firebase-tools 9.18.0 → 9.22.0

package/lib/extensions/extensionsHelper.js

@@ -1,6 +1,6 @@
 "use strict";
 Object.defineProperty(exports, "__esModule", { value: true });
-exports.confirmInstallInstance = exports.getSourceOrigin = exports.isLocalOrURLPath = exports.isLocalPath = exports.isUrlPath = exports.instanceIdExists = exports.promptForRepeatInstance = exports.promptForOfficialExtension = exports.confirmExtensionVersion = exports.getExtensionSourceFromName = exports.createSourceFromLocation = exports.publishExtensionVersionFromLocalSource = exports.ensureExtensionsApiEnabled = exports.promptForValidInstanceId = exports.validateSpec = exports.validateCommandLineParams = exports.populateDefaultParams = exports.substituteParams = exports.getFirebaseProjectParams = exports.getDBInstanceFromURL = exports.resourceTypeToNiceName = exports.AUTOPOULATED_PARAM_PLACEHOLDERS = exports.EXTENSIONS_BUCKET_NAME = exports.URL_REGEX = exports.logPrefix = exports.SourceOrigin = exports.SpecParamType = void 0;
+exports.confirm = exports.getSourceOrigin = exports.isLocalOrURLPath = exports.isLocalPath = exports.isUrlPath = exports.instanceIdExists = exports.promptForRepeatInstance = exports.promptForOfficialExtension = exports.displayReleaseNotes = exports.getExtensionSourceFromName = exports.createSourceFromLocation = exports.publishExtensionVersionFromLocalSource = exports.ensureExtensionsApiEnabled = exports.promptForValidInstanceId = exports.validateSpec = exports.validateCommandLineParams = exports.populateDefaultParams = exports.substituteParams = exports.getFirebaseProjectParams = exports.getDBInstanceFromURL = exports.resourceTypeToNiceName = exports.AUTOPOULATED_PARAM_PLACEHOLDERS = exports.EXTENSIONS_BUCKET_NAME = exports.URL_REGEX = exports.logPrefix = exports.SourceOrigin = exports.SpecParamType = void 0;
 const _ = require("lodash");
 const clc = require("cli-color");
 const ora = require("ora");
@@ -21,17 +21,20 @@ const ensureApiEnabled_1 = require("../ensureApiEnabled");
 const storage_1 = require("../gcp/storage");
 const projectUtils_1 = require("../projectUtils");
 const extensionsApi_1 = require("./extensionsApi");
+const refs = require("./refs");
 const localHelper_1 = require("./localHelper");
 const prompt_1 = require("../prompt");
 const logger_1 = require("../logger");
 const utils_2 = require("../utils");
 const changelog_1 = require("./changelog");
+const getProjectNumber_1 = require("../getProjectNumber");
 var SpecParamType;
 (function (SpecParamType) {
     SpecParamType["SELECT"] = "select";
     SpecParamType["MULTISELECT"] = "multiSelect";
     SpecParamType["STRING"] = "string";
     SpecParamType["SELECTRESOURCE"] = "selectResource";
+    SpecParamType["SECRET"] = "secret";
 })(SpecParamType = exports.SpecParamType || (exports.SpecParamType = {}));
 var SourceOrigin;
 (function (SourceOrigin) {
@@ -74,6 +77,7 @@ function getDBInstanceFromURL(databaseUrl = "") {
 exports.getDBInstanceFromURL = getDBInstanceFromURL;
 async function getFirebaseProjectParams(projectId) {
     const body = await functionsConfig_1.getFirebaseConfig({ project: projectId });
+    const projectNumber = await getProjectNumber_1.getProjectNumber({ projectId });
     const FIREBASE_CONFIG = JSON.stringify({
         projectId: body.projectId,
         databaseURL: body.databaseURL,
@@ -81,6 +85,7 @@ async function getFirebaseProjectParams(projectId) {
     });
     return {
         PROJECT_ID: body.projectId,
+        PROJECT_NUMBER: projectNumber,
         DATABASE_URL: body.databaseURL,
         STORAGE_BUCKET: body.storageBucket,
         FIREBASE_CONFIG,
@@ -106,7 +111,7 @@ function populateDefaultParams(paramVars, paramSpecs) {
     const newParams = paramVars;
     for (const param of paramSpecs) {
         if (!paramVars[param.param]) {
-            if (param.default != undefined) {
+            if (param.default != undefined && param.required) {
                 newParams[param.param] = param.default;
             }
             else if (param.required) {
