firebase-tools 15.11.0 → 15.12.0

package/lib/agentSkills.js

@@ -0,0 +1,70 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.promptForAgentSkills = promptForAgentSkills;
+exports.installAgentSkills = installAgentSkills;
+const child_process_1 = require("child_process");
+const utils = require("./utils");
+const prompt = require("./prompt");
+const error_1 = require("./error");
+async function promptForAgentSkills() {
+    return prompt.confirm({
+        message: "Would you like to install agent skills for Firebase?",
+        default: true,
+    });
+}
+async function installAgentSkills(options) {
+    if (!utils.commandExistsSync("npx")) {
+        return;
+    }
+    const args = [
+        "-y",
+        "skills",
+        "add",
+        "firebase/agent-skills",
+        "--skill",
+        "*",
+        "-y",
+    ];
+    if (options.agentName) {
+        args.push("-a", options.agentName);
+    }
+    if (options.global) {
+        args.push("-g");
+    }
+    if (options.background) {
+        utils.logBullet("Installing Agent skills in the background...");
+        try {
+            const child = (0, child_process_1.spawn)("npx", args, {
+                cwd: options.cwd,
+                stdio: "ignore",
+                detached: true,
+                shell: process.platform === "win32",
+            });
+            child.unref();
+            utils.logSuccess("Agent skills installation started");
+        }
+        catch (err) {
+            utils.logWarning(`Could not start Agent skills installation: ${(0, error_1.getErrMsg)(err)}`);
+        }
+    }
+    else {
+        utils.logBullet("Adding Agent skills...");
+        try {
+            const result = (0, child_process_1.spawnSync)("npx", args, {
+                cwd: options.cwd,
+                stdio: "ignore",
+                shell: process.platform === "win32",
+            });
+            if (result.error) {
+                throw result.error;
+            }
+            if (result.status !== 0) {
+                throw new Error(`npx skills add exited with code ${result.status}`);
+            }
+            utils.logSuccess("Added Agent skills");
+        }
+        catch (err) {
+            utils.logWarning(`Could not add Agent skills: ${(0, error_1.getErrMsg)(err)}`);
+        }
+    }
+}

