@google/gemini-cli-core 0.3.2 → 0.4.0-preview

package/dist/src/mcp/token-storage/hybrid-token-storage.test.js

@@ -0,0 +1,193 @@
+/**
+ * @license
+ * Copyright 2025 Google LLC
+ * SPDX-License-Identifier: Apache-2.0
+ */
+import { describe, it, expect, beforeEach, afterEach, vi } from 'vitest';
+import { HybridTokenStorage } from './hybrid-token-storage.js';
+import { KeychainTokenStorage } from './keychain-token-storage.js';
+import { FileTokenStorage } from './file-token-storage.js';
+import { TokenStorageType } from './types.js';
+vi.mock('./keychain-token-storage.js', () => ({
+    KeychainTokenStorage: vi.fn().mockImplementation(() => ({
+        isAvailable: vi.fn(),
+        getCredentials: vi.fn(),
+        setCredentials: vi.fn(),
+        deleteCredentials: vi.fn(),
+        listServers: vi.fn(),
+        getAllCredentials: vi.fn(),
+        clearAll: vi.fn(),
+    })),
+}));
+vi.mock('./file-token-storage.js', () => ({
+    FileTokenStorage: vi.fn().mockImplementation(() => ({
+        getCredentials: vi.fn(),
+        setCredentials: vi.fn(),
+        deleteCredentials: vi.fn(),
+        listServers: vi.fn(),
+        getAllCredentials: vi.fn(),
+        clearAll: vi.fn(),
+    })),
+}));
+describe('HybridTokenStorage', () => {
+    let storage;
+    let mockKeychainStorage;
+    let mockFileStorage;
+    const originalEnv = process.env;
+    beforeEach(() => {
+        vi.clearAllMocks();
+        process.env = { ...originalEnv };
+        // Create mock instances before creating HybridTokenStorage
+        mockKeychainStorage = {
+            isAvailable: vi.fn(),
+            getCredentials: vi.fn(),
+            setCredentials: vi.fn(),
+            deleteCredentials: vi.fn(),
+            listServers: vi.fn(),
+            getAllCredentials: vi.fn(),
+            clearAll: vi.fn(),
+        };
+        mockFileStorage = {
+            getCredentials: vi.fn(),
+            setCredentials: vi.fn(),
+            deleteCredentials: vi.fn(),
+            listServers: vi.fn(),
+            getAllCredentials: vi.fn(),
+            clearAll: vi.fn(),
+        };
+        KeychainTokenStorage.mockImplementation(() => mockKeychainStorage);
+        FileTokenStorage.mockImplementation(() => mockFileStorage);
+        storage = new HybridTokenStorage('test-service');
+    });
+    afterEach(() => {
+        process.env = originalEnv;
+    });
+    describe('storage selection', () => {
+        it('should use keychain when available', async () => {
+            mockKeychainStorage.isAvailable.mockResolvedValue(true);
+            mockKeychainStorage.getCredentials.mockResolvedValue(null);
+            await storage.getCredentials('test-server');
+            expect(mockKeychainStorage.isAvailable).toHaveBeenCalled();
+            expect(mockKeychainStorage.getCredentials).toHaveBeenCalledWith('test-server');
+            expect(await storage.getStorageType()).toBe(TokenStorageType.KEYCHAIN);
+        });
+        it('should use file storage when GEMINI_FORCE_FILE_STORAGE is set', async () => {
+            process.env['GEMINI_FORCE_FILE_STORAGE'] = 'true';
+            mockFileStorage.getCredentials.mockResolvedValue(null);
+            await storage.getCredentials('test-server');
+            expect(mockKeychainStorage.isAvailable).not.toHaveBeenCalled();
+            expect(mockFileStorage.getCredentials).toHaveBeenCalledWith('test-server');
+            expect(await storage.getStorageType()).toBe(TokenStorageType.ENCRYPTED_FILE);
+        });
+        it('should fall back to file storage when keychain is unavailable', async () => {
+            mockKeychainStorage.isAvailable.mockResolvedValue(false);
+            mockFileStorage.getCredentials.mockResolvedValue(null);
+            await storage.getCredentials('test-server');
+            expect(mockKeychainStorage.isAvailable).toHaveBeenCalled();
+            expect(mockFileStorage.getCredentials).toHaveBeenCalledWith('test-server');
+            expect(await storage.getStorageType()).toBe(TokenStorageType.ENCRYPTED_FILE);
