firebase-tools 9.19.0 → 9.23.0

package/lib/extensions/export.js

@@ -0,0 +1,107 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.writeFiles = exports.displayExportInfo = exports.setSecretParamsToLatest = exports.parameterizeProject = void 0;
+const clc = require("cli-color");
+const refs = require("./refs");
+const config_1 = require("../config");
+const planner_1 = require("../deploy/extensions/planner");
+const deploymentSummary_1 = require("../deploy/extensions/deploymentSummary");
+const logger_1 = require("../logger");
+const error_1 = require("../error");
+const prompt_1 = require("../prompt");
+const secretManager_1 = require("../gcp/secretManager");
+const secretsUtils_1 = require("./secretsUtils");
+function parameterizeProject(projectId, projectNumber, spec) {
+    const newParams = {};
+    for (const [key, val] of Object.entries(spec.params)) {
+        const p1 = val.replace(projectId, "${param:PROJECT_ID}");
+        const p2 = p1.replace(projectNumber, "${param:PROJECT_NUMBER}");
+        newParams[key] = p2;
+    }
+    const newSpec = Object.assign({}, spec);
+    newSpec.params = newParams;
+    return newSpec;
+}
+exports.parameterizeProject = parameterizeProject;
+async function setSecretParamsToLatest(spec) {
+    const newParams = Object.assign({}, spec.params);
+    const extensionVersion = await planner_1.getExtensionVersion(spec);
+    const activeSecrets = secretsUtils_1.getActiveSecrets(extensionVersion.spec, newParams);
+    for (const [key, val] of Object.entries(newParams)) {
+        if (activeSecrets.includes(val)) {
+            const parsed = secretManager_1.parseSecretVersionResourceName(val);
+            parsed.versionId = "latest";
+            newParams[key] = secretManager_1.toSecretVersionResourceName(parsed);
+        }
+    }
+    return Object.assign(Object.assign({}, spec), { params: newParams });
+}
+exports.setSecretParamsToLatest = setSecretParamsToLatest;
+function displayExportInfo(withRef, withoutRef) {
+    logger_1.logger.info("The following Extension instances will be saved locally:");
+    logger_1.logger.info("");
+    displaySpecs(withRef);
+    if (withoutRef.length) {
+        logger_1.logger.info(`Your project also has the following instances installed from local sources. These will not be saved to firebase.json:`);
+        for (const spec of withoutRef) {
+            logger_1.logger.info(spec.instanceId);
+        }
+    }
+}
+exports.displayExportInfo = displayExportInfo;
+function displaySpecs(specs) {
+    for (let i = 0; i < specs.length; i++) {
+        const spec = specs[i];
+        logger_1.logger.info(`${i + 1}. ${deploymentSummary_1.humanReadable(spec)}`);
+        logger_1.logger.info(`Configuration will be written to 'extensions/${spec.instanceId}.env'`);
+        for (const p of Object.entries(spec.params)) {
+            logger_1.logger.info(`\t${p[0]}=${p[1]}`);
+        }
+        logger_1.logger.info("");
+    }
+}
+function writeExtensionsToFirebaseJson(have, existingConfig) {
+    const extensions = existingConfig.get("extensions", {});
+    for (const s of have) {
+        extensions[s.instanceId] = refs.toExtensionVersionRef(s.ref);
+    }
+    existingConfig.set("extensions", extensions);
+    logger_1.logger.info("Adding Extensions to " + clc.bold("firebase.json") + "...");
+    existingConfig.writeProjectFile("firebase.json", existingConfig.src);
+}
+async function writeEnvFile(spec, existingConfig, force) {
+    const content = Object.entries(spec.params)
+        .map((r) => `${r[0]}=${r[1]}`)
+        .join("\n");
+    await existingConfig.askWriteProjectFile(`extensions/${spec.instanceId}.env`, content, force);
+}
+async function writeFiles(have, options) {
+    const existingConfig = config_1.Config.load(options, true);
+    if (!existingConfig) {
+        throw new error_1.FirebaseError("Not currently in a Firebase directory. Please run `firebase init` to create a Firebase directory.");
+    }
+    if (existingConfig.has("extensions") &&
+        Object.keys(existingConfig.get("extensions")).length &&
+        !options.nonInteractive &&
+        !options.force) {
+        const currentExtensions = Object.entries(existingConfig.get("extensions"))
+            .map((i) => `${i[0]}: ${i[1]}`)
+            .join("\n\t");
+        const overwrite = await prompt_1.promptOnce({
+            type: "list",
+            message: `firebase.json already contains extensions:\n${currentExtensions}\nWould you like to overwrite or merge?`,
+            choices: [
+                { name: "Overwrite", value: true },
+                { name: "Merge", value: false },
+            ],
+        });
+        if (overwrite) {
+            existingConfig.set("extensions", {});
+        }
+    }
+    writeExtensionsToFirebaseJson(have, existingConfig);
+    for (const spec of have) {
+        await writeEnvFile(spec, existingConfig, options.force);
+    }
+}
+exports.writeFiles = writeFiles;