package/lib/api.js

@@ -1,7 +1,7 @@
 "use strict";
 Object.defineProperty(exports, "__esModule", { value: true });
 exports.storageOrigin = exports.runtimeconfigOrigin = exports.rulesOrigin = exports.resourceManagerOrigin = exports.crashlyticsApiOrigin = exports.messagingApiOrigin = exports.remoteConfigApiOrigin = exports.rtdbMetadataOrigin = exports.rtdbManagementOrigin = exports.realtimeOrigin = exports.extensionsTOSOrigin = exports.extensionsPublisherOrigin = exports.extensionsOrigin = exports.iamOrigin = exports.identityOrigin = exports.hostingOrigin = exports.googleOrigin = exports.pubsubOrigin = exports.cloudTasksOrigin = exports.cloudschedulerOrigin = exports.cloudbuildOrigin = exports.functionsDefaultRegion = exports.runOrigin = exports.functionsV2Origin = exports.functionsOrigin = exports.firestoreOrigin = exports.firestoreOriginOrEmulator = exports.firedataOrigin = exports.firebaseExtensionsRegistryOrigin = exports.firebaseApiOrigin = exports.eventarcOrigin = exports.dynamicLinksKey = exports.dynamicLinksOrigin = exports.consoleOrigin = exports.authManagementOrigin = exports.authOrigin = exports.apphostingGitHubAppInstallationURL = exports.apphostingP4SADomain = exports.apphostingOrigin = exports.appDistributionOrigin = exports.artifactRegistryDomain = exports.developerConnectP4SADomain = exports.developerConnectOrigin = exports.containerRegistryDomain = exports.cloudMonitoringOrigin = exports.cloudloggingOrigin = exports.cloudbillingOrigin = exports.clientSecret = exports.clientId = exports.authProxyOrigin = void 0;
-exports.developerKnowledgeOrigin = exports.cloudTestingOrigin = exports.appTestingOrigin = exports.cloudAiCompanionOrigin = exports.vertexAIOrigin = exports.cloudSQLAdminOrigin = exports.dataConnectLocalConnString = exports.dataconnectP4SADomain = exports.dataconnectOrigin = exports.githubClientSecret = exports.githubClientId = exports.computeOrigin = exports.secretManagerOrigin = exports.githubApiOrigin = exports.githubOrigin = exports.studioApiOrigin = exports.serviceUsageOrigin = exports.cloudRunApiOrigin = exports.hostingApiOrigin = exports.firebaseStorageOrigin = void 0;
+exports.developerKnowledgeOrigin = exports.cloudTestingOrigin = exports.appTestingOrigin = exports.cloudAiCompanionOrigin = exports.aiLogicProxyOrigin = exports.vertexAIOrigin = exports.cloudSQLAdminOrigin = exports.dataConnectLocalConnString = exports.dataconnectP4SADomain = exports.dataconnectOrigin = exports.githubClientSecret = exports.githubClientId = exports.computeOrigin = exports.secretManagerOrigin = exports.githubApiOrigin = exports.githubOrigin = exports.studioApiOrigin = exports.serviceUsageOrigin = exports.cloudRunApiOrigin = exports.hostingApiOrigin = exports.firebaseStorageOrigin = void 0;
 exports.getScopes = getScopes;
 exports.setScopes = setScopes;
 const constants_1 = require("./emulator/constants");
@@ -146,6 +146,8 @@ const cloudSQLAdminOrigin = () => utils.envOverride("CLOUD_SQL_URL", "https://sq
 exports.cloudSQLAdminOrigin = cloudSQLAdminOrigin;
 const vertexAIOrigin = () => utils.envOverride("VERTEX_AI_URL", "https://aiplatform.googleapis.com");
 exports.vertexAIOrigin = vertexAIOrigin;
+const aiLogicProxyOrigin = () => utils.envOverride("AI_LOGIC_PROXY_URL", "https://firebasevertexai.googleapis.com");
+exports.aiLogicProxyOrigin = aiLogicProxyOrigin;
 const cloudAiCompanionOrigin = () => utils.envOverride("CLOUD_AI_COMPANION_URL", "https://cloudaicompanion.googleapis.com");
 exports.cloudAiCompanionOrigin = cloudAiCompanionOrigin;
 const appTestingOrigin = () => utils.envOverride("FIREBASE_APP_TESTING_URL", "https://firebaseapptesting.googleapis.com");

