firebase-tools 15.22.3 → 15.23.0

package/lib/emulator/storage/multipart.js

@@ -1,7 +1,9 @@
 "use strict";
 Object.defineProperty(exports, "__esModule", { value: true });
 exports.parseObjectUploadMultipartRequest = parseObjectUploadMultipartRequest;
+exports.parseFormDataMultipartRequest = parseFormDataMultipartRequest;
 const LINE_SEPARATOR = `\r\n`;
+const LINE_SEPARATOR_BUFFER = Buffer.from(LINE_SEPARATOR);
 function splitBufferByDelimiter(buffer, delimiter, maxResults = -1) {
     let offset = 0;
     let nextDelimiterIndex = buffer.indexOf(delimiter, offset);
@@ -22,14 +24,21 @@ function splitBufferByDelimiter(buffer, delimiter, maxResults = -1) {
     bufferParts.push(Buffer.from(buffer.slice(offset)));
     return bufferParts;
 }
-function parseMultipartRequestBody(boundaryId, body) {
+function splitMultipartIntoParts(boundaryId, body) {
     const cleanBoundaryId = boundaryId.replace(/^["'](.+(?=["']$))["']$/, "$1");
     const boundaryString = `--${cleanBoundaryId}`;
     const bodyParts = splitBufferByDelimiter(body, boundaryString).map((buf) => {
         return Buffer.from(buf.slice(2));
     });
+    if (bodyParts.length < 2) {
+        return [];
+    }
+    return bodyParts.slice(1, bodyParts.length - 1);
+}
+function parseMultipartRequestBody(boundaryId, body) {
+    const rawParts = splitMultipartIntoParts(boundaryId, body);
     const parsedParts = [];
-    for (const bodyPart of bodyParts.slice(1, bodyParts.length - 1)) {
+    for (const bodyPart of rawParts) {
         parsedParts.push(parseMultipartRequestBodyPart(bodyPart));
     }
     return parsedParts;
@@ -60,3 +69,74 @@ function parseObjectUploadMultipartRequest(contentTypeHeader, body) {
         dataRaw: Buffer.from(parsedBody[1].dataRaw),
     };
 }
+function parseMultipartFormDataBody(boundaryId, body) {
+    const rawParts = splitMultipartIntoParts(boundaryId, body);
+    const parsedParts = [];
+    for (const bodyPart of rawParts) {
+        parsedParts.push(parseMultipartFormDataBodyPart(bodyPart));
+    }
+    return parsedParts;
+}
+function parseMultipartFormDataBodyPart(part) {
+    const doubleCRLF = `${LINE_SEPARATOR}${LINE_SEPARATOR}`;
+    const sections = splitBufferByDelimiter(part, doubleCRLF, 2);
+    if (sections.length < 2) {
+        throw new Error("Failed to parse multipart part: Missing header-body separator.");
+    }
+    const headerBuffer = sections[0];
+    const bodyBuffer = sections[1];
+    if (bodyBuffer.byteLength < LINE_SEPARATOR_BUFFER.byteLength ||
+        !bodyBuffer
+            .slice(bodyBuffer.byteLength - LINE_SEPARATOR_BUFFER.byteLength)
+            .equals(LINE_SEPARATOR_BUFFER)) {
+        throw new Error("Failed to parse multipart part: Missing trailing line separator.");
+    }
+    const dataRaw = bodyBuffer.slice(0, bodyBuffer.byteLength - LINE_SEPARATOR_BUFFER.byteLength);
+    const headers = headerBuffer.toString().split(LINE_SEPARATOR);
+    let name = "";
+    let filename;
+    let contentType;
+    for (const h of headers) {
+        const lowerH = h.toLowerCase();
+        if (lowerH.startsWith("content-disposition:")) {
+            name = extractParam(h, "name") ?? name;
+            filename = extractParam(h, "filename") ?? filename;
+        }
+        else if (lowerH.startsWith("content-type:")) {
+            contentType = h.substring("content-type:".length).trim();
+        }
+    }
+    if (!name) {
+        throw new Error("Failed to parse multipart form-data. Missing 'name' in Content-Disposition header.");
+    }
+    if (filename) {
+        return {
+            type: "file",
+            name,
+            filename,
+            contentType: contentType || "application/octet-stream",
+            data: dataRaw,
+        };
+    }
+    else {
+        return {
+            type: "field",
+            name,
+            value: dataRaw.toString(),
+        };
+    }
+}
+function extractParam(header, param) {
+    const match = header.match(new RegExp(`\\b${param}=["']?([^"';]+)["']?`, "i"));
+    return match ? match[1] : undefined;
+}
+function parseFormDataMultipartRequest(contentTypeHeader, body) {
+    if (!contentTypeHeader.startsWith("multipart/form-data")) {
+        throw new Error(`Bad content type. ${contentTypeHeader}`);
+    }
+    const boundaryId = contentTypeHeader.split("boundary=")[1]?.split(";")[0]?.trim();
+    if (!boundaryId) {
+        throw new Error(`Bad content type. ${contentTypeHeader}`);
+    }
+    return parseMultipartFormDataBody(boundaryId, body);
+}