+        });
+        it('should fall back to file storage when keychain throws error', async () => {
+            mockKeychainStorage.isAvailable.mockRejectedValue(new Error('Keychain error'));
+            mockFileStorage.getCredentials.mockResolvedValue(null);
+            await storage.getCredentials('test-server');
+            expect(mockKeychainStorage.isAvailable).toHaveBeenCalled();
+            expect(mockFileStorage.getCredentials).toHaveBeenCalledWith('test-server');
+            expect(await storage.getStorageType()).toBe(TokenStorageType.ENCRYPTED_FILE);
+        });
+        it('should cache storage selection', async () => {
+            mockKeychainStorage.isAvailable.mockResolvedValue(true);
+            mockKeychainStorage.getCredentials.mockResolvedValue(null);
+            await storage.getCredentials('test-server');
+            await storage.getCredentials('another-server');
+            expect(mockKeychainStorage.isAvailable).toHaveBeenCalledTimes(1);
+        });
+    });
+    describe('getCredentials', () => {
+        it('should delegate to selected storage', async () => {
+            const credentials = {
+                serverName: 'test-server',
+                token: {
+                    accessToken: 'access-token',
+                    tokenType: 'Bearer',
+                },
+                updatedAt: Date.now(),
+            };
+            mockKeychainStorage.isAvailable.mockResolvedValue(true);
+            mockKeychainStorage.getCredentials.mockResolvedValue(credentials);
+            const result = await storage.getCredentials('test-server');
+            expect(result).toEqual(credentials);
+            expect(mockKeychainStorage.getCredentials).toHaveBeenCalledWith('test-server');
+        });
+    });
+    describe('setCredentials', () => {
+        it('should delegate to selected storage', async () => {
+            const credentials = {
+                serverName: 'test-server',
+                token: {
+                    accessToken: 'access-token',
+                    tokenType: 'Bearer',
+                },
+                updatedAt: Date.now(),
+            };
+            mockKeychainStorage.isAvailable.mockResolvedValue(true);
+            mockKeychainStorage.setCredentials.mockResolvedValue(undefined);
+            await storage.setCredentials(credentials);
+            expect(mockKeychainStorage.setCredentials).toHaveBeenCalledWith(credentials);
+        });
+    });
+    describe('deleteCredentials', () => {
+        it('should delegate to selected storage', async () => {
+            mockKeychainStorage.isAvailable.mockResolvedValue(true);
+            mockKeychainStorage.deleteCredentials.mockResolvedValue(undefined);
+            await storage.deleteCredentials('test-server');
+            expect(mockKeychainStorage.deleteCredentials).toHaveBeenCalledWith('test-server');
+        });
+    });
+    describe('listServers', () => {
+        it('should delegate to selected storage', async () => {
+            const servers = ['server1', 'server2'];
+            mockKeychainStorage.isAvailable.mockResolvedValue(true);
+            mockKeychainStorage.listServers.mockResolvedValue(servers);
+            const result = await storage.listServers();
+            expect(result).toEqual(servers);
+            expect(mockKeychainStorage.listServers).toHaveBeenCalled();
+        });
+    });
+    describe('getAllCredentials', () => {
+        it('should delegate to selected storage', async () => {
+            const credentialsMap = new Map([
+                [
+                    'server1',
+                    {
+                        serverName: 'server1',
+                        token: { accessToken: 'token1', tokenType: 'Bearer' },
+                        updatedAt: Date.now(),
+                    },
+                ],
+                [
+                    'server2',
+                    {
+                        serverName: 'server2',
+                        token: { accessToken: 'token2', tokenType: 'Bearer' },