package/lib/apphosting/backend.js

@@ -34,6 +34,8 @@ const ora = require("ora");
 const node_fetch_1 = require("node-fetch");
 const rollout_1 = require("./rollout");
 const fuzzy = require("fuzzy");
+const experiments_1 = require("../experiments");
+const DEFAULT_RUNTIME = "nodejs";
 const DEFAULT_COMPUTE_SERVICE_ACCOUNT_NAME = "firebase-app-hosting-compute";
 const apphostingPollerOptions = {
     apiOrigin: (0, api_1.apphostingOrigin)(),
@@ -64,7 +66,7 @@ async function awaitTlsReady(url) {
         }
     } while (!ready);
 }
-async function doSetup(projectId, nonInteractive, webAppName, backendId, serviceAccount, primaryRegion, rootDir) {
+async function doSetup(projectId, nonInteractive, webAppName, backendId, serviceAccount, primaryRegion, rootDir, runtime, automaticBaseImageUpdatesDisabled) {
     await ensureRequiredApisEnabled(projectId);
     await ensureAppHostingComputeServiceAccount(projectId, serviceAccount ? serviceAccount : null);
     let location = primaryRegion;
@@ -97,12 +99,27 @@ async function doSetup(projectId, nonInteractive, webAppName, backendId, service
     if (!location || !backendId) {
         throw new error_1.FirebaseError("Internal error: location or backendId is not defined.");
     }
+    if (runtime === undefined && (0, experiments_1.isEnabled)("abiu")) {
+        if (nonInteractive) {
+            runtime = DEFAULT_RUNTIME;
+        }
+        else {
+            runtime = await (0, prompt_1.select)({
+                message: "Which runtime do you want to use?",
+                choices: [
+                    { name: "Node.js (default)", value: DEFAULT_RUNTIME },
+                    { name: "Node.js 22", value: "nodejs22" },
+                ],
+                default: DEFAULT_RUNTIME,
+            });
+        }
+    }
     const webApp = await app_1.webApps.getOrCreateWebApp(projectId, webAppName ? webAppName : null, backendId);
     if (!webApp) {
         (0, utils_1.logWarning)(`Firebase web app not set`);
     }
     const createBackendSpinner = ora("Creating your new backend...").start();
-    const backend = await createBackend(projectId, location, backendId, serviceAccount ? serviceAccount : null, gitRepositoryLink, webApp?.id, rootDir);
+    const backend = await createBackend(projectId, location, backendId, serviceAccount ? serviceAccount : null, gitRepositoryLink, webApp?.id, rootDir, runtime, automaticBaseImageUpdatesDisabled);
     createBackendSpinner.succeed(`Successfully created backend!\n\t${backend.name}\n`);
     if (nonInteractive) {
         return;
@@ -227,7 +244,7 @@ async function promptNewBackendId(projectId, location) {
 function defaultComputeServiceAccountEmail(projectId) {
     return `${DEFAULT_COMPUTE_SERVICE_ACCOUNT_NAME}@${projectId}.iam.gserviceaccount.com`;
 }
-async function createBackend(projectId, location, backendId, serviceAccount, repository, webAppId, rootDir = "/") {
+async function createBackend(projectId, location, backendId, serviceAccount, repository, webAppId, rootDir = "/", runtime, automaticBaseImageUpdatesDisabled) {
     const defaultServiceAccount = defaultComputeServiceAccountEmail(projectId);
     const backendReqBody = {
         servingLocality: "GLOBAL_ACCESS",
@@ -240,6 +257,8 @@ async function createBackend(projectId, location, backendId, serviceAccount, rep
         labels: deploymentTool.labels(),
         serviceAccount: serviceAccount || defaultServiceAccount,
         appId: webAppId,
+        runtime: { value: runtime ?? "" },
+        automaticBaseImageUpdatesDisabled,
     };
     async function createBackendAndPoll() {
         const op = await apphosting.createBackend(projectId, location, backendReqBody, backendId);

package/lib/bin/mcp.js

@@ -3,6 +3,8 @@
 Object.defineProperty(exports, "__esModule", { value: true });
 exports.mcp = mcp;
 const path_1 = require("path");
+const promises_1 = require("fs/promises");
+const os_1 = require("os");
 const util_1 = require("util");
 const logger_1 = require("../logger");
 const index_1 = require("../mcp/index");
@@ -82,7 +84,9 @@ async function mcp() {
     if (earlyExit)
         return;
     (0, env_1.setFirebaseMcp)(true);
-    (0, logger_1.useFileLogger)();
+    const mcpLogDir = (0, path_1.join)((0, os_1.homedir)(), ".cache", "firebase");
+    await (0, promises_1.mkdir)(mcpLogDir, { recursive: true });
+    (0, logger_1.useFileLogger)((0, path_1.join)(mcpLogDir, "firebase-debug.log"));
     const activeFeatures = (values.only || "")
         .split(",")
         .map((f) => f.trim())