package/lib/emulator/taskQueue.js

@@ -1,11 +1,8 @@
 "use strict";
 Object.defineProperty(exports, "__esModule", { value: true });
 exports.TaskQueue = exports.TaskStatus = exports.Queue = void 0;
-const abort_controller_1 = require("abort-controller");
 const emulatorLogger_1 = require("./emulatorLogger");
 const types_1 = require("./types");
-const error_1 = require("../error");
-const node_fetch_1 = require("node-fetch");
 class Node {
     constructor(data) {
         this.data = data;
@@ -204,17 +201,12 @@ class TaskQueue {
             if (emulatedTask.metadata.previousResponse) {
                 headers["X-CloudTasks-TaskPreviousResponse"] = `${emulatedTask.metadata.previousResponse}`;
             }
-            const controller = new abort_controller_1.default();
-            const signal = controller.signal;
-            signal.reason = "";
-            signal.throwIfAborted = () => {
-                throw new error_1.FirebaseError("Aborted");
-            };
-            const request = (0, node_fetch_1.default)(emulatedTask.task.httpRequest.url, {
+            const controller = new AbortController();
+            const request = fetch(emulatedTask.task.httpRequest.url, {
                 method: "POST",
                 headers: headers,
                 body: JSON.stringify(emulatedTask.task.httpRequest.body),
-                signal: signal,
+                signal: controller.signal,
             });
             const dispatchDeadline = emulatedTask.task.dispatchDeadline;
             const dispatchDeadlineSeconds = dispatchDeadline

package/lib/extensions/extensionsHelper.js

@@ -34,8 +34,8 @@ const ora = require("ora");
 const semver = require("semver");
 const tmp = require("tmp");
 const fs = require("fs-extra");
-const node_fetch_1 = require("node-fetch");
 const path = require("path");
+const stream_1 = require("stream");
 const marked_1 = require("marked");
 const marked_terminal_1 = require("marked-terminal");
 const unzip_1 = require("./../unzip");
@@ -514,9 +514,11 @@ async function fetchExtensionSource(repoUri, sourceRef, extensionRoot) {
     const tempDirectory = tmp.dirSync({ unsafeCleanup: true });
     const archiveErrorMessage = `Failed to extract archive from ${clc.bold(archiveUri)}. Please check that the repo is public and that the source ref is valid.`;
     try {
-        const response = await (0, node_fetch_1.default)(archiveUri);
-        if (response.ok) {
-            await response.body.pipe((0, unzip_1.createUnzipTransform)(tempDirectory.name)).promise();
+        const response = await fetch(archiveUri);
+        if (response.ok && response.body) {
+            await stream_1.Readable.fromWeb(response.body)
+                .pipe((0, unzip_1.createUnzipTransform)(tempDirectory.name))
+                .promise();
         }
     }
     catch (err) {

package/lib/firestore/api.js

@@ -646,7 +646,9 @@ class FirestoreApi {
                 pageSize: limit,
             },
         });
-        return res.body;
+        return {
+            operations: res.body?.operations || [],
+        };
     }
     async describeOperation(project, databaseId, operationName) {
         const url = `/projects/${project}/databases/${databaseId}/operations/${operationName}`;

