@anthropic-field/core 0.1.0

package/dist/src/index.d.ts

@@ -0,0 +1,145 @@
+/**
+ * @license
+ * Copyright 2025 Google LLC
+ * SPDX-License-Identifier: Apache-2.0
+ */
+export * from './config/config.js';
+export * from './config/defaultModelConfigs.js';
+export * from './config/models.js';
+export * from './config/constants.js';
+export * from './output/types.js';
+export * from './output/json-formatter.js';
+export * from './output/stream-json-formatter.js';
+export * from './policy/types.js';
+export * from './policy/policy-engine.js';
+export * from './policy/toml-loader.js';
+export * from './policy/config.js';
+export * from './confirmation-bus/types.js';
+export * from './confirmation-bus/message-bus.js';
+export * from './commands/extensions.js';
+export * from './commands/restore.js';
+export * from './commands/init.js';
+export * from './commands/memory.js';
+export * from './commands/types.js';
+export * from './core/client.js';
+export * from './core/contentGenerator.js';
+export * from './core/loggingContentGenerator.js';
+export * from './core/geminiChat.js';
+export * from './core/logger.js';
+export * from './core/prompts.js';
+export * from './core/tokenLimits.js';
+export * from './core/turn.js';
+export * from './core/geminiRequest.js';
+export * from './core/coreToolScheduler.js';
+export * from './scheduler/scheduler.js';
+export * from './scheduler/types.js';
+export * from './scheduler/tool-executor.js';
+export * from './core/recordingContentGenerator.js';
+export * from './fallback/types.js';
+export * from './code_assist/codeAssist.js';
+export * from './code_assist/oauth2.js';
+export * from './code_assist/server.js';
+export * from './code_assist/setup.js';
+export * from './code_assist/types.js';
+export * from './code_assist/telemetry.js';
+export * from './code_assist/admin/admin_controls.js';
+export * from './core/apiKeyCredentialStorage.js';
+export { homedir, tmpdir } from './utils/paths.js';
+export * from './utils/paths.js';
+export * from './utils/schemaValidator.js';
+export * from './utils/errors.js';
+export * from './utils/exitCodes.js';
+export * from './utils/getFolderStructure.js';
+export * from './utils/memoryDiscovery.js';
+export * from './utils/getPty.js';
+export * from './utils/gitIgnoreParser.js';
+export * from './utils/gitUtils.js';
+export * from './utils/editor.js';
+export * from './utils/quotaErrorDetection.js';
+export * from './utils/userAccountManager.js';
+export * from './utils/googleQuotaErrors.js';
+export * from './utils/fileUtils.js';
+export * from './utils/fileDiffUtils.js';
+export * from './utils/retry.js';
+export * from './utils/shell-utils.js';
+export { PolicyDecision, ApprovalMode } from './policy/types.js';
+export * from './utils/tool-utils.js';
+export * from './utils/terminalSerializer.js';
+export * from './utils/systemEncoding.js';
+export * from './utils/textUtils.js';
+export * from './utils/formatters.js';
+export * from './utils/generateContentResponseUtilities.js';
+export * from './utils/filesearch/fileSearch.js';
+export * from './utils/errorParsing.js';
+export * from './utils/workspaceContext.js';
+export * from './utils/environmentContext.js';
+export * from './utils/ignorePatterns.js';
+export * from './utils/partUtils.js';
+export * from './utils/promptIdContext.js';
+export * from './utils/thoughtUtils.js';
+export * from './utils/debugLogger.js';
+export * from './utils/events.js';
+export * from './utils/extensionLoader.js';
+export * from './utils/package.js';
+export * from './utils/version.js';
+export * from './utils/checkpointUtils.js';
+export * from './utils/secure-browser-launcher.js';
+export * from './utils/apiConversionUtils.js';
+export * from './utils/channel.js';
+export * from './utils/constants.js';
+export * from './services/fileDiscoveryService.js';
+export * from './services/gitService.js';
+export * from './services/chatRecordingService.js';
+export * from './services/fileSystemService.js';
+export * from './services/sessionSummaryUtils.js';
+export * from './services/contextManager.js';
+export * from './skills/skillManager.js';
+export * from './skills/skillLoader.js';
+export * from './ide/ide-client.js';
+export * from './ide/ideContext.js';
+export * from './ide/ide-installer.js';
+export { IDE_DEFINITIONS, type IdeInfo } from './ide/detect-ide.js';
+export * from './ide/constants.js';
+export * from './ide/types.js';
+export * from './services/shellExecutionService.js';
+export * from './tools/tools.js';
+export * from './tools/tool-error.js';
+export * from './tools/tool-registry.js';
+export * from './tools/tool-names.js';
+export * from './resources/resource-registry.js';
+export * from './prompts/mcp-prompts.js';
+export * from './agents/types.js';
+export * from './agents/agentLoader.js';
+export * from './agents/local-executor.js';
+export * from './tools/read-file.js';
+export * from './tools/ls.js';
+export * from './tools/grep.js';
+export * from './tools/ripGrep.js';
+export * from './tools/glob.js';
+export * from './tools/edit.js';
+export * from './tools/write-file.js';
+export * from './tools/web-fetch.js';
+export * from './tools/memoryTool.js';
+export * from './tools/shell.js';
+export * from './tools/web-search.js';
+export * from './tools/read-many-files.js';
+export * from './tools/mcp-client.js';
+export * from './tools/mcp-tool.js';
+export * from './tools/write-todos.js';
+export { MCPOAuthProvider } from './mcp/oauth-provider.js';
+export type { OAuthToken, OAuthCredentials, } from './mcp/token-storage/types.js';
+export { MCPOAuthTokenStorage } from './mcp/oauth-token-storage.js';
+export type { MCPOAuthConfig } from './mcp/oauth-provider.js';
+export type { OAuthAuthorizationServerMetadata, OAuthProtectedResourceMetadata, } from './mcp/oauth-utils.js';
+export { OAuthUtils } from './mcp/oauth-utils.js';
+export * from './telemetry/index.js';
+export { sessionId } from './utils/session.js';
+export * from './utils/browser.js';
+export { Storage } from './config/storage.js';
+export * from './hooks/index.js';
+export * from './hooks/types.js';
+export * from './agents/types.js';
+export * from './utils/stdio.js';
+export * from './utils/terminal.js';
+export * from './cognitive/index.js';
+export * from './cognitive/integration.js';