package/lib/commands/apphosting-backends-create.js

@@ -7,6 +7,7 @@ const projectUtils_1 = require("../projectUtils");
 const requireAuth_1 = require("../requireAuth");
 const backend_1 = require("../apphosting/backend");
 const apphosting_1 = require("../gcp/apphosting");
+const experiments = require("../experiments");
 const firedata_1 = require("../gcp/firedata");
 const requireTosAcceptance_1 = require("../requireTosAcceptance");
 exports.command = new command_1.Command("apphosting:backends:create")
@@ -15,7 +16,15 @@ exports.command = new command_1.Command("apphosting:backends:create")
     .option("--backend <backend>", "specify the name of the new backend. Required with --non-interactive.")
     .option("-s, --service-account <serviceAccount>", "specify the service account used to run the server", "")
     .option("--primary-region <primaryRegion>", "specify the primary region for the backend. Required with --non-interactive.")
-    .option("--root-dir <rootDir>", "specify the root directory for the backend.")
+    .option("--root-dir <rootDir>", "specify the root directory for the backend.");
+const abiuEnabled = experiments.isEnabled("abiu");
+if (abiuEnabled) {
+    exports.command
+        .option("--runtime [runtime]", "specify the runtime for the backend (e.g., nodejs, nodejs22)")
+        .option("--automatic-base-image-updates", "enable automatic base image updates")
+        .option("--no-automatic-base-image-updates", "disable automatic base image updates");
+}
+exports.command
     .before(requireAuth_1.requireAuth)
     .before(apphosting_1.ensureApiEnabled)
     .before((0, requireTosAcceptance_1.requireTosAcceptance)(firedata_1.APPHOSTING_TOS_ID))
@@ -24,5 +33,13 @@ exports.command = new command_1.Command("apphosting:backends:create")
     if (options.nonInteractive && (options.backend == null || options.primaryRegion == null)) {
         throw new error_1.FirebaseError(`--non-interactive option requires --backend and --primary-region`);
     }
-    await (0, backend_1.doSetup)(projectId, options.nonInteractive, options.app, options.backend, options.serviceAccount, options.primaryRegion, options.rootDir);
+    const abiuAllowed = experiments.isEnabled("abiu");
+    if (!abiuAllowed && (options.runtime || options.automaticBaseImageUpdates !== undefined)) {
+        throw new error_1.FirebaseError("The --runtime and --automatic-base-image-updates flags are only available when the 'abiu' experiment is enabled. To enable it, run 'firebase experiments:enable abiu'.");
+    }
+    const runtime = abiuAllowed && typeof options.runtime === "string" ? options.runtime : undefined;
+    const automaticBaseImageUpdatesDisabled = abiuAllowed
+        ? options.automaticBaseImageUpdates === false
+        : undefined;
+    return (0, backend_1.doSetup)(projectId, options.nonInteractive, options.app, options.backend, options.serviceAccount, options.primaryRegion, options.rootDir, runtime, automaticBaseImageUpdatesDisabled);
 });

package/lib/commands/apphosting-backends-list.js

@@ -9,8 +9,8 @@ const logger_1 = require("../logger");
 const projectUtils_1 = require("../projectUtils");
 const requireAuth_1 = require("../requireAuth");
 const apphosting = require("../gcp/apphosting");
+const experiments_1 = require("../experiments");
 const Table = require("cli-table3");
-const TABLE_HEAD = ["Backend", "Repository", "URL", "Primary Region", "Updated Date"];
 exports.command = new command_1.Command("apphosting:backends:list")
     .description("list Firebase App Hosting backends")
     .before(requireAuth_1.requireAuth)
@@ -29,19 +29,35 @@ exports.command = new command_1.Command("apphosting:backends:list")
     return backends;
 });
 function printBackendsTable(backends) {
+    const abiuEnabled = (0, experiments_1.isEnabled)("abiu");
+    const head = ["Backend", "Repository", "URL", "Primary Region"];
+    if (abiuEnabled) {
+        head.push("ABIU");
+        head.push("Runtime");
+    }
+    head.push("Updated Date");
     const table = new Table({
-        head: TABLE_HEAD,
+        head: head,
         style: { head: ["green"] },
     });
     for (const backend of backends) {
         const { location, id } = apphosting.parseBackendName(backend.name);
-        table.push([
+        const row = [
             id,
             backend.codebase?.repository?.split("/").pop() ?? "",
             backend.uri.startsWith("https:") ? backend.uri : "https://" + backend.uri,
             location,
-            (0, utils_1.datetimeString)(new Date(backend.updateTime)),
-        ]);
+        ];
+        if (abiuEnabled) {
+            let abiuStatus = "N/A";
+            if (backend.automaticBaseImageUpdatesDisabled !== undefined) {
+                abiuStatus = backend.automaticBaseImageUpdatesDisabled ? "Disabled" : "Enabled";
+            }
+            row.push(abiuStatus);
+            row.push(backend.runtime?.value ?? "N/A");
+        }
+        row.push((0, utils_1.datetimeString)(new Date(backend.updateTime)));
+        table.push(row);
     }
     logger_1.logger.info(table.toString());
 }

