firebase-vue3-startup-kit

Audit this Firebase + Vue app for security issues before deploy. Use when asked to "security review", "セキュリティレビュー", "安全性チェック", "デプロイ前チェック", "脆弱性チェック", or after changing rules / functions / auth. Covers Firestore & Storage rules, App Check enforcement, exposed secrets, callable-function auth guards, and hosting / CSP headers. Reports findings with severity, file:line, and a concrete fix.

Scaffold a new Firebase Cloud Function in this repo's exportIfNeeded cold-start pattern. Use when asked to "add a function", "functionを追加", "Cloud Functionをつくって", "callableを追加して", "APIエンドポイントを追加". Creates the functions/src/functions logic + wrappers config, registers it in index.ts, and (for callables) adds the client-side httpsCallable in src/utils/functions.ts.

Scaffold a new Vue page/view in this repo with i18n URL-path routing. Use when asked to "add a page", "ページを追加", "画面をつくって", "viewを追加して", "新しいルートを追加". Creates the view, registers it in routeChildren (so it works at both / and /:lang), and adds en/ja i18n keys — following Composition API, @/ alias, no-<script setup>, and Tailwind conventions.

Write or review Firebase Firestore (firestore.rules) and Storage (storage.rules) security rules for this repo. Use when adding a collection, changing access control, or auditing rules — triggers like "firestore rules", "セキュリティルール", "rulesを書いて", "このコレクションのread/writeを許可して", "storage.rules", "権限設定". Enforces default-deny, request.auth checks, field validation, and emulator testing.