package/lib/extensions/extensionsApi.js

@@ -1,6 +1,6 @@
 "use strict";
 Object.defineProperty(exports, "__esModule", { value: true });
-exports.getExtension = exports.deleteExtension = exports.unpublishExtension = exports.publishExtensionVersion = exports.registerPublisherProfile = exports.listExtensionVersions = exports.listExtensions = exports.getExtensionVersion = exports.getSource = exports.createSource = exports.updateInstanceFromRegistry = exports.updateInstance = exports.configureInstance = exports.listInstances = exports.getInstance = exports.deleteInstance = exports.createInstance = exports.ParamType = exports.Visibility = exports.RegistryLaunchStage = void 0;
+exports.getExtension = exports.deleteExtension = exports.unpublishExtension = exports.publishExtensionVersion = exports.undeprecateExtensionVersion = exports.deprecateExtensionVersion = exports.registerPublisherProfile = exports.listExtensionVersions = exports.listExtensions = exports.getExtensionVersion = exports.getSource = exports.createSource = exports.updateInstanceFromRegistry = exports.updateInstance = exports.configureInstance = exports.listInstances = exports.getInstance = exports.deleteInstance = exports.createInstance = exports.ParamType = exports.Visibility = exports.RegistryLaunchStage = void 0;
 const yaml = require("js-yaml");
 const _ = require("lodash");
 const clc = require("cli-color");
@@ -30,8 +30,9 @@ var ParamType;
     ParamType["STRING"] = "STRING";
     ParamType["SELECT"] = "SELECT";
     ParamType["MULTISELECT"] = "MULTISELECT";
+    ParamType["SECRET"] = "SECRET";
 })(ParamType = exports.ParamType || (exports.ParamType = {}));
-async function createInstanceHelper(projectId, instanceId, config) {
+async function createInstanceHelper(projectId, instanceId, config, validateOnly = false) {
     const createRes = await api.request("POST", `/${VERSION}/projects/${projectId}/instances/`, {
         auth: true,
         origin: api.extensionsOrigin,
@@ -39,7 +40,13 @@ async function createInstanceHelper(projectId, instanceId, config) {
             name: `projects/${projectId}/instances/${instanceId}`,
             config: config,
         },
+        query: {
+            validateOnly,
+        },
     });
+    if (validateOnly) {
+        return createRes;
+    }
     const pollRes = await operationPoller.pollOperation({
         apiOrigin: api.extensionsOrigin,
         apiVersion: VERSION,
@@ -67,7 +74,7 @@ async function createInstance(args) {
     else {
         throw new error_1.FirebaseError("No ExtensionVersion or ExtensionSource provided but one is required.");
     }
-    return createInstanceHelper(args.projectId, args.instanceId, config);
+    return createInstanceHelper(args.projectId, args.instanceId, config, args.validateOnly);
 }
 exports.createInstance = createInstance;
 async function deleteInstance(projectId, instanceId) {
@@ -114,31 +121,46 @@ async function listInstances(projectId) {
     return instances;
 }
 exports.listInstances = listInstances;
-async function configureInstance(projectId, instanceId, params) {
-    const res = await patchInstance(projectId, instanceId, "config.params", {
-        config: {
-            params,
+async function configureInstance(args) {
+    var _a;
+    const res = await patchInstance({
+        projectId: args.projectId,
+        instanceId: args.instanceId,
+        updateMask: "config.params",
+        validateOnly: (_a = args.validateOnly) !== null && _a !== void 0 ? _a : false,
+        data: {
+            config: {
+                params: args.params,
+            },
         },
     });
     return res;
 }
 exports.configureInstance = configureInstance;
-async function updateInstance(projectId, instanceId, extensionSource, params) {
+async function updateInstance(args) {
+    var _a;
     const body = {
         config: {
-            source: { name: extensionSource.name },
+            source: { name: args.extensionSource.name },
         },
     };
     let updateMask = "config.source.name";
-    if (params) {
-        body.config.params = params;
+    if (args.params) {
+        body.config.params = args.params;
         updateMask += ",config.params";
     }
-    return await patchInstance(projectId, instanceId, updateMask, body);
+    return await patchInstance({
+        projectId: args.projectId,
+        instanceId: args.instanceId,
+        updateMask,
+        validateOnly: (_a = args.validateOnly) !== null && _a !== void 0 ? _a : false,
+        data: body,
+    });
 }
