@google/gemini-cli 0.67.0-nightly.20261104.g89e9d25d6 → 0.67.0

package/bundle/{liteRtServerManager-E4PDEWY3.js → liteRtServerManager-27R2M6XE.js}

@@ -3,11 +3,11 @@ import {
   DEFAULT_PORT,
   getBinaryPath,
   isServerRunning
-} from "./chunk-Q3OUSMTD.js";
-import "./chunk-7SSKD5HN.js";
+} from "./chunk-P62CI7AR.js";
+import "./chunk-QTXJG3I3.js";
 import {
   debugLogger
-} from "./chunk-DKKEYKSG.js";
+} from "./chunk-LAR4JEC7.js";
 import "./chunk-664ZODQF.js";
 import "./chunk-IUUIT4SU.js";
 import "./chunk-L6PII3GR.js";
@@ -41,7 +41,7 @@ var LiteRtServerManager = class {
       `[LiteRtServerManager] Auto-starting LiteRT server on port ${port}...`
     );
     try {
-      const { startServer } = await import("./start-OHBUJSIL.js");
+      const { startServer } = await import("./start-K2AYYNST.js");
       const started = await startServer(binaryPath, port);
       if (started) {
         debugLogger.log(`[LiteRtServerManager] Server started on port ${port}`);

package/bundle/{liteRtServerManager-ENSSU4TN.js → liteRtServerManager-JAV3GR4V.js}

@@ -3,11 +3,11 @@ import {
   DEFAULT_PORT,
   getBinaryPath,
   isServerRunning
-} from "./chunk-3DAQUNXR.js";
-import "./chunk-WY3X2UP2.js";
+} from "./chunk-VO6PFWLY.js";
+import "./chunk-IDJ4QXBF.js";
 import {
   debugLogger
-} from "./chunk-VLYI5NP4.js";
+} from "./chunk-O7MGOE2I.js";
 import "./chunk-664ZODQF.js";
 import "./chunk-IUUIT4SU.js";
 import "./chunk-L6PII3GR.js";
@@ -41,7 +41,7 @@ var LiteRtServerManager = class {
       `[LiteRtServerManager] Auto-starting LiteRT server on port ${port}...`
     );
     try {
-      const { startServer } = await import("./start-B63MUWDV.js");
+      const { startServer } = await import("./start-GNOA75NQ.js");
       const started = await startServer(binaryPath, port);
       if (started) {
         debugLogger.log(`[LiteRtServerManager] Server started on port ${port}`);

package/bundle/{liteRtServerManager-FLPMMDNM.js → liteRtServerManager-X5CCMKM6.js}

@@ -3,11 +3,11 @@ import {
   DEFAULT_PORT,
   getBinaryPath,
   isServerRunning
-} from "./chunk-HRM7UWGB.js";
-import "./chunk-VBHMFLBY.js";
+} from "./chunk-BW65QRZA.js";
+import "./chunk-YUO7RUF4.js";
 import {
   debugLogger
-} from "./chunk-RCF66HCI.js";
+} from "./chunk-NGQU3QTQ.js";
 import "./chunk-664ZODQF.js";
 import "./chunk-IUUIT4SU.js";
 import "./chunk-L6PII3GR.js";
@@ -41,7 +41,7 @@ var LiteRtServerManager = class {
       `[LiteRtServerManager] Auto-starting LiteRT server on port ${port}...`
     );
     try {
-      const { startServer } = await import("./start-DFHM4HI4.js");
+      const { startServer } = await import("./start-E4ZL44QM.js");
       const started = await startServer(binaryPath, port);
       if (started) {
         debugLogger.log(`[LiteRtServerManager] Server started on port ${port}`);

package/bundle/{oauth2-provider-3MJNDLJF.js → oauth2-provider-6UCP23AQ.js}

@@ -16,7 +16,7 @@ import {
   openBrowserSecurely,
   refreshAccessToken,
   startCallbackServer
-} from "./chunk-VLYI5NP4.js";
+} from "./chunk-NGQU3QTQ.js";
 import "./chunk-664ZODQF.js";
 import "./chunk-IUUIT4SU.js";
 import "./chunk-L6PII3GR.js";

package/bundle/{oauth2-provider-VMBYZOC7.js → oauth2-provider-C65IJMNQ.js}

@@ -16,7 +16,7 @@ import {
   openBrowserSecurely,
   refreshAccessToken,
   startCallbackServer
-} from "./chunk-RCF66HCI.js";
+} from "./chunk-O7MGOE2I.js";
 import "./chunk-664ZODQF.js";
 import "./chunk-IUUIT4SU.js";
 import "./chunk-L6PII3GR.js";

package/bundle/{oauth2-provider-ZIZQIT7D.js → oauth2-provider-H2KV36NU.js}

@@ -16,36 +16,36 @@ import {
   openBrowserSecurely,
   refreshAccessToken,
   startCallbackServer
-} from "./chunk-YTSRA7S6.js";
+} from "./chunk-LAR4JEC7.js";
 import "./chunk-664ZODQF.js";
 import "./chunk-IUUIT4SU.js";
 import "./chunk-L6PII3GR.js";
 import "./chunk-34MYV7JD.js";
 