package/dist/src/index.js

@@ -0,0 +1,161 @@
+/**
+ * @license
+ * Copyright 2025 Google LLC
+ * SPDX-License-Identifier: Apache-2.0
+ */
+// Export config
+export * from './config/config.js';
+export * from './config/defaultModelConfigs.js';
+export * from './config/models.js';
+export * from './config/constants.js';
+export * from './output/types.js';
+export * from './output/json-formatter.js';
+export * from './output/stream-json-formatter.js';
+export * from './policy/types.js';
+export * from './policy/policy-engine.js';
+export * from './policy/toml-loader.js';
+export * from './policy/config.js';
+export * from './confirmation-bus/types.js';
+export * from './confirmation-bus/message-bus.js';
+// Export Commands logic
+export * from './commands/extensions.js';
+export * from './commands/restore.js';
+export * from './commands/init.js';
+export * from './commands/memory.js';
+export * from './commands/types.js';
+// Export Core Logic
+export * from './core/client.js';
+export * from './core/contentGenerator.js';
+export * from './core/loggingContentGenerator.js';
+export * from './core/geminiChat.js';
+export * from './core/logger.js';
+export * from './core/prompts.js';
+export * from './core/tokenLimits.js';
+export * from './core/turn.js';
+export * from './core/geminiRequest.js';
+export * from './core/coreToolScheduler.js';
+export * from './scheduler/scheduler.js';
+export * from './scheduler/types.js';
+export * from './scheduler/tool-executor.js';
+export * from './core/recordingContentGenerator.js';
+export * from './fallback/types.js';
+export * from './code_assist/codeAssist.js';
+export * from './code_assist/oauth2.js';
+export * from './code_assist/server.js';
+export * from './code_assist/setup.js';
+export * from './code_assist/types.js';
+export * from './code_assist/telemetry.js';
+export * from './code_assist/admin/admin_controls.js';
+export * from './core/apiKeyCredentialStorage.js';
+// Export utilities
+export { homedir, tmpdir } from './utils/paths.js';
+export * from './utils/paths.js';
+export * from './utils/schemaValidator.js';
+export * from './utils/errors.js';
+export * from './utils/exitCodes.js';
+export * from './utils/getFolderStructure.js';
+export * from './utils/memoryDiscovery.js';
+export * from './utils/getPty.js';
+export * from './utils/gitIgnoreParser.js';
+export * from './utils/gitUtils.js';
+export * from './utils/editor.js';
+export * from './utils/quotaErrorDetection.js';
+export * from './utils/userAccountManager.js';
+export * from './utils/googleQuotaErrors.js';
+export * from './utils/fileUtils.js';
+export * from './utils/fileDiffUtils.js';
+export * from './utils/retry.js';
+export * from './utils/shell-utils.js';
+export { PolicyDecision, ApprovalMode } from './policy/types.js';
+export * from './utils/tool-utils.js';
+export * from './utils/terminalSerializer.js';
+export * from './utils/systemEncoding.js';
+export * from './utils/textUtils.js';
+export * from './utils/formatters.js';
+export * from './utils/generateContentResponseUtilities.js';
+export * from './utils/filesearch/fileSearch.js';
+export * from './utils/errorParsing.js';
+export * from './utils/workspaceContext.js';
+export * from './utils/environmentContext.js';
+export * from './utils/ignorePatterns.js';
+export * from './utils/partUtils.js';
+export * from './utils/promptIdContext.js';
+export * from './utils/thoughtUtils.js';
+export * from './utils/debugLogger.js';
+export * from './utils/events.js';
+export * from './utils/extensionLoader.js';
+export * from './utils/package.js';
+export * from './utils/version.js';
+export * from './utils/checkpointUtils.js';
+export * from './utils/secure-browser-launcher.js';
+export * from './utils/apiConversionUtils.js';
+export * from './utils/channel.js';
+export * from './utils/constants.js';
+// Export services
+export * from './services/fileDiscoveryService.js';
+export * from './services/gitService.js';
+export * from './services/chatRecordingService.js';
+export * from './services/fileSystemService.js';
+export * from './services/sessionSummaryUtils.js';
+export * from './services/contextManager.js';
+export * from './skills/skillManager.js';
+export * from './skills/skillLoader.js';
+// Export IDE specific logic
+export * from './ide/ide-client.js';
+export * from './ide/ideContext.js';
+export * from './ide/ide-installer.js';
+export { IDE_DEFINITIONS } from './ide/detect-ide.js';
+export * from './ide/constants.js';
+export * from './ide/types.js';
+// Export Shell Execution Service
+export * from './services/shellExecutionService.js';
+// Export base tool definitions
+export * from './tools/tools.js';
+export * from './tools/tool-error.js';
+export * from './tools/tool-registry.js';
+export * from './tools/tool-names.js';
+export * from './resources/resource-registry.js';
+// Export prompt logic
+export * from './prompts/mcp-prompts.js';
+// Export agent definitions
+export * from './agents/types.js';
+export * from './agents/agentLoader.js';
+export * from './agents/local-executor.js';
+// Export specific tool logic
+export * from './tools/read-file.js';
+export * from './tools/ls.js';
+export * from './tools/grep.js';
+export * from './tools/ripGrep.js';
+export * from './tools/glob.js';
+export * from './tools/edit.js';
+export * from './tools/write-file.js';
+export * from './tools/web-fetch.js';
+export * from './tools/memoryTool.js';
+export * from './tools/shell.js';
+export * from './tools/web-search.js';
+export * from './tools/read-many-files.js';
+export * from './tools/mcp-client.js';
+export * from './tools/mcp-tool.js';
+export * from './tools/write-todos.js';
+// MCP OAuth
+export { MCPOAuthProvider } from './mcp/oauth-provider.js';
+export { MCPOAuthTokenStorage } from './mcp/oauth-token-storage.js';
+export { OAuthUtils } from './mcp/oauth-utils.js';
+// Export telemetry functions
+export * from './telemetry/index.js';
+export { sessionId } from './utils/session.js';
+export * from './utils/browser.js';
+export { Storage } from './config/storage.js';
+// Export hooks system
+export * from './hooks/index.js';
+// Export hook types
+export * from './hooks/types.js';
+// Export agent types
+export * from './agents/types.js';
+// Export stdio utils
+export * from './utils/stdio.js';
+export * from './utils/terminal.js';
+// Export Cognitive Modules support
+export * from './cognitive/index.js';
+export * from './cognitive/integration.js';
+//# sourceMappingURL=index.js.map

