@langchain/google 0.2.3 → 0.2.5

package/dist/utils/gcp-auth.cjs.map

@@ -1 +1 @@
-{"version":3,"file":"gcp-auth.cjs","names":["iife","AuthError"],"sources":["../../src/utils/gcp-auth.ts"],"sourcesContent":["/**\n * GCP authentication utilities.\n *\n * Adapted from: https://github.com/kriasoft/web-auth-library\n * Original source: web-auth-library by Kriasoft\n * License: MIT (https://github.com/kriasoft/web-auth-library/blob/main/LICENSE)\n */\n\nimport { AuthError } from \"../utils/errors.js\";\nimport { iife } from \"../utils/misc.js\";\n\ntype JoseModule = typeof import(\"jose\");\n\nlet joseModulePromise: Promise<JoseModule> | undefined;\n\nasync function getJose(): Promise<JoseModule> {\n  joseModulePromise ??= import(\"jose\");\n  return joseModulePromise;\n}\n\n/**\n * Google Cloud Platform service account credentials interface.\n *\n * This interface represents the structure of a GCP service account key file,\n * which is used for authenticating with Google Cloud APIs. Service account\n * keys can be downloaded from the Google Cloud Console and contain all the\n * information needed to authenticate as a service account.\n *\n * @see https://cloud.google.com/iam/docs/creating-managing-service-account-keys\n */\nexport interface GCPCredentials {\n  /** The type of credential, typically \"service_account\" */\n  type: string;\n  /** The GCP project ID associated with this service account */\n  project_id: string;\n  /** The unique identifier for the private key */\n  private_key_id: string;\n  /** The RSA private key in PEM format used for signing JWTs */\n  private_key: string;\n  /** The unique client ID for this service account */\n  client_id: string;\n  /** The email address of the service account */\n  client_email: string;\n  /** The OAuth2 authorization endpoint URI */\n  auth_uri: string;\n  /** The OAuth2 token endpoint URI where access tokens are requested */\n  token_uri: string;\n  /** The URL for the OAuth2 provider's x509 certificate */\n  auth_provider_x509_cert_url: string;\n  /** The URL for this service account's x509 certificate */\n  client_x509_cert_url: string;\n}\n\ninterface CacheValue {\n  /** Unix timestamp (in seconds) when this cache entry was created */\n  created: number;\n  /** Promise that resolves to the token and its expiration time */\n  promise: Promise<{ token: string; expires: number }>;\n}\n\nconst cache = new Map<string, CacheValue>();\nconst CACHE_MAX_AGE = 60 * 60; // 1 hour\n\n/**\n * Normalizes GCP credentials to a frozen GCPCredentials object.\n *\n * This function accepts credentials in either string (JSON) or object format\n * and ensures the returned value is a frozen (immutable) GCPCredentials object.\n * Freezing the credentials prevents accidental modification and ensures\n * consistency throughout the application lifecycle.\n *\n * @param credentials - The GCP service account credentials, either as a JSON string\n *                      or as a GCPCredentials object\n * @returns A frozen GCPCredentials object that cannot be modified\n *\n * @example\n * ```typescript\n * // From JSON string\n * const creds = normalizeGCPCredentials('{\"type\":\"service_account\",...}');\n *\n * // From object\n * const creds = normalizeGCPCredentials({\n *   type: \"service_account\",\n *   project_id: \"my-project\",\n *   // ... other fields\n * });\n * ```\n */\nexport function normalizeGCPCredentials(\n  credentials: string | GCPCredentials\n): GCPCredentials {\n  return typeof credentials === \"string\"\n    ? Object.freeze(JSON.parse(credentials))\n    : Object.isFrozen(credentials)\n      ? credentials\n      : Object.freeze(credentials);\n}\n\n/**\n * Imports and returns the private key from GCP credentials for JWT signing.