package/lib/gcp/cloudtasks.js

@@ -7,6 +7,7 @@ exports.updateQueue = updateQueue;
 exports.upsertQueue = upsertQueue;
 exports.purgeQueue = purgeQueue;
 exports.deleteQueue = deleteQueue;
+exports.enqueueTask = enqueueTask;
 exports.setIamPolicy = setIamPolicy;
 exports.getIamPolicy = getIamPolicy;
 exports.setEnqueuer = setEnqueuer;
@@ -77,6 +78,9 @@ async function purgeQueue(name) {
 async function deleteQueue(name) {
     await client.delete(name);
 }
+async function enqueueTask(queueName, task) {
+    await client.post(`${queueName}/tasks`, { task });
+}
 async function setIamPolicy(name, policy) {
     const res = await client.post(`${name}:setIamPolicy`, {
         policy,

package/lib/gcp/iam.js

@@ -11,10 +11,16 @@ exports.testResourceIamPermissions = testResourceIamPermissions;
 exports.testIamPermissions = testIamPermissions;
 exports.mergeBindings = mergeBindings;
 exports.printManualIamConfig = printManualIamConfig;
+exports.getRoleName = getRoleName;
+exports.generateManagedServiceAccountName = generateManagedServiceAccountName;
+exports.computeRolesEtag = computeRolesEtag;
 const api_1 = require("../api");
 const logger_1 = require("../logger");
 const apiv2_1 = require("../apiv2");
 const utils = require("../utils");
+const error_1 = require("../error");
+const knownRoles = require("./knownRoles.json");
+const crypto = require("crypto");
 const apiClient = new apiv2_1.Client({ urlPrefix: (0, api_1.iamOrigin)(), apiVersion: "v1" });
 function getDefaultCloudBuildServiceAgent(projectNumber) {
     return `${projectNumber}@cloudbuild.gserviceaccount.com`;
@@ -30,11 +36,17 @@ async function createServiceAccount(projectId, accountId, description, displayNa
     return response.body;
 }
 async function getServiceAccount(projectId, serviceAccountName) {
-    const response = await apiClient.get(`/projects/${projectId}/serviceAccounts/${serviceAccountName}@${projectId}.iam.gserviceaccount.com`);
+    const email = serviceAccountName.includes("@")
+        ? serviceAccountName
+        : `${serviceAccountName}@${projectId}.iam.gserviceaccount.com`;
+    const response = await apiClient.get(`/projects/${projectId}/serviceAccounts/${email}`);
     return response.body;
 }
 async function createServiceAccountKey(projectId, serviceAccountName) {
-    const response = await apiClient.post(`/projects/${projectId}/serviceAccounts/${serviceAccountName}@${projectId}.iam.gserviceaccount.com/keys`, {
+    const email = serviceAccountName.includes("@")
+        ? serviceAccountName
+        : `${serviceAccountName}@${projectId}.iam.gserviceaccount.com`;
+    const response = await apiClient.post(`/projects/${projectId}/serviceAccounts/${email}/keys`, {
         keyAlgorithm: "KEY_ALG_UNSPECIFIED",
         privateKeyType: "TYPE_GOOGLE_CREDENTIALS_FILE",
     });
@@ -109,3 +121,57 @@ function printManualIamConfig(requiredBindings, projectId, prefix) {
         }
     }
 }
+async function getRoleName(role) {
+    const map = knownRoles;
+    const title = map[role];
+    if (title) {
+        return title;
+    }
+    try {
+        const roleDetails = await getRole(role);
+        return roleDetails.title || role;
+    }
+    catch (err) {
+        return role;
+    }
+}
+async function generateManagedServiceAccountName(projectId, prefix) {
+    const maxAttempts = 10;
+    for (let i = 0; i < maxAttempts; i++) {
+        const randomSuffix = Math.floor(Math.random() * 10000000000)
+            .toString()
+            .padStart(10, "0");
+        const accountId = `${prefix}-${randomSuffix}`;
+        try {
+            await getServiceAccount(projectId, accountId);
+        }
+        catch (err) {
+            if ((0, error_1.getErrStatus)(err) === 404) {
+                return accountId;
+            }
+            throw err;
+        }
+        await utils.sleep(200);
+    }
+    throw new error_1.FirebaseError("Failed to generate a unique service account name after 10 attempts.");
+}
+function computeRolesEtag(roles, existingSalt) {
+    const BASE38_CHARS = "abcdefghijklmnopqrstuvwxyz0123456789-_";
+    let salt = existingSalt;
+    if (!salt) {
+        salt = String.fromCharCode(97 + Math.floor(Math.random() * 26));
+        for (let i = 0; i < 9; i++) {
+            salt += BASE38_CHARS[Math.floor(Math.random() * 38)];
+        }
+    }
+    const sorted = Array.from(roles).sort();
+    const hashBuffer = crypto
+        .createHash("sha256")
+        .update(salt + sorted.join(","))
+        .digest();
+    let hashStr = "";
+    for (const byte of hashBuffer) {
+        hashStr += BASE38_CHARS[byte % 38];
+    }
+    return `${salt}-${hashStr.substring(0, 52)}`;
+}