@@ -260,23 +265,23 @@ async function archiveAndUploadSource(extPath, bucketName) {
     const res = await storage_1.uploadObject(zippedSource, bucketName);
     return `/${res.bucket}/${res.object}`;
 }
-async function publishExtensionVersionFromLocalSource(publisherId, extensionId, rootDirectory) {
-    const extensionSpec = await localHelper_1.getLocalExtensionSpec(rootDirectory);
-    if (extensionSpec.name != extensionId) {
-        throw new error_1.FirebaseError(`Extension ID '${clc.bold(extensionId)}' does not match the name in extension.yaml '${clc.bold(extensionSpec.name)}'.`);
+async function publishExtensionVersionFromLocalSource(args) {
+    const extensionSpec = await localHelper_1.getLocalExtensionSpec(args.rootDirectory);
+    if (extensionSpec.name != args.extensionId) {
+        throw new error_1.FirebaseError(`Extension ID '${clc.bold(args.extensionId)}' does not match the name in extension.yaml '${clc.bold(extensionSpec.name)}'.`);
     }
     const subbedSpec = JSON.parse(JSON.stringify(extensionSpec));
     subbedSpec.params = substituteParams(extensionSpec.params || [], exports.AUTOPOULATED_PARAM_PLACEHOLDERS);
     validateSpec(subbedSpec);
     let extension;
     try {
-        extension = await extensionsApi_1.getExtension(`${publisherId}/${extensionId}`);
+        extension = await extensionsApi_1.getExtension(`${args.publisherId}/${args.extensionId}`);
     }
     catch (err) {
     }
     let notes;
     try {
-        const changes = changelog_1.getLocalChangelog(rootDirectory);
+        const changes = changelog_1.getLocalChangelog(args.rootDirectory);
         notes = changes[extensionSpec.version];
     }
     catch (err) {
@@ -289,27 +294,31 @@ async function publishExtensionVersionFromLocalSource(publisherId, extensionId,
             "Please add one so users know what has changed in this version. " +
             marked("See https://firebase.google.com/docs/extensions/alpha/create-user-docs#writing-changelog for more details."));
     }
-    const consent = await confirmExtensionVersion(publisherId, extensionId, extensionSpec.version, notes);
-    if (!consent) {
+    displayReleaseNotes(args.publisherId, args.extensionId, extensionSpec.version, notes);
+    if (!(await confirm({
+        nonInteractive: args.nonInteractive,
+        force: args.force,
+        default: false,
+    }))) {
         return;
     }
     if (extension &&
         extension.latestVersion &&
         semver.lt(extensionSpec.version, extension.latestVersion)) {
-        throw new error_1.FirebaseError(`The version you are trying to publish (${clc.bold(extensionSpec.version)}) is lower than the current version (${clc.bold(extension.latestVersion)}) for the extension '${clc.bold(`${publisherId}/${extensionId}`)}'. Please make sure this version is greater than the current version (${clc.bold(extension.latestVersion)}) inside of extension.yaml.\n`);
+        throw new error_1.FirebaseError(`The version you are trying to publish (${clc.bold(extensionSpec.version)}) is lower than the current version (${clc.bold(extension.latestVersion)}) for the extension '${clc.bold(`${args.publisherId}/${args.extensionId}`)}'. Please make sure this version is greater than the current version (${clc.bold(extension.latestVersion)}) inside of extension.yaml.\n`);
     }
     else if (extension &&
         extension.latestVersion &&
         semver.eq(extensionSpec.version, extension.latestVersion)) {
-        throw new error_1.FirebaseError(`The version you are trying to publish (${clc.bold(extensionSpec.version)}) already exists for the extension '${clc.bold(`${publisherId}/${extensionId}`)}'. Please increment the version inside of extension.yaml.\n`);
+        throw new error_1.FirebaseError(`The version you are trying to publish (${clc.bold(extensionSpec.version)}) already exists for the extension '${clc.bold(`${args.publisherId}/${args.extensionId}`)}'. Please increment the version inside of extension.yaml.\n`, { exit: 103 });
     }
-    const ref = `${publisherId}/${extensionId}@${extensionSpec.version}`;
