cmp-firebase-connect

cmp-firebase-connect — wire a stamped CMP app to its own Firebase project

Your job: take a CMP app that create-cmp stamped with a placeholder google-services.json (REPLACE_ME_PROJECT_ID, zeroed app id) and connect it to a real Firebase project on the user's account, using the Firebase CLI — no console clicking for anything the CLI can do. You finish by proving the wiring with a green build.

Consent rule. Every command that creates or mutates a cloud resource on the user's Google account (projects:create, apps:create, firestore:databases:create, apps:android:sha:create) is shown to the user verbatim first and run only after an explicit yes. Read-only commands (--version, login:list, projects:list, apps:list, apps:sdkconfig, firestore:locations, --help) need no gate. Never batch a mutation behind a read.

Cost honesty. A fresh Firebase project starts on the Spark (free) plan. Nothing in this flow enables billing, attaches a card, or upgrades to Blaze — and the CLI cannot silently do so. Auth (email/phone within free quota), Firestore, and the free-tier services all work on Spark. Say this to the user up front so "create a cloud project" doesn't read as "spend money".

1. Preflight

Run these checks before touching anything; fix in order.

1. CLI present — firebase --version. If missing, offer (consent-gated — it's a global install on their machine): npm i -g firebase-tools, then re-check.
2. Logged in — firebase login:list. If it reports no accounts, run firebase login. Tell the user first: this opens an interactive browser OAuth flow they must complete themselves; you cannot do it for them. On a headless/remote box use firebase login --no-localhost. Do not proceed until login:list shows an account.
3. Read the app's identity from the stamped project (never ask the user to retype what the repo already knows):
   • Android applicationId — from composeApp/build.gradle.kts (the applicationId = "..." line inside android { defaultConfig { … } }).
   • iOS bundle id — from iosApp/project.yml (PRODUCT_BUNDLE_IDENTIFIER / bundleIdPrefix). iOS is optional and currently deferred product-wide — do the Android wiring first and only take the iOS branch (§5) if the user explicitly wants it now.
4. Confirm this is a placeholder situation — open composeApp/google-services.json. If project_id is REPLACE_ME_PROJECT_ID (or mobilesdk_app_id is all zeros), proceed. If it already looks real, stop and ask whether they want to re-point the app at a different project (same flow, but be explicit that you're replacing a live config).