package/dist/src/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/index.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAEH,gBAAgB;AAChB,cAAc,oBAAoB,CAAC;AACnC,cAAc,iCAAiC,CAAC;AAChD,cAAc,oBAAoB,CAAC;AACnC,cAAc,uBAAuB,CAAC;AACtC,cAAc,mBAAmB,CAAC;AAClC,cAAc,4BAA4B,CAAC;AAC3C,cAAc,mCAAmC,CAAC;AAClD,cAAc,mBAAmB,CAAC;AAClC,cAAc,2BAA2B,CAAC;AAC1C,cAAc,yBAAyB,CAAC;AACxC,cAAc,oBAAoB,CAAC;AACnC,cAAc,6BAA6B,CAAC;AAC5C,cAAc,mCAAmC,CAAC;AAElD,wBAAwB;AACxB,cAAc,0BAA0B,CAAC;AACzC,cAAc,uBAAuB,CAAC;AACtC,cAAc,oBAAoB,CAAC;AACnC,cAAc,sBAAsB,CAAC;AACrC,cAAc,qBAAqB,CAAC;AAEpC,oBAAoB;AACpB,cAAc,kBAAkB,CAAC;AACjC,cAAc,4BAA4B,CAAC;AAC3C,cAAc,mCAAmC,CAAC;AAClD,cAAc,sBAAsB,CAAC;AACrC,cAAc,kBAAkB,CAAC;AACjC,cAAc,mBAAmB,CAAC;AAClC,cAAc,uBAAuB,CAAC;AACtC,cAAc,gBAAgB,CAAC;AAC/B,cAAc,yBAAyB,CAAC;AACxC,cAAc,6BAA6B,CAAC;AAC5C,cAAc,0BAA0B,CAAC;AACzC,cAAc,sBAAsB,CAAC;AACrC,cAAc,8BAA8B,CAAC;AAC7C,cAAc,qCAAqC,CAAC;AAEpD,cAAc,qBAAqB,CAAC;AAEpC,cAAc,6BAA6B,CAAC;AAC5C,cAAc,yBAAyB,CAAC;AACxC,cAAc,yBAAyB,CAAC;AACxC,cAAc,wBAAwB,CAAC;AACvC,cAAc,wBAAwB,CAAC;AACvC,cAAc,4BAA4B,CAAC;AAC3C,cAAc,uCAAuC,CAAC;AACtD,cAAc,mCAAmC,CAAC;AAElD,mBAAmB;AACnB,OAAO,EAAE,OAAO,EAAE,MAAM,EAAE,MAAM,kBAAkB,CAAC;AACnD,cAAc,kBAAkB,CAAC;AACjC,cAAc,4BAA4B,CAAC;AAC3C,cAAc,mBAAmB,CAAC;AAClC,cAAc,sBAAsB,CAAC;AACrC,cAAc,+BAA+B,CAAC;AAC9C,cAAc,4BAA4B,CAAC;AAC3C,cAAc,mBAAmB,CAAC;AAClC,cAAc,4BAA4B,CAAC;AAC3C,cAAc,qBAAqB,CAAC;AACpC,cAAc,mBAAmB,CAAC;AAClC,cAAc,gCAAgC,CAAC;AAC/C,cAAc,+BAA+B,CAAC;AAC9C,cAAc,8BAA8B,CAAC;AAC7C,cAAc,sBAAsB,CAAC;AACrC,cAAc,0BAA0B,CAAC;AACzC,cAAc,kBAAkB,CAAC;AACjC,cAAc,wBAAwB,CAAC;AACvC,OAAO,EAAE,cAAc,EAAE,YAAY,EAAE,MAAM,mBAAmB,CAAC;AACjE,cAAc,uBAAuB,CAAC;AACtC,cAAc,+BAA+B,CAAC;AAC9C,cAAc,2BAA2B,CAAC;AAC1C,cAAc,sBAAsB,CAAC;AACrC,cAAc,uBAAuB,CAAC;AACtC,cAAc,6CAA6C,CAAC;AAC5D,cAAc,kCAAkC,CAAC;AACjD,cAAc,yBAAyB,CAAC;AACxC,cAAc,6BAA6B,CAAC;AAC5C,cAAc,+BAA+B,CAAC;AAC9C,cAAc,2BAA2B,CAAC;AAC1C,cAAc,sBAAsB,CAAC;AACrC,cAAc,4BAA4B,CAAC;AAC3C,cAAc,yBAAyB,CAAC;AACxC,cAAc,wBAAwB,CAAC;AACvC,cAAc,mBAAmB,CAAC;AAClC,cAAc,4BAA4B,CAAC;AAC3C,cAAc,oBAAoB,CAAC;AACnC,cAAc,oBAAoB,CAAC;AACnC,cAAc,4BAA4B,CAAC;AAC3C,cAAc,oCAAoC,CAAC;AACnD,cAAc,+BAA+B,CAAC;AAC9C,cAAc,oBAAoB,CAAC;AACnC,cAAc,sBAAsB,CAAC;AAErC,kBAAkB;AAClB,cAAc,oCAAoC,CAAC;AACnD,cAAc,0BAA0B,CAAC;AACzC,cAAc,oCAAoC,CAAC;AACnD,cAAc,iCAAiC,CAAC;AAChD,cAAc,mCAAmC,CAAC;AAClD,cAAc,8BAA8B,CAAC;AAC7C,cAAc,0BAA0B,CAAC;AACzC,cAAc,yBAAyB,CAAC;AAExC,4BAA4B;AAC5B,cAAc,qBAAqB,CAAC;AACpC,cAAc,qBAAqB,CAAC;AACpC,cAAc,wBAAwB,CAAC;AACvC,OAAO,EAAE,eAAe,EAAgB,MAAM,qBAAqB,CAAC;AACpE,cAAc,oBAAoB,CAAC;AACnC,cAAc,gBAAgB,CAAC;AAE/B,iCAAiC;AACjC,cAAc,qCAAqC,CAAC;AAEpD,+BAA+B;AAC/B,cAAc,kBAAkB,CAAC;AACjC,cAAc,uBAAuB,CAAC;AACtC,cAAc,0BAA0B,CAAC;AACzC,cAAc,uBAAuB,CAAC;AACtC,cAAc,kCAAkC,CAAC;AAEjD,sBAAsB;AACtB,cAAc,0BAA0B,CAAC;AAEzC,2BAA2B;AAC3B,cAAc,mBAAmB,CAAC;AAClC,cAAc,yBAAyB,CAAC;AACxC,cAAc,4BAA4B,CAAC;AAE3C,6BAA6B;AAC7B,cAAc,sBAAsB,CAAC;AACrC,cAAc,eAAe,CAAC;AAC9B,cAAc,iBAAiB,CAAC;AAChC,cAAc,oBAAoB,CAAC;AACnC,cAAc,iBAAiB,CAAC;AAChC,cAAc,iBAAiB,CAAC;AAChC,cAAc,uBAAuB,CAAC;AACtC,cAAc,sBAAsB,CAAC;AACrC,cAAc,uBAAuB,CAAC;AACtC,cAAc,kBAAkB,CAAC;AACjC,cAAc,uBAAuB,CAAC;AACtC,cAAc,4BAA4B,CAAC;AAC3C,cAAc,uBAAuB,CAAC;AACtC,cAAc,qBAAqB,CAAC;AACpC,cAAc,wBAAwB,CAAC;AAEvC,YAAY;AACZ,OAAO,EAAE,gBAAgB,EAAE,MAAM,yBAAyB,CAAC;AAK3D,OAAO,EAAE,oBAAoB,EAAE,MAAM,8BAA8B,CAAC;AAMpE,OAAO,EAAE,UAAU,EAAE,MAAM,sBAAsB,CAAC;AAElD,6BAA6B;AAC7B,cAAc,sBAAsB,CAAC;AACrC,OAAO,EAAE,SAAS,EAAE,MAAM,oBAAoB,CAAC;AAC/C,cAAc,oBAAoB,CAAC;AACnC,OAAO,EAAE,OAAO,EAAE,MAAM,qBAAqB,CAAC;AAE9C,sBAAsB;AACtB,cAAc,kBAAkB,CAAC;AAEjC,oBAAoB;AACpB,cAAc,kBAAkB,CAAC;AAEjC,qBAAqB;AACrB,cAAc,mBAAmB,CAAC;AAElC,qBAAqB;AACrB,cAAc,kBAAkB,CAAC;AACjC,cAAc,qBAAqB,CAAC;AAEpC,mCAAmC;AACnC,cAAc,sBAAsB,CAAC;AACrC,cAAc,4BAA4B,CAAC"}