+    const ref = `${args.publisherId}/${args.extensionId}@${extensionSpec.version}`;
     let packageUri;
     let objectPath = "";
     const uploadSpinner = ora.default(" Archiving and uploading extension source code");
     try {
         uploadSpinner.start();
-        objectPath = await archiveAndUploadSource(rootDirectory, exports.EXTENSIONS_BUCKET_NAME);
+        objectPath = await archiveAndUploadSource(args.rootDirectory, exports.EXTENSIONS_BUCKET_NAME);
         uploadSpinner.succeed(" Uploaded extension source code");
         packageUri = api_1.storageOrigin + objectPath + "?alt=media";
     }
@@ -327,7 +336,7 @@ async function publishExtensionVersionFromLocalSource(publisherId, extensionId,
     catch (err) {
         publishSpinner.fail();
         if (err.status == 404) {
-            throw new error_1.FirebaseError(marked(`Couldn't find publisher ID '${clc.bold(publisherId)}'. Please ensure that you have registered this ID. To register as a publisher, you can check out the [Firebase documentation](https://firebase.google.com/docs/extensions/alpha/share#register_as_an_extensions_publisher) for step-by-step instructions.`));
+            throw new error_1.FirebaseError(marked(`Couldn't find publisher ID '${clc.bold(args.publisherId)}'. Please ensure that you have registered this ID. To register as a publisher, you can check out the [Firebase documentation](https://firebase.google.com/docs/extensions/alpha/share#register_as_an_extensions_publisher) for step-by-step instructions.`));
         }
         throw err;
     }
@@ -389,20 +398,15 @@ async function getExtensionSourceFromName(extensionName) {
     throw new error_1.FirebaseError(`Could not find an extension named '${extensionName}'. `);
 }
 exports.getExtensionSourceFromName = getExtensionSourceFromName;
-async function confirmExtensionVersion(publisherId, extensionId, versionId, releaseNotes) {
+function displayReleaseNotes(publisherId, extensionId, versionId, releaseNotes) {
     const releaseNotesMessage = releaseNotes
         ? ` Release notes for this version:\n${marked(releaseNotes)}\n`
         : "\n";
     const message = `You are about to publish version ${clc.green(versionId)} of ${clc.green(`${publisherId}/${extensionId}`)} to Firebase's registry of extensions.${releaseNotesMessage}` +
-        "Once an extension version is published, it cannot be changed. If you wish to make changes after publishing, you will need to publish a new version.\n\n" +
-        "Do you wish to continue?";
-    return await prompt_1.promptOnce({
-        type: "confirm",
-        message,
-        default: false,
-    });
+        "Once an extension version is published, it cannot be changed. If you wish to make changes after publishing, you will need to publish a new version.\n\n";
+    logger_1.logger.info(message);
 }
-exports.confirmExtensionVersion = confirmExtensionVersion;
+exports.displayReleaseNotes = displayReleaseNotes;
 async function promptForOfficialExtension(message) {
     const officialExts = await resolveSource_1.getExtensionRegistry(true);
     return await prompt_1.promptOnce({
@@ -472,7 +476,7 @@ function getSourceOrigin(sourceOrVersion) {
     if (sourceOrVersion.includes("/")) {
         let ref;
         try {
-            ref = extensionsApi_1.parseRef(sourceOrVersion);
+            ref = refs.parse(sourceOrVersion);
         }
         catch (err) {
         }
@@ -486,20 +490,20 @@ function getSourceOrigin(sourceOrVersion) {
     throw new error_1.FirebaseError(`Could not find source '${clc.bold(sourceOrVersion)}'. Check to make sure the source is correct, and then please try again.`);
 }
 exports.getSourceOrigin = getSourceOrigin;
-async function confirmInstallInstance(nonInteractive, force) {
-    if (!nonInteractive && !force) {
-        const message = `Would you like to continue installing this extension?`;
+async function confirm(args) {
+    if (!args.nonInteractive && !args.force) {
+        const message = `Do you wish to continue?`;
         return await prompt_1.promptOnce({