 exports.updateInstance = updateInstance;
-async function updateInstanceFromRegistry(projectId, instanceId, extRef, params) {
-    const ref = refs.parse(extRef);
+async function updateInstanceFromRegistry(args) {
+    var _a;
+    const ref = refs.parse(args.extRef);
     const body = {
         config: {
             extensionRef: refs.toExtensionRef(ref),
@@ -146,22 +168,32 @@ async function updateInstanceFromRegistry(projectId, instanceId, extRef, params)
         },
     };
     let updateMask = "config.extension_ref,config.extension_version";
-    if (params) {
-        body.config.params = params;
+    if (args.params) {
+        body.config.params = args.params;
         updateMask += ",config.params";
     }
-    return await patchInstance(projectId, instanceId, updateMask, body);
+    return await patchInstance({
+        projectId: args.projectId,
+        instanceId: args.instanceId,
+        updateMask,
+        validateOnly: (_a = args.validateOnly) !== null && _a !== void 0 ? _a : false,
+        data: body,
+    });
 }
 exports.updateInstanceFromRegistry = updateInstanceFromRegistry;
-async function patchInstance(projectId, instanceId, updateMask, data) {
-    const updateRes = await api.request("PATCH", `/${VERSION}/projects/${projectId}/instances/${instanceId}`, {
+async function patchInstance(args) {
+    const updateRes = await api.request("PATCH", `/${VERSION}/projects/${args.projectId}/instances/${args.instanceId}`, {
         auth: true,
         origin: api.extensionsOrigin,
         query: {
-            updateMask,
+            updateMask: args.updateMask,
+            validateOnly: args.validateOnly,
         },
-        data,
+        data: args.data,
     });
+    if (args.validateOnly) {
+        return updateRes;
+    }
     const pollRes = await operationPoller.pollOperation({
         apiOrigin: api.extensionsOrigin,
         apiVersion: VERSION,
@@ -301,6 +333,57 @@ async function registerPublisherProfile(projectId, publisherId) {
     return res.body;
 }
 exports.registerPublisherProfile = registerPublisherProfile;
+async function deprecateExtensionVersion(extensionRef, deprecationMessage) {
+    const ref = refs.parse(extensionRef);
+    try {
+        const res = await api.request("POST", `/${VERSION}/${refs.toExtensionVersionName(ref)}:deprecate`, {
+            auth: true,
+            origin: api.extensionsOrigin,
+            data: { deprecationMessage },
+        });
+        return res.body;
+    }
+    catch (err) {
+        if (err.status === 403) {
+            throw new error_1.FirebaseError(`You are not the owner of extension '${clc.bold(extensionRef)}' and don’t have the correct permissions to deprecate this extension version.` + err, { status: err.status });
+        }
+        else if (err.status === 404) {
+            throw new error_1.FirebaseError(`Extension version ${clc.bold(extensionRef)} was not found.`);
+        }
+        else if (err instanceof error_1.FirebaseError) {
+            throw err;
+        }
+        throw new error_1.FirebaseError(`Error occurred deprecating extension version '${extensionRef}': ${err}`, {
+            status: err.status,
+        });
+    }
+}
+exports.deprecateExtensionVersion = deprecateExtensionVersion;
+async function undeprecateExtensionVersion(extensionRef) {
+    const ref = refs.parse(extensionRef);
+    try {
+        const res = await api.request("POST", `/${VERSION}/${refs.toExtensionVersionName(ref)}:undeprecate`, {
+            auth: true,
+            origin: api.extensionsOrigin,
+        });
+        return res.body;
+    }
+    catch (err) {
+        if (err.status === 403) {
+            throw new error_1.FirebaseError(`You are not the owner of extension '${clc.bold(extensionRef)}' and don’t have the correct permissions to undeprecate this extension version.`, { status: err.status });
+        }
+        else if (err.status === 404) {
+            throw new error_1.FirebaseError(`Extension version ${clc.bold(extensionRef)} was not found.`);
+        }
+        else if (err instanceof error_1.FirebaseError) {
+            throw err;
+        }
+        throw new error_1.FirebaseError(`Error occurred undeprecating extension version '${extensionRef}': ${err}`, {
+            status: err.status,
+        });
+    }
+}
+exports.undeprecateExtensionVersion = undeprecateExtensionVersion;
 async function publishExtensionVersion(extensionVersionRef, packageUri, extensionRoot) {
     const ref = refs.parse(extensionVersionRef);
     if (!ref.version) {

