@hibanacloud/cli 0.3.15

package/dist/src/config/trustedFolders.test.js

@@ -0,0 +1,340 @@
+/**
+ * @license
+ * Copyright 2025 Google LLC
+ * SPDX-License-Identifier: Apache-2.0
+ */
+import * as osActual from 'node:os';
+import { FatalConfigError, ideContextStore } from '@hibanacloud/core';
+import { describe, it, expect, vi, beforeEach, afterEach, } from 'vitest';
+import * as fs from 'node:fs';
+import stripJsonComments from 'strip-json-comments';
+import * as path from 'node:path';
+import { loadTrustedFolders, getTrustedFoldersPath, TrustLevel, isWorkspaceTrusted, resetTrustedFoldersForTesting, } from './trustedFolders.js';
+vi.mock('os', async (importOriginal) => {
+    const actualOs = await importOriginal();
+    return {
+        ...actualOs,
+        homedir: vi.fn(() => '/mock/home/user'),
+        platform: vi.fn(() => 'linux'),
+    };
+});
+vi.mock('fs', async (importOriginal) => {
+    const actualFs = await importOriginal();
+    return {
+        ...actualFs,
+        existsSync: vi.fn(),
+        readFileSync: vi.fn(),
+        writeFileSync: vi.fn(),
+        mkdirSync: vi.fn(),
+    };
+});
+vi.mock('strip-json-comments', () => ({
+    default: vi.fn((content) => content),
+}));
+describe('Trusted Folders Loading', () => {
+    let mockFsExistsSync;
+    let mockStripJsonComments;
+    let mockFsWriteFileSync;
+    beforeEach(() => {
+        resetTrustedFoldersForTesting();
+        vi.resetAllMocks();
+        mockFsExistsSync = vi.mocked(fs.existsSync);
+        mockStripJsonComments = vi.mocked(stripJsonComments);
+        mockFsWriteFileSync = vi.mocked(fs.writeFileSync);
+        vi.mocked(osActual.homedir).mockReturnValue('/mock/home/user');
+        mockStripJsonComments.mockImplementation((jsonString) => jsonString);
+        mockFsExistsSync.mockReturnValue(false);
+        fs.readFileSync.mockReturnValue('{}');
+    });
+    afterEach(() => {
+        vi.restoreAllMocks();
+    });
+    it('should load empty rules if no files exist', () => {
+        const { rules, errors } = loadTrustedFolders();
+        expect(rules).toEqual([]);
+        expect(errors).toEqual([]);
+    });
+    describe('isPathTrusted', () => {
+        function setup({ config = {} } = {}) {
+            mockFsExistsSync.mockImplementation((p) => p === getTrustedFoldersPath());
+            fs.readFileSync.mockImplementation((p) => {
+                if (p === getTrustedFoldersPath())
+                    return JSON.stringify(config);
+                return '{}';
+            });
+            const folders = loadTrustedFolders();
+            return { folders };
+        }
+        it('provides a method to determine if a path is trusted', () => {
+            const { folders } = setup({
+                config: {
+                    './myfolder': TrustLevel.TRUST_FOLDER,
+                    '/trustedparent/trustme': TrustLevel.TRUST_PARENT,
+                    '/user/folder': TrustLevel.TRUST_FOLDER,
+                    '/secret': TrustLevel.DO_NOT_TRUST,
+                    '/secret/publickeys': TrustLevel.TRUST_FOLDER,
+                },
+            });
+            expect(folders.isPathTrusted('/secret')).toBe(false);
+            expect(folders.isPathTrusted('/user/folder')).toBe(true);
+            expect(folders.isPathTrusted('/secret/publickeys/public.pem')).toBe(true);
+            expect(folders.isPathTrusted('/user/folder/harhar')).toBe(true);
+            expect(folders.isPathTrusted('myfolder/somefile.jpg')).toBe(true);
+            expect(folders.isPathTrusted('/trustedparent/someotherfolder')).toBe(true);
+            expect(folders.isPathTrusted('/trustedparent/trustme')).toBe(true);
+            // No explicit rule covers this file
+            expect(folders.isPathTrusted('/secret/bankaccounts.json')).toBe(undefined);
+            expect(folders.isPathTrusted('/secret/mine/privatekey.pem')).toBe(undefined);
+            expect(folders.isPathTrusted('/user/someotherfolder')).toBe(undefined);
+        });
+    });
+    it('should load user rules if only user file exists', () => {
+        const userPath = getTrustedFoldersPath();
+        mockFsExistsSync.mockImplementation((p) => p === userPath);
+        const userContent = {
+            '/user/folder': TrustLevel.TRUST_FOLDER,
+        };
+        fs.readFileSync.mockImplementation((p) => {
+            if (p === userPath)
+                return JSON.stringify(userContent);
+            return '{}';
+        });
+        const { rules, errors } = loadTrustedFolders();
+        expect(rules).toEqual([
+            { path: '/user/folder', trustLevel: TrustLevel.TRUST_FOLDER },
+        ]);
+        expect(errors).toEqual([]);
+    });
+    it('should handle JSON parsing errors gracefully', () => {
+        const userPath = getTrustedFoldersPath();
+        mockFsExistsSync.mockImplementation((p) => p === userPath);
+        fs.readFileSync.mockImplementation((p) => {
+            if (p === userPath)
+                return 'invalid json';
+            return '{}';
+        });
+        const { rules, errors } = loadTrustedFolders();
+        expect(rules).toEqual([]);
+        expect(errors.length).toBe(1);
+        expect(errors[0].path).toBe(userPath);
+        expect(errors[0].message).toContain('Unexpected token');
+    });
+    it('should use GEMINI_CLI_TRUSTED_FOLDERS_PATH env var if set', () => {
+        const customPath = '/custom/path/to/trusted_folders.json';
+        process.env['GEMINI_CLI_TRUSTED_FOLDERS_PATH'] = customPath;
+        mockFsExistsSync.mockImplementation((p) => p === customPath);
+        const userContent = {
+            '/user/folder/from/env': TrustLevel.TRUST_FOLDER,
+        };
+        fs.readFileSync.mockImplementation((p) => {
+            if (p === customPath)
+                return JSON.stringify(userContent);
+            return '{}';
+        });
+        const { rules, errors } = loadTrustedFolders();
+        expect(rules).toEqual([
+            {
+                path: '/user/folder/from/env',
+                trustLevel: TrustLevel.TRUST_FOLDER,
+            },
+        ]);
+        expect(errors).toEqual([]);
+        delete process.env['GEMINI_CLI_TRUSTED_FOLDERS_PATH'];
+    });
+    it('setValue should update the user config and save it', () => {
+        const loadedFolders = loadTrustedFolders();
+        loadedFolders.setValue('/new/path', TrustLevel.TRUST_FOLDER);
+        expect(loadedFolders.user.config['/new/path']).toBe(TrustLevel.TRUST_FOLDER);
+        expect(mockFsWriteFileSync).toHaveBeenCalledWith(getTrustedFoldersPath(), JSON.stringify({ '/new/path': TrustLevel.TRUST_FOLDER }, null, 2), { encoding: 'utf-8', mode: 0o600 });
+    });
+});
+describe('isWorkspaceTrusted', () => {
+    let mockCwd;
+    const mockRules = {};
+    const mockSettings = {
+        security: {
+            folderTrust: {
+                enabled: true,
+            },
+        },
+    };
+    beforeEach(() => {
+        resetTrustedFoldersForTesting();
+        vi.spyOn(process, 'cwd').mockImplementation(() => mockCwd);
+        vi.spyOn(fs, 'readFileSync').mockImplementation((p) => {
+            if (p === getTrustedFoldersPath()) {
+                return JSON.stringify(mockRules);