             type: "confirm",
             message,
-            default: true,
+            default: args.default,
         });
     }
-    else if (nonInteractive && !force) {
-        throw new error_1.FirebaseError("Pass the --force flag to install in non-interactive mode");
+    else if (args.nonInteractive && !args.force) {
+        throw new error_1.FirebaseError("Pass the --force flag to use this command in non-interactive mode");
     }
     else {
         return true;
     }
 }
-exports.confirmInstallInstance = confirmInstallInstance;
+exports.confirm = confirm;

package/lib/extensions/listExtensions.js

@@ -8,19 +8,20 @@ const extensionsApi_1 = require("./extensionsApi");
 const extensionsHelper_1 = require("./extensionsHelper");
 const utils = require("../utils");
 const extensionsUtils = require("./utils");
-const logger_1 = require("../logger");
 async function listExtensions(projectId) {
     const instances = await extensionsApi_1.listInstances(projectId);
     if (instances.length < 1) {
         utils.logLabeledBullet(extensionsHelper_1.logPrefix, `there are no extensions installed on project ${clc.bold(projectId)}.`);
-        return { instances: [] };
+        return [];
     }
     const table = new Table({
         head: ["Extension", "Publisher", "Instance ID", "State", "Version", "Your last update"],
         style: { head: ["yellow"] },
     });
     const sorted = _.sortBy(instances, "createTime", "asc").reverse();
+    const formatted = [];
     sorted.forEach((instance) => {
+        var _a, _b, _c, _d;
         let extension = _.get(instance, "config.extensionRef", "");
         let publisher;
         if (extension === "") {
@@ -30,18 +31,22 @@ async function listExtensions(projectId) {
         else {
             publisher = extension.split("/")[0];
         }
-        table.push([
+        const instanceId = (_a = _.last(instance.name.split("/"))) !== null && _a !== void 0 ? _a : "";
+        const state = instance.state +
+            (_.get(instance, "config.source.state", "ACTIVE") === "DELETED" ? " (UNPUBLISHED)" : "");
+        const version = (_d = (_c = (_b = instance === null || instance === void 0 ? void 0 : instance.config) === null || _b === void 0 ? void 0 : _b.source) === null || _c === void 0 ? void 0 : _c.spec) === null || _d === void 0 ? void 0 : _d.version;
+        const updateTime = extensionsUtils.formatTimestamp(instance.updateTime);
+        table.push([extension, publisher, instanceId, state, version, updateTime]);
+        formatted.push({
             extension,
             publisher,
-            _.last(instance.name.split("/")),
-            instance.state +
-                (_.get(instance, "config.source.state", "ACTIVE") === "DELETED" ? " (UNPUBLISHED)" : ""),
-            _.get(instance, "config.source.spec.version", ""),
-            extensionsUtils.formatTimestamp(instance.updateTime),
-        ]);
+            instanceId,
+            state,
+            version,
+            updateTime,
+        });
     });
     utils.logLabeledBullet(extensionsHelper_1.logPrefix, `list of extensions installed in ${clc.bold(projectId)}:`);
-    logger_1.logger.info(table.toString());
-    return { instances: sorted };
+    return formatted;
 }
 exports.listExtensions = listExtensions;

package/lib/extensions/paramHelper.js

@@ -1,16 +1,16 @@
 "use strict";
 Object.defineProperty(exports, "__esModule", { value: true });
-exports.readParamsFile = exports.promptForNewParams = exports.getParams = exports.getParamsWithCurrentValuesAsDefaults = void 0;
+exports.readEnvFile = exports.getParamsFromFile = exports.promptForNewParams = exports.getParamsForUpdate = exports.getParams = exports.getParamsWithCurrentValuesAsDefaults = void 0;
 const _ = require("lodash");
 const path = require("path");
 const clc = require("cli-color");
-const dotenv = require("dotenv");
 const fs = require("fs-extra");
 const error_1 = require("../error");
 const logger_1 = require("../logger");
 const extensionsHelper_1 = require("./extensionsHelper");
