(`Location set to ${location}.\n`);
     return location;
 }
@@ -245,6 +277,28 @@ async function getBackendForLocation(projectId, location, backendId) {
     }
 }
 exports.getBackendForLocation = getBackendForLocation;
+async function promptExistingBackend(projectId, promptMessage) {
+    const { backends } = await apphosting.listBackends(projectId, "-");
+    const backendId = await (0, prompt_1.search)({
+        message: promptMessage,
+        source: (input = "") => {
+            return new Promise((resolve) => resolve([
+                ...fuzzy
+                    .filter(input, backends, {
+                    extract: (backend) => apphosting.parseBackendName(backend.name).id,
+                })
+                    .map((result) => {
+                    return {
+                        name: apphosting.parseBackendName(result.original.name).id,
+                        value: apphosting.parseBackendName(result.original.name).id,
+                    };
+                }),
+            ]));
+        },
+    });
+    return backendId;
+}
+exports.promptExistingBackend = promptExistingBackend;
 async function chooseBackends(projectId, backendId, chooseBackendPrompt, force) {
     let { unreachable, backends } = await apphosting.listBackends(projectId, "-");
     if (unreachable && unreachable.length !== 0) {

package/lib/apphosting/githubConnections.js

@@ -1,6 +1,6 @@
 "use strict";
 Object.defineProperty(exports, "__esModule", { value: true });
-exports.getGitHubCommit = exports.getGitHubBranch = exports.fetchRepositoryCloneUris = exports.listAppHostingConnections = exports.getOrCreateRepository = exports.getOrCreateConnection = exports.createConnection = exports.ensureSecretManagerAdminGrant = exports.promptGitHubBranch = exports.getOrCreateOauthConnection = exports.listValidInstallations = exports.promptGitHubInstallation = exports.getConnectionForInstallation = exports.linkGitHubRepository = exports.getOrCreateGithubConnectionWithSentinel = exports.generateRepositoryId = exports.extractRepoSlugFromUri = exports.parseConnectionName = void 0;
+exports.getGitHubCommit = exports.getGitHubBranch = exports.fetchRepositoryCloneUris = exports.listAppHostingConnections = exports.getOrCreateRepository = exports.getOrCreateConnection = exports.createConnection = exports.ensureSecretManagerAdminGrant = exports.promptGitHubBranch = exports.getOrCreateOauthConnection = exports.listValidInstallations = exports.promptGitHubInstallation = exports.getConnectionForInstallation = exports.linkGitHubRepository = exports.getOrCreateFullyInstalledGithubConnection = exports.generateConnectionId = exports.generateRepositoryId = exports.extractRepoSlugFromUri = exports.parseConnectionName = void 0;
 const clc = require("colorette");
 const devConnect = require("../gcp/devConnect");
 const rm = require("../gcp/resourceManager");
@@ -14,7 +14,6 @@ const fuzzy = require("fuzzy");
 const apiv2_1 = require("../apiv2");
 const githubApiClient = new apiv2_1.Client({ urlPrefix: (0, api_1.githubApiOrigin)(), auth: false });
 const APPHOSTING_CONN_PATTERN = /.+\/apphosting-github-conn-.+$/;
-const APPHOSTING_OAUTH_CONN_NAME = "firebase-app-hosting-github-oauth";
 const CONNECTION_NAME_REGEX = /^projects\/(?<projectId>[^\/]+)\/locations\/(?<location>[^\/]+)\/connections\/(?<id>[^\/]+)$/;
 function parseConnectionName(name) {
     const match = CONNECTION_NAME_REGEX.exec(name);
@@ -48,13 +47,14 @@ function generateRepositoryId(remoteUri) {
     return (_a = extractRepoSlugFromUri(remoteUri)) === null || _a === void 0 ? void 0 : _a.replaceAll("/", "-");
 }
 exports.generateRepositoryId = generateRepositoryId;
-function generateConnectionId() {
+const generateConnectionId = () => {
     const randomHash = Math.random().toString(36).slice(6);
     return `apphosting-github-conn-${randomHash}`;
-}
+};
+exports.generateConnectionId = generateConnectionId;
 const ADD_ACCOUNT_CHOICE = "@ADD_ACCOUNT";
 const MANAGE_INSTALLATION_CHOICE = "@MANAGE_INSTALLATION";
-async function getOrCreateGithubConnectionWithSentinel(projectId, location, createConnectionId) {
+async function getOrCreateFullyInstalledGithubConnection(projectId, location, createConnectionId) {
     utils.logBullet(clc.bold(`${clc.yellow("===")} Import a GitHub repository`));
     if (createConnectionId) {
         try {
@@ -87,15 +87,15 @@ async function getOrCreateGithubConnectionWithSentinel(projectId, location, crea
         }
     }
     if (!createConnectionId) {
-        createConnectionId = generateConnectionId();
+        createConnectionId = (0, exports.generateConnectionId)();
     }
     const connection = await createFullyInstalledConnection(projectId, location, createConnectionId, oauthConn, installationId);
     return connection;
 }
-exports.getOrCreateGithubConnectionWithSentinel = getOrCreateGithubConnectionWithSentinel;
+exports.getOrCreateFullyInstalledGithubConnection = getOrCreateFullyInstalledGithubConnection;
 async function linkGitHubRepository(projectId, location, createConnectionId) {
     var _a, _b;
-    const connection = await getOrCreateGithubConnectionWithSentinel(projectId, location, createConnectionId);
+    const connection = await getOrCreateFullyInstalledGithubConnection(projectId, location, createConnectionId);
     let repoCloneUri;
     do {
         if (repoCloneUri === MANAGE_INSTALLATION_CHOICE) {
@@ -192,18 +192,12 @@ async function listValidInstallations(projectId, location, connection) {
 exports.listValidInstallations = listValidInstallations;
 async function getOrCreateOauthConnection(projectId, location) {
     let conn;
-    try {
-        conn = await devConnect.getConnection(projectId, location, APPHOSTING_OAUTH_CONN_NAME);
-    }
-    catch (err) {
-        if (err.status === 404) {
-            await ensureSecretManagerAdminGrant(projectId);
-            conn = await createConnection(projectId, location, APPHOSTING_OAUTH_CONN_NAME);
-        }
-        else {
-            throw err;
-        }
+    const completedConnections = await listAppHostingConnections(projectId, location);
+    if (completedConnections.length > 0) {
+        return completedConnections[0];
     }
+    await ensureSecretManagerAdminGrant(projectId);
+    conn = await createConnection(projectId, location, (0, exports.generateConnectionId)());
     while (conn.installationState.stage === "PENDING_USER_OAUTH") {
         utils.logBullet("Please authorize the Firebase GitHub app by visiting this url:");
         const { url, cleanup } = await utils.openInBrowserPopup(conn.installationState.actionUri, "Authorize the GitHub app");