package/dist/src/mcp/auth-provider.d.ts

@@ -0,0 +1,16 @@
+/**
+ * @license
+ * Copyright 2025 Google LLC
+ * SPDX-License-Identifier: Apache-2.0
+ */
+import type { OAuthClientProvider } from '@modelcontextprotocol/sdk/client/auth.js';
+/**
+ * Extension of OAuthClientProvider that allows providers to inject custom headers
+ * into the transport request.
+ */
+export interface McpAuthProvider extends OAuthClientProvider {
+    /**
+     * Returns custom headers to be added to the request.
+     */
+    getRequestHeaders?(): Promise<Record<string, string>>;
+}

package/dist/src/mcp/auth-provider.js

@@ -0,0 +1,7 @@
+/**
+ * @license
+ * Copyright 2025 Google LLC
+ * SPDX-License-Identifier: Apache-2.0
+ */
+export {};
+//# sourceMappingURL=auth-provider.js.map

package/dist/src/mcp/auth-provider.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"auth-provider.js","sourceRoot":"","sources":["../../../src/mcp/auth-provider.ts"],"names":[],"mappings":"AAAA;;;;GAIG"}

package/dist/src/mcp/google-auth-provider.d.ts

@@ -0,0 +1,33 @@
+/**
+ * @license
+ * Copyright 2025 Google LLC
+ * SPDX-License-Identifier: Apache-2.0
+ */
+import type { McpAuthProvider } from './auth-provider.js';
+import type { OAuthClientInformation, OAuthClientInformationFull, OAuthClientMetadata, OAuthTokens } from '@modelcontextprotocol/sdk/shared/auth.js';
+import type { MCPServerConfig } from '../config/config.js';
+export declare class GoogleCredentialProvider implements McpAuthProvider {
+    private readonly config?;
+    private readonly auth;
+    private cachedToken?;
+    private tokenExpiryTime?;
+    readonly redirectUrl = "";
+    readonly clientMetadata: OAuthClientMetadata;
+    private _clientInformation?;
+    constructor(config?: MCPServerConfig | undefined);
+    clientInformation(): OAuthClientInformation | undefined;
+    saveClientInformation(clientInformation: OAuthClientInformationFull): void;
+    tokens(): Promise<OAuthTokens | undefined>;
+    saveTokens(_tokens: OAuthTokens): void;
+    redirectToAuthorization(_authorizationUrl: URL): void;
+    saveCodeVerifier(_codeVerifier: string): void;
+    codeVerifier(): string;
+    /**
+     * Returns the project ID used for quota.
+     */
+    getQuotaProjectId(): Promise<string | undefined>;
+    /**
+     * Returns custom headers to be added to the request.
+     */
+    getRequestHeaders(): Promise<Record<string, string>>;
+}