 const askUserForParam = require("./askUserForParam");
 const track = require("../track");
+const env = require("../functions/env");
 function setNewDefaults(params, newDefaults) {
     params.forEach((param) => {
         if (newDefaults[param.param.toUpperCase()]) {
@@ -25,9 +25,10 @@ function getParamsWithCurrentValuesAsDefaults(extensionInstance) {
     return setNewDefaults(specParams, currentParams);
 }
 exports.getParamsWithCurrentValuesAsDefaults = getParamsWithCurrentValuesAsDefaults;
-async function getParams(projectId, paramSpecs, noninteractive = false, envFilePath) {
-    if (noninteractive && !envFilePath) {
-        const paramsMessage = paramSpecs
+async function getParams(args) {
+    let params;
+    if (args.nonInteractive && !args.paramsEnvPath) {
+        const paramsMessage = args.paramSpecs
             .map((p) => {
             return `\t${p.param}${p.required ? "" : " (Optional)"}`;
         })
@@ -37,70 +38,102 @@ async function getParams(projectId, paramSpecs, noninteractive = false, envFileP
             " containing values for this extension's params:\n" +
             paramsMessage);
     }
-    let commandLineParams;
-    if (envFilePath) {
-        try {
-            const buf = fs.readFileSync(path.resolve(envFilePath), "utf8");
-            commandLineParams = dotenv.parse(buf.toString().trim(), { debug: true });
-            track("Extension Env File", "Present");
-        }
-        catch (err) {
-            track("Extension Env File", "Invalid");
-            throw new error_1.FirebaseError(`Error reading env file: ${err.message}\n`, { original: err });
-        }
+    else if (args.paramsEnvPath) {
+        params = getParamsFromFile({
+            projectId: args.projectId,
+            paramSpecs: args.paramSpecs,
+            paramsEnvPath: args.paramsEnvPath,
+        });
     }
     else {
-        track("Extension Env File", "Not Present");
+        const firebaseProjectParams = await extensionsHelper_1.getFirebaseProjectParams(args.projectId);
+        params = await askUserForParam.ask(args.projectId, args.instanceId, args.paramSpecs, firebaseProjectParams, !!args.reconfiguring);
     }
-    const firebaseProjectParams = await extensionsHelper_1.getFirebaseProjectParams(projectId);
+    track("Extension Params", _.isEmpty(params) ? "Not Present" : "Present", _.size(params));
+    return params;
+}
+exports.getParams = getParams;
+async function getParamsForUpdate(args) {
     let params;
-    if (commandLineParams) {
-        params = extensionsHelper_1.populateDefaultParams(commandLineParams, paramSpecs);
-        extensionsHelper_1.validateCommandLineParams(params, paramSpecs);
-        logger_1.logger.info(`Using param values from ${envFilePath}`);
+    if (args.nonInteractive && !args.paramsEnvPath) {
+        const paramsMessage = args.newSpec.params
+            .map((p) => {
+            return `\t${p.param}${p.required ? "" : " (Optional)"}`;
+        })
+            .join("\n");
+        throw new error_1.FirebaseError("In non-interactive mode but no `--params` flag found. " +
+            "To update this extension in non-interactive mode, set `--params` to a path to an .env file" +
+            " containing values for this extension's params:\n" +
+            paramsMessage);
+    }
+    else if (args.paramsEnvPath) {
+        params = getParamsFromFile({
+            projectId: args.projectId,
+            paramSpecs: args.newSpec.params,
+            paramsEnvPath: args.paramsEnvPath,
+        });
     }
     else {
-        params = await askUserForParam.ask(paramSpecs, firebaseProjectParams);
+        params = await promptForNewParams({
+            spec: args.spec,
+            newSpec: args.newSpec,
+            currentParams: args.currentParams,
+            projectId: args.projectId,
+            instanceId: args.instanceId,
+        });
     }
     track("Extension Params", _.isEmpty(params) ? "Not Present" : "Present", _.size(params));
     return params;
 }
-exports.getParams = getParams;