+            }
+            return '{}';
+        });
+        vi.spyOn(fs, 'existsSync').mockImplementation((p) => p === getTrustedFoldersPath());
+    });
+    afterEach(() => {
+        vi.restoreAllMocks();
+        // Clear the object
+        Object.keys(mockRules).forEach((key) => delete mockRules[key]);
+    });
+    it('should throw a fatal error if the config is malformed', () => {
+        mockCwd = '/home/user/projectA';
+        // This mock needs to be specific to this test to override the one in beforeEach
+        vi.spyOn(fs, 'readFileSync').mockImplementation((p) => {
+            if (p === getTrustedFoldersPath()) {
+                return '{"foo": "bar",}'; // Malformed JSON with trailing comma
+            }
+            return '{}';
+        });
+        expect(() => isWorkspaceTrusted(mockSettings)).toThrow(FatalConfigError);
+        expect(() => isWorkspaceTrusted(mockSettings)).toThrow(/Please fix the configuration file/);
+    });
+    it('should throw a fatal error if the config is not a JSON object', () => {
+        mockCwd = '/home/user/projectA';
+        vi.spyOn(fs, 'readFileSync').mockImplementation((p) => {
+            if (p === getTrustedFoldersPath()) {
+                return 'null';
+            }
+            return '{}';
+        });
+        expect(() => isWorkspaceTrusted(mockSettings)).toThrow(FatalConfigError);
+        expect(() => isWorkspaceTrusted(mockSettings)).toThrow(/not a valid JSON object/);
+    });
+    it('should return true for a directly trusted folder', () => {
+        mockCwd = '/home/user/projectA';
+        mockRules['/home/user/projectA'] = TrustLevel.TRUST_FOLDER;
+        expect(isWorkspaceTrusted(mockSettings)).toEqual({
+            isTrusted: true,
+            source: 'file',
+        });
+    });
+    it('should return true for a child of a trusted folder', () => {
+        mockCwd = '/home/user/projectA/src';
+        mockRules['/home/user/projectA'] = TrustLevel.TRUST_FOLDER;
+        expect(isWorkspaceTrusted(mockSettings)).toEqual({
+            isTrusted: true,
+            source: 'file',
+        });
+    });
+    it('should return true for a child of a trusted parent folder', () => {
+        mockCwd = '/home/user/projectB';
+        mockRules['/home/user/projectB/somefile.txt'] = TrustLevel.TRUST_PARENT;
+        expect(isWorkspaceTrusted(mockSettings)).toEqual({
+            isTrusted: true,
+            source: 'file',
+        });
+    });
+    it('should return false for a directly untrusted folder', () => {
+        mockCwd = '/home/user/untrusted';
+        mockRules['/home/user/untrusted'] = TrustLevel.DO_NOT_TRUST;
+        expect(isWorkspaceTrusted(mockSettings)).toEqual({
+            isTrusted: false,
+            source: 'file',
+        });
+    });
+    it('should return undefined for a child of an untrusted folder', () => {
+        mockCwd = '/home/user/untrusted/src';
+        mockRules['/home/user/untrusted'] = TrustLevel.DO_NOT_TRUST;
+        expect(isWorkspaceTrusted(mockSettings).isTrusted).toBeUndefined();
+    });
+    it('should return undefined when no rules match', () => {
+        mockCwd = '/home/user/other';
+        mockRules['/home/user/projectA'] = TrustLevel.TRUST_FOLDER;
+        mockRules['/home/user/untrusted'] = TrustLevel.DO_NOT_TRUST;
+        expect(isWorkspaceTrusted(mockSettings).isTrusted).toBeUndefined();
+    });
+    it('should prioritize trust over distrust', () => {
+        mockCwd = '/home/user/projectA/untrusted';
+        mockRules['/home/user/projectA'] = TrustLevel.TRUST_FOLDER;
+        mockRules['/home/user/projectA/untrusted'] = TrustLevel.DO_NOT_TRUST;
+        expect(isWorkspaceTrusted(mockSettings)).toEqual({
+            isTrusted: true,
+            source: 'file',
+        });
+    });
+    it('should handle path normalization', () => {
+        mockCwd = '/home/user/projectA';
+        mockRules[`/home/user/../user/${path.basename('/home/user/projectA')}`] =
+            TrustLevel.TRUST_FOLDER;
+        expect(isWorkspaceTrusted(mockSettings)).toEqual({
+            isTrusted: true,
+            source: 'file',
+        });
+    });
+});
+describe('isWorkspaceTrusted with IDE override', () => {
+    afterEach(() => {
+        vi.clearAllMocks();
+        ideContextStore.clear();
+        resetTrustedFoldersForTesting();
+    });
+    const mockSettings = {
+        security: {
+            folderTrust: {
+                enabled: true,
+            },
+        },
+    };
+    it('should return true when ideTrust is true, ignoring config', () => {
+        ideContextStore.set({ workspaceState: { isTrusted: true } });
+        // Even if config says don't trust, ideTrust should win.
+        vi.spyOn(fs, 'readFileSync').mockReturnValue(JSON.stringify({ [process.cwd()]: TrustLevel.DO_NOT_TRUST }));
+        expect(isWorkspaceTrusted(mockSettings)).toEqual({
+            isTrusted: true,
+            source: 'ide',
+        });
+    });
+    it('should return false when ideTrust is false, ignoring config', () => {
+        ideContextStore.set({ workspaceState: { isTrusted: false } });
+        // Even if config says trust, ideTrust should win.
+        vi.spyOn(fs, 'readFileSync').mockReturnValue(JSON.stringify({ [process.cwd()]: TrustLevel.TRUST_FOLDER }));
+        expect(isWorkspaceTrusted(mockSettings)).toEqual({
+            isTrusted: false,
+            source: 'ide',
+        });
+    });
+    it('should fall back to config when ideTrust is undefined', () => {
+        vi.spyOn(fs, 'existsSync').mockReturnValue(true);
+        vi.spyOn(fs, 'readFileSync').mockReturnValue(JSON.stringify({ [process.cwd()]: TrustLevel.TRUST_FOLDER }));
+        expect(isWorkspaceTrusted(mockSettings)).toEqual({
+            isTrusted: true,
+            source: 'file',
+        });
+    });
+    it('should always return true if folderTrust setting is disabled', () => {
+        const settings = {
+            security: {
+                folderTrust: {
+                    enabled: false,
+                },
+            },
+        };
+        ideContextStore.set({ workspaceState: { isTrusted: false } });
+        expect(isWorkspaceTrusted(settings)).toEqual({
+            isTrusted: true,
+            source: undefined,
+        });
+    });
+});
+describe('Trusted Folders Caching', () => {
+    beforeEach(() => {
+        resetTrustedFoldersForTesting();
+        vi.mocked(fs.existsSync).mockReturnValue(true);
+        vi.mocked(fs.readFileSync).mockReturnValue('{}');
+    });
+    afterEach(() => {
+        vi.restoreAllMocks();
+    });
+    it('should cache the loaded folders object', () => {
+        const readSpy = vi.spyOn(fs, 'readFileSync');
+        // First call should read the file
+        loadTrustedFolders();
+        expect(readSpy).toHaveBeenCalledTimes(1);
+        // Second call should use the cache
+        loadTrustedFolders();
+        expect(readSpy).toHaveBeenCalledTimes(1);
+        // Resetting should clear the cache
+        resetTrustedFoldersForTesting();
+        // Third call should read the file again
+        loadTrustedFolders();
+        expect(readSpy).toHaveBeenCalledTimes(2);
+    });
+});
+//# sourceMappingURL=trustedFolders.test.js.map