+                        updatedAt: Date.now(),
+                    },
+                ],
+            ]);
+            mockKeychainStorage.isAvailable.mockResolvedValue(true);
+            mockKeychainStorage.getAllCredentials.mockResolvedValue(credentialsMap);
+            const result = await storage.getAllCredentials();
+            expect(result).toEqual(credentialsMap);
+            expect(mockKeychainStorage.getAllCredentials).toHaveBeenCalled();
+        });
+    });
+    describe('clearAll', () => {
+        it('should delegate to selected storage', async () => {
+            mockKeychainStorage.isAvailable.mockResolvedValue(true);
+            mockKeychainStorage.clearAll.mockResolvedValue(undefined);
+            await storage.clearAll();
+            expect(mockKeychainStorage.clearAll).toHaveBeenCalled();
+        });
+    });
+});
+//# sourceMappingURL=hybrid-token-storage.test.js.map

package/dist/src/mcp/token-storage/hybrid-token-storage.test.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"hybrid-token-storage.test.js","sourceRoot":"","sources":["../../../../src/mcp/token-storage/hybrid-token-storage.test.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAEH,OAAO,EAAE,QAAQ,EAAE,EAAE,EAAE,MAAM,EAAE,UAAU,EAAE,SAAS,EAAE,EAAE,EAAE,MAAM,QAAQ,CAAC;AACzE,OAAO,EAAE,kBAAkB,EAAE,MAAM,2BAA2B,CAAC;AAC/D,OAAO,EAAE,oBAAoB,EAAE,MAAM,6BAA6B,CAAC;AACnE,OAAO,EAAE,gBAAgB,EAAE,MAAM,yBAAyB,CAAC;AAC3D,OAAO,EAAyB,gBAAgB,EAAE,MAAM,YAAY,CAAC;AAErE,EAAE,CAAC,IAAI,CAAC,6BAA6B,EAAE,GAAG,EAAE,CAAC,CAAC;IAC5C,oBAAoB,EAAE,EAAE,CAAC,EAAE,EAAE,CAAC,kBAAkB,CAAC,GAAG,EAAE,CAAC,CAAC;QACtD,WAAW,EAAE,EAAE,CAAC,EAAE,EAAE;QACpB,cAAc,EAAE,EAAE,CAAC,EAAE,EAAE;QACvB,cAAc,EAAE,EAAE,CAAC,EAAE,EAAE;QACvB,iBAAiB,EAAE,EAAE,CAAC,EAAE,EAAE;QAC1B,WAAW,EAAE,EAAE,CAAC,EAAE,EAAE;QACpB,iBAAiB,EAAE,EAAE,CAAC,EAAE,EAAE;QAC1B,QAAQ,EAAE,EAAE,CAAC,EAAE,EAAE;KAClB,CAAC,CAAC;CACJ,CAAC,CAAC,CAAC;AAEJ,EAAE,CAAC,IAAI,CAAC,yBAAyB,EAAE,GAAG,EAAE,CAAC,CAAC;IACxC,gBAAgB,EAAE,EAAE,CAAC,EAAE,EAAE,CAAC,kBAAkB,CAAC,GAAG,EAAE,CAAC,CAAC;QAClD,cAAc,EAAE,EAAE,CAAC,EAAE,EAAE;QACvB,cAAc,EAAE,EAAE,CAAC,EAAE,EAAE;QACvB,iBAAiB,EAAE,EAAE,CAAC,EAAE,EAAE;QAC1B,WAAW,EAAE,EAAE,CAAC,EAAE,EAAE;QACpB,iBAAiB,EAAE,EAAE,CAAC,EAAE,EAAE;QAC1B,QAAQ,EAAE,EAAE,CAAC,EAAE,EAAE;KAClB,CAAC,CAAC;CACJ,CAAC,CAAC,CAAC;AAYJ,QAAQ,CAAC,oBAAoB,EAAE,GAAG,EAAE;IAClC,IAAI,OAA2B,CAAC;IAChC,IAAI,mBAAgC,CAAC;IACrC,IAAI,eAA4B,CAAC;IACjC,MAAM,WAAW,GAAG,OAAO,CAAC,GAAG,CAAC;IAEhC,UAAU,CAAC,GAAG,EAAE;QACd,EAAE,CAAC,aAAa,EAAE,CAAC;QACnB,OAAO,CAAC,GAAG,GAAG,EAAE,GAAG,WAAW,EAAE,CAAC;QAEjC,2DAA2D;QAC3D,mBAAmB,GAAG;YACpB,WAAW,EAAE,EAAE,CAAC,EAAE,EAAE;YACpB,cAAc,EAAE,EAAE,CAAC,EAAE,EAAE;YACvB,cAAc,EAAE,EAAE,CAAC,EAAE,EAAE;YACvB,iBAAiB,EAAE,EAAE,CAAC,EAAE,EAAE;YAC1B,WAAW,EAAE,EAAE,CAAC,EAAE,EAAE;YACpB,iBAAiB,EAAE,EAAE,CAAC,EAAE,EAAE;YAC1B,QAAQ,EAAE,EAAE,CAAC,EAAE,EAAE;SAClB,CAAC;QAEF,eAAe,GAAG;YAChB,cAAc,EAAE,EAAE,CAAC,EAAE,EAAE;YACvB,cAAc,EAAE,EAAE,CAAC,EAAE,EAAE;YACvB,iBAAiB,EAAE,EAAE,CAAC,EAAE,EAAE;YAC1B,WAAW,EAAE,EAAE,CAAC,EAAE,EAAE;YACpB,iBAAiB,EAAE,EAAE,CAAC,EAAE,EAAE;YAC1B,QAAQ,EAAE,EAAE,CAAC,EAAE,EAAE;SAClB,CAAC;QAGA,oBACD,CAAC,kBAAkB,CAAC,GAAG,EAAE,CAAC,mBAAmB,CAAC,CAAC;QAE9C,gBACD,CAAC,kBAAkB,CAAC,GAAG,EAAE,CAAC,eAAe,CAAC,CAAC;QAE5C,OAAO,GAAG,IAAI,kBAAkB,CAAC,cAAc,CAAC,CAAC;IACnD,CAAC,CAAC,CAAC;IAEH,SAAS,CAAC,GAAG,EAAE;QACb,OAAO,CAAC,GAAG,GAAG,WAAW,CAAC;IAC5B,CAAC,CAAC,CAAC;IAEH,QAAQ,CAAC,mBAAmB,EAAE,GAAG,EAAE;QACjC,EAAE,CAAC,oCAAoC,EAAE,KAAK,IAAI,EAAE;YAClD,mBAAmB,CAAC,WAAY,CAAC,iBAAiB,CAAC,IAAI,CAAC,CAAC;YACzD,mBAAmB,CAAC,cAAc,CAAC,iBAAiB,CAAC,IAAI,CAAC,CAAC;YAE3D,MAAM,OAAO,CAAC,cAAc,CAAC,aAAa,CAAC,CAAC;YAE5C,MAAM,CAAC,mBAAmB,CAAC,WAAW,CAAC,CAAC,gBAAgB,EAAE,CAAC;YAC3D,MAAM,CAAC,mBAAmB,CAAC,cAAc,CAAC,CAAC,oBAAoB,CAC7D,aAAa,CACd,CAAC;YACF,MAAM,CAAC,MAAM,OAAO,CAAC,cAAc,EAAE,CAAC,CAAC,IAAI,CAAC,gBAAgB,CAAC,QAAQ,CAAC,CAAC;QACzE,CAAC,CAAC,CAAC;QAEH,EAAE,CAAC,+DAA+D,EAAE,KAAK,IAAI,EAAE;YAC7E,OAAO,CAAC,GAAG,CAAC,2BAA2B,CAAC,GAAG,MAAM,CAAC;YAClD,eAAe,CAAC,cAAc,CAAC,iBAAiB,CAAC,IAAI,CAAC,CAAC;YAEvD,MAAM,OAAO,CAAC,cAAc,CAAC,aAAa,CAAC,CAAC;YAE5C,MAAM,CAAC,mBAAmB,CAAC,WAAW,CAAC,CAAC,GAAG,CAAC,gBAAgB,EAAE,CAAC;YAC/D,MAAM,CAAC,eAAe,CAAC,cAAc,CAAC,CAAC,oBAAoB,CACzD,aAAa,CACd,CAAC;YACF,MAAM,CAAC,MAAM,OAAO,CAAC,cAAc,EAAE,CAAC,CAAC,IAAI,CACzC,gBAAgB,CAAC,cAAc,CAChC,CAAC;QACJ,CAAC,CAAC,CAAC;QAEH,EAAE,CAAC,+DAA+D,EAAE,KAAK,IAAI,EAAE;YAC7E,mBAAmB,CAAC,WAAY,CAAC,iBAAiB,CAAC,KAAK,CAAC,CAAC;YAC1D,eAAe,CAAC,cAAc,CAAC,iBAAiB,CAAC,IAAI,CAAC,CAAC;YAEvD,MAAM,OAAO,CAAC,cAAc,CAAC,aAAa,CAAC,CAAC;YAE5C,MAAM,CAAC,mBAAmB,CAAC,WAAW,CAAC,CAAC,gBAAgB,EAAE,CAAC;YAC3D,MAAM,CAAC,eAAe,CAAC,cAAc,CAAC,CAAC,oBAAoB,CACzD,aAAa,CACd,CAAC;YACF,MAAM,CAAC,MAAM,OAAO,CAAC,cAAc,EAAE,CAAC,CAAC,IAAI,CACzC,gBAAgB,CAAC,cAAc,CAChC,CAAC;QACJ,CAAC,CAAC,CAAC;QAEH,EAAE,CAAC,6DAA6D,EAAE,KAAK,IAAI,EAAE;YAC3E,mBAAmB,CAAC,WAAY,CAAC,iBAAiB,CAChD,IAAI,KAAK,CAAC,gBAAgB,CAAC,CAC5B,CAAC;YACF,eAAe,CAAC,cAAc,CAAC,iBAAiB,CAAC,IAAI,CAAC,CAAC;YAEvD,MAAM,OAAO,CAAC,cAAc,CAAC,aAAa,CAAC,CAAC;YAE5C,MAAM,CAAC,mBAAmB,CAAC,WAAW,CAAC,CAAC,gBAAgB,EAAE,CAAC;YAC3D,MAAM,CAAC,eAAe,CAAC,cAAc,CAAC,CAAC,oBAAoB,CACzD,aAAa,CACd,CAAC;YACF,MAAM,CAAC,MAAM,OAAO,CAAC,cAAc,EAAE,CAAC,CAAC,IAAI,CACzC,gBAAgB,CAAC,cAAc,CAChC,CAAC;QACJ,CAAC,CAAC,CAAC;QAEH,EAAE,CAAC,gCAAgC,EAAE,KAAK,IAAI,EAAE;YAC9C,mBAAmB,CAAC,WAAY,CAAC,iBAAiB,CAAC,IAAI,CAAC,CAAC;YACzD,mBAAmB,CAAC,cAAc,CAAC,iBAAiB,CAAC,IAAI,CAAC,CAAC;YAE3D,MAAM,OAAO,CAAC,cAAc,CAAC,aAAa,CAAC,CAAC;YAC5C,MAAM,OAAO,CAAC,cAAc,CAAC,gBAAgB,CAAC,CAAC;YAE/C,MAAM,CAAC,mBAAmB,CAAC,WAAW,CAAC,CAAC,qBAAqB,CAAC,CAAC,CAAC,CAAC;QACnE,CAAC,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;IAEH,QAAQ,CAAC,gBAAgB,EAAE,GAAG,EAAE;QAC9B,EAAE,CAAC,qCAAqC,EAAE,KAAK,IAAI,EAAE;YACnD,MAAM,WAAW,GAAqB;gBACpC,UAAU,EAAE,aAAa;gBACzB,KAAK,EAAE;oBACL,WAAW,EAAE,cAAc;oBAC3B,SAAS,EAAE,QAAQ;iBACpB;gBACD,SAAS,EAAE,IAAI,CAAC,GAAG,EAAE;aACtB,CAAC;YAEF,mBAAmB,CAAC,WAAY,CAAC,iBAAiB,CAAC,IAAI,CAAC,CAAC;YACzD,mBAAmB,CAAC,cAAc,CAAC,iBAAiB,CAAC,WAAW,CAAC,CAAC;YAElE,MAAM,MAAM,GAAG,MAAM,OAAO,CAAC,cAAc,CAAC,aAAa,CAAC,CAAC;YAE3D,MAAM,CAAC,MAAM,CAAC,CAAC,OAAO,CAAC,WAAW,CAAC,CAAC;YACpC,MAAM,CAAC,mBAAmB,CAAC,cAAc,CAAC,CAAC,oBAAoB,CAC7D,aAAa,CACd,CAAC;QACJ,CAAC,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;IAEH,QAAQ,CAAC,gBAAgB,EAAE,GAAG,EAAE;QAC9B,EAAE,CAAC,qCAAqC,EAAE,KAAK,IAAI,EAAE;YACnD,MAAM,WAAW,GAAqB;gBACpC,UAAU,EAAE,aAAa;gBACzB,KAAK,EAAE;oBACL,WAAW,EAAE,cAAc;oBAC3B,SAAS,EAAE,QAAQ;iBACpB;gBACD,SAAS,EAAE,IAAI,CAAC,GAAG,EAAE;aACtB,CAAC;YAEF,mBAAmB,CAAC,WAAY,CAAC,iBAAiB,CAAC,IAAI,CAAC,CAAC;YACzD,mBAAmB,CAAC,cAAc,CAAC,iBAAiB,CAAC,SAAS,CAAC,CAAC;YAEhE,MAAM,OAAO,CAAC,cAAc,CAAC,WAAW,CAAC,CAAC;YAE1C,MAAM,CAAC,mBAAmB,CAAC,cAAc,CAAC,CAAC,oBAAoB,CAC7D,WAAW,CACZ,CAAC;QACJ,CAAC,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;IAEH,QAAQ,CAAC,mBAAmB,EAAE,GAAG,EAAE;QACjC,EAAE,CAAC,qCAAqC,EAAE,KAAK,IAAI,EAAE;YACnD,mBAAmB,CAAC,WAAY,CAAC,iBAAiB,CAAC,IAAI,CAAC,CAAC;YACzD,mBAAmB,CAAC,iBAAiB,CAAC,iBAAiB,CAAC,SAAS,CAAC,CAAC;YAEnE,MAAM,OAAO,CAAC,iBAAiB,CAAC,aAAa,CAAC,CAAC;YAE/C,MAAM,CAAC,mBAAmB,CAAC,iBAAiB,CAAC,CAAC,oBAAoB,CAChE,aAAa,CACd,CAAC;QACJ,CAAC,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;IAEH,QAAQ,CAAC,aAAa,EAAE,GAAG,EAAE;QAC3B,EAAE,CAAC,qCAAqC,EAAE,KAAK,IAAI,EAAE;YACnD,MAAM,OAAO,GAAG,CAAC,SAAS,EAAE,SAAS,CAAC,CAAC;YACvC,mBAAmB,CAAC,WAAY,CAAC,iBAAiB,CAAC,IAAI,CAAC,CAAC;YACzD,mBAAmB,CAAC,WAAW,CAAC,iBAAiB,CAAC,OAAO,CAAC,CAAC;YAE3D,MAAM,MAAM,GAAG,MAAM,OAAO,CAAC,WAAW,EAAE,CAAC;YAE3C,MAAM,CAAC,MAAM,CAAC,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC;YAChC,MAAM,CAAC,mBAAmB,CAAC,WAAW,CAAC,CAAC,gBAAgB,EAAE,CAAC;QAC7D,CAAC,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;IAEH,QAAQ,CAAC,mBAAmB,EAAE,GAAG,EAAE;QACjC,EAAE,CAAC,qCAAqC,EAAE,KAAK,IAAI,EAAE;YACnD,MAAM,cAAc,GAAG,IAAI,GAAG,CAAC;gBAC7B;oBACE,SAAS;oBACT;wBACE,UAAU,EAAE,SAAS;wBACrB,KAAK,EAAE,EAAE,WAAW,EAAE,QAAQ,EAAE,SAAS,EAAE,QAAQ,EAAE;wBACrD,SAAS,EAAE,IAAI,CAAC,GAAG,EAAE;qBACtB;iBACF;gBACD;oBACE,SAAS;oBACT;wBACE,UAAU,EAAE,SAAS;wBACrB,KAAK,EAAE,EAAE,WAAW,EAAE,QAAQ,EAAE,SAAS,EAAE,QAAQ,EAAE;wBACrD,SAAS,EAAE,IAAI,CAAC,GAAG,EAAE;qBACtB;iBACF;aACF,CAAC,CAAC;YAEH,mBAAmB,CAAC,WAAY,CAAC,iBAAiB,CAAC,IAAI,CAAC,CAAC;YACzD,mBAAmB,CAAC,iBAAiB,CAAC,iBAAiB,CAAC,cAAc,CAAC,CAAC;YAExE,MAAM,MAAM,GAAG,MAAM,OAAO,CAAC,iBAAiB,EAAE,CAAC;YAEjD,MAAM,CAAC,MAAM,CAAC,CAAC,OAAO,CAAC,cAAc,CAAC,CAAC;YACvC,MAAM,CAAC,mBAAmB,CAAC,iBAAiB,CAAC,CAAC,gBAAgB,EAAE,CAAC;QACnE,CAAC,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;IAEH,QAAQ,CAAC,UAAU,EAAE,GAAG,EAAE;QACxB,EAAE,CAAC,qCAAqC,EAAE,KAAK,IAAI,EAAE;YACnD,mBAAmB,CAAC,WAAY,CAAC,iBAAiB,CAAC,IAAI,CAAC,CAAC;YACzD,mBAAmB,CAAC,QAAQ,CAAC,iBAAiB,CAAC,SAAS,CAAC,CAAC;YAE1D,MAAM,OAAO,CAAC,QAAQ,EAAE,CAAC;YAEzB,MAAM,CAAC,mBAAmB,CAAC,QAAQ,CAAC,CAAC,gBAAgB,EAAE,CAAC;QAC1D,CAAC,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC"}

