@google/gemini-cli 0.67.0-nightly.20261104.g89e9d25d6 → 0.67.0

package/bundle/liteRtServerManager-TYCQMNCE.js

@@ -1,65 +0,0 @@
-const require = (await import('node:module')).createRequire(import.meta.url); const __chunk_filename = (await import('node:url')).fileURLToPath(import.meta.url); const __chunk_dirname = (await import('node:path')).dirname(__chunk_filename);
-import {
-  DEFAULT_PORT,
-  getBinaryPath,
-  isServerRunning
-} from "./chunk-HU3K5KGK.js";
-import "./chunk-674DJGDU.js";
-import {
-  debugLogger
-} from "./chunk-YTSRA7S6.js";
-import "./chunk-664ZODQF.js";
-import "./chunk-IUUIT4SU.js";
-import "./chunk-L6PII3GR.js";
-import "./chunk-34MYV7JD.js";
-
-// packages/cli/src/services/liteRtServerManager.ts
-import fs from "node:fs";
-var LiteRtServerManager = class {
-  static async ensureRunning(gemmaSettings) {
-    if (!gemmaSettings?.enabled) return;
-    if (gemmaSettings.autoStartServer === false) return;
-    const binaryPath = getBinaryPath();
-    if (!binaryPath || !fs.existsSync(binaryPath)) {
-      debugLogger.log(
-        '[LiteRtServerManager] Binary not installed, skipping auto-start. Run "gemini gemma setup".'
-      );
-      return;
-    }
-    const port = parseInt(
-      gemmaSettings.classifier?.host?.match(/:(\d+)/)?.[1] ?? "",
-      10
-    ) || DEFAULT_PORT;
-    const running = await isServerRunning(port);
-    if (running) {
-      debugLogger.log(
-        `[LiteRtServerManager] Server already running on port ${port}`
-      );
-      return;
-    }
-    debugLogger.log(
-      `[LiteRtServerManager] Auto-starting LiteRT server on port ${port}...`
-    );
-    try {
-      const { startServer } = await import("./start-V3EP7MBL.js");
-      const started = await startServer(binaryPath, port);
-      if (started) {
-        debugLogger.log(`[LiteRtServerManager] Server started on port ${port}`);
-      } else {
-        debugLogger.warn(
-          `[LiteRtServerManager] Server may not have started correctly on port ${port}`
-        );
-      }
-    } catch (error) {
-      debugLogger.warn("[LiteRtServerManager] Auto-start failed:", error);
-    }
-  }
-};
-export {
-  LiteRtServerManager
-};
-/**
- * @license
- * Copyright 2026 Google LLC
- * SPDX-License-Identifier: Apache-2.0
- */