package/dist/src/mcp/google-auth-provider.js

@@ -0,0 +1,118 @@
+/**
+ * @license
+ * Copyright 2025 Google LLC
+ * SPDX-License-Identifier: Apache-2.0
+ */
+import { GoogleAuth } from 'google-auth-library';
+import { FIVE_MIN_BUFFER_MS } from './oauth-utils.js';
+import { coreEvents } from '../utils/events.js';
+const ALLOWED_HOSTS = [/^.+\.googleapis\.com$/, /^(.*\.)?luci\.app$/];
+export class GoogleCredentialProvider {
+    config;
+    auth;
+    cachedToken;
+    tokenExpiryTime;
+    // Properties required by OAuthClientProvider, with no-op values
+    redirectUrl = '';
+    clientMetadata = {
+        client_name: 'Gemini CLI (Google ADC)',
+        redirect_uris: [],
+        grant_types: [],
+        response_types: [],
+        token_endpoint_auth_method: 'none',
+    };
+    _clientInformation;
+    constructor(config) {
+        this.config = config;
+        const url = this.config?.url || this.config?.httpUrl;
+        if (!url) {
+            throw new Error('URL must be provided in the config for Google Credentials provider');
+        }
+        const hostname = new URL(url).hostname;
+        if (!ALLOWED_HOSTS.some((pattern) => pattern.test(hostname))) {
+            throw new Error(`Host "${hostname}" is not an allowed host for Google Credential provider.`);
+        }
+        const scopes = this.config?.oauth?.scopes;
+        if (!scopes || scopes.length === 0) {
+            throw new Error('Scopes must be provided in the oauth config for Google Credentials provider');
+        }
+        this.auth = new GoogleAuth({
+            scopes,
+        });
+    }
+    clientInformation() {
+        return this._clientInformation;
+    }
+    saveClientInformation(clientInformation) {
+        this._clientInformation = clientInformation;
+    }
+    async tokens() {
+        // check for a valid, non-expired cached token.
+        if (this.cachedToken &&
+            this.tokenExpiryTime &&
+            Date.now() < this.tokenExpiryTime - FIVE_MIN_BUFFER_MS) {
+            return this.cachedToken;
+        }
+        // Clear invalid/expired cache.
+        this.cachedToken = undefined;
+        this.tokenExpiryTime = undefined;
+        const client = await this.auth.getClient();
+        const accessTokenResponse = await client.getAccessToken();
+        if (!accessTokenResponse.token) {
+            coreEvents.emitFeedback('error', 'Failed to get access token from Google ADC');
+            return undefined;
+        }
+        const newToken = {
+            access_token: accessTokenResponse.token,
+            token_type: 'Bearer',
+        };
+        const expiryTime = client.credentials?.expiry_date;
+        if (expiryTime) {
+            this.tokenExpiryTime = expiryTime;
+            this.cachedToken = newToken;
+        }
+        return newToken;
+    }
+    saveTokens(_tokens) {
+        // No-op, ADC manages tokens.
+    }
+    redirectToAuthorization(_authorizationUrl) {
+        // No-op
+    }
+    saveCodeVerifier(_codeVerifier) {
+        // No-op
+    }
+    codeVerifier() {
+        // No-op
+        return '';
+    }
+    /**
+     * Returns the project ID used for quota.
+     */
+    async getQuotaProjectId() {
+        const client = await this.auth.getClient();
+        return client.quotaProjectId;
+    }
+    /**
+     * Returns custom headers to be added to the request.
+     */
+    async getRequestHeaders() {
+        const headers = {};
+        const configHeaders = this.config?.headers ?? {};
+        const userProjectHeaderKey = Object.keys(configHeaders).find((key) => key.toLowerCase() === 'x-goog-user-project');
+        // If the header is present in the config (case-insensitive check), use the
+        // config's key and value. This prevents duplicate headers (e.g.
+        // 'x-goog-user-project' and 'X-Goog-User-Project') which can cause errors.
+        if (userProjectHeaderKey) {
+            headers[userProjectHeaderKey] = configHeaders[userProjectHeaderKey];
+        }
+        else {
+            const quotaProjectId = await this.getQuotaProjectId();
+            if (quotaProjectId) {
+                headers['X-Goog-User-Project'] = quotaProjectId;
+            }
+        }
+        return headers;
+    }
+}
+//# sourceMappingURL=google-auth-provider.js.map