package/dist/src/mcp/token-storage/keychain-token-storage.d.ts

@@ -0,0 +1,31 @@
+/**
+ * @license
+ * Copyright 2025 Google LLC
+ * SPDX-License-Identifier: Apache-2.0
+ */
+import { BaseTokenStorage } from './base-token-storage.js';
+import type { OAuthCredentials } from './types.js';
+interface Keytar {
+    getPassword(service: string, account: string): Promise<string | null>;
+    setPassword(service: string, account: string, password: string): Promise<void>;
+    deletePassword(service: string, account: string): Promise<boolean>;
+    findCredentials(service: string): Promise<Array<{
+        account: string;
+        password: string;
+    }>>;
+}
+export declare class KeychainTokenStorage extends BaseTokenStorage {
+    private keychainAvailable;
+    private keytarModule;
+    private keytarLoadAttempted;
+    getKeytar(): Promise<Keytar | null>;
+    getCredentials(serverName: string): Promise<OAuthCredentials | null>;
+    setCredentials(credentials: OAuthCredentials): Promise<void>;
+    deleteCredentials(serverName: string): Promise<void>;
+    listServers(): Promise<string[]>;
+    getAllCredentials(): Promise<Map<string, OAuthCredentials>>;
+    clearAll(): Promise<void>;
+    checkKeychainAvailability(): Promise<boolean>;
+    isAvailable(): Promise<boolean>;
+}
+export {};

package/dist/src/mcp/token-storage/keychain-token-storage.js

@@ -0,0 +1,190 @@
+/**
+ * @license
+ * Copyright 2025 Google LLC
+ * SPDX-License-Identifier: Apache-2.0
+ */
+import * as crypto from 'node:crypto';
+import { BaseTokenStorage } from './base-token-storage.js';
+const KEYCHAIN_TEST_PREFIX = '__keychain_test__';
+export class KeychainTokenStorage extends BaseTokenStorage {
+    keychainAvailable = null;
+    keytarModule = null;
+    keytarLoadAttempted = false;
+    async getKeytar() {
+        // If we've already tried loading (successfully or not), return the result
+        if (this.keytarLoadAttempted) {
+            return this.keytarModule;
+        }
+        this.keytarLoadAttempted = true;
+        try {
+            // Try to import keytar without any timeout - let the OS handle it
+            const moduleName = 'keytar';
+            const module = await import(moduleName);
+            this.keytarModule = module.default || module;
+        }
+        catch (error) {
+            console.error(error);
+        }
+        return this.keytarModule;
+    }
+    async getCredentials(serverName) {
+        if (!(await this.checkKeychainAvailability())) {
+            throw new Error('Keychain is not available');
+        }
+        const keytar = await this.getKeytar();
+        if (!keytar) {
+            throw new Error('Keytar module not available');
+        }
+        try {
+            const sanitizedName = this.sanitizeServerName(serverName);
+            const data = await keytar.getPassword(this.serviceName, sanitizedName);
+            if (!data) {
+                return null;
+            }
+            const credentials = JSON.parse(data);
+            if (this.isTokenExpired(credentials)) {
+                return null;
+            }
+            return credentials;
+        }
+        catch (error) {
+            if (error instanceof SyntaxError) {
+                throw new Error(`Failed to parse stored credentials for ${serverName}`);
+            }
+            throw error;
+        }
+    }
+    async setCredentials(credentials) {
+        if (!(await this.checkKeychainAvailability())) {