package/lib/gcp/knownRoles.json

@@ -0,0 +1,99 @@
+{
+    "roles/actions.Admin": "Actions Admin",
+    "roles/actions.Viewer": "Actions Viewer",
+    "roles/bigquery.dataEditor": "BigQuery Data Editor",
+    "roles/bigquery.user": "BigQuery User",
+    "roles/cloudconfig.admin": "Firebase Remote Config Admin",
+    "roles/cloudconfig.viewer": "Firebase Remote Config Viewer",
+    "roles/clouddeploymentmanager.serviceAgent": "Cloud Deployment Manager Service Agent",
+    "roles/cloudfunctions.admin": "Cloud Functions Admin",
+    "roles/cloudfunctions.developer": "Cloud Functions Developer",
+    "roles/cloudfunctions.invoker": "Cloud Functions Invoker",
+    "roles/cloudtasks.admin": "Cloud Tasks Admin",
+    "roles/cloudtasks.enqueuer": "Cloud Tasks Enqueuer",
+    "roles/cloudtasks.viewer": "Cloud Tasks Viewer",
+    "roles/cloudtestservice.testAdmin": "Firebase Test Lab Admin",
+    "roles/cloudtestservice.testViewer": "Firebase Test Lab Viewer",
+    "roles/composer.serviceAgent": "Cloud Composer API Service Agent",
+    "roles/dataflow.serviceAgent": "Cloud Dataflow Service Agent",
+    "roles/datafusion.serviceAgent": "Cloud Data Fusion API Service Agent",
+    "roles/datapipelines.serviceAgent": "Datapipelines Service Agent",
+    "roles/dataplex.serviceAgent": "Cloud Dataplex Service Agent",
+    "roles/dataproc.serviceAgent": "Dataproc Service Agent",
+    "roles/datastore.user": "Cloud Datastore User",
+    "roles/dlp.serviceAgent": "DLP API Service Agent",
+    "roles/editor": "Editor",
+    "roles/eventarc.admin": "Eventarc Admin",
+    "roles/eventarc.eventReceiver": "Eventarc Event Receiver",
+    "roles/eventarc.viewer": "Eventarc Viewer",
+    "roles/firebase.admin": "Firebase Admin",
+    "roles/firebase.analyticsAdmin": "Firebase Analytics Admin",
+    "roles/firebase.analyticsViewer": "Firebase Analytics Viewer",
+    "roles/firebase.developAdmin": "Firebase Develop Admin",
+    "roles/firebase.developViewer": "Firebase Develop Viewer",
+    "roles/firebase.editor": "Firebase Editor",
+    "roles/firebase.growthAdmin": "Firebase Grow Admin",
+    "roles/firebase.growthViewer": "Firebase Grow Viewer",
+    "roles/firebase.managementServiceAgent": "Firebase Service Management Service Agent",
+    "roles/firebase.qualityAdmin": "Firebase Quality Admin",
+    "roles/firebase.qualityViewer": "Firebase Quality Viewer",
+    "roles/firebase.sdkAdminServiceAgent": "Firebase Admin SDK Administrator Service Agent",
+    "roles/firebase.sdkProvisioningServiceAgent": "Firebase SDK Provisioning Service Agent",
+    "roles/firebase.viewer": "Firebase Viewer",
+    "roles/firebaseabt.admin": "Firebase A/B Testing Admin",
+    "roles/firebaseabt.viewer": "Firebase A/B Testing Viewer",
+    "roles/firebaseappdistro.admin": "Firebase App Distribution Admin",
+    "roles/firebaseappdistro.viewer": "Firebase App Distribution Viewer",
+    "roles/firebaseauth.admin": "Firebase Authentication Admin",
+    "roles/firebaseauth.editor": "Firebase Authentication editor",
+    "roles/firebaseauth.viewer": "Firebase Authentication Viewer",
+    "roles/firebasecloudmessaging.viewer": "Firebase Cloud Messaging API Viewer",