package/lib/apphosting/rollout.js

@@ -19,8 +19,8 @@ const apphostingPollerOptions = {
 const GIT_COMMIT_SHA_REGEX = /^(?:[0-9a-f]{40}|[0-9a-f]{7})$/;
 async function createRollout(backendId, projectId, branch, commit, force) {
     const backend = await (0, backend_1.getBackend)(projectId, backendId);
-    if (!backend.codebase.repository) {
-        throw new error_1.FirebaseError(`Backend ${backendId} is misconfigured due to missing a connected repository. You can delete and recreate your backend using 'firebase apphosting:backends:delete' and 'firebase apphosting:backends:create'.`);
+    if (!backend.codebase || !backend.codebase.repository) {
+        throw new error_1.FirebaseError(`Backend ${backendId} is missing a connected repository. If you would like to deploy from a branch or commit of a GitHub repository, you can connect one through the Firebase Console. If you would like to deploy from local source, run 'firebase deploy'.`);
     }
     const { location } = apphosting.parseBackendName(backend.name);
     const { repoLink, owner, repo, readToken } = await (0, devConnect_1.getRepoDetailsFromBackend)(projectId, location, backend.codebase.repository);

package/lib/apphosting/secrets/dialogs.js

@@ -9,11 +9,11 @@ const prompt = require("../../prompt");
 const utils = require("../../utils");
 const logger_1 = require("../../logger");
 const env = require("../../functions/env");
-function toMetadata(projectNumber, backends) {
+async function toMetadata(projectNumber, backends) {
     const metadata = [];
     for (const backend of backends) {
         const [, , , location, , id] = backend.name.split("/");
-        metadata.push(Object.assign({ location, id }, (0, _1.serviceAccountsForBackend)(projectNumber, backend)));
+        metadata.push(Object.assign({ location, id }, (await (0, _1.serviceAccountsForBackend)(projectNumber, backend))));
     }
     return metadata.sort((left, right) => {
         const cmplocation = left.location.localeCompare(right.location);
@@ -86,12 +86,12 @@ async function selectBackendServiceAccounts(projectNumber, projectId, options) {
             message: "To use this secret, your backend's service account must be granted access. Would you like to grant access now?",
         });
         if (grant) {
-            return (0, _1.toMulti)((0, _1.serviceAccountsForBackend)(projectNumber, listBackends.backends[0]));
+            return (0, _1.toMulti)(await (0, _1.serviceAccountsForBackend)(projectNumber, listBackends.backends[0]));
         }
         utils.logBullet(exports.GRANT_ACCESS_IN_FUTURE);
         return { buildServiceAccounts: [], runServiceAccounts: [] };
     }
-    const metadata = toMetadata(projectNumber, listBackends.backends);
+    const metadata = await toMetadata(projectNumber, listBackends.backends);
     if (metadata.every(matchesServiceAccounts(metadata[0]))) {
         utils.logBullet("To use this secret, your backend's service account must be granted access.");
         utils.logBullet("All of your backends share the following " +

package/lib/apphosting/secrets/index.js

@@ -21,7 +21,7 @@ function toMulti(accounts) {
     return m;
 }
 exports.toMulti = toMulti;
-function serviceAccountsForBackend(projectNumber, backend) {
+async function serviceAccountsForBackend(projectNumber, backend) {
     if (backend.serviceAccount) {
         return {
             buildServiceAccount: backend.serviceAccount,