+            throw new Error('Keychain is not available');
+        }
+        const keytar = await this.getKeytar();
+        if (!keytar) {
+            throw new Error('Keytar module not available');
+        }
+        this.validateCredentials(credentials);
+        const sanitizedName = this.sanitizeServerName(credentials.serverName);
+        const updatedCredentials = {
+            ...credentials,
+            updatedAt: Date.now(),
+        };
+        const data = JSON.stringify(updatedCredentials);
+        await keytar.setPassword(this.serviceName, sanitizedName, data);
+    }
+    async deleteCredentials(serverName) {
+        if (!(await this.checkKeychainAvailability())) {
+            throw new Error('Keychain is not available');
+        }
+        const keytar = await this.getKeytar();
+        if (!keytar) {
+            throw new Error('Keytar module not available');
+        }
+        const sanitizedName = this.sanitizeServerName(serverName);
+        const deleted = await keytar.deletePassword(this.serviceName, sanitizedName);
+        if (!deleted) {
+            throw new Error(`No credentials found for ${serverName}`);
+        }
+    }
+    async listServers() {
+        if (!(await this.checkKeychainAvailability())) {
+            throw new Error('Keychain is not available');
+        }
+        const keytar = await this.getKeytar();
+        if (!keytar) {
+            throw new Error('Keytar module not available');
+        }
+        try {
+            const credentials = await keytar.findCredentials(this.serviceName);
+            return credentials
+                .filter((cred) => !cred.account.startsWith(KEYCHAIN_TEST_PREFIX))
+                .map((cred) => cred.account);
+        }
+        catch (error) {
+            console.error('Failed to list servers from keychain:', error);
+            return [];
+        }
+    }
+    async getAllCredentials() {
+        if (!(await this.checkKeychainAvailability())) {
+            throw new Error('Keychain is not available');
+        }
+        const keytar = await this.getKeytar();
+        if (!keytar) {
+            throw new Error('Keytar module not available');
+        }
+        const result = new Map();
+        try {
+            const credentials = (await keytar.findCredentials(this.serviceName)).filter((c) => !c.account.startsWith(KEYCHAIN_TEST_PREFIX));
+            for (const cred of credentials) {
+                try {
+                    const data = JSON.parse(cred.password);
+                    if (!this.isTokenExpired(data)) {
+                        result.set(cred.account, data);
+                    }
+                }
+                catch (error) {
+                    console.error(`Failed to parse credentials for ${cred.account}:`, error);
+                }
+            }
+        }
+        catch (error) {
+            console.error('Failed to get all credentials from keychain:', error);
+        }
+        return result;
+    }
+    async clearAll() {
+        if (!(await this.checkKeychainAvailability())) {
+            throw new Error('Keychain is not available');
+        }
+        const servers = this.keytarModule
+            ? await this.keytarModule
+                .findCredentials(this.serviceName)
+                .then((creds) => creds.map((c) => c.account))
+                .catch((error) => {
+                throw new Error(`Failed to list servers for clearing: ${error.message}`);
+            })
+            : [];
+        const errors = [];
+        for (const server of servers) {
+            try {
+                await this.deleteCredentials(server);
+            }
+            catch (error) {
+                errors.push(error);
+            }
+        }
+        if (errors.length > 0) {
+            throw new Error(`Failed to clear some credentials: ${errors.map((e) => e.message).join(', ')}`);
+        }
+    }
+    // Checks whether or not a set-get-delete cycle with the keychain works.
+    // Returns false if any operation fails.
+    async checkKeychainAvailability() {