-// packages/core/dist/src/agents/auth-provider/oauth2-provider.js
+// packages/core/src/agents/auth-provider/oauth2-provider.ts
 var OAuth2AuthProvider = class extends BaseA2AAuthProvider {
-  config;
-  agentName;
-  agentCardUrl;
-  type = "oauth2";
-  tokenStorage;
-  cachedToken = null;
-  pendingAuthPromise = null;
-  /** Resolved OAuth URLs — may come from config or agent card. */
-  authorizationUrl;
-  tokenUrl;
-  scopes;
   constructor(config, agentName, agentCard, agentCardUrl) {
     super();
     this.config = config;
     this.agentName = agentName;
     this.agentCardUrl = agentCardUrl;
-    this.tokenStorage = new MCPOAuthTokenStorage(Storage.getA2AOAuthTokensPath(), "gemini-cli-a2a");
+    this.tokenStorage = new MCPOAuthTokenStorage(
+      Storage.getA2AOAuthTokensPath(),
+      "gemini-cli-a2a"
+    );
     this.authorizationUrl = config.authorization_url;
     this.tokenUrl = config.token_url;
     this.scopes = config.scopes;
     this.mergeAgentCardDefaults(agentCard);
   }
+  type = "oauth2";
+  tokenStorage;
+  cachedToken = null;
+  pendingAuthPromise = null;
+  /** Resolved OAuth URLs — may come from config or agent card. */
+  authorizationUrl;
+  tokenUrl;
+  scopes;
   /**
    * Initialize the provider by loading any persisted token from storage.
    * Also discovers OAuth URLs from the agent card if not yet resolved.
@@ -57,7 +57,9 @@ var OAuth2AuthProvider = class extends BaseA2AAuthProvider {
     const credentials = await this.tokenStorage.getCredentials(this.agentName);
     if (credentials && !this.tokenStorage.isTokenExpired(credentials.token)) {
       this.cachedToken = credentials.token;
-      debugLogger.debug(`[OAuth2AuthProvider] Loaded valid cached token for "${this.agentName}"`);
+      debugLogger.debug(
+        `[OAuth2AuthProvider] Loaded valid cached token for "${this.agentName}"`
+      );
     }
   }
   /**
@@ -84,16 +86,25 @@ var OAuth2AuthProvider = class extends BaseA2AAuthProvider {
   async acquireToken() {
     if (this.cachedToken?.refreshToken && this.tokenUrl && this.config.client_id) {
       try {
-        const refreshed = await refreshAccessToken({
-          clientId: this.config.client_id,
-          clientSecret: this.config.client_secret,
-          scopes: this.scopes
-        }, this.cachedToken.refreshToken, this.tokenUrl);
-        this.cachedToken = this.toOAuthToken(refreshed, this.cachedToken.refreshToken);
+        const refreshed = await refreshAccessToken(
+          {
+            clientId: this.config.client_id,
+            clientSecret: this.config.client_secret,
+            scopes: this.scopes
+          },
+          this.cachedToken.refreshToken,
+          this.tokenUrl
+        );
+        this.cachedToken = this.toOAuthToken(
+          refreshed,
+          this.cachedToken.refreshToken
+        );
         await this.persistToken();
         return this.cachedToken;
       } catch (error) {
-        debugLogger.debug(`[OAuth2AuthProvider] Refresh failed, falling back to interactive flow: ${getErrorMessage(error)}`);
+        debugLogger.debug(
+          `[OAuth2AuthProvider] Refresh failed, falling back to interactive flow: ${getErrorMessage(error)}`
+        );
         this.cachedToken = null;
         await this.tokenStorage.deleteCredentials(this.agentName);
       }
@@ -118,7 +129,9 @@ var OAuth2AuthProvider = class extends BaseA2AAuthProvider {
     const reqHeaders = new Headers(req.headers);
     const reqToken = reqHeaders.get("Authorization")?.split(" ")[1];
     if (reqToken && (!this.cachedToken || reqToken !== this.cachedToken.accessToken)) {
-      debugLogger.debug("[OAuth2AuthProvider] Token already cleared or updated by another request, retrying with new token");
+      debugLogger.debug(
+        "[OAuth2AuthProvider] Token already cleared or updated by another request, retrying with new token"
+      );
       const retryCount = this.authRetryCount;
       const headers2 = await this.headers();
       this.authRetryCount = Math.max(this.authRetryCount, retryCount);