@@ -30,7 +30,7 @@ function serviceAccountsForBackend(projectNumber, backend) {
     }
     return {
         buildServiceAccount: gcb.getDefaultServiceAccount(projectNumber),
-        runServiceAccount: gce.getDefaultServiceAccount(projectNumber),
+        runServiceAccount: await gce.getDefaultServiceAccount(projectNumber),
     };
 }
 exports.serviceAccountsForBackend = serviceAccountsForBackend;

package/lib/auth.js

@@ -1,6 +1,6 @@
 "use strict";
 Object.defineProperty(exports, "__esModule", { value: true });
-exports.addAdditionalAccount = exports.logout = exports.getAccessToken = exports.haveValidTokens = exports.isExpired = exports.loggedIn = exports.findAccountByEmail = exports.loginGithub = exports.loginGoogle = exports.setGlobalDefaultAccount = exports.setProjectAccount = exports.loginAdditionalAccount = exports.selectAccount = exports.setRefreshToken = exports.setActiveAccount = exports.getAllAccounts = exports.getAdditionalAccounts = exports.getProjectDefaultAccount = exports.getGlobalDefaultAccount = void 0;
+exports.addAdditionalAccount = exports.logout = exports.getAccessToken = exports.haveValidTokens = exports.isExpired = exports.loggedIn = exports.findAccountByEmail = exports.loginGithub = exports.loginGoogle = exports.setGlobalDefaultAccount = exports.setProjectAccount = exports.loginAdditionalAccount = exports.selectAccount = exports.setRefreshToken = exports.setActiveAccount = exports.assertAccount = exports.getAllAccounts = exports.getAdditionalAccounts = exports.getProjectDefaultAccount = exports.getGlobalDefaultAccount = void 0;
 const clc = require("colorette");
 const FormData = require("form-data");
 const http = require("http");
@@ -62,6 +62,16 @@ function getAllAccounts() {
     return res;
 }
 exports.getAllAccounts = getAllAccounts;
+function assertAccount(email, options) {
+    const allAccounts = getAllAccounts();
+    const accountExists = allAccounts.some((a) => a.user.email === email);
+    if (!accountExists) {
+        throw new error_1.FirebaseError(`Account ${email} does not exist, ${(options === null || options === void 0 ? void 0 : options.mcp)
+            ? `use the 'firebase_get_environment' tool to see available accounts or instruct the user to use the 'firebase login:add' terminal command to add a new account.`
+            : `run "${clc.bold("firebase login:list")} to see valid accounts`}`);
+    }
+}
+exports.assertAccount = assertAccount;
 function setActiveAccount(options, account) {
     if (account.tokens.refresh_token) {
         setRefreshToken(account.tokens.refresh_token);
@@ -121,7 +131,17 @@ function setProjectAccount(projectDir, email) {
     configstore_1.configstore.set("activeAccounts", activeAccounts);
 }
 exports.setProjectAccount = setProjectAccount;
-function setGlobalDefaultAccount(account) {
+function setGlobalDefaultAccount(accountOrEmail) {
+    let account;
+    if (typeof accountOrEmail === "string") {
+        const accountFromEmail = getAllAccounts().find((acc) => acc.user.email === accountOrEmail);
+        if (!accountFromEmail)
+            throw new error_1.FirebaseError(`Account '${accountOrEmail}' is not a signed-in user on this device.`);
+        account = accountFromEmail;
+    }
+    else {
+        account = accountOrEmail;
+    }
     configstore_1.configstore.set("user", account.user);
     configstore_1.configstore.set("tokens", account.tokens);
     const additionalAccounts = getAdditionalAccounts();