package/dist/src/config/trustedFolders.test.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"trustedFolders.test.js","sourceRoot":"","sources":["../../../src/config/trustedFolders.test.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAEH,OAAO,KAAK,QAAQ,MAAM,SAAS,CAAC;AACpC,OAAO,EAAE,gBAAgB,EAAE,eAAe,EAAE,MAAM,mBAAmB,CAAC;AACtE,OAAO,EACL,QAAQ,EACR,EAAE,EACF,MAAM,EACN,EAAE,EACF,UAAU,EACV,SAAS,GAGV,MAAM,QAAQ,CAAC;AAChB,OAAO,KAAK,EAAE,MAAM,SAAS,CAAC;AAC9B,OAAO,iBAAiB,MAAM,qBAAqB,CAAC;AACpD,OAAO,KAAK,IAAI,MAAM,WAAW,CAAC;AAClC,OAAO,EACL,kBAAkB,EAClB,qBAAqB,EACrB,UAAU,EACV,kBAAkB,EAClB,6BAA6B,GAC9B,MAAM,qBAAqB,CAAC;AAG7B,EAAE,CAAC,IAAI,CAAC,IAAI,EAAE,KAAK,EAAE,cAAc,EAAE,EAAE;IACrC,MAAM,QAAQ,GAAG,MAAM,cAAc,EAAmB,CAAC;IACzD,OAAO;QACL,GAAG,QAAQ;QACX,OAAO,EAAE,EAAE,CAAC,EAAE,CAAC,GAAG,EAAE,CAAC,iBAAiB,CAAC;QACvC,QAAQ,EAAE,EAAE,CAAC,EAAE,CAAC,GAAG,EAAE,CAAC,OAAO,CAAC;KAC/B,CAAC;AACJ,CAAC,CAAC,CAAC;AACH,EAAE,CAAC,IAAI,CAAC,IAAI,EAAE,KAAK,EAAE,cAAc,EAAE,EAAE;IACrC,MAAM,QAAQ,GAAG,MAAM,cAAc,EAAa,CAAC;IACnD,OAAO;QACL,GAAG,QAAQ;QACX,UAAU,EAAE,EAAE,CAAC,EAAE,EAAE;QACnB,YAAY,EAAE,EAAE,CAAC,EAAE,EAAE;QACrB,aAAa,EAAE,EAAE,CAAC,EAAE,EAAE;QACtB,SAAS,EAAE,EAAE,CAAC,EAAE,EAAE;KACnB,CAAC;AACJ,CAAC,CAAC,CAAC;AACH,EAAE,CAAC,IAAI,CAAC,qBAAqB,EAAE,GAAG,EAAE,CAAC,CAAC;IACpC,OAAO,EAAE,EAAE,CAAC,EAAE,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,OAAO,CAAC;CACrC,CAAC,CAAC,CAAC;AAEJ,QAAQ,CAAC,yBAAyB,EAAE,GAAG,EAAE;IACvC,IAAI,gBAA8C,CAAC;IACnD,IAAI,qBAAuD,CAAC;IAC5D,IAAI,mBAAoD,CAAC;IAEzD,UAAU,CAAC,GAAG,EAAE;QACd,6BAA6B,EAAE,CAAC;QAChC,EAAE,CAAC,aAAa,EAAE,CAAC;QACnB,gBAAgB,GAAG,EAAE,CAAC,MAAM,CAAC,EAAE,CAAC,UAAU,CAAC,CAAC;QAC5C,qBAAqB,GAAG,EAAE,CAAC,MAAM,CAAC,iBAAiB,CAAC,CAAC;QACrD,mBAAmB,GAAG,EAAE,CAAC,MAAM,CAAC,EAAE,CAAC,aAAa,CAAC,CAAC;QAClD,EAAE,CAAC,MAAM,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC,eAAe,CAAC,iBAAiB,CAAC,CAAC;QAC9D,qBAAyC,CAAC,kBAAkB,CAC3D,CAAC,UAAkB,EAAE,EAAE,CAAC,UAAU,CACnC,CAAC;QACD,gBAAyB,CAAC,eAAe,CAAC,KAAK,CAAC,CAAC;QACjD,EAAE,CAAC,YAAqB,CAAC,eAAe,CAAC,IAAI,CAAC,CAAC;IAClD,CAAC,CAAC,CAAC;IAEH,SAAS,CAAC,GAAG,EAAE;QACb,EAAE,CAAC,eAAe,EAAE,CAAC;IACvB,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,2CAA2C,EAAE,GAAG,EAAE;QACnD,MAAM,EAAE,KAAK,EAAE,MAAM,EAAE,GAAG,kBAAkB,EAAE,CAAC;QAC/C,MAAM,CAAC,KAAK,CAAC,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC;QAC1B,MAAM,CAAC,MAAM,CAAC,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC;IAC7B,CAAC,CAAC,CAAC;IAEH,QAAQ,CAAC,eAAe,EAAE,GAAG,EAAE;QAC7B,SAAS,KAAK,CAAC,EAAE,MAAM,GAAG,EAAgC,KAAK,EAAE;YAC9D,gBAAyB,CAAC,kBAAkB,CAC3C,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,KAAK,qBAAqB,EAAE,CACrC,CAAC;YACD,EAAE,CAAC,YAAqB,CAAC,kBAAkB,CAAC,CAAC,CAAC,EAAE,EAAE;gBACjD,IAAI,CAAC,KAAK,qBAAqB,EAAE;oBAAE,OAAO,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,CAAC;gBACjE,OAAO,IAAI,CAAC;YACd,CAAC,CAAC,CAAC;YAEH,MAAM,OAAO,GAAG,kBAAkB,EAAE,CAAC;YAErC,OAAO,EAAE,OAAO,EAAE,CAAC;QACrB,CAAC;QAED,EAAE,CAAC,qDAAqD,EAAE,GAAG,EAAE;YAC7D,MAAM,EAAE,OAAO,EAAE,GAAG,KAAK,CAAC;gBACxB,MAAM,EAAE;oBACN,YAAY,EAAE,UAAU,CAAC,YAAY;oBACrC,wBAAwB,EAAE,UAAU,CAAC,YAAY;oBACjD,cAAc,EAAE,UAAU,CAAC,YAAY;oBACvC,SAAS,EAAE,UAAU,CAAC,YAAY;oBAClC,oBAAoB,EAAE,UAAU,CAAC,YAAY;iBAC9C;aACF,CAAC,CAAC;YACH,MAAM,CAAC,OAAO,CAAC,aAAa,CAAC,SAAS,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;YACrD,MAAM,CAAC,OAAO,CAAC,aAAa,CAAC,cAAc,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;YACzD,MAAM,CAAC,OAAO,CAAC,aAAa,CAAC,+BAA+B,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;YAC1E,MAAM,CAAC,OAAO,CAAC,aAAa,CAAC,qBAAqB,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;YAChE,MAAM,CAAC,OAAO,CAAC,aAAa,CAAC,uBAAuB,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;YAClE,MAAM,CAAC,OAAO,CAAC,aAAa,CAAC,gCAAgC,CAAC,CAAC,CAAC,IAAI,CAClE,IAAI,CACL,CAAC;YACF,MAAM,CAAC,OAAO,CAAC,aAAa,CAAC,wBAAwB,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;YAEnE,oCAAoC;YACpC,MAAM,CAAC,OAAO,CAAC,aAAa,CAAC,2BAA2B,CAAC,CAAC,CAAC,IAAI,CAC7D,SAAS,CACV,CAAC;YACF,MAAM,CAAC,OAAO,CAAC,aAAa,CAAC,6BAA6B,CAAC,CAAC,CAAC,IAAI,CAC/D,SAAS,CACV,CAAC;YACF,MAAM,CAAC,OAAO,CAAC,aAAa,CAAC,uBAAuB,CAAC,CAAC,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;QACzE,CAAC,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,iDAAiD,EAAE,GAAG,EAAE;QACzD,MAAM,QAAQ,GAAG,qBAAqB,EAAE,CAAC;QACxC,gBAAyB,CAAC,kBAAkB,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,KAAK,QAAQ,CAAC,CAAC;QACrE,MAAM,WAAW,GAAG;YAClB,cAAc,EAAE,UAAU,CAAC,YAAY;SACxC,CAAC;QACD,EAAE,CAAC,YAAqB,CAAC,kBAAkB,CAAC,CAAC,CAAC,EAAE,EAAE;YACjD,IAAI,CAAC,KAAK,QAAQ;gBAAE,OAAO,IAAI,CAAC,SAAS,CAAC,WAAW,CAAC,CAAC;YACvD,OAAO,IAAI,CAAC;QACd,CAAC,CAAC,CAAC;QAEH,MAAM,EAAE,KAAK,EAAE,MAAM,EAAE,GAAG,kBAAkB,EAAE,CAAC;QAC/C,MAAM,CAAC,KAAK,CAAC,CAAC,OAAO,CAAC;YACpB,EAAE,IAAI,EAAE,cAAc,EAAE,UAAU,EAAE,UAAU,CAAC,YAAY,EAAE;SAC9D,CAAC,CAAC;QACH,MAAM,CAAC,MAAM,CAAC,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC;IAC7B,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,8CAA8C,EAAE,GAAG,EAAE;QACtD,MAAM,QAAQ,GAAG,qBAAqB,EAAE,CAAC;QACxC,gBAAyB,CAAC,kBAAkB,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,KAAK,QAAQ,CAAC,CAAC;QACpE,EAAE,CAAC,YAAqB,CAAC,kBAAkB,CAAC,CAAC,CAAC,EAAE,EAAE;YACjD,IAAI,CAAC,KAAK,QAAQ;gBAAE,OAAO,cAAc,CAAC;YAC1C,OAAO,IAAI,CAAC;QACd,CAAC,CAAC,CAAC;QAEH,MAAM,EAAE,KAAK,EAAE,MAAM,EAAE,GAAG,kBAAkB,EAAE,CAAC;QAC/C,MAAM,CAAC,KAAK,CAAC,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC;QAC1B,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;QAC9B,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;QACtC,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,SAAS,CAAC,kBAAkB,CAAC,CAAC;IAC1D,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,2DAA2D,EAAE,GAAG,EAAE;QACnE,MAAM,UAAU,GAAG,sCAAsC,CAAC;QAC1D,OAAO,CAAC,GAAG,CAAC,iCAAiC,CAAC,GAAG,UAAU,CAAC;QAE3D,gBAAyB,CAAC,kBAAkB,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,KAAK,UAAU,CAAC,CAAC;QACvE,MAAM,WAAW,GAAG;YAClB,uBAAuB,EAAE,UAAU,CAAC,YAAY;SACjD,CAAC;QACD,EAAE,CAAC,YAAqB,CAAC,kBAAkB,CAAC,CAAC,CAAC,EAAE,EAAE;YACjD,IAAI,CAAC,KAAK,UAAU;gBAAE,OAAO,IAAI,CAAC,SAAS,CAAC,WAAW,CAAC,CAAC;YACzD,OAAO,IAAI,CAAC;QACd,CAAC,CAAC,CAAC;QAEH,MAAM,EAAE,KAAK,EAAE,MAAM,EAAE,GAAG,kBAAkB,EAAE,CAAC;QAC/C,MAAM,CAAC,KAAK,CAAC,CAAC,OAAO,CAAC;YACpB;gBACE,IAAI,EAAE,uBAAuB;gBAC7B,UAAU,EAAE,UAAU,CAAC,YAAY;aACpC;SACF,CAAC,CAAC;QACH,MAAM,CAAC,MAAM,CAAC,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC;QAE3B,OAAO,OAAO,CAAC,GAAG,CAAC,iCAAiC,CAAC,CAAC;IACxD,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,oDAAoD,EAAE,GAAG,EAAE;QAC5D,MAAM,aAAa,GAAG,kBAAkB,EAAE,CAAC;QAC3C,aAAa,CAAC,QAAQ,CAAC,WAAW,EAAE,UAAU,CAAC,YAAY,CAAC,CAAC;QAE7D,MAAM,CAAC,aAAa,CAAC,IAAI,CAAC,MAAM,CAAC,WAAW,CAAC,CAAC,CAAC,IAAI,CACjD,UAAU,CAAC,YAAY,CACxB,CAAC;QACF,MAAM,CAAC,mBAAmB,CAAC,CAAC,oBAAoB,CAC9C,qBAAqB,EAAE,EACvB,IAAI,CAAC,SAAS,CAAC,EAAE,WAAW,EAAE,UAAU,CAAC,YAAY,EAAE,EAAE,IAAI,EAAE,CAAC,CAAC,EACjE,EAAE,QAAQ,EAAE,OAAO,EAAE,IAAI,EAAE,KAAK,EAAE,CACnC,CAAC;IACJ,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC;AAEH,QAAQ,CAAC,oBAAoB,EAAE,GAAG,EAAE;IAClC,IAAI,OAAe,CAAC;IACpB,MAAM,SAAS,GAA+B,EAAE,CAAC;IACjD,MAAM,YAAY,GAAa;QAC7B,QAAQ,EAAE;YACR,WAAW,EAAE;gBACX,OAAO,EAAE,IAAI;aACd;SACF;KACF,CAAC;IAEF,UAAU,CAAC,GAAG,EAAE;QACd,6BAA6B,EAAE,CAAC;QAChC,EAAE,CAAC,KAAK,CAAC,OAAO,EAAE,KAAK,CAAC,CAAC,kBAAkB,CAAC,GAAG,EAAE,CAAC,OAAO,CAAC,CAAC;QAC3D,EAAE,CAAC,KAAK,CAAC,EAAE,EAAE,cAAc,CAAC,CAAC,kBAAkB,CAAC,CAAC,CAAC,EAAE,EAAE;YACpD,IAAI,CAAC,KAAK,qBAAqB,EAAE,EAAE,CAAC;gBAClC,OAAO,IAAI,CAAC,SAAS,CAAC,SAAS,CAAC,CAAC;YACnC,CAAC;YACD,OAAO,IAAI,CAAC;QACd,CAAC,CAAC,CAAC;QACH,EAAE,CAAC,KAAK,CAAC,EAAE,EAAE,YAAY,CAAC,CAAC,kBAAkB,CAC3C,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,KAAK,qBAAqB,EAAE,CACrC,CAAC;IACJ,CAAC,CAAC,CAAC;IAEH,SAAS,CAAC,GAAG,EAAE;QACb,EAAE,CAAC,eAAe,EAAE,CAAC;QACrB,mBAAmB;QACnB,MAAM,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC,OAAO,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,OAAO,SAAS,CAAC,GAAG,CAAC,CAAC,CAAC;IACjE,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,uDAAuD,EAAE,GAAG,EAAE;QAC/D,OAAO,GAAG,qBAAqB,CAAC;QAChC,gFAAgF;QAChF,EAAE,CAAC,KAAK,CAAC,EAAE,EAAE,cAAc,CAAC,CAAC,kBAAkB,CAAC,CAAC,CAAC,EAAE,EAAE;YACpD,IAAI,CAAC,KAAK,qBAAqB,EAAE,EAAE,CAAC;gBAClC,OAAO,iBAAiB,CAAC,CAAC,qCAAqC;YACjE,CAAC;YACD,OAAO,IAAI,CAAC;QACd,CAAC,CAAC,CAAC;QACH,MAAM,CAAC,GAAG,EAAE,CAAC,kBAAkB,CAAC,YAAY,CAAC,CAAC,CAAC,OAAO,CAAC,gBAAgB,CAAC,CAAC;QACzE,MAAM,CAAC,GAAG,EAAE,CAAC,kBAAkB,CAAC,YAAY,CAAC,CAAC,CAAC,OAAO,CACpD,mCAAmC,CACpC,CAAC;IACJ,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,+DAA+D,EAAE,GAAG,EAAE;QACvE,OAAO,GAAG,qBAAqB,CAAC;QAChC,EAAE,CAAC,KAAK,CAAC,EAAE,EAAE,cAAc,CAAC,CAAC,kBAAkB,CAAC,CAAC,CAAC,EAAE,EAAE;YACpD,IAAI,CAAC,KAAK,qBAAqB,EAAE,EAAE,CAAC;gBAClC,OAAO,MAAM,CAAC;YAChB,CAAC;YACD,OAAO,IAAI,CAAC;QACd,CAAC,CAAC,CAAC;QACH,MAAM,CAAC,GAAG,EAAE,CAAC,kBAAkB,CAAC,YAAY,CAAC,CAAC,CAAC,OAAO,CAAC,gBAAgB,CAAC,CAAC;QACzE,MAAM,CAAC,GAAG,EAAE,CAAC,kBAAkB,CAAC,YAAY,CAAC,CAAC,CAAC,OAAO,CACpD,yBAAyB,CAC1B,CAAC;IACJ,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,kDAAkD,EAAE,GAAG,EAAE;QAC1D,OAAO,GAAG,qBAAqB,CAAC;QAChC,SAAS,CAAC,qBAAqB,CAAC,GAAG,UAAU,CAAC,YAAY,CAAC;QAC3D,MAAM,CAAC,kBAAkB,CAAC,YAAY,CAAC,CAAC,CAAC,OAAO,CAAC;YAC/C,SAAS,EAAE,IAAI;YACf,MAAM,EAAE,MAAM;SACf,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,oDAAoD,EAAE,GAAG,EAAE;QAC5D,OAAO,GAAG,yBAAyB,CAAC;QACpC,SAAS,CAAC,qBAAqB,