\n *\n * This function extracts the RSA private key from the service account credentials\n * and imports it using the PKCS#8 format with the RS256 algorithm. The returned\n * key can be used to sign JWTs for authentication with Google Cloud services.\n *\n * @param credentials - The GCP service account credentials containing the private key\n * @returns A Promise that resolves to the imported private key suitable for JWT signing\n *\n * @throws {Error} If the private key format is invalid or cannot be imported\n *\n * @example\n * ```typescript\n * const credentials = normalizeGCPCredentials(credentialsJson);\n * const privateKey = await getGCPPrivateKey(credentials);\n * // Use privateKey for signing operations\n * ```\n */\nexport async function getGCPPrivateKey(credentials: GCPCredentials) {\n  const { importPKCS8 } = await getJose();\n  return importPKCS8(credentials.private_key, \"RS256\");\n}\n\n/**\n * Generates a custom JWT token for authenticating with Google Cloud services.\n *\n * This function creates a signed JWT (JSON Web Token) using the service account's\n * private key. The token includes standard claims such as issuer, audience, subject,\n * issued-at time, and expiration time. This custom token can be exchanged for an\n * access token or ID token through Google's OAuth2 token endpoint.\n *\n * The generated JWT is valid for 1 hour and follows the OAuth 2.0 JWT Bearer\n * Token flow as specified by RFC 7523.\n *\n * @param credentials - The GCP service account credentials used to sign the JWT\n * @returns A Promise that resolves to the signed JWT string\n *\n * @throws {Error} If the private key cannot be imported or the JWT cannot be signed\n *\n * @see https://datatracker.ietf.org/doc/html/rfc7523\n * @see https://cloud.google.com/iam/docs/creating-short-lived-service-account-credentials\n *\n * @example\n * ```typescript\n * const credentials = normalizeGCPCredentials(credentialsJson);\n * const customToken = await getGCPCustomToken(credentials);\n * // Use customToken to request an access token\n * ```\n */\nexport async function getGCPCustomToken(credentials: GCPCredentials) {\n  const { SignJWT } = await getJose();\n  const privateKey = await getGCPPrivateKey(credentials);\n  const customToken = await new SignJWT()\n    .setIssuer(credentials.client_email)\n    .setAudience(credentials.token_uri)\n    .setSubject(credentials.client_email)\n    .setProtectedHeader({ alg: \"RS256\" })\n    .setIssuedAt()\n    .setExpirationTime(\"1h\")\n    .sign(privateKey);\n  return customToken;\n}\n\n/**\n * Retrieves an access token for authenticating with Google Cloud APIs.\n *\n * - Tokens are cached based on the token URI and private key ID\n * - Cache entries are valid for up to 1 hour\n * - Expired tokens trigger automatic refresh\n * - Multiple concurrent requests for the same token are deduplicated\n *\n * The function handles both access tokens and ID tokens, automatically detecting\n * which type is returned by the token endpoint and extracting the appropriate\n * expiration time.