+    "roles/firebasecrash.symbolMappingsAdmin": "Firebase Crash Symbol Uploader",
+    "roles/firebasecrashlytics.admin": "Firebase Crashlytics Admin",
+    "roles/firebasecrashlytics.viewer": "Firebase Crashlytics Viewer",
+    "roles/firebasedatabase.admin": "Firebase Realtime Database Admin",
+    "roles/firebasedatabase.viewer": "Firebase Realtime Database Viewer",
+    "roles/firebasedynamiclinks.admin": "Firebase Dynamic Links Admin",
+    "roles/firebasedynamiclinks.editor": "Firebasedynamiclinks Editor",
+    "roles/firebasedynamiclinks.viewer": "Firebase Dynamic Links Viewer",
+    "roles/firebaseextensions.developer": "Firebase Extensions Developer",
+    "roles/firebaseextensions.editor": "Firebaseextensions Editor",
+    "roles/firebaseextensions.viewer": "Firebase Extensions Viewer",
+    "roles/firebaseextensionspublisher.admin": "Firebaseextensionspublisher Admin",
+    "roles/firebaseextensionspublisher.extensionsAdmin": "Firebase Extensions Publisher - Extensions Admin",
+    "roles/firebaseextensionspublisher.extensionsViewer": "Firebase Extensions Publisher - Extensions Viewer",
+    "roles/firebaseextensionspublisher.viewer": "Firebaseextensionspublisher Viewer",
+    "roles/firebasehosting.admin": "Firebase Hosting Admin",
+    "roles/firebasehosting.viewer": "Firebase Hosting Viewer",
+    "roles/firebaseinappmessaging.admin": "Firebase In-App Messaging Admin",
+    "roles/firebaseinappmessaging.viewer": "Firebase In-App Messaging Viewer",
+    "roles/firebaseml.admin": "Firebase ML Kit Admin",
+    "roles/firebaseml.viewer": "Firebase ML Kit Viewer",
+    "roles/firebasenotifications.admin": "Firebase Cloud Messaging Admin",
+    "roles/firebasenotifications.viewer": "Firebase Cloud Messaging Viewer",
+    "roles/firebaseperformance.admin": "Firebase Performance Reporting Admin",
+    "roles/firebaseperformance.viewer": "Firebase Performance Reporting Viewer",
+    "roles/firebasestorage.admin": "Cloud Storage for Firebase Admin",
+    "roles/iam.databasesAdmin": "Databases Admin",
+    "roles/iam.infrastructureAdmin": "Infrastructure Administrator",
+    "roles/iam.securityAdmin": "Security Admin",
+    "roles/iam.securityAuditor": "Security Auditor",
+    "roles/iam.securityReviewer": "Security Reviewer",
+    "roles/iam.supportUser": "Support User",
+    "roles/identitytoolkit.editor": "Identity Toolkit editor",
+    "roles/ml.serviceAgent": "AI Platform Service Agent",
+    "roles/oauthconfig.editor": "OAuth Config Editor",
+    "roles/oauthconfig.viewer": "OAuth Config Viewer",
+    "roles/owner": "Owner",
+    "roles/pubsub.admin": "Pub/Sub Admin",
+    "roles/pubsub.publisher": "Pub/Sub Publisher",
+    "roles/pubsub.subscriber": "Pub/Sub Subscriber",
+    "roles/pubsub.viewer": "Pub/Sub Viewer",
+    "roles/storage.admin": "Storage Admin",
+    "roles/storage.hmacKeyAdmin": "Storage HMAC Key Admin",
+    "roles/storage.objectAdmin": "Storage Object Admin",
+    "roles/storage.objectCreator": "Storage Object Creator",
+    "roles/storage.objectViewer": "Storage Object Viewer",
+    "roles/viewer": "Viewer",
+    "roles/visualinspection.serviceAgent": "Visual Inspection AI Service Agent"
+}