package/lib/extensions/extensionsHelper.js

@@ -27,12 +27,14 @@ const prompt_1 = require("../prompt");
 const logger_1 = require("../logger");
 const utils_2 = require("../utils");
 const changelog_1 = require("./changelog");
+const getProjectNumber_1 = require("../getProjectNumber");
 var SpecParamType;
 (function (SpecParamType) {
     SpecParamType["SELECT"] = "select";
     SpecParamType["MULTISELECT"] = "multiSelect";
     SpecParamType["STRING"] = "string";
     SpecParamType["SELECTRESOURCE"] = "selectResource";
+    SpecParamType["SECRET"] = "secret";
 })(SpecParamType = exports.SpecParamType || (exports.SpecParamType = {}));
 var SourceOrigin;
 (function (SourceOrigin) {
@@ -75,6 +77,7 @@ function getDBInstanceFromURL(databaseUrl = "") {
 exports.getDBInstanceFromURL = getDBInstanceFromURL;
 async function getFirebaseProjectParams(projectId) {
     const body = await functionsConfig_1.getFirebaseConfig({ project: projectId });
+    const projectNumber = await getProjectNumber_1.getProjectNumber({ projectId });
     const FIREBASE_CONFIG = JSON.stringify({
         projectId: body.projectId,
         databaseURL: body.databaseURL,
@@ -82,6 +85,7 @@ async function getFirebaseProjectParams(projectId) {
     });
     return {
         PROJECT_ID: body.projectId,
+        PROJECT_NUMBER: projectNumber,
         DATABASE_URL: body.databaseURL,
         STORAGE_BUCKET: body.storageBucket,
         FIREBASE_CONFIG,
@@ -107,7 +111,7 @@ function populateDefaultParams(paramVars, paramSpecs) {
     const newParams = paramVars;
     for (const param of paramSpecs) {
         if (!paramVars[param.param]) {
-            if (param.default != undefined) {
+            if (param.default != undefined && param.required) {
                 newParams[param.param] = param.default;
             }
             else if (param.required) {
@@ -306,7 +310,7 @@ async function publishExtensionVersionFromLocalSource(args) {
     else if (extension &&
         extension.latestVersion &&
         semver.eq(extensionSpec.version, extension.latestVersion)) {
-        throw new error_1.FirebaseError(`The version you are trying to publish (${clc.bold(extensionSpec.version)}) already exists for the extension '${clc.bold(`${args.publisherId}/${args.extensionId}`)}'. Please increment the version inside of extension.yaml.\n`);
+        throw new error_1.FirebaseError(`The version you are trying to publish (${clc.bold(extensionSpec.version)}) already exists for the extension '${clc.bold(`${args.publisherId}/${args.extensionId}`)}'. Please increment the version inside of extension.yaml.\n`, { exit: 103 });
     }
     const ref = `${args.publisherId}/${args.extensionId}@${extensionSpec.version}`;
     let packageUri;