\n *\n * @param credentials - The GCP service account credentials used to request the token\n * @returns A Promise that resolves to the access token string\n *\n * @throws {AuthError} If the token request fails (e.g., invalid credentials,\n *                     network error, or API error)\n *\n * @see https://cloud.google.com/iam/docs/creating-short-lived-service-account-credentials\n * @see https://datatracker.ietf.org/doc/html/rfc7523\n *\n * @example\n * ```typescript\n * const credentials = normalizeGCPCredentials(credentialsJson);\n * const accessToken = await getGCPCredentialsAccessToken(credentials);\n *\n * // Use the access token in API requests\n * const response = await fetch('https://api.google.com/...', {\n *   headers: {\n *     'Authorization': `Bearer ${accessToken}`\n *   }\n * });\n * ```\n *\n * @remarks\n * The caching mechanism uses a two-level validation:\n * 1. Cache entry age (must be less than CACHE_MAX_AGE)\n * 2. Token expiration time (must not be expired)\n *\n * This ensures that even if a cache entry is fresh, an expired token\n * will trigger a refresh request.\n */\nexport async function getGCPCredentialsAccessToken(\n  credentials: GCPCredentials\n): Promise<string> {\n  const tokenUrl = credentials.token_uri;\n\n  const cacheKeyUrl = new URL(tokenUrl);\n  cacheKeyUrl.searchParams.set(\"key\", credentials.private_key_id);\n  const cacheKey = cacheKeyUrl.toString();\n\n  // Attempt to retrieve the token from the cache\n  const cacheValue = cache.get(cacheKey);\n  let now = Math.floor(Date.now() / 1000);\n\n  if (cacheValue) {\n    if (cacheValue.created > now - CACHE_MAX_AGE) {\n      let token = await cacheValue.promise;\n\n      if (token.expires > now) {\n        return token.token;\n      } else {\n        const nextValue = cache.get(cacheKey);\n\n        if (nextValue && nextValue !== cacheValue) {\n          token = await nextValue.promise;\n          if (token.expires > now) {\n            return token.token;\n          } else {\n            cache.delete(cacheKey);\n          }\n        }\n      }\n    } else {\n      cache.delete(cacheKey);\n    }\n  }\n\n  const promise = iife(async () => {\n    now = Math.floor(Date.now() / 1000);\n\n    // Request a new token from the Google Cloud API\n    const jwt = await getGCPCustomToken(credentials);\n    const body = new URLSearchParams();\n    body.append(\"grant_type\", \"urn:ietf:params:oauth:grant-type:jwt-bearer\");\n    body.append(\"assertion\", jwt);\n    const res = await fetch(tokenUrl, {\n      method: \"POST\",\n      headers: { \"Content-Type\": \"application/x-www-form-urlencoded\" },\n      body,\n    });\n\n    if (!res.ok) {\n      throw await AuthError.fromResponse(res);\n    }\n\n    const data = await res.json();\n\n    if (\"id_token\" in data) {\n      const { decodeJwt } = await getJose();\n      const claims = decodeJwt(data.id_token);\n      return { token: data.id_token, expires: claims.exp as number };\n    }\n\n    const lastModified = res.headers.get(\"last-modified\");\n    const expires = lastModified\n      ? Math.floor(new Date(lastModified).valueOf() / 1000) + data.expires_in\n      : now + data.expires_in;\n\n    return { expires, token: data.access_token };\n  });\n\n  cache.set(cacheKey, { created: now, promise });\n  return await promise.then((data) => data.token);\n}\n"],"mappings":";;;;;;;;;;AAaA,IAAI;AAEJ,eAAe,UAA+B;CAC5C,sBAAsB,OAAO;CAC7B,OAAO;AACT;AA0CA,MAAM,wBAAQ,IAAI,IAAwB;AAC1C,MAAM,gBAAgB;;;;;;;;;;;;;;;;;;;;;;;;;;AA2BtB,SAAgB,wBACd,aACgB;CAChB,OAAO,OAAO,gBAAgB,WAC1B,OAAO,OAAO,KAAK,MAAM,WAAW,CAAC,IACrC,OAAO,SAAS,WAAW,IACzB,cACA,OAAO,OAAO,WAAW;AACjC;;;;;;;;;;;;;;;;;;;;AAqBA,eAAsB,iBAAiB,aAA6B;CAClE,MAAM,EAAE,gBAAgB,MAAM,QAAQ;CACtC,OAAO,YAAY,YAAY,aAAa,OAAO;AACrD;;;;;;;;;;;;;;;;;;;;;;;;;;;AA4BA,eAAsB,kBAAkB,aAA6B;CACnE,MAAM,EAAE,YAAY,MAAM,QAAQ;CAClC,MAAM,aAAa,MAAM,iBAAiB,WAAW;CASrD,OAAO,MARmB,IAAI,QAAQ,CAAC,CACpC,UAAU,YAAY,YAAY,CAAC,CACnC,YAAY,YAAY,SAAS,CAAC,CAClC,WAAW,YAAY,YAAY,CAAC,CACpC,mBAAmB,EAAE,KAAK,QAAQ,CAAC,CAAC,CACpC,YAAY,CAAC,CACb,kBAAkB,IAAI,CAAC,CACvB,KAAK,UAAU;AAEpB;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AA4CA,eAAsB,6BACpB,aACiB;CACjB,MAAM,WAAW,YAAY;CAE7B,MAAM,cAAc,IAAI,IAAI,QAAQ;CACpC,YAAY,aAAa,IAAI,OAAO,YAAY,cAAc;CAC9D,MAAM,WAAW,YAAY,SAAS;CAGtC,MAAM,aAAa,MAAM,IAAI,QAAQ;CACrC,IAAI,MAAM,KAAK,MAAM,KAAK,IAAI,IAAI,GAAI;CAEtC,IAAI,YACF,IAAI,WAAW,UAAU,MAAM,eAAe;EAC5C,IAAI,QAAQ,MAAM,WAAW;EAE7B,IAAI,MAAM,UAAU,KAClB,OAAO,MAAM;OACR;GACL,MAAM,YAAY,MAAM,IAAI,QAAQ;GAEpC,IAAI,aAAa,cAAc,YAAY;IACzC,QAAQ,MAAM,UAAU;IACxB,IAAI,MAAM,UAAU,KAClB,OAAO,MAAM;SAEb,MAAM,OAAO,QAAQ;GAEzB;EACF;CACF,OACE,MAAM,OAAO,QAAQ;CAIzB,MAAM,UAAUA,aAAAA,KAAK,YAAY;EAC/B,MAAM,KAAK,MAAM,KAAK,IAAI,IAAI,GAAI;EAGlC,MAAM,MAAM,MAAM,kBAAkB,WAAW;EAC/C,MAAM,OAAO,IAAI,gBAAgB;EACjC,KAAK,OAAO,cAAc,6CAA6C;EACvE,KAAK,OAAO,aAAa,GAAG;EAC5B,MAAM,MAAM,MAAM,MAAM,UAAU;GAChC,QAAQ;GACR,SAAS,EAAE,gBAAgB,oCAAoC;GAC/D;EACF,CAAC;EAED,IAAI,CAAC,IAAI,IACP,MAAM,MAAMC,eAAAA,UAAU,aAAa,GAAG;EAGxC,MAAM,OAAO,MAAM,IAAI,KAAK;EAE5B,IAAI,cAAc,MAAM;GACtB,MAAM,EAAE,cAAc,MAAM,QAAQ;GACpC,MAAM,SAAS,UAAU,KAAK,QAAQ;GACtC,OAAO;IAAE,OAAO,KAAK;IAAU,SAAS,OAAO;GAAc;EAC/D;EAEA,MAAM,eAAe,IAAI,QAAQ,IAAI,eAAe;EAKpD,OAAO;GAAE,SAJO,eACZ,KAAK,MAAM,IAAI,KAAK,YAAY,CAAC,CAAC,QAAQ,IAAI,GAAI,IAAI,KAAK,aAC3D,MAAM,KAAK;GAEG,OAAO,KAAK;EAAa;CAC7C,CAAC;CAED,MAAM,IAAI,UAAU;EAAE,SAAS;EAAK;CAAQ,CAAC;CAC7C,OAAO,MAAM,QAAQ,MAAM,SAAS,KAAK,KAAK;AAChD"}
+{"version":3,"file":"gcp-auth.cjs","names":["iife","AuthError"],"sources":["../../src/utils/gcp-auth.ts"],"sourcesContent":["/**\n * GCP authentication utilities.\n *\n * Adapted from: https://github.com/kriasoft/web-auth-library\n * Original source: web-auth-library by Kriasoft\n * License: MIT (https://github.com/kriasoft/web-auth-library/blob/main/LICENSE)\n */\n\nimport { AuthError } from \"../utils/errors.js\";\nimport { iife } from \"../utils/misc.js\";\n\ntype JoseModule = typeof import(\"jose\");\n\nlet joseModulePromise: Promise<JoseModule> | undefined;\n\nasync function getJose(): Promise<JoseModule> {\n  joseModulePromise ??= import(\"jose\");\n  return joseModulePromise;\n}\n\n/**\n * Google Cloud Platform service account credentials interface.\n *\n * This interface represents the structure of a GCP service account key file,\n * which is used for authenticating with Google Cloud APIs. Service account\n * keys can be downloaded from the Google Cloud Console and contain all the\n * information needed to authenticate as a service account.\n *\n * @see https://cloud.google.com/iam/docs/creating-managing-service-account-keys\n */\nexport interface GCPCredentials {\n  /** The type of credential, typically \"service_account\" */\n  type: string;\n  /** The GCP project ID associated with this service account */\n  project_id: string;\n  /** The unique identifier for the private key */\n  private_key_id: string;\n  /** The RSA private key in PEM format used for signing JWTs */\n  private_key: string;\n  /** The unique client ID for this service account */\n  client_id: string;\n  /** The email address of the service account */\n  client_email: string;\n  /** The OAuth2 authorization endpoint URI */\n  auth_uri: string;\n  /** The OAuth2 token endpoint URI where access tokens are requested */\n  token_uri: string;\n  /** The URL for the OAuth2 provider's x509 certificate */\n  auth_provider_x509_cert_url: string;\n  /** The URL for this service account's x509 certificate */\n  client_x509_cert_url: string;\n}\n\ninterface CacheValue {\n  /** Unix timestamp (in seconds) when this cache entry was created */\n  created: number;\n  /** Promise that resolves to the token and its expiration time */\n  promise: Promise<{ token: string; expires: number }>;\n}\n\nconst cache = new Map<string, CacheValue>();\nconst CACHE_MAX_AGE = 60 * 60; // 1 hour\n\n/**\n * Normalizes GCP credentials to a frozen GCPCredentials object.