CAAC,GAAG,UAAU,CAAC,YAAY,CAAC;QAC3D,MAAM,CAAC,kBAAkB,CAAC,YAAY,CAAC,CAAC,CAAC,OAAO,CAAC;YAC/C,SAAS,EAAE,IAAI;YACf,MAAM,EAAE,MAAM;SACf,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,2DAA2D,EAAE,GAAG,EAAE;QACnE,OAAO,GAAG,qBAAqB,CAAC;QAChC,SAAS,CAAC,kCAAkC,CAAC,GAAG,UAAU,CAAC,YAAY,CAAC;QACxE,MAAM,CAAC,kBAAkB,CAAC,YAAY,CAAC,CAAC,CAAC,OAAO,CAAC;YAC/C,SAAS,EAAE,IAAI;YACf,MAAM,EAAE,MAAM;SACf,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,qDAAqD,EAAE,GAAG,EAAE;QAC7D,OAAO,GAAG,sBAAsB,CAAC;QACjC,SAAS,CAAC,sBAAsB,CAAC,GAAG,UAAU,CAAC,YAAY,CAAC;QAC5D,MAAM,CAAC,kBAAkB,CAAC,YAAY,CAAC,CAAC,CAAC,OAAO,CAAC;YAC/C,SAAS,EAAE,KAAK;YAChB,MAAM,EAAE,MAAM;SACf,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,4DAA4D,EAAE,GAAG,EAAE;QACpE,OAAO,GAAG,0BAA0B,CAAC;QACrC,SAAS,CAAC,sBAAsB,CAAC,GAAG,UAAU,CAAC,YAAY,CAAC;QAC5D,MAAM,CAAC,kBAAkB,CAAC,YAAY,CAAC,CAAC,SAAS,CAAC,CAAC,aAAa,EAAE,CAAC;IACrE,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,6CAA6C,EAAE,GAAG,EAAE;QACrD,OAAO,GAAG,kBAAkB,CAAC;QAC7B,SAAS,CAAC,qBAAqB,CAAC,GAAG,UAAU,CAAC,YAAY,CAAC;QAC3D,SAAS,CAAC,sBAAsB,CAAC,GAAG,UAAU,CAAC,YAAY,CAAC;QAC5D,MAAM,CAAC,kBAAkB,CAAC,YAAY,CAAC,CAAC,SAAS,CAAC,CAAC,aAAa,EAAE,CAAC;IACrE,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,uCAAuC,EAAE,GAAG,EAAE;QAC/C,OAAO,GAAG,+BAA+B,CAAC;QAC1C,SAAS,CAAC,qBAAqB,CAAC,GAAG,UAAU,CAAC,YAAY,CAAC;QAC3D,SAAS,CAAC,+BAA+B,CAAC,GAAG,UAAU,CAAC,YAAY,CAAC;QACrE,MAAM,CAAC,kBAAkB,CAAC,YAAY,CAAC,CAAC,CAAC,OAAO,CAAC;YAC/C,SAAS,EAAE,IAAI;YACf,MAAM,EAAE,MAAM;SACf,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,kCAAkC,EAAE,GAAG,EAAE;QAC1C,OAAO,GAAG,qBAAqB,CAAC;QAChC,SAAS,CAAC,sBAAsB,IAAI,CAAC,QAAQ,CAAC,qBAAqB,CAAC,EAAE,CAAC;YACrE,UAAU,CAAC,YAAY,CAAC;QAC1B,MAAM,CAAC,kBAAkB,CAAC,YAAY,CAAC,CAAC,CAAC,OAAO,CAAC;YAC/C,SAAS,EAAE,IAAI;YACf,MAAM,EAAE,MAAM;SACf,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC;AAEH,QAAQ,CAAC,sCAAsC,EAAE,GAAG,EAAE;IACpD,SAAS,CAAC,GAAG,EAAE;QACb,EAAE,CAAC,aAAa,EAAE,CAAC;QACnB,eAAe,CAAC,KAAK,EAAE,CAAC;QACxB,6BAA6B,EAAE,CAAC;IAClC,CAAC,CAAC,CAAC;IAEH,MAAM,YAAY,GAAa;QAC7B,QAAQ,EAAE;YACR,WAAW,EAAE;gBACX,OAAO,EAAE,IAAI;aACd;SACF;KACF,CAAC;IAEF,EAAE,CAAC,2DAA2D,EAAE,GAAG,EAAE;QACnE,eAAe,CAAC,GAAG,CAAC,EAAE,cAAc,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,EAAE,CAAC,CAAC;QAC7D,wDAAwD;QACxD,EAAE,CAAC,KAAK,CAAC,EAAE,EAAE,cAAc,CAAC,CAAC,eAAe,CAC1C,IAAI,CAAC,SAAS,CAAC,EAAE,CAAC,OAAO,CAAC,GAAG,EAAE,CAAC,EAAE,UAAU,CAAC,YAAY,EAAE,CAAC,CAC7D,CAAC;QACF,MAAM,CAAC,kBAAkB,CAAC,YAAY,CAAC,CAAC,CAAC,OAAO,CAAC;YAC/C,SAAS,EAAE,IAAI;YACf,MAAM,EAAE,KAAK;SACd,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,6DAA6D,EAAE,GAAG,EAAE;QACrE,eAAe,CAAC,GAAG,CAAC,EAAE,cAAc,EAAE,EAAE,SAAS,EAAE,KAAK,EAAE,EAAE,CAAC,CAAC;QAC9D,kDAAkD;QAClD,EAAE,CAAC,KAAK,CAAC,EAAE,EAAE,cAAc,CAAC,CAAC,eAAe,CAC1C,IAAI,CAAC,SAAS,CAAC,EAAE,CAAC,OAAO,CAAC,GAAG,EAAE,CAAC,EAAE,UAAU,CAAC,YAAY,EAAE,CAAC,CAC7D,CAAC;QACF,MAAM,CAAC,kBAAkB,CAAC,YAAY,CAAC,CAAC,CAAC,OAAO,CAAC;YAC/C,SAAS,EAAE,KAAK;YAChB,MAAM,EAAE,KAAK;SACd,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,uDAAuD,EAAE,GAAG,EAAE;QAC/D,EAAE,CAAC,KAAK,CAAC,EAAE,EAAE,YAAY,CAAC,CAAC,eAAe,CAAC,IAAI,CAAC,CAAC;QACjD,EAAE,CAAC,KAAK,CAAC,EAAE,EAAE,cAAc,CAAC,CAAC,eAAe,CAC1C,IAAI,CAAC,SAAS,CAAC,EAAE,CAAC,OAAO,CAAC,GAAG,EAAE,CAAC,EAAE,UAAU,CAAC,YAAY,EAAE,CAAC,CAC7D,CAAC;QACF,MAAM,CAAC,kBAAkB,CAAC,YAAY,CAAC,CAAC,CAAC,OAAO,CAAC;YAC/C,SAAS,EAAE,IAAI;YACf,MAAM,EAAE,MAAM;SACf,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,8DAA8D,EAAE,GAAG,EAAE;QACtE,MAAM,QAAQ,GAAa;YACzB,QAAQ,EAAE;gBACR,WAAW,EAAE;oBACX,OAAO,EAAE,KAAK;iBACf;aACF;SACF,CAAC;QACF,eAAe,CAAC,GAAG,CAAC,EAAE,cAAc,EAAE,EAAE,SAAS,EAAE,KAAK,EAAE,EAAE,CAAC,CAAC;QAC9D,MAAM,CAAC,kBAAkB,CAAC,QAAQ,CAAC,CAAC,CAAC,OAAO,CAAC;YAC3C,SAAS,EAAE,IAAI;YACf,MAAM,EAAE,SAAS;SAClB,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC;AAEH,QAAQ,CAAC,yBAAyB,EAAE,GAAG,EAAE;IACvC,UAAU,CAAC,GAAG,EAAE;QACd,6BAA6B,EAAE,CAAC;QAChC,EAAE,CAAC,MAAM,CAAC,EAAE,CAAC,UAAU,CAAC,CAAC,eAAe,CAAC,IAAI,CAAC,CAAC;QAC/C,EAAE,CAAC,MAAM,CAAC,EAAE,CAAC,YAAY,CAAC,CAAC,eAAe,CAAC,IAAI,CAAC,CAAC;IACnD,CAAC,CAAC,CAAC;IAEH,SAAS,CAAC,GAAG,EAAE;QACb,EAAE,CAAC,eAAe,EAAE,CAAC;IACvB,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,wCAAwC,EAAE,GAAG,EAAE;QAChD,MAAM,OAAO,GAAG,EAAE,CAAC,KAAK,CAAC,EAAE,EAAE,cAAc,CAAC,CAAC;QAE7C,kCAAkC;QAClC,kBAAkB,EAAE,CAAC;QACrB,MAAM,CAAC,OAAO,CAAC,CAAC,qBAAqB,CAAC,CAAC,CAAC,CAAC;QAEzC,mCAAmC;QACnC,kBAAkB,EAAE,CAAC;QACrB,MAAM,CAAC,OAAO,CAAC,CAAC,qBAAqB,CAAC,CAAC,CAAC,CAAC;QAEzC,mCAAmC;QACnC,6BAA6B,EAAE,CAAC;QAEhC,wCAAwC;QACxC,kBAAkB,EAAE,CAAC;QACrB,MAAM,CAAC,OAAO,CAAC,CAAC,qBAAqB,CAAC,CAAC,CAAC,CAAC;IAC3C,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC"}