package/lib/extensions/listExtensions.js

@@ -8,19 +8,20 @@ const extensionsApi_1 = require("./extensionsApi");
 const extensionsHelper_1 = require("./extensionsHelper");
 const utils = require("../utils");
 const extensionsUtils = require("./utils");
-const logger_1 = require("../logger");
 async function listExtensions(projectId) {
     const instances = await extensionsApi_1.listInstances(projectId);
     if (instances.length < 1) {
         utils.logLabeledBullet(extensionsHelper_1.logPrefix, `there are no extensions installed on project ${clc.bold(projectId)}.`);
-        return { instances: [] };
+        return [];
     }
     const table = new Table({
         head: ["Extension", "Publisher", "Instance ID", "State", "Version", "Your last update"],
         style: { head: ["yellow"] },
     });
     const sorted = _.sortBy(instances, "createTime", "asc").reverse();
+    const formatted = [];
     sorted.forEach((instance) => {
+        var _a, _b, _c, _d;
         let extension = _.get(instance, "config.extensionRef", "");
         let publisher;
         if (extension === "") {
@@ -30,18 +31,22 @@ async function listExtensions(projectId) {
         else {
             publisher = extension.split("/")[0];
         }
-        table.push([
+        const instanceId = (_a = _.last(instance.name.split("/"))) !== null && _a !== void 0 ? _a : "";
+        const state = instance.state +
+            (_.get(instance, "config.source.state", "ACTIVE") === "DELETED" ? " (UNPUBLISHED)" : "");
+        const version = (_d = (_c = (_b = instance === null || instance === void 0 ? void 0 : instance.config) === null || _b === void 0 ? void 0 : _b.source) === null || _c === void 0 ? void 0 : _c.spec) === null || _d === void 0 ? void 0 : _d.version;
+        const updateTime = extensionsUtils.formatTimestamp(instance.updateTime);
+        table.push([extension, publisher, instanceId, state, version, updateTime]);
+        formatted.push({
             extension,
             publisher,
-            _.last(instance.name.split("/")),
-            instance.state +
-                (_.get(instance, "config.source.state", "ACTIVE") === "DELETED" ? " (UNPUBLISHED)" : ""),
-            _.get(instance, "config.source.spec.version", ""),
-            extensionsUtils.formatTimestamp(instance.updateTime),
-        ]);
+            instanceId,
+            state,
+            version,
+            updateTime,
+        });
     });
     utils.logLabeledBullet(extensionsHelper_1.logPrefix, `list of extensions installed in ${clc.bold(projectId)}:`);
-    logger_1.logger.info(table.toString());
-    return { instances: sorted };
+    return formatted;
 }
 exports.listExtensions = listExtensions;