package/dist/src/mcp/google-auth-provider.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"google-auth-provider.js","sourceRoot":"","sources":["../../../src/mcp/google-auth-provider.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AASH,OAAO,EAAE,UAAU,EAAE,MAAM,qBAAqB,CAAC;AAEjD,OAAO,EAAE,kBAAkB,EAAE,MAAM,kBAAkB,CAAC;AACtD,OAAO,EAAE,UAAU,EAAE,MAAM,oBAAoB,CAAC;AAEhD,MAAM,aAAa,GAAG,CAAC,uBAAuB,EAAE,oBAAoB,CAAC,CAAC;AAEtE,MAAM,OAAO,wBAAwB;IAgBN;IAfZ,IAAI,CAAa;IAC1B,WAAW,CAAe;IAC1B,eAAe,CAAU;IAEjC,gEAAgE;IACvD,WAAW,GAAG,EAAE,CAAC;IACjB,cAAc,GAAwB;QAC7C,WAAW,EAAE,yBAAyB;QACtC,aAAa,EAAE,EAAE;QACjB,WAAW,EAAE,EAAE;QACf,cAAc,EAAE,EAAE;QAClB,0BAA0B,EAAE,MAAM;KACnC,CAAC;IACM,kBAAkB,CAA8B;IAExD,YAA6B,MAAwB;QAAxB,WAAM,GAAN,MAAM,CAAkB;QACnD,MAAM,GAAG,GAAG,IAAI,CAAC,MAAM,EAAE,GAAG,IAAI,IAAI,CAAC,MAAM,EAAE,OAAO,CAAC;QACrD,IAAI,CAAC,GAAG,EAAE,CAAC;YACT,MAAM,IAAI,KAAK,CACb,oEAAoE,CACrE,CAAC;QACJ,CAAC;QAED,MAAM,QAAQ,GAAG,IAAI,GAAG,CAAC,GAAG,CAAC,CAAC,QAAQ,CAAC;QACvC,IAAI,CAAC,aAAa,CAAC,IAAI,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,OAAO,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC,EAAE,CAAC;YAC7D,MAAM,IAAI,KAAK,CACb,SAAS,QAAQ,0DAA0D,CAC5E,CAAC;QACJ,CAAC;QAED,MAAM,MAAM,GAAG,IAAI,CAAC,MAAM,EAAE,KAAK,EAAE,MAAM,CAAC;QAC1C,IAAI,CAAC,MAAM,IAAI,MAAM,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YACnC,MAAM,IAAI,KAAK,CACb,6EAA6E,CAC9E,CAAC;QACJ,CAAC;QACD,IAAI,CAAC,IAAI,GAAG,IAAI,UAAU,CAAC;YACzB,MAAM;SACP,CAAC,CAAC;IACL,CAAC;IAED,iBAAiB;QACf,OAAO,IAAI,CAAC,kBAAkB,CAAC;IACjC,CAAC;IAED,qBAAqB,CAAC,iBAA6C;QACjE,IAAI,CAAC,kBAAkB,GAAG,iBAAiB,CAAC;IAC9C,CAAC;IAED,KAAK,CAAC,MAAM;QACV,+CAA+C;QAC/C,IACE,IAAI,CAAC,WAAW;YAChB,IAAI,CAAC,eAAe;YACpB,IAAI,CAAC,GAAG,EAAE,GAAG,IAAI,CAAC,eAAe,GAAG,kBAAkB,EACtD,CAAC;YACD,OAAO,IAAI,CAAC,WAAW,CAAC;QAC1B,CAAC;QAED,+BAA+B;QAC/B,IAAI,CAAC,WAAW,GAAG,SAAS,CAAC;QAC7B,IAAI,CAAC,eAAe,GAAG,SAAS,CAAC;QAEjC,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,IAAI,CAAC,SAAS,EAAE,CAAC;QAC3C,MAAM,mBAAmB,GAAG,MAAM,MAAM,CAAC,cAAc,EAAE,CAAC;QAE1D,IAAI,CAAC,mBAAmB,CAAC,KAAK,EAAE,CAAC;YAC/B,UAAU,CAAC,YAAY,CACrB,OAAO,EACP,4CAA4C,CAC7C,CAAC;YACF,OAAO,SAAS,CAAC;QACnB,CAAC;QAED,MAAM,QAAQ,GAAgB;YAC5B,YAAY,EAAE,mBAAmB,CAAC,KAAK;YACvC,UAAU,EAAE,QAAQ;SACrB,CAAC;QAEF,MAAM,UAAU,GAAG,MAAM,CAAC,WAAW,EAAE,WAAW,CAAC;QACnD,IAAI,UAAU,EAAE,CAAC;YACf,IAAI,CAAC,eAAe,GAAG,UAAU,CAAC;YAClC,IAAI,CAAC,WAAW,GAAG,QAAQ,CAAC;QAC9B,CAAC;QAED,OAAO,QAAQ,CAAC;IAClB,CAAC;IAED,UAAU,CAAC,OAAoB;QAC7B,6BAA6B;IAC/B,CAAC;IAED,uBAAuB,CAAC,iBAAsB;QAC5C,QAAQ;IACV,CAAC;IAED,gBAAgB,CAAC,aAAqB;QACpC,QAAQ;IACV,CAAC;IAED,YAAY;QACV,QAAQ;QACR,OAAO,EAAE,CAAC;IACZ,CAAC;IACD;;OAEG;IACH,KAAK,CAAC,iBAAiB;QACrB,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,IAAI,CAAC,SAAS,EAAE,CAAC;QAC3C,OAAO,MAAM,CAAC,cAAc,CAAC;IAC/B,CAAC;IAED;;OAEG;IACH,KAAK,CAAC,iBAAiB;QACrB,MAAM,OAAO,GAA2B,EAAE,CAAC;QAC3C,MAAM,aAAa,GAAG,IAAI,CAAC,MAAM,EAAE,OAAO,IAAI,EAAE,CAAC;QACjD,MAAM,oBAAoB,GAAG,MAAM,CAAC,IAAI,CAAC,aAAa,CAAC,CAAC,IAAI,CAC1D,CAAC,GAAG,EAAE,EAAE,CAAC,GAAG,CAAC,WAAW,EAAE,KAAK,qBAAqB,CACrD,CAAC;QAEF,2EAA2E;QAC3E,gEAAgE;QAChE,2EAA2E;QAC3E,IAAI,oBAAoB,EAAE,CAAC;YACzB,OAAO,CAAC,oBAAoB,CAAC,GAAG,aAAa,CAAC,oBAAoB,CAAC,CAAC;QACtE,CAAC;aAAM,CAAC;YACN,MAAM,cAAc,GAAG,MAAM,IAAI,CAAC,iBAAiB,EAAE,CAAC;YACtD,IAAI,cAAc,EAAE,CAAC;gBACnB,OAAO,CAAC,qBAAqB,CAAC,GAAG,cAAc,CAAC;YAClD,CAAC;QACH,CAAC;QACD,OAAO,OAAO,CAAC;IACjB,CAAC;CACF"}