+        if (this.keychainAvailable !== null) {
+            return this.keychainAvailable;
+        }
+        try {
+            const keytar = await this.getKeytar();
+            if (!keytar) {
+                this.keychainAvailable = false;
+                return false;
+            }
+            const testAccount = `${KEYCHAIN_TEST_PREFIX}${crypto.randomBytes(8).toString('hex')}`;
+            const testPassword = 'test';
+            await keytar.setPassword(this.serviceName, testAccount, testPassword);
+            const retrieved = await keytar.getPassword(this.serviceName, testAccount);
+            const deleted = await keytar.deletePassword(this.serviceName, testAccount);
+            const success = deleted && retrieved === testPassword;
+            this.keychainAvailable = success;
+            return success;
+        }
+        catch (_error) {
+            this.keychainAvailable = false;
+            return false;
+        }
+    }
+    async isAvailable() {
+        return this.checkKeychainAvailability();
+    }
+}
+//# sourceMappingURL=keychain-token-storage.js.map

package/dist/src/mcp/token-storage/keychain-token-storage.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"keychain-token-storage.js","sourceRoot":"","sources":["../../../../src/mcp/token-storage/keychain-token-storage.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAEH,OAAO,KAAK,MAAM,MAAM,aAAa,CAAC;AACtC,OAAO,EAAE,gBAAgB,EAAE,MAAM,yBAAyB,CAAC;AAgB3D,MAAM,oBAAoB,GAAG,mBAAmB,CAAC;AAEjD,MAAM,OAAO,oBAAqB,SAAQ,gBAAgB;IAChD,iBAAiB,GAAmB,IAAI,CAAC;IACzC,YAAY,GAAkB,IAAI,CAAC;IACnC,mBAAmB,GAAG,KAAK,CAAC;IAEpC,KAAK,CAAC,SAAS;QACb,0EAA0E;QAC1E,IAAI,IAAI,CAAC,mBAAmB,EAAE,CAAC;YAC7B,OAAO,IAAI,CAAC,YAAY,CAAC;QAC3B,CAAC;QAED,IAAI,CAAC,mBAAmB,GAAG,IAAI,CAAC;QAEhC,IAAI,CAAC;YACH,kEAAkE;YAClE,MAAM,UAAU,GAAG,QAAQ,CAAC;YAC5B,MAAM,MAAM,GAAG,MAAM,MAAM,CAAC,UAAU,CAAC,CAAC;YACxC,IAAI,CAAC,YAAY,GAAG,MAAM,CAAC,OAAO,IAAI,MAAM,CAAC;QAC/C,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,OAAO,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;QACvB,CAAC;QACD,OAAO,IAAI,CAAC,YAAY,CAAC;IAC3B,CAAC;IAED,KAAK,CAAC,cAAc,CAAC,UAAkB;QACrC,IAAI,CAAC,CAAC,MAAM,IAAI,CAAC,yBAAyB,EAAE,CAAC,EAAE,CAAC;YAC9C,MAAM,IAAI,KAAK,CAAC,2BAA2B,CAAC,CAAC;QAC/C,CAAC;QAED,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,SAAS,EAAE,CAAC;QACtC,IAAI,CAAC,MAAM,EAAE,CAAC;YACZ,MAAM,IAAI,KAAK,CAAC,6BAA6B,CAAC,CAAC;QACjD,CAAC;QAED,IAAI,CAAC;YACH,MAAM,aAAa,GAAG,IAAI,CAAC,kBAAkB,CAAC,UAAU,CAAC,CAAC;YAC1D,MAAM,IAAI,GAAG,MAAM,MAAM,CAAC,WAAW,CAAC,IAAI,CAAC,WAAW,EAAE,aAAa,CAAC,CAAC;YAEvE,IAAI,CAAC,IAAI,EAAE,CAAC;gBACV,OAAO,IAAI,CAAC;YACd,CAAC;YAED,MAAM,WAAW,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAqB,CAAC;YAEzD,IAAI,IAAI,CAAC,cAAc,CAAC,WAAW,CAAC,EAAE,CAAC;gBACrC,OAAO,IAAI,CAAC;YACd,CAAC;YAED,OAAO,WAAW,CAAC;QACrB,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,IAAI,KAAK,YAAY,WAAW,EAAE,CAAC;gBACjC,MAAM,IAAI,KAAK,CAAC,0CAA0C,UAAU,EAAE,CAAC,CAAC;YAC1E,CAAC;YACD,MAAM,KAAK,CAAC;QACd,CAAC;IACH,CAAC;IAED,KAAK,CAAC,cAAc,CAAC,WAA6B;QAChD,IAAI,CAAC,CAAC,MAAM,IAAI,CAAC,yBAAyB,EAAE,CAAC,EAAE,CAAC;YAC9C,MAAM,IAAI,KAAK,CAAC,2BAA2B,CAAC,CAAC;QAC/C,CAAC;QAED,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,SAAS,EAAE,CAAC;QACtC,IAAI,CAAC,MAAM,EAAE,CAAC;YACZ,MAAM,IAAI,KAAK,CAAC,6BAA6B,CAAC,CAAC;QACjD,CAAC;QAED,IAAI,CAAC,mBAAmB,CAAC,WAAW,CAAC,CAAC;QAEtC,MAAM,aAAa,GAAG,IAAI,CAAC,kBAAkB,CAAC,WAAW,CAAC,UAAU,CAAC,CAAC;QACtE,MAAM,kBAAkB,GAAqB;YAC3C,GAAG,WAAW;YACd,SAAS,EAAE,IAAI,CAAC,GAAG,EAAE;SACtB,CAAC;QAEF,MAAM,IAAI,GAAG,IAAI,CAAC,SAAS,CAAC,kBAAkB,CAAC,CAAC;QAChD,MAAM,MAAM,CAAC,WAAW,CAAC,IAAI,CAAC,WAAW,EAAE,aAAa,EAAE,IAAI,CAAC,CAAC;IAClE,CAAC;IAED,KAAK,CAAC,iBAAiB,CAAC,UAAkB;QACxC,IAAI,CAAC,CAAC,MAAM,IAAI,CAAC,yBAAyB,EAAE,CAAC,EAAE,CAAC;YAC9C,MAAM,IAAI,KAAK,CAAC,2BAA2B,CAAC,CAAC;QAC/C,CAAC;QAED,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,SAAS,EAAE,CAAC;QACtC,IAAI,CAAC,MAAM,EAAE,CAAC;YACZ,MAAM,IAAI,KAAK,CAAC,6BAA6B,CAAC,CAAC;QACjD,CAAC;QAED,MAAM,aAAa,GAAG,IAAI,CAAC,kBAAkB,CAAC,UAAU,CAAC,CAAC;QAC1D,MAAM,OAAO,GAAG,MAAM,MAAM,