package/lib/bin/cli.js

@@ -6,9 +6,6 @@ const clc = require("colorette");
 const marked_terminal_1 = require("marked-terminal");
 const marked_1 = require("marked");
 marked_1.marked.use((0, marked_terminal_1.markedTerminal)());
-const node_path_1 = require("node:path");
-const triple_beam_1 = require("triple-beam");
-const node_util_1 = require("node:util");
 const fs = require("node:fs");
 const configstore_1 = require("../configstore");
 const errorOut_1 = require("../errorOut");
@@ -17,46 +14,17 @@ const logger_1 = require("../logger");
 const client = require("..");
 const fsutils = require("../fsutils");
 const utils = require("../utils");
-const winston = require("winston");
 const experiments_1 = require("../experiments");
 const fetchMOTD_1 = require("../fetchMOTD");
 function cli(pkg) {
     const updateNotifier = updateNotifierPkg({ pkg });
     const args = process.argv.slice(2);
     let cmd;
-    function findAvailableLogFile() {
-        const candidates = ["firebase-debug.log"];
-        for (let i = 1; i < 10; i++) {
-            candidates.push(`firebase-debug.${i}.log`);
-        }
-        for (const c of candidates) {
-            const logFilename = (0, node_path_1.join)(process.cwd(), c);
-            try {
-                const fd = fs.openSync(logFilename, "r+");
-                fs.closeSync(fd);
-                return logFilename;
-            }
-            catch (e) {
-                if (e.code === "ENOENT") {
-                    return logFilename;
-                }
-            }
-        }
-        throw new Error("Unable to obtain permissions for firebase-debug.log");
-    }
-    const logFilename = findAvailableLogFile();
     if (!process.env.DEBUG && args.includes("--debug")) {
         process.env.DEBUG = "true";
     }
     process.env.IS_FIREBASE_CLI = "true";
-    logger_1.logger.add(new winston.transports.File({
-        level: "debug",
-        filename: logFilename,
-        format: winston.format.printf((info) => {
-            const segments = [info.message, ...(info[triple_beam_1.SPLAT] || [])].map(utils.tryStringify);
-            return `[${info.level}] ${(0, node_util_1.stripVTControlCharacters)(segments.join(" "))}`;
-        }),
-    }));
+    const logFilename = (0, logger_1.useFileLogger)();
     logger_1.logger.debug("-".repeat(70));
     logger_1.logger.debug("Command:      ", process.argv.join(" "));
     logger_1.logger.debug("CLI Version:  ", pkg.version);

package/lib/bin/mcp.js

@@ -3,10 +3,11 @@
 Object.defineProperty(exports, "__esModule", { value: true });
 exports.mcp = void 0;
 const logger_1 = require("../logger");
-(0, logger_1.silenceStdout)();
 const index_1 = require("../mcp/index");
 const util_1 = require("util");
 const types_1 = require("../mcp/types");
+const index_js_1 = require("../mcp/tools/index.js");
+const path_1 = require("path");
 const STARTUP_MESSAGE = `
 This is a running process of the Firebase MCP server. This command should only be executed by an MCP client. An example MCP client configuration might be:
 
@@ -24,13 +25,22 @@ async function mcp() {
         options: {
             only: { type: "string", default: "" },
             dir: { type: "string" },
+            "generate-tool-list": { type: "boolean", default: false },
         },
         allowPositionals: true,
     });
+    if (values["generate-tool-list"]) {
+        console.log((0, index_js_1.markdownDocsOfTools)());
+        return;
+    }
+    (0, logger_1.useFileLogger)();
     const activeFeatures = (values.only || "")
         .split(",")
         .filter((f) => types_1.SERVER_FEATURES.includes(f));
-    const server = new index_1.FirebaseMcpServer({ activeFeatures, projectRoot: values.dir });
+    const server = new index_1.FirebaseMcpServer({
+        activeFeatures,
+        projectRoot: values.dir ? (0, path_1.resolve)(values.dir) : undefined,
+    });
     await server.start();
     if (process.stdin.isTTY)
         process.stderr.write(STARTUP_MESSAGE);