package/lib/gcp/resourceManager.js

@@ -1,10 +1,12 @@
 "use strict";
 Object.defineProperty(exports, "__esModule", { value: true });
-exports.firebaseRoles = void 0;
+exports.addServiceAccountRoles = exports.firebaseRoles = void 0;
 exports.getIamPolicy = getIamPolicy;
 exports.setIamPolicy = setIamPolicy;
 exports.addServiceAccountToRoles = addServiceAccountToRoles;
 exports.serviceAccountHasRoles = serviceAccountHasRoles;
+exports.removeServiceAccountRoles = removeServiceAccountRoles;
+exports.getServiceAccountRoles = getServiceAccountRoles;
 const lodash_1 = require("lodash");
 const api_1 = require("../api");
 const apiv2_1 = require("../apiv2");
@@ -37,6 +39,7 @@ async function addServiceAccountToRoles(projectId, serviceAccountName, roles, sk
             : (0, iam_1.getServiceAccount)(projectId, serviceAccountName),
         getIamPolicy(projectId),
     ]);
+    projectPolicy.bindings = projectPolicy.bindings || [];
     const newMemberName = `serviceAccount:${fullServiceAccountName.split("/").pop()}`;
     roles.forEach((roleName) => {
         let bindingIndex = (0, lodash_1.findIndex)(projectPolicy.bindings, (binding) => binding.role === roleName);
@@ -61,6 +64,7 @@ async function serviceAccountHasRoles(projectId, serviceAccountName, roles, skip
             : (0, iam_1.getServiceAccount)(projectId, serviceAccountName),
         getIamPolicy(projectId),
     ]);
+    projectPolicy.bindings = projectPolicy.bindings || [];
     const memberName = `serviceAccount:${fullServiceAccountName.split("/").pop()}`;
     for (const roleName of roles) {
         const binding = projectPolicy.bindings.find((b) => b.role === roleName);
@@ -73,3 +77,40 @@ async function serviceAccountHasRoles(projectId, serviceAccountName, roles, skip
     }
     return true;
 }
+async function removeServiceAccountRoles(projectId, serviceAccountEmail, rolesToRemove) {
+    const projectPolicy = await getIamPolicy(projectId);
+    const bindings = projectPolicy.bindings || [];
+    const memberName = `serviceAccount:${serviceAccountEmail}`;
+    let updated = false;
+    for (let i = bindings.length - 1; i >= 0; i--) {
+        const binding = bindings[i];
+        if (rolesToRemove.includes(binding.role)) {
+            const memberIndex = binding.members.indexOf(memberName);
+            if (memberIndex !== -1) {
+                binding.members.splice(memberIndex, 1);
+                updated = true;
+                if (binding.members.length === 0) {
+                    bindings.splice(i, 1);
+                }
+            }
+        }
+    }
+    if (updated) {
+        projectPolicy.bindings = bindings;
+        return await setIamPolicy(projectId, projectPolicy, "bindings");
+    }
+    return projectPolicy;
+}
+async function getServiceAccountRoles(projectId, serviceAccountEmail) {
+    const projectPolicy = await getIamPolicy(projectId);
+    const memberName = `serviceAccount:${serviceAccountEmail}`;
+    const roles = [];
+    const bindings = projectPolicy.bindings || [];
+    for (const binding of bindings) {
+        if (binding.members.includes(memberName)) {
+            roles.push(binding.role);
+        }
+    }
+    return roles;
+}
+exports.addServiceAccountRoles = addServiceAccountToRoles;