package/lib/commands/functions-delete.js

@@ -75,6 +75,7 @@ exports.command = new command_1.Command("functions:delete [filters...]")
     try {
         const fab = new fabricator.Fabricator({
             functionExecutor,
+            runFunctionExecutor: functionExecutor,
             appEngineLocation,
             executor: new executor.QueueExecutor({}),
             sources: {},

package/lib/commands/functions-export.js

@@ -0,0 +1,40 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.command = void 0;
+const command_1 = require("../command");
+const error_1 = require("../error");
+const iac = require("../functions/iac/export");
+const projectConfig_1 = require("../functions/projectConfig");
+const clc = require("colorette");
+const logger_1 = require("../logger");
+const EXPORTERS = {
+    internal: iac.getInternalIac,
+};
+exports.command = new command_1.Command("functions:export")
+    .description("export Cloud Functions code and configuration")
+    .option("--format <format>", `Format of the output. Can be ${Object.keys(EXPORTERS).join(", ")}.`)
+    .option("--codebase <codebase>", "Optional codebase to export. If not specified, exports the default or only codebase.")
+    .action(async (options) => {
+    if (!options.format || !Object.keys(EXPORTERS).includes(options.format)) {
+        throw new error_1.FirebaseError(`Must specify --format as ${Object.keys(EXPORTERS).join(", ")}.`);
+    }
+    const config = (0, projectConfig_1.normalizeAndValidate)(options.config?.src?.functions);
+    let codebaseConfig;
+    if (options.codebase) {
+        codebaseConfig = (0, projectConfig_1.configForCodebase)(config, options.codebase);
+    }
+    else if (config.length === 1) {
+        codebaseConfig = config[0];
+    }
+    else {
+        codebaseConfig = (0, projectConfig_1.configForCodebase)(config, "default");
+    }
+    if (!codebaseConfig.source) {
+        throw new error_1.FirebaseError("Codebase does not have a local source directory.");
+    }
+    const manifest = await EXPORTERS[options.format](options, codebaseConfig);
+    for (const [file, contents] of Object.entries(manifest)) {
+        logger_1.logger.info(`Manifest file: ${clc.bold(file)}`);
+        logger_1.logger.info(contents);
+    }
+});

package/lib/commands/index.js

@@ -141,6 +141,9 @@ function load(client) {
     client.functions.config.set = loadCommand("functions-config-set");
     client.functions.config.unset = loadCommand("functions-config-unset");
     client.functions.delete = loadCommand("functions-delete");
+    if (experiments.isEnabled("functionsiac")) {
+        client.functions.export = loadCommand("functions-export");
+    }
     client.functions.log = loadCommand("functions-log");
     client.functions.shell = loadCommand("functions-shell");
     client.functions.list = loadCommand("functions-list");

package/lib/commands/init.js

@@ -228,6 +228,7 @@ async function initAction(feature, options) {
     if (setup.features.includes("dataconnect") && setup.features.includes("dataconnect:sdk")) {
         setup.features = setup.features.filter((f) => f !== "dataconnect:sdk");
     }
+    setup.features.push("agentSkills");
     await (0, init_1.init)(setup, config, options);
     await postInitSaves(setup, config);
     if (setup.instructions.length) {