package/bundle/oauth2-provider-NLSE3P5W.js

@@ -1,273 +0,0 @@
-const require = (await import('node:module')).createRequire(import.meta.url); const __chunk_filename = (await import('node:url')).fileURLToPath(import.meta.url); const __chunk_dirname = (await import('node:path')).dirname(__chunk_filename);
-import {
-  BaseA2AAuthProvider,
-  DefaultAgentCardResolver,
-  FatalCancellationError,
-  MCPOAuthTokenStorage,
-  Storage,
-  buildAuthorizationUrl,
-  coreEvents,
-  debugLogger,
-  exchangeCodeForToken,
-  generatePKCEParams,
-  getConsentForOauth,
-  getErrorMessage,
-  getPortFromUrl,
-  openBrowserSecurely,
-  refreshAccessToken,
-  startCallbackServer
-} from "./chunk-DKKEYKSG.js";
-import "./chunk-664ZODQF.js";
-import "./chunk-IUUIT4SU.js";
-import "./chunk-L6PII3GR.js";
-import "./chunk-34MYV7JD.js";
-
-// packages/core/dist/src/agents/auth-provider/oauth2-provider.js
-var OAuth2AuthProvider = class extends BaseA2AAuthProvider {
-  config;
-  agentName;
-  agentCardUrl;
-  type = "oauth2";
-  tokenStorage;
-  cachedToken = null;
-  pendingAuthPromise = null;
-  /** Resolved OAuth URLs — may come from config or agent card. */
-  authorizationUrl;
-  tokenUrl;
-  scopes;
-  constructor(config, agentName, agentCard, agentCardUrl) {
-    super();
-    this.config = config;
-    this.agentName = agentName;
-    this.agentCardUrl = agentCardUrl;
-    this.tokenStorage = new MCPOAuthTokenStorage(Storage.getA2AOAuthTokensPath(), "gemini-cli-a2a");
-    this.authorizationUrl = config.authorization_url;
-    this.tokenUrl = config.token_url;
-    this.scopes = config.scopes;
-    this.mergeAgentCardDefaults(agentCard);
-  }
-  /**
-   * Initialize the provider by loading any persisted token from storage.
-   * Also discovers OAuth URLs from the agent card if not yet resolved.
-   */
-  async initialize() {
-    if ((!this.authorizationUrl || !this.tokenUrl) && this.agentCardUrl) {
-      await this.fetchAgentCardDefaults();
-    }
-    const credentials = await this.tokenStorage.getCredentials(this.agentName);
-    if (credentials && !this.tokenStorage.isTokenExpired(credentials.token)) {
-      this.cachedToken = credentials.token;
-      debugLogger.debug(`[OAuth2AuthProvider] Loaded valid cached token for "${this.agentName}"`);
-    }
-  }
-  /**
-   * Return an Authorization header with a valid Bearer token.
-   * Refreshes or triggers interactive auth as needed, deduplicating concurrent requests.
-   */
-  async headers() {
-    if (this.cachedToken && !this.tokenStorage.isTokenExpired(this.cachedToken)) {
-      this.authRetryCount = 0;
-      return { Authorization: `Bearer ${this.cachedToken.accessToken}` };
-    }
-    if (!this.pendingAuthPromise) {
-      this.pendingAuthPromise = this.acquireToken().finally(() => {
-        this.pendingAuthPromise = null;
-      });
-    }
-    const token = await this.pendingAuthPromise;
-    this.authRetryCount = 0;
-    return { Authorization: `Bearer ${token.accessToken}` };
-  }
-  /**
-   * Refresh an expired token or run interactive browser-based authentication.
-   */
-  async acquireToken() {
-    if (this.cachedToken?.refreshToken && this.tokenUrl && this.config.client_id) {
-      try {
-        const refreshed = await refreshAccessToken({
-          clientId: this.config.client_id,
-          clientSecret: this.config.client_secret,
-          scopes: this.scopes
-        }, this.cachedToken.refreshToken, this.tokenUrl);
-        this.cachedToken = this.toOAuthToken(refreshed, this.cachedToken.refreshToken);
-        await this.persistToken();
-        return this.cachedToken;
-      } catch (error) {
-        debugLogger.debug(`[OAuth2AuthProvider] Refresh failed, falling back to interactive flow: ${getErrorMessage(error)}`);
-        this.cachedToken = null;
-        await this.tokenStorage.deleteCredentials(this.agentName);
-      }
-    }
-    this.cachedToken = await this.authenticateInteractively();
-    return this.cachedToken;
-  }
-  /**
-   * Return the maximum number of consecutive authentication retries allowed.
-   */
-  getMaxAuthRetries() {
-    return BaseA2AAuthProvider.MAX_AUTH_RETRIES;
-  }
-  /**
-   * On 401/403, clear the cached token and re-authenticate (up to MAX_AUTH_RETRIES).
-   */
-  async shouldRetryWithHeaders(req, res) {
-    if (res.status !== 401 && res.status !== 403) {
-      this.authRetryCount = 0;
-      return void 0;
-    }
-    const reqHeaders = new Headers(req.headers);
-    const reqToken = reqHeaders.get("Authorization")?.split(" ")[1];
-    if (reqToken && (!this.cachedToken || reqToken !== this.cachedToken.accessToken)) {
-      debugLogger.debug("[OAuth2AuthProvider] Token already cleared or updated by another request, retrying with new token");
-      const retryCount = this.authRetryCount;
-      const headers2 = await this.headers();
-      this.authRetryCount = Math.max(this.authRetryCount, retryCount);
-      return headers2;
-    }
-    if (this.authRetryCount >= this.getMaxAuthRetries()) {
-      return void 0;
-    }
-    const nextRetryCount = this.authRetryCount + 1;
-    this.authRetryCount = nextRetryCount;
-    debugLogger.debug("[OAuth2AuthProvider] Auth failure, clearing token and re-authenticating");
-    this.cachedToken = null;
-    await this.tokenStorage.deleteCredentials(this.agentName);
-    const headers = await this.headers();
-    this.authRetryCount = nextRetryCount;
-    return headers;
-  }
-  // ---------------------------------------------------------------------------
-  // Private helpers
-  // ---------------------------------------------------------------------------
-  /**