package/lib/gemini/fdcExperience.js

@@ -9,8 +9,8 @@ const api_1 = require("../api");
 const error_1 = require("../error");
 const logger_1 = require("../logger");
 const apiClient = new apiv2_1.Client({ urlPrefix: (0, api_1.dataconnectOrigin)(), auth: true });
-exports.PROMPT_GENERATE_CONNECTOR = "Create 4 operations for an app using the instance schema with proper authentication.";
-exports.PROMPT_GENERATE_SEED_DATA = "Create a mutation to populate the database with some seed data.";
+exports.PROMPT_GENERATE_CONNECTOR = 'Generate at least one create (insert/upsert), delete, update, get (read by key), and list operation for each table defined in the schema. For user-specific data, use the \'auth.uid\' server value (e.g., id_expr: "auth.uid") or correct filters to secure user-owned data and require authentication using @auth(level: USER). For publicly accessible data, use @auth(level: PUBLIC, insecureReason: "why is it OK to be public?")';
+exports.PROMPT_GENERATE_SEED_DATA = "Create a single mutation wrapped in a @transaction to populate the database with seed data. The mutation should call the insertMany action (e.g., table_insertMany) for all tables/entities defined in the schema, using fake data. Generate appropriate fake records (3 to 5 per table) conforming to the schema and including proper relationships/foreign keys.";
 function logCurl(method, path, body) {
     const url = `${(0, api_1.dataconnectOrigin)()}${path}`;
     const headers = [

package/lib/hosting/initMiddleware.js

@@ -31,7 +31,7 @@ function initMiddleware(init) {
                 if (sdkRes.status === 404) {
                     return next();
                 }
-                for (const [key, value] of Object.entries(sdkRes.response.headers.raw())) {
+                for (const [key, value] of sdkRes.response.headers.entries()) {
                     res.setHeader(key, value);
                 }
                 sdkRes.body.pipe(res);

package/lib/hosting/proxy.js

@@ -3,7 +3,6 @@ Object.defineProperty(exports, "__esModule", { value: true });
 exports.proxyRequestHandler = proxyRequestHandler;
 exports.errorRequestHandler = errorRequestHandler;
 const lodash_1 = require("lodash");
-const node_fetch_1 = require("node-fetch");
 const stream_1 = require("stream");
 const url_1 = require("url");
 const apiv2_1 = require("../apiv2");
@@ -41,7 +40,7 @@ function proxyRequestHandler(url, rewriteIdentifier, options = {}) {
             passThrough = new stream_1.PassThrough();
             req.pipe(passThrough);
         }
-        const headers = new node_fetch_1.Headers({
+        const headers = new Headers({
             "X-Forwarded-Host": req.headers.host || "",
             "X-Original-Url": req.url || "",
             Pragma: "no-cache",
@@ -83,13 +82,14 @@ function proxyRequestHandler(url, rewriteIdentifier, options = {}) {
             });
         }
         catch (err) {
+            logger_1.logger.error("[PROXY ERROR]", err);
             const isAbortError = err instanceof error_1.FirebaseError && err.original?.name.includes("AbortError");
             const isTimeoutError = err instanceof error_1.FirebaseError &&
-                err.original instanceof node_fetch_1.FetchError &&
-                err.original.code === "ETIMEDOUT";
+                (err.original?.code === "ETIMEDOUT" ||
+                    err.original?.cause?.code === "ETIMEDOUT");
             const isSocketTimeoutError = err instanceof error_1.FirebaseError &&
-                err.original instanceof node_fetch_1.FetchError &&
-                err.original.code === "ESOCKETTIMEDOUT";
+                (err.original?.code === "ESOCKETTIMEDOUT" ||
+                    err.original?.cause?.code === "ESOCKETTIMEDOUT");
             if (isAbortError || isTimeoutError || isSocketTimeoutError) {
                 res.statusCode = 504;
                 return res.end("Timed out waiting for function to respond.\n");
@@ -97,38 +97,60 @@ function proxyRequestHandler(url, rewriteIdentifier, options = {}) {
             res.statusCode = 500;
             return res.end(`An internal error occurred while proxying for ${rewriteIdentifier}\n`);
         }
+        finally {
+            if (passThrough) {
+                passThrough.resume();
+            }
+        }
+        const resHeaders = {};
+        for (const [key, value] of proxyRes.response.headers.entries()) {
+            resHeaders[key.toLowerCase()] = value;
+        }
         if (proxyRes.status === 404) {
-            const cascade = proxyRes.response.headers.get("x-cascade");
-            if (options.forceCascade || (cascade && cascade.toUpperCase() === "PASS")) {
+            const cascade = resHeaders["x-cascade"];
+            if (options.forceCascade ||
+                (typeof cascade === "string" && cascade.toUpperCase() === "PASS")) {
                 return next();
             }
         }
-        if (!proxyRes.response.headers.get("cache-control")) {
-            proxyRes.response.headers.set("cache-control", "private");
+        if (!resHeaders["cache-control"]) {
+            resHeaders["cache-control"] = "private";
         }
-        const cc = proxyRes.response.headers.get("cache-control");
-        if (cc && !cc.includes("private")) {
-            proxyRes.response.headers.delete("set-cookie");
+        const cc = resHeaders["cache-control"];
+        if (typeof cc === "string" && !cc.includes("private")) {
+            delete resHeaders["set-cookie"];
         }
-        proxyRes.response.headers.set("vary", makeVary(proxyRes.response.headers.get("vary")));
-        const location = proxyRes.response.headers.get("location");
-        if (location) {
+        const vary = resHeaders["vary"];
+        resHeaders["vary"] = makeVary(typeof vary === "string" ? vary : null);
+        const location = resHeaders["location"];
+        if (typeof location === "string" && location) {
             try {
                 const locationURL = new url_1.URL(location);
                 if (locationURL.origin === u.origin) {
                     const unborkedLocation = location.replace(locationURL.origin, "");
-                    proxyRes.response.headers.set("location", unborkedLocation);
+                    resHeaders["location"] = unborkedLocation;
                 }
             }
             catch (e) {
                 logger_1.logger.debug(`[hosting] had trouble parsing location header, but this may be okay: "${location}"`);
             }
         }
-        for (const [key, value] of Object.entries(proxyRes.response.headers.raw())) {
-            res.setHeader(key, value);
+        for (const key of Object.keys(resHeaders)) {
+            const value = resHeaders[key];
+            if (key === "set-cookie") {
+                if (typeof proxyRes.response.headers.getSetCookie === "function") {
+                    res.setHeader(key, proxyRes.response.headers.getSetCookie());
+                }
+                else {
+                    res.setHeader(key, value);
+                }
+            }
+            else {
+                res.setHeader(key, value);
+            }
         }
         res.statusCode = proxyRes.status;
-        proxyRes.response.body.pipe(res);
+        proxyRes.body.pipe(res);
     };
 }
 function errorRequestHandler(error) {