package/lib/deploy/apphosting/deploy.js

@@ -8,7 +8,8 @@ const gcs = require("../../gcp/storage");
 const getProjectNumber_1 = require("../../getProjectNumber");
 const projectUtils_1 = require("../../projectUtils");
 const utils_1 = require("../../utils");
-const util_1 = require("./util");
+const util = require("./util");
+const experiments = require("../../experiments");
 async function default_1(context, options) {
     if (Object.entries(context.backendConfigs).length === 0) {
         return;
@@ -52,24 +53,28 @@ async function default_1(context, options) {
     await Promise.all(Object.values(context.backendConfigs).map(async (cfg) => {
         const rootDir = options.projectRoot ?? process.cwd();
         let builtAppDir;
-        if (cfg.localBuild) {
+        const isLocalBuild = !!cfg.localBuild;
+        if (isLocalBuild) {
+            experiments.assertEnabled("apphostinglocalbuilds", "App Hosting local builds");
             builtAppDir = context.backendLocalBuilds[cfg.backendId].buildDir;
             if (!builtAppDir) {
                 throw new error_1.FirebaseError(`No local build dir found for ${cfg.backendId}`);
             }
         }
-        const zippedSourcePath = await (0, util_1.createArchive)(cfg, rootDir, builtAppDir);
-        (0, utils_1.logLabeledBullet)("apphosting", `Zipped ${cfg.localBuild ? "built app" : "source"} for backend ${cfg.backendId}`);
+        const zippedSourcePath = isLocalBuild
+            ? await util.createLocalBuildTarArchive(cfg, rootDir, builtAppDir)
+            : await util.createSourceDeployArchive(cfg, rootDir);
+        (0, utils_1.logLabeledBullet)("apphosting", `Zipped ${isLocalBuild ? "built app" : "source"} for backend ${cfg.backendId}`);
         const backendLocation = context.backendLocations[cfg.backendId];
         if (!backendLocation) {
             throw new error_1.FirebaseError(`Failed to find location for backend ${cfg.backendId}. Please contact support with the contents of your firebase-debug.log to report your issue.`);
         }
-        (0, utils_1.logLabeledBullet)("apphosting", `Uploading ${cfg.localBuild ? "built app" : "source"} for backend ${cfg.backendId}...`);
+        (0, utils_1.logLabeledBullet)("apphosting", `Uploading ${isLocalBuild ? "built app" : "source"} for backend ${cfg.backendId}...`);
         const bucketName = bucketsPerLocation[backendLocation];
         const { bucket, object } = await gcs.uploadObject({
             file: zippedSourcePath,
             stream: fs.createReadStream(zippedSourcePath),
-        }, bucketName);
+        }, bucketName, isLocalBuild ? gcs.ContentType.TAR : gcs.ContentType.ZIP);
         (0, utils_1.logLabeledBullet)("apphosting", `Uploaded at gs://${bucket}/${object}`);
         context.backendStorageUris[cfg.backendId] =
             `gs://${bucketName}/${path.basename(zippedSourcePath)}`;

package/lib/deploy/apphosting/prepare.js

@@ -6,11 +6,15 @@ const path = require("path");
 const backend_1 = require("../../apphosting/backend");
 const apphosting_1 = require("../../gcp/apphosting");
 const devConnect_1 = require("../../gcp/devConnect");
+const resourceManager_1 = require("../../gcp/resourceManager");
 const projectUtils_1 = require("../../projectUtils");
+const getProjectNumber_1 = require("../../getProjectNumber");
 const prompt_1 = require("../../prompt");
 const utils_1 = require("../../utils");
 const localbuilds_1 = require("../../apphosting/localbuilds");
 const error_1 = require("../../error");
+const experiments = require("../../experiments");
+const logger_1 = require("../../logger");
 async function default_1(context, options) {
     const projectId = (0, projectUtils_1.needProjectId)(options);
     await (0, apphosting_1.ensureApiEnabled)(options);
@@ -21,6 +25,10 @@ async function default_1(context, options) {
     context.backendStorageUris = {};
     context.backendLocalBuilds = {};
     const configs = getBackendConfigs(options);
+    if (configs.some((cfg) => cfg.localBuild) && experiments.isEnabled("apphostinglocalbuilds")) {
+        const projectNumber = await (0, getProjectNumber_1.getProjectNumber)(options);
+        await ensureAppHostingServiceAgentRoles(projectId, projectNumber);
+    }
     const { backends } = await (0, apphosting_1.listBackends)(projectId, "-");
     const foundBackends = [];
     const notFoundBackends = [];
@@ -112,6 +120,7 @@ async function default_1(context, options) {
         if (!cfg.localBuild) {
             continue;
         }
+        experiments.assertEnabled("apphostinglocalbuilds", "locally build App Hosting backends");
         (0, utils_1.logLabeledBullet)("apphosting", `Starting local build for backend ${cfg.backendId}`);
         try {
             const { outputFiles, annotations, buildConfig } = await (0, localbuilds_1.localBuild)(options.projectRoot || "./", "nextjs");
@@ -125,7 +134,8 @@ async function default_1(context, options) {
             };
         }
         catch (e) {
-            throw new error_1.FirebaseError(`Local Build for backend ${cfg.backendId} failed: ${e}`);
+            const errorMsg = e instanceof Error ? e.message : String(e);
+            throw new error_1.FirebaseError(`Local Build for backend ${cfg.backendId} failed: ${errorMsg}`);
         }
     }
 }
@@ -157,3 +167,13 @@ function getBackendConfigs(options) {
     }
     return backendConfigs.filter((cfg) => backendIds.includes(cfg.backendId));
 }
+async function ensureAppHostingServiceAgentRoles(projectId, projectNumber) {
+    const p4saEmail = (0, apphosting_1.serviceAgentEmail)(projectNumber);
+    try {
+        await (0, resourceManager_1.addServiceAccountToRoles)(projectId, p4saEmail, ["roles/storage.objectViewer"], true);
+    }
+    catch (err) {
+        logger_1.logger.debug(`Failed to grant storage.objectViewer to ${p4saEmail}: ${String(err)}`);
+        (0, utils_1.logLabeledWarning)("apphosting", `Unable to verify App Hosting service agent permissions for ${p4saEmail}. If you encounter a PERMISSION_DENIED error during rollout, please ensure the service agent has the "Storage Object Viewer" role.`);
+    }
+}