-async function promptForNewParams(spec, newSpec, currentParams, projectId) {
-    const firebaseProjectParams = await extensionsHelper_1.getFirebaseProjectParams(projectId);
+exports.getParamsForUpdate = getParamsForUpdate;
+async function promptForNewParams(args) {
+    const firebaseProjectParams = await extensionsHelper_1.getFirebaseProjectParams(args.projectId);
     const comparer = (param1, param2) => {
         return param1.type === param2.type && param1.param === param2.param;
     };
-    let paramsDiffDeletions = _.differenceWith(spec.params, _.get(newSpec, "params", []), comparer);
+    let paramsDiffDeletions = _.differenceWith(args.spec.params, _.get(args.newSpec, "params", []), comparer);
     paramsDiffDeletions = extensionsHelper_1.substituteParams(paramsDiffDeletions, firebaseProjectParams);
-    let paramsDiffAdditions = _.differenceWith(newSpec.params, _.get(spec, "params", []), comparer);
+    let paramsDiffAdditions = _.differenceWith(args.newSpec.params, _.get(args.spec, "params", []), comparer);
     paramsDiffAdditions = extensionsHelper_1.substituteParams(paramsDiffAdditions, firebaseProjectParams);
     if (paramsDiffDeletions.length) {
         logger_1.logger.info("The following params will no longer be used:");
         paramsDiffDeletions.forEach((param) => {
-            logger_1.logger.info(clc.red(`- ${param.param}: ${currentParams[param.param.toUpperCase()]}`));
-            delete currentParams[param.param.toUpperCase()];
+            logger_1.logger.info(clc.red(`- ${param.param}: ${args.currentParams[param.param.toUpperCase()]}`));
+            delete args.currentParams[param.param.toUpperCase()];
         });
     }
     if (paramsDiffAdditions.length) {
         logger_1.logger.info("To update this instance, configure the following new parameters:");
         for (const param of paramsDiffAdditions) {
-            const chosenValue = await askUserForParam.askForParam(param);
-            currentParams[param.param] = chosenValue;
+            const chosenValue = await askUserForParam.askForParam(args.projectId, args.instanceId, param, false);
+            args.currentParams[param.param] = chosenValue;
         }
     }
-    return currentParams;
+    return args.currentParams;
 }
 exports.promptForNewParams = promptForNewParams;
-function readParamsFile(envFilePath) {
+function getParamsFromFile(args) {
+    let envParams;
     try {
-        const buf = fs.readFileSync(path.resolve(envFilePath), "utf8");
-        return dotenv.parse(buf.toString().trim(), { debug: true });
+        envParams = readEnvFile(args.paramsEnvPath);
+        track("Extension Env File", "Present");
     }
     catch (err) {
-        throw new error_1.FirebaseError(`Error reading --test-params file: ${err.message}\n`, {
-            original: err,
-        });
+        track("Extension Env File", "Invalid");
+        throw new error_1.FirebaseError(`Error reading env file: ${err.message}\n`, { original: err });
+    }
+    const params = extensionsHelper_1.populateDefaultParams(envParams, args.paramSpecs);
+    extensionsHelper_1.validateCommandLineParams(params, args.paramSpecs);
+    logger_1.logger.info(`Using param values from ${args.paramsEnvPath}`);
+    return params;
+}
+exports.getParamsFromFile = getParamsFromFile;
+function readEnvFile(envPath) {
+    const buf = fs.readFileSync(path.resolve(envPath), "utf8");
+    const result = env.parse(buf.toString().trim());
+    if (result.errors.length) {
+        throw new error_1.FirebaseError(`Error while parsing ${envPath} - unable to parse following lines:\n${result.errors.join("\n")}`);
     }
+    return result.envs;
 }
-exports.readParamsFile = readParamsFile;
+exports.readEnvFile = readEnvFile;

package/lib/extensions/provisioningHelper.js

@@ -1,9 +1,11 @@
 "use strict";
 Object.defineProperty(exports, "__esModule", { value: true });
-exports.getUsedProducts = exports.checkProductsProvisioned = exports.DeferredProduct = void 0;
+exports.getUsedProducts = exports.bulkCheckProductsProvisioned = exports.checkProductsProvisioned = exports.DeferredProduct = void 0;