CAAC,cAAc,CACzC,IAAI,CAAC,WAAW,EAChB,aAAa,CACd,CAAC;QAEF,IAAI,CAAC,OAAO,EAAE,CAAC;YACb,MAAM,IAAI,KAAK,CAAC,4BAA4B,UAAU,EAAE,CAAC,CAAC;QAC5D,CAAC;IACH,CAAC;IAED,KAAK,CAAC,WAAW;QACf,IAAI,CAAC,CAAC,MAAM,IAAI,CAAC,yBAAyB,EAAE,CAAC,EAAE,CAAC;YAC9C,MAAM,IAAI,KAAK,CAAC,2BAA2B,CAAC,CAAC;QAC/C,CAAC;QAED,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,SAAS,EAAE,CAAC;QACtC,IAAI,CAAC,MAAM,EAAE,CAAC;YACZ,MAAM,IAAI,KAAK,CAAC,6BAA6B,CAAC,CAAC;QACjD,CAAC;QAED,IAAI,CAAC;YACH,MAAM,WAAW,GAAG,MAAM,MAAM,CAAC,eAAe,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC;YACnE,OAAO,WAAW;iBACf,MAAM,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC,UAAU,CAAC,oBAAoB,CAAC,CAAC;iBAChE,GAAG,CAAC,CAAC,IAAyB,EAAE,EAAE,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;QACtD,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,OAAO,CAAC,KAAK,CAAC,uCAAuC,EAAE,KAAK,CAAC,CAAC;YAC9D,OAAO,EAAE,CAAC;QACZ,CAAC;IACH,CAAC;IAED,KAAK,CAAC,iBAAiB;QACrB,IAAI,CAAC,CAAC,MAAM,IAAI,CAAC,yBAAyB,EAAE,CAAC,EAAE,CAAC;YAC9C,MAAM,IAAI,KAAK,CAAC,2BAA2B,CAAC,CAAC;QAC/C,CAAC;QAED,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,SAAS,EAAE,CAAC;QACtC,IAAI,CAAC,MAAM,EAAE,CAAC;YACZ,MAAM,IAAI,KAAK,CAAC,6BAA6B,CAAC,CAAC;QACjD,CAAC;QAED,MAAM,MAAM,GAAG,IAAI,GAAG,EAA4B,CAAC;QACnD,IAAI,CAAC;YACH,MAAM,WAAW,GAAG,CAClB,MAAM,MAAM,CAAC,eAAe,CAAC,IAAI,CAAC,WAAW,CAAC,CAC/C,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,UAAU,CAAC,oBAAoB,CAAC,CAAC,CAAC;YAE7D,KAAK,MAAM,IAAI,IAAI,WAAW,EAAE,CAAC;gBAC/B,IAAI,CAAC;oBACH,MAAM,IAAI,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,QAAQ,CAAqB,CAAC;oBAC3D,IAAI,CAAC,IAAI,CAAC,cAAc,CAAC,IAAI,CAAC,EAAE,CAAC;wBAC/B,MAAM,CAAC,GAAG,CAAC,IAAI,CAAC,OAAO,EAAE,IAAI,CAAC,CAAC;oBACjC,CAAC;gBACH,CAAC;gBAAC,OAAO,KAAK,EAAE,CAAC;oBACf,OAAO,CAAC,KAAK,CACX,mCAAmC,IAAI,CAAC,OAAO,GAAG,EAClD,KAAK,CACN,CAAC;gBACJ,CAAC;YACH,CAAC;QACH,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,OAAO,CAAC,KAAK,CAAC,8CAA8C,EAAE,KAAK,CAAC,CAAC;QACvE,CAAC;QAED,OAAO,MAAM,CAAC;IAChB,CAAC;IAED,KAAK,CAAC,QAAQ;QACZ,IAAI,CAAC,CAAC,MAAM,IAAI,CAAC,yBAAyB,EAAE,CAAC,EAAE,CAAC;YAC9C,MAAM,IAAI,KAAK,CAAC,2BAA2B,CAAC,CAAC;QAC/C,CAAC;QAED,MAAM,OAAO,GAAG,IAAI,CAAC,YAAY;YAC/B,CAAC,CAAC,MAAM,IAAI,CAAC,YAAY;iBACpB,eAAe,CAAC,IAAI,CAAC,WAAW,CAAC;iBACjC,IAAI,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC;iBAC5C,KAAK,CAAC,CAAC,KAAY,EAAE,EAAE;gBACtB,MAAM,IAAI,KAAK,CACb,wCAAwC,KAAK,CAAC,OAAO,EAAE,CACxD,CAAC;YACJ,CAAC,CAAC;YACN,CAAC,CAAC,EAAE,CAAC;QACP,MAAM,MAAM,GAAY,EAAE,CAAC;QAE3B,KAAK,MAAM,MAAM,IAAI,OAAO,EAAE,CAAC;YAC7B,IAAI,CAAC;gBACH,MAAM,IAAI,CAAC,iBAAiB,CAAC,MAAM,CAAC,CAAC;YACvC,CAAC;YAAC,OAAO,KAAK,EAAE,CAAC;gBACf,MAAM,CAAC,IAAI,CAAC,KAAc,CAAC,CAAC;YAC9B,CAAC;QACH,CAAC;QAED,IAAI,MAAM,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YACtB,MAAM,IAAI,KAAK,CACb,qCAAqC,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAC/E,CAAC;QACJ,CAAC;IACH,CAAC;IAED,wEAAwE;IACxE,wCAAwC;IACxC,KAAK,CAAC,yBAAyB;QAC7B,IAAI,IAAI,CAAC,iBAAiB,KAAK,IAAI,EAAE,CAAC;YACpC,OAAO,IAAI,CAAC,iBAAiB,CAAC;QAChC,CAAC;QAED,IAAI,CAAC;YACH,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,SAAS,EAAE,CAAC;YACtC,IAAI,CAAC,MAAM,EAAE,CAAC;gBACZ,IAAI,CAAC,iBAAiB,GAAG,KAAK,CAAC;gBAC/B,OAAO,KAAK,CAAC;YACf,CAAC;YAED,MAAM,WAAW,GAAG,GAAG,oBAAoB,GAAG,MAAM,CAAC,WAAW,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC,EAAE,CAAC;YACtF,MAAM,YAAY,GAAG,MAAM,CAAC;YAE5B,MAAM,MAAM,CAAC,WAAW,CAAC,IAAI,CAAC,WAAW,EAAE,WAAW,EAAE,YAAY,CAAC,CAAC;YACtE,MAAM,SAAS,GAAG,MAAM,MAAM,CAAC,WAAW,CAAC,IAAI,CAAC,WAAW,EAAE,WAAW,CAAC,CAAC;YAC1E,MAAM,OAAO,GAAG,MAAM,MAAM,CAAC,cAAc,CACzC,IAAI,CAAC,WAAW,EAChB,WAAW,CACZ,CAAC;YAEF,MAAM,OAAO,GAAG,OAAO,IAAI,SAAS,KAAK,YAAY,CAAC;YACtD,IAAI,CAAC,iBAAiB,GAAG,OAAO,CAAC;YACjC,OAAO,OAAO,CAAC;QACjB,CAAC;QAAC,OAAO,MAAM,EAAE,CAAC;YAChB,IAAI,CAAC,iBAAiB,GAAG,KAAK,CAAC;YAC/B,OAAO,KAAK,CAAC;QACf,CAAC;IACH,CAAC;IAED,KAAK,CAAC,WAAW;QACf,OAAO,IAAI,CAAC,yBAAyB,EAAE,CAAC;IAC1C,CAAC;CACF"}

package/dist/src/mcp/token-storage/keychain-token-storage.test.d.ts

@@ -0,0 +1,6 @@
+/**
+ * @license
+ * Copyright 2025 Google LLC
+ * SPDX-License-Identifier: Apache-2.0
+ */
+export {};