package/lib/deploy/apphosting/release.js

@@ -15,11 +15,6 @@ async function default_1(context, options) {
         (0, utils_1.logLabeledWarning)("apphosting", `Failed to find metadata for backend(s) ${backendIds.join(", ")}. Please contact support with the contents of your firebase-debug.log to report your issue.`);
         backendIds = backendIds.filter((id) => !missingBackends.includes(id));
     }
-    const localBuildBackends = backendIds.filter((id) => context.backendLocalBuilds[id]);
-    if (localBuildBackends.length > 0) {
-        (0, utils_1.logLabeledWarning)("apphosting", `Skipping backend(s) ${localBuildBackends.join(", ")}. Local Builds are not supported yet.`);
-        backendIds = backendIds.filter((id) => !localBuildBackends.includes(id));
-    }
     if (backendIds.length === 0) {
         return;
     }
@@ -29,10 +24,12 @@ async function default_1(context, options) {
         backendId,
         location: context.backendLocations[backendId],
         buildInput: {
+            config: context.backendLocalBuilds[backendId]?.buildConfig,
             source: {
                 archive: {
                     userStorageUri: context.backendStorageUris[backendId],
                     rootDirectory: context.backendConfigs[backendId].rootDir,
+                    locallyBuiltSource: !!context.backendLocalBuilds[backendId],
                 },
             },
         },

package/lib/deploy/apphosting/util.js

@@ -1,13 +1,56 @@
 "use strict";
 Object.defineProperty(exports, "__esModule", { value: true });
-exports.createArchive = createArchive;
+exports.createLocalBuildTarArchive = createLocalBuildTarArchive;
+exports.createSourceDeployArchive = createSourceDeployArchive;
 const archiver = require("archiver");
 const fs = require("fs");
 const path = require("path");
+const tar = require("tar");
 const tmp = require("tmp");
 const error_1 = require("../../error");
 const fsAsync = require("../../fsAsync");
-async function createArchive(config, rootDir, targetSubDir) {
+const config_1 = require("../../apphosting/config");
+async function createLocalBuildTarArchive(config, rootDir, targetSubDir) {
+    const tmpFile = tmp.fileSync({ prefix: `${config.backendId}-`, postfix: ".tar.gz" }).name;
+    const targetDir = targetSubDir ? path.join(rootDir, targetSubDir) : rootDir;
+    const ignore = ["firebase-debug.log", "firebase-debug.*.log", ".git"];
+    const rdrFiles = await fsAsync.readdirRecursive({
+        path: targetDir,
+        ignore: ignore,
+        isGitIgnore: true,
+    });
+    const allFiles = rdrFiles.map((rdrf) => path.relative(rootDir, rdrf.name));
+    if (targetSubDir) {
+        const defaultFiles = fs.readdirSync(rootDir).filter((file) => {
+            return config_1.APPHOSTING_YAML_FILE_REGEX.test(file);
+        });
+        for (const file of defaultFiles) {
+            if (!allFiles.includes(file)) {
+                allFiles.push(file);
+            }
+        }
+    }
+    try {
+        fs.statSync(rootDir);
+    }
+    catch (err) {
+        if (err instanceof Error && "code" in err && err.code === "ENOENT") {
+            throw new error_1.FirebaseError(`Could not read directory "${rootDir}"`);
+        }
+        throw err;
+    }
+    if (!allFiles.length) {
+        throw new error_1.FirebaseError(`Cannot create a tar archive with 0 files from directory "${rootDir}"`);
+    }
+    await tar.create({
+        gzip: true,
+        file: tmpFile,
+        cwd: rootDir,
+        portable: true,
+    }, allFiles);
+    return tmpFile;
+}
+async function createSourceDeployArchive(config, rootDir, targetSubDir) {
     const tmpFile = tmp.fileSync({ prefix: `${config.backendId}-`, postfix: ".zip" }).name;
     const fileStream = fs.createWriteStream(tmpFile, {
         flags: "w",

