@google/gemini-cli-a2a-server 0.55.0-preview.3 → 0.55.1

package/dist/a2a-server.mjs

@@ -220988,8 +220988,8 @@ var GIT_COMMIT_INFO, CLI_VERSION;
 var init_git_commit = __esm({
   "packages/core/dist/src/generated/git-commit.js"() {
     "use strict";
-    GIT_COMMIT_INFO = "da3710eb9";
-    CLI_VERSION = "0.55.0-preview.3";
+    GIT_COMMIT_INFO = "58ba19945";
+    CLI_VERSION = "0.55.1";
   }
 });
 
@@ -336689,7 +336689,7 @@ function getVersion() {
   }
   versionPromise = (async () => {
     const pkgJson = await getPackageJson(__dirname4);
-    return "0.55.0-preview.3";
+    return "0.55.1";
   })();
   return versionPromise;
 }
@@ -377987,6 +377987,29 @@ var init_oauth_token_storage = __esm({
 import * as http6 from "node:http";
 import * as crypto20 from "node:crypto";
 import { URL as URL8 } from "node:url";
+function getRedirectUri(config2, redirectPort) {
+  if (process.env["GOOGLE_CLOUD_WORKSTATIONS"] === "true" && process.env["WEB_HOST"]) {
+    if (config2.redirectUri) {
+      try {
+        const parsed = new URL8(config2.redirectUri);
+        if (parsed.hostname === "localhost" || parsed.hostname === "127.0.0.1" || parsed.hostname === "[::1]") {
+          const port = String(redirectPort);
+          parsed.protocol = "https:";
+          parsed.hostname = `${port}-${process.env["WEB_HOST"]}`;
+          parsed.port = "";
+          return parsed.toString();
+        }
+      } catch {
+      }
+      return config2.redirectUri;
+    }
+    return `https://${redirectPort}-${process.env["WEB_HOST"]}${REDIRECT_PATH}`;
+  }
+  if (config2.redirectUri) {
+    return config2.redirectUri;
+  }
+  return `http://localhost:${redirectPort}${REDIRECT_PATH}`;
+}
 function generatePKCEParams() {
   const codeVerifier = crypto20.randomBytes(64).toString("base64url");
   const codeChallenge = crypto20.createHash("sha256").update(codeVerifier).digest("base64url");
@@ -378119,7 +378142,7 @@ function getPortFromUrl(urlString) {
   return void 0;
 }
 function buildAuthorizationUrl(config2, pkceParams, redirectPort, resource) {
-  const redirectUri = config2.redirectUri || `http://localhost:${redirectPort}${REDIRECT_PATH}`;
+  const redirectUri = getRedirectUri(config2, redirectPort);
   const params = new URLSearchParams({
     client_id: config2.clientId,
     response_type: "code",
@@ -378208,7 +378231,7 @@ async function parseTokenEndpointResponse(response, operationName, defaultErrorC
   };
 }
 async function exchangeCodeForToken(config2, code, codeVerifier, redirectPort, resource) {
-  const redirectUri = config2.redirectUri || `http://localhost:${redirectPort}${REDIRECT_PATH}`;
+  const redirectUri = getRedirectUri(config2, redirectPort);
   const params = new URLSearchParams({
     grant_type: "authorization_code",
     code,
@@ -406691,7 +406714,7 @@ var init_oauth_provider = __esm({
        * @returns The registered client information
        */
       async registerClient(registrationUrl, config2, redirectPort) {
-        const redirectUri = config2.redirectUri || `http://localhost:${redirectPort}${REDIRECT_PATH}`;
+        const redirectUri = getRedirectUri(config2, redirectPort);
         const registrationRequest = {
           client_name: "Gemini CLI MCP Client",
           redirect_uris: [redirectUri],
@@ -406980,10 +407003,11 @@ ${authUrl}
           debugLogger.debug(`Returning valid token for server: ${serverName}`);
           return token2.accessToken;
         }
-        if (token2.refreshToken && config2.clientId && credentials3.tokenUrl) {
+        const clientId = config2.clientId ?? credentials3.clientId;
+        if (token2.refreshToken && clientId && credentials3.tokenUrl) {
           try {
             debugLogger.log(`Refreshing expired token for MCP server: ${serverName}`);
-            const newTokenResponse = await this.refreshAccessToken(config2, token2.refreshToken, credentials3.tokenUrl, credentials3.mcpServerUrl);
+            const newTokenResponse = await this.refreshAccessToken({ ...config2, clientId }, token2.refreshToken, credentials3.tokenUrl, credentials3.mcpServerUrl);
             const newToken = {
               accessToken: newTokenResponse.access_token,
               tokenType: newTokenResponse.token_type,
@@ -406993,7 +407017,7 @@ ${authUrl}
             if (newTokenResponse.expires_in) {
               newToken.expiresAt = Date.now() + newTokenResponse.expires_in * 1e3;
             }
-            await this.tokenStorage.saveToken(serverName, newToken, config2.clientId, credentials3.tokenUrl, credentials3.mcpServerUrl);
+            await this.tokenStorage.saveToken(serverName, newToken, clientId, credentials3.tokenUrl, credentials3.mcpServerUrl);
             return newToken.accessToken;
           } catch (error2) {
             coreEvents.emitFeedback("error", "Failed to refresh auth token.", error2);
@@ -407011,7 +407035,7 @@ ${authUrl}
           const clientId = config2.clientId ?? credentials3.clientId;
           if (current.refreshToken && clientId && credentials3.tokenUrl) {
             try {
-              const newTokenResponse = await this.refreshAccessToken(config2, current.refreshToken, credentials3.tokenUrl, credentials3.mcpServerUrl);
+              const newTokenResponse = await this.refreshAccessToken({ ...config2, clientId }, current.refreshToken, credentials3.tokenUrl, credentials3.mcpServerUrl);
               const refreshed = {
                 accessToken: newTokenResponse.access_token,
                 tokenType: newTokenResponse.token_type,