package/lib/extensions/paramHelper.js

@@ -4,13 +4,13 @@ exports.readEnvFile = exports.getParamsFromFile = exports.promptForNewParams = e
 const _ = require("lodash");
 const path = require("path");
 const clc = require("cli-color");
-const dotenv = require("dotenv");
 const fs = require("fs-extra");
 const error_1 = require("../error");
 const logger_1 = require("../logger");
 const extensionsHelper_1 = require("./extensionsHelper");
 const askUserForParam = require("./askUserForParam");
 const track = require("../track");
+const env = require("../functions/env");
 function setNewDefaults(params, newDefaults) {
     params.forEach((param) => {
         if (newDefaults[param.param.toUpperCase()]) {
@@ -42,13 +42,12 @@ async function getParams(args) {
         params = getParamsFromFile({
             projectId: args.projectId,
             paramSpecs: args.paramSpecs,
-            noninteractive: args.nonInteractive,
             paramsEnvPath: args.paramsEnvPath,
         });
     }
     else {
         const firebaseProjectParams = await extensionsHelper_1.getFirebaseProjectParams(args.projectId);
-        params = await askUserForParam.ask(args.paramSpecs, firebaseProjectParams);
+        params = await askUserForParam.ask(args.projectId, args.instanceId, args.paramSpecs, firebaseProjectParams, !!args.reconfiguring);
     }
     track("Extension Params", _.isEmpty(params) ? "Not Present" : "Present", _.size(params));
     return params;
@@ -71,7 +70,6 @@ async function getParamsForUpdate(args) {
         params = getParamsFromFile({
             projectId: args.projectId,
             paramSpecs: args.newSpec.params,
-            noninteractive: args.nonInteractive,
             paramsEnvPath: args.paramsEnvPath,
         });
     }
@@ -81,6 +79,7 @@ async function getParamsForUpdate(args) {
             newSpec: args.newSpec,
             currentParams: args.currentParams,
             projectId: args.projectId,
+            instanceId: args.instanceId,
         });
     }
     track("Extension Params", _.isEmpty(params) ? "Not Present" : "Present", _.size(params));
@@ -106,7 +105,7 @@ async function promptForNewParams(args) {
     if (paramsDiffAdditions.length) {
         logger_1.logger.info("To update this instance, configure the following new parameters:");
         for (const param of paramsDiffAdditions) {
-            const chosenValue = await askUserForParam.askForParam(param);
+            const chosenValue = await askUserForParam.askForParam(args.projectId, args.instanceId, param, false);
             args.currentParams[param.param] = chosenValue;
         }
     }
@@ -131,6 +130,10 @@ function getParamsFromFile(args) {
 exports.getParamsFromFile = getParamsFromFile;
 function readEnvFile(envPath) {
     const buf = fs.readFileSync(path.resolve(envPath), "utf8");
-    return dotenv.parse(buf.toString().trim(), { debug: true });
+    const result = env.parse(buf.toString().trim());
+    if (result.errors.length) {
+        throw new error_1.FirebaseError(`Error while parsing ${envPath} - unable to parse following lines:\n${result.errors.join("\n")}`);
+    }
+    return result.envs;
 }
 exports.readEnvFile = readEnvFile;