-   * Merge authorization_url, token_url, and scopes from the agent card's
-   * `securitySchemes` when not already provided via user config.
-   */
-  mergeAgentCardDefaults(agentCard) {
-    if (!agentCard?.securitySchemes)
-      return;
-    for (const scheme of Object.values(agentCard.securitySchemes)) {
-      if (scheme.type === "oauth2" && scheme.flows.authorizationCode) {
-        const flow = scheme.flows.authorizationCode;
-        this.authorizationUrl ??= flow.authorizationUrl;
-        this.tokenUrl ??= flow.tokenUrl;
-        this.scopes ??= Object.keys(flow.scopes);
-        break;
-      }
-    }
-  }
-  /**
-   * Fetch the agent card from `agentCardUrl` using `DefaultAgentCardResolver`
-   * (which normalizes proto-format cards) and extract OAuth2 URLs.
-   */
-  async fetchAgentCardDefaults() {
-    if (!this.agentCardUrl)
-      return;
-    try {
-      debugLogger.debug(`[OAuth2AuthProvider] Fetching agent card from ${this.agentCardUrl}`);
-      const resolver = new DefaultAgentCardResolver();
-      const card = await resolver.resolve(this.agentCardUrl, "");
-      this.mergeAgentCardDefaults(card);
-    } catch (error) {
-      debugLogger.warn(`[OAuth2AuthProvider] Could not fetch agent card for OAuth URL discovery: ${getErrorMessage(error)}`);
-    }
-  }
-  /**
-   * Run a full OAuth 2.0 Authorization Code + PKCE flow through the browser.
-   */
-  async authenticateInteractively() {
-    if (!this.config.client_id) {
-      throw new Error(`OAuth2 authentication for agent "${this.agentName}" requires a client_id. Add client_id to the auth config in your agent definition.`);
-    }
-    if (!this.authorizationUrl || !this.tokenUrl) {
-      throw new Error(`OAuth2 authentication for agent "${this.agentName}" requires authorization_url and token_url. Provide them in the auth config or ensure the agent card exposes an oauth2 security scheme.`);
-    }
-    const flowConfig = {
-      clientId: this.config.client_id,
-      clientSecret: this.config.client_secret,
-      authorizationUrl: this.authorizationUrl,
-      tokenUrl: this.tokenUrl,
-      scopes: this.scopes
-    };
-    const pkceParams = generatePKCEParams();
-    const preferredPort = getPortFromUrl(flowConfig.redirectUri);
-    const callbackServer = startCallbackServer(pkceParams.state, preferredPort);
-    const redirectPort = await callbackServer.port;
-    const authUrl = buildAuthorizationUrl(
-      flowConfig,
-      pkceParams,
-      redirectPort,
-      /* resource= */
-      void 0
-    );
-    const consent = await getConsentForOauth(`Authentication required for A2A agent: '${this.agentName}'.`);
-    if (!consent) {
-      const cancelError = new FatalCancellationError("Authentication cancelled by user.");
-      callbackServer.response.catch(() => {
-      });
-      callbackServer.cancel?.(cancelError);
-      throw cancelError;
-    }
-    coreEvents.emitFeedback("info", `\u2192 Opening your browser for OAuth sign-in...
-
-If the browser does not open, copy and paste this URL into your browser:
-${authUrl}
-
-\u{1F4A1} TIP: Triple-click to select the entire URL, then copy and paste it into your browser.
-\u26A0\uFE0F  Make sure to copy the COMPLETE URL - it may wrap across multiple lines.`);
-    try {
-      await openBrowserSecurely(authUrl);
-    } catch (error) {
-      debugLogger.warn("Failed to open browser automatically:", getErrorMessage(error));
-    }
-    const { code } = await callbackServer.response;
-    debugLogger.debug("\u2713 Authorization code received, exchanging for tokens...");
-    const tokenResponse = await exchangeCodeForToken(
-      flowConfig,
-      code,
-      pkceParams.codeVerifier,
-      redirectPort,
-      /* resource= */
-      void 0
-    );
-    if (!tokenResponse.access_token) {
-      throw new Error("No access token received from token endpoint");
-    }
-    const token = this.toOAuthToken(tokenResponse);
-    this.cachedToken = token;
-    await this.persistToken();
-    debugLogger.debug("\u2713 OAuth2 authentication successful! Token saved.");
-    return token;
-  }
-  /**
-   * Convert an `OAuthTokenResponse` into the internal `OAuthToken` format.
-   */
-  toOAuthToken(response, fallbackRefreshToken) {
-    const token = {
-      accessToken: response.access_token,
-      tokenType: response.token_type || "Bearer",
-      refreshToken: response.refresh_token || fallbackRefreshToken,
-      scope: response.scope
-    };
-    if (response.expires_in) {
-      token.expiresAt = Date.now() + response.expires_in * 1e3;
-    }
-    return token;
-  }
-  /**
-   * Persist the current cached token to disk.
-   */
-  async persistToken() {
-    if (!this.cachedToken)
-      return;
-    await this.tokenStorage.saveToken(this.agentName, this.cachedToken, this.config.client_id, this.tokenUrl);
-  }
-};
-export {
-  OAuth2AuthProvider
-};
-/**
- * @license
- * Copyright 2026 Google LLC
- * SPDX-License-Identifier: Apache-2.0
- */

package/bundle/start-V3EP7MBL.js

@@ -1,18 +0,0 @@
-const require = (await import('node:module')).createRequire(import.meta.url); const __chunk_filename = (await import('node:url')).fileURLToPath(import.meta.url); const __chunk_dirname = (await import('node:path')).dirname(__chunk_filename);
-import {
-  startCommand,
-  startServer
-} from "./chunk-NMKJ47HQ.js";
-import "./chunk-R7UEKGMB.js";
-import "./chunk-HU3K5KGK.js";
-import "./chunk-674DJGDU.js";
-import "./chunk-H3WGFU7D.js";
-import "./chunk-YTSRA7S6.js";
-import "./chunk-664ZODQF.js";
-import "./chunk-IUUIT4SU.js";
-import "./chunk-L6PII3GR.js";
-import "./chunk-34MYV7JD.js";
-export {
-  startCommand,
-  startServer
-};