package/dist/src/config/webSearch.d.ts

@@ -0,0 +1,35 @@
+/**
+ * @license
+ * Copyright 2025 Qwen
+ * SPDX-License-Identifier: Apache-2.0
+ */
+import type { WebSearchProviderConfig } from '@hibanacloud/core';
+import type { Settings } from './settings.js';
+/**
+ * CLI arguments related to web search configuration
+ */
+export interface WebSearchCliArgs {
+    tavilyApiKey?: string;
+    googleApiKey?: string;
+    googleSearchEngineId?: string;
+    webSearchDefault?: string;
+}
+/**
+ * Web search configuration structure
+ */
+export interface WebSearchConfig {
+    provider: WebSearchProviderConfig[];
+    default: string;
+}
+/**
+ * Build webSearch configuration from multiple sources with priority:
+ * 1. settings.json (new format) - highest priority
+ * 2. Command line args + environment variables
+ * 3. Legacy tavilyApiKey (backward compatibility)
+ *
+ * @param argv - Command line arguments
+ * @param settings - User settings from settings.json
+ * @param authType - Authentication type (e.g., 'qwen-oauth')
+ * @returns WebSearch configuration or undefined if no providers available
+ */
+export declare function buildWebSearchConfig(argv: WebSearchCliArgs, settings: Settings, authType?: string): WebSearchConfig | undefined;

package/dist/src/config/webSearch.js

@@ -0,0 +1,87 @@
+/**
+ * @license
+ * Copyright 2025 Qwen
+ * SPDX-License-Identifier: Apache-2.0
+ */
+import { AuthType } from '@hibanacloud/core';
+/**
+ * Build webSearch configuration from multiple sources with priority:
+ * 1. settings.json (new format) - highest priority
+ * 2. Command line args + environment variables
+ * 3. Legacy tavilyApiKey (backward compatibility)
+ *
+ * @param argv - Command line arguments
+ * @param settings - User settings from settings.json
+ * @param authType - Authentication type (e.g., 'qwen-oauth')
+ * @returns WebSearch configuration or undefined if no providers available
+ */
+export function buildWebSearchConfig(argv, settings, authType) {
+    const isQwenOAuth = authType === AuthType.QWEN_OAUTH;
+    // Step 1: Collect providers from settings or command line/env
+    let providers = [];
+    let userDefault;
+    if (settings.webSearch) {
+        // Use providers from settings.json
+        providers = [...settings.webSearch.provider];
+        userDefault = settings.webSearch.default;
+    }
+    else {
+        // Build providers from command line args and environment variables
+        const tavilyKey = argv.tavilyApiKey ||
+            settings.advanced?.tavilyApiKey ||
+            process.env['TAVILY_API_KEY'];
+        if (tavilyKey) {
+            providers.push({
+                type: 'tavily',
+                apiKey: tavilyKey,
+            });
+        }
+        const googleKey = argv.googleApiKey || process.env['GOOGLE_API_KEY'];
+        const googleEngineId = argv.googleSearchEngineId || process.env['GOOGLE_SEARCH_ENGINE_ID'];
+        if (googleKey && googleEngineId) {
+            providers.push({
+                type: 'google',
+                apiKey: googleKey,
+                searchEngineId: googleEngineId,
+            });
+        }
+    }
+    // Step 2: Ensure dashscope is available for qwen-oauth users
+    if (isQwenOAuth) {
+        const hasDashscope = providers.some((p) => p.type === 'dashscope');
+        if (!hasDashscope) {
+            providers.push({ type: 'dashscope' });
+        }
+    }
+    // Step 3: If no providers available, return undefined
+    if (providers.length === 0) {
+        return undefined;
+    }
+    // Step 4: Determine default provider
+    // Priority: user explicit config > CLI arg > first available provider (tavily > google > dashscope)
+    const providerPriority = [
+        'tavily',
+        'google',
+        'dashscope',
+    ];
+    // Determine default provider based on availability
+    let defaultProvider = userDefault || argv.webSearchDefault;
+    if (!defaultProvider) {
+        // Find first available provider by priority order
+        for (const providerType of providerPriority) {
+            if (providers.some((p) => p.type === providerType)) {
+                defaultProvider = providerType;
+                break;
+            }
+        }
+        // Fallback to first available provider if none found in priority list
+        if (!defaultProvider) {
+            defaultProvider = providers[0]?.type || 'dashscope';
+        }
+    }
+    return {
+        provider: providers,
+        default: defaultProvider,
+    };
+}
+//# sourceMappingURL=webSearch.js.map