package/lib/management/apps.js

@@ -84,9 +84,11 @@ https://firebase.google.com/docs/flutter/setup
 async function initiateIosAppCreation(options) {
     if (!options.nonInteractive) {
         options.displayName = options.displayName || (await getDisplayName());
+        const promptAppStoreId = !options.bundleId;
         options.bundleId = options.bundleId || (await (0, prompt_1.input)("Please specify your iOS app bundle ID:"));
-        options.appStoreId =
-            options.appStoreId || (await (0, prompt_1.input)("Please specify your iOS app App Store ID:"));
+        if (promptAppStoreId && !options.appStoreId) {
+            options.appStoreId = await (0, prompt_1.input)("Please specify your iOS app App Store ID:");
+        }
     }
     if (!options.bundleId) {
         throw new error_1.FirebaseError("Bundle ID for iOS app cannot be empty");

package/lib/profiler.js

@@ -5,7 +5,6 @@ const fs = require("fs");
 const ora = require("ora");
 const readline = require("readline");
 const tmp = require("tmp");
-const abort_controller_1 = require("abort-controller");
 const apiv2_1 = require("./apiv2");
 const api_1 = require("./database/api");
 const logger_1 = require("./logger");
@@ -26,7 +25,7 @@ async function profiler(options) {
         color: "yellow",
     });
     const outputFormat = options.raw ? "RAW" : options.parent.json ? "JSON" : "TXT";
-    const controller = new abort_controller_1.default();
+    const controller = new AbortController();
     const generateReport = () => {
         rl.close();
         spinner.stop();

package/lib/streamUtils.js

@@ -0,0 +1,24 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.stringToStream = stringToStream;
+exports.streamToString = streamToString;
+const stream_1 = require("stream");
+function stringToStream(text) {
+    if (!text) {
+        return undefined;
+    }
+    const s = new stream_1.Readable();
+    s.push(text);
+    s.push(null);
+    return s;
+}
+function streamToString(s) {
+    return new Promise((resolve, reject) => {
+        let b = "";
+        s.on("error", reject);
+        s.on("data", (d) => {
+            b += d.toString();
+        });
+        s.once("end", () => resolve(b));
+    });
+}