package/lib/extensions/provisioningHelper.js

@@ -1,9 +1,11 @@
 "use strict";
 Object.defineProperty(exports, "__esModule", { value: true });
-exports.getUsedProducts = exports.checkProductsProvisioned = exports.DeferredProduct = void 0;
+exports.getUsedProducts = exports.bulkCheckProductsProvisioned = exports.checkProductsProvisioned = exports.DeferredProduct = void 0;
 const marked = require("marked");
 const api = require("../api");
+const functional_1 = require("../functional");
 const error_1 = require("../error");
+const planner_1 = require("../deploy/extensions/planner");
 var DeferredProduct;
 (function (DeferredProduct) {
     DeferredProduct[DeferredProduct["STORAGE"] = 0] = "STORAGE";
@@ -11,6 +13,18 @@ var DeferredProduct;
 })(DeferredProduct = exports.DeferredProduct || (exports.DeferredProduct = {}));
 async function checkProductsProvisioned(projectId, spec) {
     const usedProducts = getUsedProducts(spec);
+    await checkProducts(projectId, usedProducts);
+}
+exports.checkProductsProvisioned = checkProductsProvisioned;
+async function bulkCheckProductsProvisioned(projectId, instanceSpecs) {
+    const usedProducts = await Promise.all(instanceSpecs.map(async (i) => {
+        const extensionVersion = await planner_1.getExtensionVersion(i);
+        return getUsedProducts(extensionVersion.spec);
+    }));
+    await checkProducts(projectId, [...functional_1.flattenArray(usedProducts)]);
+}
+exports.bulkCheckProductsProvisioned = bulkCheckProductsProvisioned;
+async function checkProducts(projectId, usedProducts) {
     const needProvisioning = [];
     let isStorageProvisionedPromise;
     let isAuthProvisionedPromise;
@@ -29,7 +43,7 @@ async function checkProductsProvisioned(projectId, spec) {
     if (needProvisioning.length > 0) {
         let errorMessage = "Some services used by this extension have not been set up on your " +
             "Firebase project. To ensure this extension works as intended, you must enable these " +
-            "services by following the provided links, then retry installing the extension\n\n";
+            "services by following the provided links, then retry this command\n\n";
         if (needProvisioning.includes(DeferredProduct.STORAGE)) {
             errorMessage +=
                 " - Firebase Storage: store and retrieve user-generated files like images, audio, and " +
@@ -46,7 +60,6 @@ async function checkProductsProvisioned(projectId, spec) {
         throw new error_1.FirebaseError(marked(errorMessage), { exit: 2 });
     }
 }
-exports.checkProductsProvisioned = checkProductsProvisioned;
 function getUsedProducts(spec) {
     var _a, _b;
     const usedProducts = [];

package/lib/extensions/refs.js

@@ -1,6 +1,6 @@
 "use strict";
 Object.defineProperty(exports, "__esModule", { value: true });
-exports.toExtensionVersionName = exports.toExtensionName = exports.toExtensionVersionRef = exports.toExtensionRef = exports.parse = void 0;
+exports.equal = exports.toExtensionVersionName = exports.toExtensionName = exports.toExtensionVersionRef = exports.toExtensionRef = exports.parse = void 0;
 const semver = require("semver");
 const error_1 = require("../error");
 const refRegex = new RegExp(/^([^/@\n]+)\/{1}([^/@\n]+)(@{1}([^\n]+)|)$/);
@@ -57,3 +57,11 @@ function toExtensionVersionName(ref) {
     return `publishers/${ref.publisherId}/extensions/${ref.extensionId}/versions/${ref.version}`;
 }
 exports.toExtensionVersionName = toExtensionVersionName;
+function equal(a, b) {
+    return (!!a &&
+        !!b &&
+        a.publisherId === b.publisherId &&
+        a.extensionId === b.extensionId &&
+        a.version === b.version);
+}
+exports.equal = equal;