 const marked = require("marked");
 const api = require("../api");
+const functional_1 = require("../functional");
 const error_1 = require("../error");
+const planner_1 = require("../deploy/extensions/planner");
 var DeferredProduct;
 (function (DeferredProduct) {
     DeferredProduct[DeferredProduct["STORAGE"] = 0] = "STORAGE";
@@ -11,6 +13,18 @@ var DeferredProduct;
 })(DeferredProduct = exports.DeferredProduct || (exports.DeferredProduct = {}));
 async function checkProductsProvisioned(projectId, spec) {
     const usedProducts = getUsedProducts(spec);
+    await checkProducts(projectId, usedProducts);
+}
+exports.checkProductsProvisioned = checkProductsProvisioned;
+async function bulkCheckProductsProvisioned(projectId, instanceSpecs) {
+    const usedProducts = await Promise.all(instanceSpecs.map(async (i) => {
+        const extensionVersion = await planner_1.getExtensionVersion(i);
+        return getUsedProducts(extensionVersion.spec);
+    }));
+    await checkProducts(projectId, [...functional_1.flattenArray(usedProducts)]);
+}
+exports.bulkCheckProductsProvisioned = bulkCheckProductsProvisioned;
+async function checkProducts(projectId, usedProducts) {
     const needProvisioning = [];
     let isStorageProvisionedPromise;
     let isAuthProvisionedPromise;
@@ -29,7 +43,7 @@ async function checkProductsProvisioned(projectId, spec) {
     if (needProvisioning.length > 0) {
         let errorMessage = "Some services used by this extension have not been set up on your " +
             "Firebase project. To ensure this extension works as intended, you must enable these " +
-            "services by following the provided links, then retry installing the extension\n\n";
+            "services by following the provided links, then retry this command\n\n";
         if (needProvisioning.includes(DeferredProduct.STORAGE)) {
             errorMessage +=
                 " - Firebase Storage: store and retrieve user-generated files like images, audio, and " +
@@ -46,7 +60,6 @@ async function checkProductsProvisioned(projectId, spec) {
         throw new error_1.FirebaseError(marked(errorMessage), { exit: 2 });
     }
 }
-exports.checkProductsProvisioned = checkProductsProvisioned;
 function getUsedProducts(spec) {
     var _a, _b;
     const usedProducts = [];

package/lib/extensions/refs.js

@@ -0,0 +1,67 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.equal = exports.toExtensionVersionName = exports.toExtensionName = exports.toExtensionVersionRef = exports.toExtensionRef = exports.parse = void 0;
+const semver = require("semver");
+const error_1 = require("../error");
+const refRegex = new RegExp(/^([^/@\n]+)\/{1}([^/@\n]+)(@{1}([^\n]+)|)$/);
+function parse(refOrName) {
+    const ret = parseRef(refOrName) || parseName(refOrName);
+    if (!ret || !ret.publisherId || !ret.extensionId) {
+        throw new error_1.FirebaseError(`Unable to parse ${refOrName} as an extension ref`);
+    }
+    if (ret.version &&
+        !semver.valid(ret.version) &&
+        !semver.validRange(ret.version) &&
+        ret.version !== "latest") {
+        throw new error_1.FirebaseError(`Extension reference ${ret} contains an invalid version ${ret.version}.`);
+    }
+    return ret;
+}
+exports.parse = parse;
+function parseRef(ref) {
+    const parts = refRegex.exec(ref);
+    if (parts && (parts.length == 5 || parts.length == 7)) {
+        const publisherId = parts[1];
+        const extensionId = parts[2];
+        const version = parts[4];
+        return { publisherId, extensionId, version };
+    }
+}
+function parseName(name) {
+    const parts = name.split("/");
+    return {
+        publisherId: parts[1],
+        extensionId: parts[3],
+        version: parts[5],
+    };
+}
+function toExtensionRef(ref) {
+    return `${ref.publisherId}/${ref.extensionId}`;
+}
+exports.toExtensionRef = toExtensionRef;
+function toExtensionVersionRef(ref) {
+    if (!ref.version) {
+        throw new error_1.FirebaseError(`Ref does not have a version`);