package/dist/src/config/webSearch.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"webSearch.js","sourceRoot":"","sources":["../../../src/config/webSearch.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAEH,OAAO,EAAE,QAAQ,EAAE,MAAM,mBAAmB,CAAC;AAsB7C;;;;;;;;;;GAUG;AACH,MAAM,UAAU,oBAAoB,CAClC,IAAsB,EACtB,QAAkB,EAClB,QAAiB;IAEjB,MAAM,WAAW,GAAG,QAAQ,KAAK,QAAQ,CAAC,UAAU,CAAC;IAErD,8DAA8D;IAC9D,IAAI,SAAS,GAA8B,EAAE,CAAC;IAC9C,IAAI,WAA+B,CAAC;IAEpC,IAAI,QAAQ,CAAC,SAAS,EAAE,CAAC;QACvB,mCAAmC;QACnC,SAAS,GAAG,CAAC,GAAG,QAAQ,CAAC,SAAS,CAAC,QAAQ,CAAC,CAAC;QAC7C,WAAW,GAAG,QAAQ,CAAC,SAAS,CAAC,OAAO,CAAC;IAC3C,CAAC;SAAM,CAAC;QACN,mEAAmE;QACnE,MAAM,SAAS,GACb,IAAI,CAAC,YAAY;YACjB,QAAQ,CAAC,QAAQ,EAAE,YAAY;YAC/B,OAAO,CAAC,GAAG,CAAC,gBAAgB,CAAC,CAAC;QAChC,IAAI,SAAS,EAAE,CAAC;YACd,SAAS,CAAC,IAAI,CAAC;gBACb,IAAI,EAAE,QAAQ;gBACd,MAAM,EAAE,SAAS;aACS,CAAC,CAAC;QAChC,CAAC;QAED,MAAM,SAAS,GAAG,IAAI,CAAC,YAAY,IAAI,OAAO,CAAC,GAAG,CAAC,gBAAgB,CAAC,CAAC;QACrE,MAAM,cAAc,GAClB,IAAI,CAAC,oBAAoB,IAAI,OAAO,CAAC,GAAG,CAAC,yBAAyB,CAAC,CAAC;QACtE,IAAI,SAAS,IAAI,cAAc,EAAE,CAAC;YAChC,SAAS,CAAC,IAAI,CAAC;gBACb,IAAI,EAAE,QAAQ;gBACd,MAAM,EAAE,SAAS;gBACjB,cAAc,EAAE,cAAc;aACJ,CAAC,CAAC;QAChC,CAAC;IACH,CAAC;IAED,6DAA6D;IAC7D,IAAI,WAAW,EAAE,CAAC;QAChB,MAAM,YAAY,GAAG,SAAS,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,KAAK,WAAW,CAAC,CAAC;QACnE,IAAI,CAAC,YAAY,EAAE,CAAC;YAClB,SAAS,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,WAAW,EAA6B,CAAC,CAAC;QACnE,CAAC;IACH,CAAC;IAED,sDAAsD;IACtD,IAAI,SAAS,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QAC3B,OAAO,SAAS,CAAC;IACnB,CAAC;IAED,qCAAqC;IACrC,oGAAoG;IACpG,MAAM,gBAAgB,GAA6C;QACjE,QAAQ;QACR,QAAQ;QACR,WAAW;KACZ,CAAC;IAEF,mDAAmD;IACnD,IAAI,eAAe,GAAG,WAAW,IAAI,IAAI,CAAC,gBAAgB,CAAC;IAC3D,IAAI,CAAC,eAAe,EAAE,CAAC;QACrB,kDAAkD;QAClD,KAAK,MAAM,YAAY,IAAI,gBAAgB,EAAE,CAAC;YAC5C,IAAI,SAAS,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,KAAK,YAAY,CAAC,EAAE,CAAC;gBACnD,eAAe,GAAG,YAAY,CAAC;gBAC/B,MAAM;YACR,CAAC;QACH,CAAC;QACD,sEAAsE;QACtE,IAAI,CAAC,eAAe,EAAE,CAAC;YACrB,eAAe,GAAG,SAAS,CAAC,CAAC,CAAC,EAAE,IAAI,IAAI,WAAW,CAAC;QACtD,CAAC;IACH,CAAC;IAED,OAAO;QACL,QAAQ,EAAE,SAAS;QACnB,OAAO,EAAE,eAAe;KACzB,CAAC;AACJ,CAAC"}

package/dist/src/core/auth.d.ts

@@ -0,0 +1,13 @@
+/**
+ * @license
+ * Copyright 2025 Google LLC
+ * SPDX-License-Identifier: Apache-2.0
+ */
+import { type AuthType, type Config } from '@hibanacloud/core';
+/**
+ * Handles the initial authentication flow.
+ * @param config The application config.
+ * @param authType The selected auth type.
+ * @returns An error message if authentication fails, otherwise null.
+ */
+export declare function performInitialAuth(config: Config, authType: AuthType | undefined): Promise<string | null>;

package/dist/src/core/auth.js

@@ -0,0 +1,34 @@
+/**
+ * @license
+ * Copyright 2025 Google LLC
+ * SPDX-License-Identifier: Apache-2.0
+ */
+import { getErrorMessage, logAuth, AuthEvent, } from '@hibanacloud/core';
+/**
+ * Handles the initial authentication flow.
+ * @param config The application config.
+ * @param authType The selected auth type.
+ * @returns An error message if authentication fails, otherwise null.
+ */
+export async function performInitialAuth(config, authType) {
+    if (!authType) {
+        return null;
+    }
+    try {
+        await config.refreshAuth(authType, true);
+        // The console.log is intentionally left out here.
+        // We can add a dedicated startup message later if needed.
+        // Log authentication success
+        const authEvent = new AuthEvent(authType, 'auto', 'success');
+        logAuth(config, authEvent);
+    }
+    catch (e) {
+        const errorMessage = `Failed to login. Message: ${getErrorMessage(e)}`;
+        // Log authentication failure
+        const authEvent = new AuthEvent(authType, 'auto', 'error', errorMessage);
+        logAuth(config, authEvent);
+        return errorMessage;
+    }
+    return null;
+}
+//# sourceMappingURL=auth.js.map

package/dist/src/core/auth.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"auth.js","sourceRoot":"","sources":["../../../src/core/auth.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAEH,OAAO,EAGL,eAAe,EACf,OAAO,EACP,SAAS,GACV,MAAM,mBAAmB,CAAC;AAE3B;;;;;GAKG;AACH,MAAM,CAAC,KAAK,UAAU,kBAAkB,CACtC,MAAc,EACd,QAA8B;IAE9B,IAAI,CAAC,QAAQ,EAAE,CAAC;QACd,OAAO,IAAI,CAAC;IACd,CAAC;IAED,IAAI,CAAC;QACH,MAAM,MAAM,CAAC,WAAW,CAAC,QAAQ,EAAE,IAAI,CAAC,CAAC;QACzC,kDAAkD;QAClD,0DAA0D;QAE1D,6BAA6B;QAC7B,MAAM,SAAS,GAAG,IAAI,SAAS,CAAC,QAAQ,EAAE,MAAM,EAAE,SAAS,CAAC,CAAC;QAC7D,OAAO,CAAC,MAAM,EAAE,SAAS,CAAC,CAAC;IAC7B,CAAC;IAAC,OAAO,CAAC,EAAE,CAAC;QACX,MAAM,YAAY,GAAG,6BAA6B,eAAe,CAAC,CAAC,CAAC,EAAE,CAAC;QAEvE,6BAA6B;QAC7B,MAAM,SAAS,GAAG,IAAI,SAAS,CAAC,QAAQ,EAAE,MAAM,EAAE,OAAO,EAAE,YAAY,CAAC,CAAC;QACzE,OAAO,CAAC,MAAM,EAAE,SAAS,CAAC,CAAC;QAE3B,OAAO,YAAY,CAAC;IACtB,CAAC;IAED,OAAO,IAAI,CAAC;AACd,CAAC"}