package/lib/extensions/secretsUtils.js

@@ -0,0 +1,59 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.prettySecretName = exports.getSecretLabels = exports.getActiveSecrets = exports.getManagedSecrets = exports.grantFirexServiceAgentSecretAdminRole = exports.usesSecrets = exports.ensureSecretManagerApiEnabled = exports.SECRET_LABEL = void 0;
+const getProjectNumber_1 = require("../getProjectNumber");
+const utils = require("../utils");
+const ensureApiEnabled_1 = require("../ensureApiEnabled");
+const projectUtils_1 = require("../projectUtils");
+const extensionsApi = require("./extensionsApi");
+const secretManagerApi = require("../gcp/secretManager");
+const logger_1 = require("../logger");
+exports.SECRET_LABEL = "firebase-extensions-managed";
+async function ensureSecretManagerApiEnabled(options) {
+    const projectId = projectUtils_1.needProjectId(options);
+    return await ensureApiEnabled_1.ensure(projectId, "secretmanager.googleapis.com", "extensions", options.markdown);
+}
+exports.ensureSecretManagerApiEnabled = ensureSecretManagerApiEnabled;
+function usesSecrets(spec) {
+    return spec.params && !!spec.params.find((p) => p.type == extensionsApi.ParamType.SECRET);
+}
+exports.usesSecrets = usesSecrets;
+async function grantFirexServiceAgentSecretAdminRole(secret) {
+    const projectNumber = await getProjectNumber_1.getProjectNumber({ projectId: secret.projectId });
+    const firexSaProjectId = utils.envOverride("FIREBASE_EXTENSIONS_SA_PROJECT_ID", "gcp-sa-firebasemods");
+    const saEmail = `service-${projectNumber}@${firexSaProjectId}.iam.gserviceaccount.com`;
+    return secretManagerApi.grantServiceAgentRole(secret, saEmail, "roles/secretmanager.admin");
+}
+exports.grantFirexServiceAgentSecretAdminRole = grantFirexServiceAgentSecretAdminRole;
+async function getManagedSecrets(instance) {
+    return (await Promise.all(getActiveSecrets(instance.config.source.spec, instance.config.params).map(async (secretResourceName) => {
+        const secret = secretManagerApi.parseSecretResourceName(secretResourceName);
+        const labels = (await secretManagerApi.getSecret(secret.projectId, secret.name)).labels;
+        if (labels && labels[exports.SECRET_LABEL]) {
+            return secretResourceName;
+        }
+        return Promise.resolve("");
+    }))).filter((secretId) => !!secretId);
+}
+exports.getManagedSecrets = getManagedSecrets;
+function getActiveSecrets(spec, params) {
+    return spec.params
+        .map((p) => (p.type == extensionsApi.ParamType.SECRET ? params[p.param] : ""))
+        .filter((pv) => !!pv);
+}
+exports.getActiveSecrets = getActiveSecrets;
+function getSecretLabels(instanceId) {
+    const labels = {};
+    labels[exports.SECRET_LABEL] = instanceId;
+    return labels;
+}
+exports.getSecretLabels = getSecretLabels;
+function prettySecretName(secretResourceName) {
+    const nameTokens = secretResourceName.split("/");
+    if (nameTokens.length != 4 && nameTokens.length != 6) {
+        logger_1.logger.debug(`unable to parse secret secretResourceName: ${secretResourceName}`);
+        return secretResourceName;
+    }
+    return nameTokens.slice(0, 4).join("/");
+}
+exports.prettySecretName = prettySecretName;

package/lib/extensions/updateHelper.js

@@ -62,10 +62,20 @@ exports.displayChanges = displayChanges;
 async function update(updateOptions) {
     const { projectId, instanceId, source, extRef, params } = updateOptions;
     if (extRef) {
-        return await extensionsApi.updateInstanceFromRegistry(projectId, instanceId, extRef, params);
+        return await extensionsApi.updateInstanceFromRegistry({
+            projectId,
+            instanceId,
+            extRef,
+            params,
+        });
     }
     else if (source) {
-        return await extensionsApi.updateInstance(projectId, instanceId, source, params);
+        return await extensionsApi.updateInstance({
+            projectId,
+            instanceId,
+            extensionSource: source,
+            params,
+        });
     }
     throw new error_1.FirebaseError(`Neither a source nor a version of the extension was supplied for ${instanceId}. Please make sure this is a valid extension and try again.`);
 }

package/lib/extensions/versionHelper.js

@@ -0,0 +1,14 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.parseVersionPredicate = void 0;
+const error_1 = require("../error");
+function parseVersionPredicate(versionPredicate) {
+    const versionPredicateRegex = "^(?<comparator>>=|<=|>|<)?(?<targetSemVer>.*)";
+    const matches = versionPredicate.match(versionPredicateRegex);
+    if (!matches || !matches.groups.targetSemVer) {
+        throw new error_1.FirebaseError("Invalid version predicate.");
+    }
+    const comparator = matches.groups.comparator || "=";
+    return { comparator, targetSemVer: matches.groups.targetSemVer };
+}
+exports.parseVersionPredicate = parseVersionPredicate;