+    }
+    return `${ref.publisherId}/${ref.extensionId}@${ref.version}`;
+}
+exports.toExtensionVersionRef = toExtensionVersionRef;
+function toExtensionName(ref) {
+    return `publishers/${ref.publisherId}/extensions/${ref.extensionId}`;
+}
+exports.toExtensionName = toExtensionName;
+function toExtensionVersionName(ref) {
+    if (!ref.version) {
+        throw new error_1.FirebaseError(`Ref does not have a version`);
+    }
+    return `publishers/${ref.publisherId}/extensions/${ref.extensionId}/versions/${ref.version}`;
+}
+exports.toExtensionVersionName = toExtensionVersionName;
+function equal(a, b) {
+    return (!!a &&
+        !!b &&
+        a.publisherId === b.publisherId &&
+        a.extensionId === b.extensionId &&
+        a.version === b.version);
+}
+exports.equal = equal;

package/lib/extensions/secretsUtils.js

@@ -0,0 +1,59 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.prettySecretName = exports.getSecretLabels = exports.getActiveSecrets = exports.getManagedSecrets = exports.grantFirexServiceAgentSecretAdminRole = exports.usesSecrets = exports.ensureSecretManagerApiEnabled = exports.SECRET_LABEL = void 0;
+const getProjectNumber_1 = require("../getProjectNumber");
+const utils = require("../utils");
+const ensureApiEnabled_1 = require("../ensureApiEnabled");
+const projectUtils_1 = require("../projectUtils");
+const extensionsApi = require("./extensionsApi");
+const secretManagerApi = require("../gcp/secretManager");
+const logger_1 = require("../logger");
+exports.SECRET_LABEL = "firebase-extensions-managed";
+async function ensureSecretManagerApiEnabled(options) {
+    const projectId = projectUtils_1.needProjectId(options);
+    return await ensureApiEnabled_1.ensure(projectId, "secretmanager.googleapis.com", "extensions", options.markdown);
+}
+exports.ensureSecretManagerApiEnabled = ensureSecretManagerApiEnabled;
+function usesSecrets(spec) {
+    return spec.params && !!spec.params.find((p) => p.type == extensionsApi.ParamType.SECRET);
+}
+exports.usesSecrets = usesSecrets;
+async function grantFirexServiceAgentSecretAdminRole(secret) {
+    const projectNumber = await getProjectNumber_1.getProjectNumber({ projectId: secret.projectId });
+    const firexSaProjectId = utils.envOverride("FIREBASE_EXTENSIONS_SA_PROJECT_ID", "gcp-sa-firebasemods");
+    const saEmail = `service-${projectNumber}@${firexSaProjectId}.iam.gserviceaccount.com`;
+    return secretManagerApi.grantServiceAgentRole(secret, saEmail, "roles/secretmanager.admin");
+}
+exports.grantFirexServiceAgentSecretAdminRole = grantFirexServiceAgentSecretAdminRole;
+async function getManagedSecrets(instance) {
+    return (await Promise.all(getActiveSecrets(instance.config.source.spec, instance.config.params).map(async (secretResourceName) => {
+        const secret = secretManagerApi.parseSecretResourceName(secretResourceName);
+        const labels = (await secretManagerApi.getSecret(secret.projectId, secret.name)).labels;
+        if (labels && labels[exports.SECRET_LABEL]) {
+            return secretResourceName;
+        }
+        return Promise.resolve("");
+    }))).filter((secretId) => !!secretId);
+}
+exports.getManagedSecrets = getManagedSecrets;
+function getActiveSecrets(spec, params) {
+    return spec.params
+        .map((p) => (p.type == extensionsApi.ParamType.SECRET ? params[p.param] : ""))
+        .filter((pv) => !!pv);
+}
+exports.getActiveSecrets = getActiveSecrets;
+function getSecretLabels(instanceId) {
+    const labels = {};
+    labels[exports.SECRET_LABEL] = instanceId;
+    return labels;
+}
+exports.getSecretLabels = getSecretLabels;
+function prettySecretName(secretResourceName) {
+    const nameTokens = secretResourceName.split("/");
+    if (nameTokens.length != 4 && nameTokens.length != 6) {
+        logger_1.logger.debug(`unable to parse secret secretResourceName: ${secretResourceName}`);
+        return secretResourceName;
+    }
+    return nameTokens.slice(0, 4).join("/");
+}
+exports.prettySecretName = prettySecretName;