@@ -129,7 +142,9 @@ var OAuth2AuthProvider = class extends BaseA2AAuthProvider {
     }
     const nextRetryCount = this.authRetryCount + 1;
     this.authRetryCount = nextRetryCount;
-    debugLogger.debug("[OAuth2AuthProvider] Auth failure, clearing token and re-authenticating");
+    debugLogger.debug(
+      "[OAuth2AuthProvider] Auth failure, clearing token and re-authenticating"
+    );
     this.cachedToken = null;
     await this.tokenStorage.deleteCredentials(this.agentName);
     const headers = await this.headers();
@@ -144,8 +159,7 @@ var OAuth2AuthProvider = class extends BaseA2AAuthProvider {
    * `securitySchemes` when not already provided via user config.
    */
   mergeAgentCardDefaults(agentCard) {
-    if (!agentCard?.securitySchemes)
-      return;
+    if (!agentCard?.securitySchemes) return;
     for (const scheme of Object.values(agentCard.securitySchemes)) {
       if (scheme.type === "oauth2" && scheme.flows.authorizationCode) {
         const flow = scheme.flows.authorizationCode;
@@ -161,15 +175,18 @@ var OAuth2AuthProvider = class extends BaseA2AAuthProvider {
    * (which normalizes proto-format cards) and extract OAuth2 URLs.
    */
   async fetchAgentCardDefaults() {
-    if (!this.agentCardUrl)
-      return;
+    if (!this.agentCardUrl) return;
     try {
-      debugLogger.debug(`[OAuth2AuthProvider] Fetching agent card from ${this.agentCardUrl}`);
+      debugLogger.debug(
+        `[OAuth2AuthProvider] Fetching agent card from ${this.agentCardUrl}`
+      );
       const resolver = new DefaultAgentCardResolver();
       const card = await resolver.resolve(this.agentCardUrl, "");
       this.mergeAgentCardDefaults(card);
     } catch (error) {
-      debugLogger.warn(`[OAuth2AuthProvider] Could not fetch agent card for OAuth URL discovery: ${getErrorMessage(error)}`);
+      debugLogger.warn(
+        `[OAuth2AuthProvider] Could not fetch agent card for OAuth URL discovery: ${getErrorMessage(error)}`
+      );
     }
   }
   /**
@@ -177,10 +194,14 @@ var OAuth2AuthProvider = class extends BaseA2AAuthProvider {
    */
   async authenticateInteractively() {
     if (!this.config.client_id) {
-      throw new Error(`OAuth2 authentication for agent "${this.agentName}" requires a client_id. Add client_id to the auth config in your agent definition.`);
+      throw new Error(
+        `OAuth2 authentication for agent "${this.agentName}" requires a client_id. Add client_id to the auth config in your agent definition.`
+      );
     }
     if (!this.authorizationUrl || !this.tokenUrl) {
-      throw new Error(`OAuth2 authentication for agent "${this.agentName}" requires authorization_url and token_url. Provide them in the auth config or ensure the agent card exposes an oauth2 security scheme.`);
+      throw new Error(
+        `OAuth2 authentication for agent "${this.agentName}" requires authorization_url and token_url. Provide them in the auth config or ensure the agent card exposes an oauth2 security scheme.`
+      );
     }
     const flowConfig = {
       clientId: this.config.client_id,
@@ -199,29 +220,42 @@ var OAuth2AuthProvider = class extends BaseA2AAuthProvider {
       redirectPort,
       /* resource= */
       void 0
+      // No MCP resource parameter for A2A.
+    );
+    const consent = await getConsentForOauth(
+      `Authentication required for A2A agent: '${this.agentName}'.`
     );
-    const consent = await getConsentForOauth(`Authentication required for A2A agent: '${this.agentName}'.`);
     if (!consent) {
-      const cancelError = new FatalCancellationError("Authentication cancelled by user.");
+      const cancelError = new FatalCancellationError(
+        "Authentication cancelled by user."
+      );
       callbackServer.response.catch(() => {
       });
       callbackServer.cancel?.(cancelError);
       throw cancelError;
     }
-    coreEvents.emitFeedback("info", `\u2192 Opening your browser for OAuth sign-in...
+    coreEvents.emitFeedback(
+      "info",
+      `\u2192 Opening your browser for OAuth sign-in...
 