package/lib/checkValidTargetFilters.js

@@ -26,6 +26,7 @@ const FILTERABLE_TARGETS = new Set([
     "storage",
     "database",
     "dataconnect",
+    "apphosting",
 ]);
 async function checkValidTargetFilters(options) {
     const only = !options.only ? [] : options.only.split(",");

package/lib/command.js

@@ -13,6 +13,7 @@ const track_1 = require("./track");
 const auth_1 = require("./auth");
 const projects_1 = require("./management/projects");
 const requireAuth_1 = require("./requireAuth");
+const logger_1 = require("./logger");
 class Command {
     constructor(cmd) {
         this.cmd = cmd;
@@ -163,8 +164,8 @@ class Command {
         if ((0, utils_1.getInheritedOption)(options, "json")) {
             options.nonInteractive = true;
         }
-        else {
-            (0, utils_1.setupLoggers)();
+        else if (!options.isMCP) {
+            (0, logger_1.useConsoleLoggers)();
         }
         if ((0, utils_1.getInheritedOption)(options, "config")) {
             options.configPath = (0, utils_1.getInheritedOption)(options, "config");

package/lib/commands/apphosting-secrets-grantaccess.js

@@ -54,6 +54,6 @@ exports.command = new command_1.Command("apphosting:secrets:grantaccess <secretN
     else {
         backend = await apphosting.getBackend(projectId, location, backendId);
     }
-    const accounts = secrets.toMulti(secrets.serviceAccountsForBackend(projectNumber, backend));
+    const accounts = secrets.toMulti(await secrets.serviceAccountsForBackend(projectNumber, backend));
     await Promise.allSettled(secretList.map((secretName) => secrets.grantSecretAccess(projectId, projectNumber, secretName, accounts)));
 });

package/lib/commands/deploy.js

@@ -24,6 +24,7 @@ exports.VALID_DEPLOY_TARGETS = [
     "remoteconfig",
     "extensions",
     "dataconnect",
+    "apphosting",
 ];
 exports.TARGET_PERMISSIONS = {
     database: ["firebasedatabase.instances.update"],

package/lib/commands/init.js

@@ -40,7 +40,7 @@ let choices = [
     },
     {
         value: "apphosting",
-        name: "App Hosting: Configure an apphosting.yaml file for App Hosting",
+        name: "App Hosting: Enable web app deployments with App Hosting",
         checked: false,
         hidden: false,
     },

package/lib/commands/login-use.js

@@ -1,7 +1,6 @@
 "use strict";
 Object.defineProperty(exports, "__esModule", { value: true });
 exports.command = void 0;
-const clc = require("colorette");
 const command_1 = require("../command");
 const utils = require("../utils");
 const auth = require("../auth");
@@ -9,11 +8,7 @@ const error_1 = require("../error");
 exports.command = new command_1.Command("login:use <email>")
     .description("set the default account to use for this project directory or the global default account if not in a Firebase project directory")
     .action((email, options) => {
-    const allAccounts = auth.getAllAccounts();
-    const accountExists = allAccounts.some((a) => a.user.email === email);
-    if (!accountExists) {
-        throw new error_1.FirebaseError(`Account ${email} does not exist, run "${clc.bold("firebase login:list")}" to see valid accounts`);
-    }
+    auth.assertAccount(email);
     const projectDir = options.projectRoot;
     if (projectDir) {
         if (options.user.email === email) {
@@ -27,15 +22,11 @@ exports.command = new command_1.Command("login:use <email>")
         if (options.user.email === email) {
             throw new error_1.FirebaseError(`Already using account ${email} for the global default account.`);
         }
-        const newDefaultAccount = allAccounts.find((a) => a.user.email === email);
-        if (!newDefaultAccount) {
-            throw new error_1.FirebaseError(`Account ${email} does not exist, run "${clc.bold("firebase login:list")}" to see valid accounts`);
-        }
         const oldDefaultAccount = auth.getGlobalDefaultAccount();
         if (!oldDefaultAccount) {
             throw new error_1.FirebaseError("Could not determine global default account");
         }
-        auth.setGlobalDefaultAccount(newDefaultAccount);
+        auth.setGlobalDefaultAccount(email);
         auth.addAdditionalAccount(oldDefaultAccount);
         utils.logSuccess(`Set global default account to ${email}.`);
         return email;