package/lib/deploy/functions/prepare.js

@@ -13,6 +13,7 @@ const clc = require("colorette");
 const proto = require("../../gcp/proto");
 const backend = require("./backend");
 const build = require("./build");
+const experiments = require("../../experiments");
 const ensureApiEnabled = require("../../ensureApiEnabled");
 const functionsConfig = require("../../functionsConfig");
 const functionsEnv = require("../../functions/env");
@@ -322,7 +323,9 @@ async function loadCodebases(config, options, firebaseConfig, runtimeConfig, fil
         }
         const runtimeDelegate = await runtimes.getRuntimeDelegate(delegateContext);
         logger_1.logger.debug(`Validating ${runtimeDelegate.language} source`);
-        supported.guardVersionSupport(runtimeDelegate.runtime);
+        if (!experiments.isEnabled("bypassfunctionsdeprecationcheck")) {
+            supported.guardVersionSupport(runtimeDelegate.runtime);
+        }
         await runtimeDelegate.validate();
         logger_1.logger.debug(`Building ${runtimeDelegate.language} source`);
         await runtimeDelegate.build();

package/lib/deploy/functions/release/fabricator.js

@@ -57,6 +57,7 @@ class Fabricator {
     constructor(args) {
         this.executor = args.executor;
         this.functionExecutor = args.functionExecutor;
+        this.runFunctionExecutor = args.runFunctionExecutor;
         this.sources = args.sources;
         this.appEngineLocation = args.appEngineLocation;
         this.projectNumber = args.projectNumber;
@@ -521,7 +522,7 @@ class Fabricator {
                 generation: storageSource.generation ? String(storageSource.generation) : undefined,
             },
         };
-        await this.executor
+        await this.runFunctionExecutor
             .run(async () => {
             const op = await runV2.createService(endpoint.project, endpoint.region, endpoint.id, service);
             endpoint.uri = op.uri;
@@ -546,7 +547,7 @@ class Fabricator {
                 generation: storageSource.generation ? String(storageSource.generation) : undefined,
             },
         };
-        await this.executor
+        await this.runFunctionExecutor
             .run(async () => {
             const op = await runV2.updateService(service);
             endpoint.uri = op.uri;
@@ -556,7 +557,7 @@ class Fabricator {
         await this.setInvoker(endpoint);
     }
     async deleteRunFunction(endpoint) {
-        await this.executor
+        await this.runFunctionExecutor
             .run(async () => {
             try {
                 await runV2.deleteService(endpoint.project, endpoint.region, endpoint.id);

package/lib/deploy/functions/release/index.js

@@ -70,9 +70,14 @@ async function release(context, options, payload) {
         concurrency: 40,
         maxBackoff: 100000,
     };
+    const runThrottlerOptions = {
+        ...throttlerOptions,
+        concurrency: 2,
+    };
     const projectNumber = options.projectNumber || (await (0, getProjectNumber_1.getProjectNumber)(context.projectId));
     const fab = new fabricator.Fabricator({
         functionExecutor: new executor.QueueExecutor(throttlerOptions),
+        runFunctionExecutor: new executor.QueueExecutor(runThrottlerOptions),
         executor: new executor.QueueExecutor(throttlerOptions),
         sources: context.sources,
         appEngineLocation: (0, functionsConfig_1.getAppEngineLocation)(context.firebaseConfig),