 If the browser does not open, copy and paste this URL into your browser:
 ${authUrl}
 
 \u{1F4A1} TIP: Triple-click to select the entire URL, then copy and paste it into your browser.
-\u26A0\uFE0F  Make sure to copy the COMPLETE URL - it may wrap across multiple lines.`);
+\u26A0\uFE0F  Make sure to copy the COMPLETE URL - it may wrap across multiple lines.`
+    );
     try {
       await openBrowserSecurely(authUrl);
     } catch (error) {
-      debugLogger.warn("Failed to open browser automatically:", getErrorMessage(error));
+      debugLogger.warn(
+        "Failed to open browser automatically:",
+        getErrorMessage(error)
+      );
     }
     const { code } = await callbackServer.response;
-    debugLogger.debug("\u2713 Authorization code received, exchanging for tokens...");
+    debugLogger.debug(
+      "\u2713 Authorization code received, exchanging for tokens..."
+    );
     const tokenResponse = await exchangeCodeForToken(
       flowConfig,
       code,
@@ -258,9 +292,13 @@ ${authUrl}
    * Persist the current cached token to disk.
    */
   async persistToken() {
-    if (!this.cachedToken)
-      return;
-    await this.tokenStorage.saveToken(this.agentName, this.cachedToken, this.config.client_id, this.tokenUrl);
+    if (!this.cachedToken) return;
+    await this.tokenStorage.saveToken(
+      this.agentName,
+      this.cachedToken,
+      this.config.client_id,
+      this.tokenUrl
+    );
   }
 };
 export {

package/bundle/{start-B63MUWDV.js → start-E4ZL44QM.js}

@@ -2,12 +2,12 @@ const require = (await import('node:module')).createRequire(import.meta.url); co
 import {
   startCommand,
   startServer
-} from "./chunk-2VRD7O3N.js";
-import "./chunk-AT7K3IZG.js";
-import "./chunk-3DAQUNXR.js";
-import "./chunk-WY3X2UP2.js";
-import "./chunk-M4REEHDQ.js";
-import "./chunk-VLYI5NP4.js";
+} from "./chunk-4JH2G4F4.js";
+import "./chunk-56IGTM4O.js";
+import "./chunk-BW65QRZA.js";
+import "./chunk-YUO7RUF4.js";
+import "./chunk-PUNFASKY.js";
+import "./chunk-NGQU3QTQ.js";
 import "./chunk-664ZODQF.js";
 import "./chunk-IUUIT4SU.js";
 import "./chunk-L6PII3GR.js";

package/bundle/{start-DFHM4HI4.js → start-GNOA75NQ.js}

@@ -2,12 +2,12 @@ const require = (await import('node:module')).createRequire(import.meta.url); co
 import {
   startCommand,
   startServer
-} from "./chunk-Q76ZDILI.js";
-import "./chunk-JMHCFAD6.js";
-import "./chunk-HRM7UWGB.js";
-import "./chunk-VBHMFLBY.js";
-import "./chunk-RD2EMHV2.js";
-import "./chunk-RCF66HCI.js";
+} from "./chunk-GBUWHRK6.js";
+import "./chunk-7LX6MRZ6.js";
+import "./chunk-VO6PFWLY.js";
+import "./chunk-IDJ4QXBF.js";
+import "./chunk-VK766A3F.js";
+import "./chunk-O7MGOE2I.js";
 import "./chunk-664ZODQF.js";
 import "./chunk-IUUIT4SU.js";
 import "./chunk-L6PII3GR.js";

package/bundle/{start-OHBUJSIL.js → start-K2AYYNST.js}

@@ -2,12 +2,12 @@ const require = (await import('node:module')).createRequire(import.meta.url); co
 import {
   startCommand,
   startServer
-} from "./chunk-L77QEOSK.js";
-import "./chunk-T6YNV33L.js";
-import "./chunk-Q3OUSMTD.js";
-import "./chunk-7SSKD5HN.js";
-import "./chunk-XBEZPOEF.js";
-import "./chunk-DKKEYKSG.js";
+} from "./chunk-QA5FT4VY.js";
+import "./chunk-IGE3G3WZ.js";
+import "./chunk-P62CI7AR.js";
+import "./chunk-QTXJG3I3.js";
+import "./chunk-OJ62HCXG.js";
+import "./chunk-LAR4JEC7.js";
 import "./chunk-664ZODQF.js";
 import "./chunk-IUUIT4SU.js";
 import "./chunk-L6PII3GR.js";

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@google/gemini-cli",
-  "version": "0.67.0-nightly.20261104.g89e9d25d6",
+  "version": "0.67.0",
   "description": "Gemini CLI",
   "license": "Apache-2.0",
   "repository": {