package/dist/src/mcp/oauth-provider.d.ts

@@ -0,0 +1,160 @@
+/**
+ * @license
+ * Copyright 2025 Google LLC
+ * SPDX-License-Identifier: Apache-2.0
+ */
+import type { OAuthToken } from './token-storage/types.js';
+import { MCPOAuthTokenStorage } from './oauth-token-storage.js';
+export declare const OAUTH_DISPLAY_MESSAGE_EVENT: "oauth-display-message";
+/**
+ * OAuth configuration for an MCP server.
+ */
+export interface MCPOAuthConfig {
+    enabled?: boolean;
+    clientId?: string;
+    clientSecret?: string;
+    authorizationUrl?: string;
+    tokenUrl?: string;
+    scopes?: string[];
+    audiences?: string[];
+    redirectUri?: string;
+    tokenParamName?: string;
+    registrationUrl?: string;
+}
+/**
+ * OAuth authorization response.
+ */
+export interface OAuthAuthorizationResponse {
+    code: string;
+    state: string;
+}
+/**
+ * OAuth token response from the authorization server.
+ */
+export interface OAuthTokenResponse {
+    access_token: string;
+    token_type: string;
+    expires_in?: number;
+    refresh_token?: string;
+    scope?: string;
+}
+/**
+ * Dynamic client registration request (RFC 7591).
+ */
+export interface OAuthClientRegistrationRequest {
+    client_name: string;
+    redirect_uris: string[];
+    grant_types: string[];
+    response_types: string[];
+    token_endpoint_auth_method: string;
+    scope?: string;
+}
+/**
+ * Dynamic client registration response (RFC 7591).
+ */
+export interface OAuthClientRegistrationResponse {
+    client_id: string;
+    client_secret?: string;
+    client_id_issued_at?: number;
+    client_secret_expires_at?: number;
+    redirect_uris: string[];
+    grant_types: string[];
+    response_types: string[];
+    token_endpoint_auth_method: string;
+    scope?: string;
+}
+/**
+ * Provider for handling OAuth authentication for MCP servers.
+ */
+export declare class MCPOAuthProvider {
+    private readonly tokenStorage;
+    constructor(tokenStorage?: MCPOAuthTokenStorage);
+    /**
+     * Register a client dynamically with the OAuth server.
+     *
+     * @param registrationUrl The client registration endpoint URL
+     * @param config OAuth configuration
+     * @param redirectPort The port to use for the redirect URI
+     * @returns The registered client information
+     */
+    private registerClient;
+    /**
+     * Discover OAuth configuration from an MCP server URL.
+     *
+     * @param mcpServerUrl The MCP server URL
+     * @returns OAuth configuration if discovered, null otherwise
+     */
+    private discoverOAuthFromMCPServer;
+    private discoverAuthServerMetadataForRegistration;
+    /**
+     * Generate PKCE parameters for OAuth flow.
+     *
+     * @returns PKCE parameters including code verifier, challenge, and state
+     */
+    private generatePKCEParams;
+    /**
+     * Start a local HTTP server to handle OAuth callback.
+     * The server will listen on the specified port (or port 0 for OS assignment).
+     *
+     * @param expectedState The state parameter to validate
+     * @returns Object containing the port (available immediately) and a promise for the auth response
+     */
+    private startCallbackServer;
+    /**
+     * Extract the port number from a URL string if available and valid.
+     *
+     * @param urlString The URL string to parse
+     * @returns The port number or undefined if not found or invalid
+     */
+    private getPortFromUrl;
+    /**
+     * Build the authorization URL for the OAuth flow.
+  
+     *
+     * @param config OAuth configuration
+     * @param pkceParams PKCE parameters
+     * @param redirectPort The port to use for the redirect URI
+     * @param mcpServerUrl The MCP server URL to use as the resource parameter
+     * @returns The authorization URL
+     */
+    private buildAuthorizationUrl;
+    /**
+     * Exchange authorization code for tokens.
+     *
+     * @param config OAuth configuration
+     * @param code Authorization code
+     * @param codeVerifier PKCE code verifier
+     * @param redirectPort The port to use for the redirect URI
+     * @param mcpServerUrl The MCP server URL to use as the resource parameter
+     * @returns The token response
+     */
+    private exchangeCodeForToken;
+    /**
+     * Refresh an access token using a refresh token.
+     *
+     * @param config OAuth configuration
+     * @param refreshToken The refresh token
+     * @param tokenUrl The token endpoint URL
+     * @param mcpServerUrl The MCP server URL to use as the resource parameter
+     * @returns The new token response
+     */
+    refreshAccessToken(config: MCPOAuthConfig, refreshToken: string, tokenUrl: string, mcpServerUrl?: string): Promise<OAuthTokenResponse>;
+    /**
+     * Perform the full OAuth authorization code flow with PKCE.
+     *
+     * @param serverName The name of the MCP server
+     * @param config OAuth configuration
+     * @param mcpServerUrl Optional MCP server URL for OAuth discovery
+     * @param messageHandler Optional handler for displaying user-facing messages
+     * @returns The obtained OAuth token
+     */
+    authenticate(serverName: string, config: MCPOAuthConfig, mcpServerUrl?: string): Promise<OAuthToken>;
+    /**
+     * Get a valid access token for an MCP server, refreshing if necessary.
+     *
+     * @param serverName The name of the MCP server
+     * @param config OAuth configuration
+     * @returns A valid access token or null if not authenticated
+     */
+    getValidToken(serverName: string, config: MCPOAuthConfig): Promise<string | null>;
+}