package/dist/src/core/initializer.d.ts

@@ -0,0 +1,21 @@
+/**
+ * @license
+ * Copyright 2025 Google LLC
+ * SPDX-License-Identifier: Apache-2.0
+ */
+import { type Config } from '@hibanacloud/core';
+import { type LoadedSettings } from '../config/settings.js';
+export interface InitializationResult {
+    authError: string | null;
+    themeError: string | null;
+    shouldOpenAuthDialog: boolean;
+    geminiMdFileCount: number;
+}
+/**
+ * Orchestrates the application's startup initialization.
+ * This runs BEFORE the React UI is rendered.
+ * @param config The application config.
+ * @param settings The loaded application settings.
+ * @returns The results of the initialization.
+ */
+export declare function initializeApp(config: Config, settings: LoadedSettings): Promise<InitializationResult>;

package/dist/src/core/initializer.js

@@ -0,0 +1,48 @@
+/**
+ * @license
+ * Copyright 2025 Google LLC
+ * SPDX-License-Identifier: Apache-2.0
+ */
+import { IdeClient, IdeConnectionEvent, IdeConnectionType, logIdeConnection, } from '@hibanacloud/core';
+import { SettingScope } from '../config/settings.js';
+import { performInitialAuth } from './auth.js';
+import { validateTheme } from './theme.js';
+import { initializeI18n } from '../i18n/index.js';
+import { migrateConfigIfNeeded } from '../config/migration.js';
+/**
+ * Orchestrates the application's startup initialization.
+ * This runs BEFORE the React UI is rendered.
+ * @param config The application config.
+ * @param settings The loaded application settings.
+ * @returns The results of the initialization.
+ */
+export async function initializeApp(config, settings) {
+    // Migrate configuration from .qwen to .hibana if needed
+    migrateConfigIfNeeded();
+    // Initialize i18n system
+    const languageSetting = process.env['HIBANA_CLI_LANG'] ||
+        process.env['QWEN_CODE_LANG'] || // Keep for backward compatibility
+        settings.merged.general?.language ||
+        'auto';
+    await initializeI18n(languageSetting);
+    const authType = settings.merged.security?.auth?.selectedType;
+    const authError = await performInitialAuth(config, authType);
+    // Fallback to user select when initial authentication fails
+    if (authError) {
+        settings.setValue(SettingScope.User, 'security.auth.selectedType', undefined);
+    }
+    const themeError = validateTheme(settings);
+    const shouldOpenAuthDialog = settings.merged.security?.auth?.selectedType === undefined || !!authError;
+    if (config.getIdeMode()) {
+        const ideClient = await IdeClient.getInstance();
+        await ideClient.connect();
+        logIdeConnection(config, new IdeConnectionEvent(IdeConnectionType.START));
+    }
+    return {
+        authError,
+        themeError,
+        shouldOpenAuthDialog,
+        geminiMdFileCount: config.getGeminiMdFileCount(),
+    };
+}
+//# sourceMappingURL=initializer.js.map

package/dist/src/core/initializer.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"initializer.js","sourceRoot":"","sources":["../../../src/core/initializer.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAEH,OAAO,EACL,SAAS,EACT,kBAAkB,EAClB,iBAAiB,EACjB,gBAAgB,GAEjB,MAAM,mBAAmB,CAAC;AAC3B,OAAO,EAAuB,YAAY,EAAE,MAAM,uBAAuB,CAAC;AAC1E,OAAO,EAAE,kBAAkB,EAAE,MAAM,WAAW,CAAC;AAC/C,OAAO,EAAE,aAAa,EAAE,MAAM,YAAY,CAAC;AAC3C,OAAO,EAAE,cAAc,EAAE,MAAM,kBAAkB,CAAC;AAClD,OAAO,EAAE,qBAAqB,EAAE,MAAM,wBAAwB,CAAC;AAS/D;;;;;;GAMG;AACH,MAAM,CAAC,KAAK,UAAU,aAAa,CACjC,MAAc,EACd,QAAwB;IAExB,wDAAwD;IACxD,qBAAqB,EAAE,CAAC;IAExB,yBAAyB;IACzB,MAAM,eAAe,GACnB,OAAO,CAAC,GAAG,CAAC,iBAAiB,CAAC;QAC9B,OAAO,CAAC,GAAG,CAAC,gBAAgB,CAAC,IAAK,kCAAkC;QACpE,QAAQ,CAAC,MAAM,CAAC,OAAO,EAAE,QAAQ;QACjC,MAAM,CAAC;IACT,MAAM,cAAc,CAAC,eAAe,CAAC,CAAC;IAEtC,MAAM,QAAQ,GAAG,QAAQ,CAAC,MAAM,CAAC,QAAQ,EAAE,IAAI,EAAE,YAAY,CAAC;IAC9D,MAAM,SAAS,GAAG,MAAM,kBAAkB,CAAC,MAAM,EAAE,QAAQ,CAAC,CAAC;IAE7D,4DAA4D;IAC5D,IAAI,SAAS,EAAE,CAAC;QACd,QAAQ,CAAC,QAAQ,CACf,YAAY,CAAC,IAAI,EACjB,4BAA4B,EAC5B,SAAS,CACV,CAAC;IACJ,CAAC;IACD,MAAM,UAAU,GAAG,aAAa,CAAC,QAAQ,CAAC,CAAC;IAE3C,MAAM,oBAAoB,GACxB,QAAQ,CAAC,MAAM,CAAC,QAAQ,EAAE,IAAI,EAAE,YAAY,KAAK,SAAS,IAAI,CAAC,CAAC,SAAS,CAAC;IAE5E,IAAI,MAAM,CAAC,UAAU,EAAE,EAAE,CAAC;QACxB,MAAM,SAAS,GAAG,MAAM,SAAS,CAAC,WAAW,EAAE,CAAC;QAChD,MAAM,SAAS,CAAC,OAAO,EAAE,CAAC;QAC1B,gBAAgB,CAAC,MAAM,EAAE,IAAI,kBAAkB,CAAC,iBAAiB,CAAC,KAAK,CAAC,CAAC,CAAC;IAC5E,CAAC;IAED,OAAO;QACL,SAAS;QACT,UAAU;QACV,oBAAoB;QACpB,iBAAiB,EAAE,MAAM,CAAC,oBAAoB,EAAE;KACjD,CAAC;AACJ,CAAC"}

package/dist/src/core/theme.d.ts

@@ -0,0 +1,12 @@
+/**
+ * @license
+ * Copyright 2025 Google LLC
+ * SPDX-License-Identifier: Apache-2.0
+ */
+import { type LoadedSettings } from '../config/settings.js';
+/**
+ * Validates the configured theme.
+ * @param settings The loaded application settings.
+ * @returns An error message if the theme is not found, otherwise null.
+ */
+export declare function validateTheme(settings: LoadedSettings): string | null;

package/dist/src/core/theme.js

@@ -0,0 +1,23 @@
+/**
+ * @license
+ * Copyright 2025 Google LLC
+ * SPDX-License-Identifier: Apache-2.0
+ */
+import { themeManager } from '../ui/themes/theme-manager.js';
+import {} from '../config/settings.js';
+import { t } from '../i18n/index.js';
+/**
+ * Validates the configured theme.
+ * @param settings The loaded application settings.
+ * @returns An error message if the theme is not found, otherwise null.
+ */
+export function validateTheme(settings) {
+    const effectiveTheme = settings.merged.ui?.theme;
+    if (effectiveTheme && !themeManager.findThemeByName(effectiveTheme)) {
+        return t('Theme "{{themeName}}" not found.', {
+            themeName: effectiveTheme,
+        });
+    }
+    return null;
+}
+//# sourceMappingURL=theme.js.map