\n *\n * This function accepts credentials in either string (JSON) or object format\n * and ensures the returned value is a frozen (immutable) GCPCredentials object.\n * Freezing the credentials prevents accidental modification and ensures\n * consistency throughout the application lifecycle.\n *\n * @param credentials - The GCP service account credentials, either as a JSON string\n *                      or as a GCPCredentials object\n * @returns A frozen GCPCredentials object that cannot be modified\n *\n * @example\n * ```typescript\n * // From JSON string\n * const creds = normalizeGCPCredentials('{\"type\":\"service_account\",...}');\n *\n * // From object\n * const creds = normalizeGCPCredentials({\n *   type: \"service_account\",\n *   project_id: \"my-project\",\n *   // ... other fields\n * });\n * ```\n */\nexport function normalizeGCPCredentials(\n  credentials: string | GCPCredentials\n): GCPCredentials {\n  return typeof credentials === \"string\"\n    ? Object.freeze(JSON.parse(credentials))\n    : Object.isFrozen(credentials)\n      ? credentials\n      : Object.freeze(credentials);\n}\n\n/**\n * Imports and returns the private key from GCP credentials for JWT signing.\n *\n * This function extracts the RSA private key from the service account credentials\n * and imports it using the PKCS#8 format with the RS256 algorithm. The returned\n * key can be used to sign JWTs for authentication with Google Cloud services.\n *\n * @param credentials - The GCP service account credentials containing the private key\n * @returns A Promise that resolves to the imported private key suitable for JWT signing\n *\n * @throws {Error} If the private key format is invalid or cannot be imported\n *\n * @example\n * ```typescript\n * const credentials = normalizeGCPCredentials(credentialsJson);\n * const privateKey = await getGCPPrivateKey(credentials);\n * // Use privateKey for signing operations\n * ```\n */\nexport async function getGCPPrivateKey(credentials: GCPCredentials) {\n  const { importPKCS8 } = await getJose();\n  return importPKCS8(credentials.private_key, \"RS256\");\n}\n\n/**\n * Generates a custom JWT token for authenticating with Google Cloud services.\n *\n * This function creates a signed JWT (JSON Web Token) using the service account's\n * private key. The token includes standard claims such as issuer, audience, subject,\n * issued-at time, and expiration time. This custom token can be exchanged for an\n * access token or ID token through Google's OAuth2 token endpoint.\n *\n * The generated JWT is valid for 1 hour and follows the OAuth 2.0 JWT Bearer\n * Token flow as specified by RFC 7523.\n *\n * @param credentials - The GCP service account credentials used to sign the JWT\n * @returns A Promise that resolves to the signed JWT string\n *\n * @throws {Error} If the private key cannot be imported or the JWT cannot be signed\n *\n * @see https://datatracker.ietf.org/doc/html/rfc7523\n * @see https://cloud.google.com/iam/docs/creating-short-lived-service-account-credentials\n *\n * @example\n * ```typescript\n * const credentials = normalizeGCPCredentials(credentialsJson);\n * const customToken = await getGCPCustomToken(credentials);\n * // Use customToken to request an access token\n * ```\n */\nexport async function getGCPCustomToken(credentials: GCPCredentials) {\n  const { SignJWT } = await getJose();\n  const privateKey = await getGCPPrivateKey(credentials);\n  const customToken = await new SignJWT()\n    .setIssuer(credentials.client_email)\n    .setAudience(credentials.token_uri)\n    .setSubject(credentials.client_email)\n    .setProtectedHeader({ alg: \"RS256\" })\n    .setIssuedAt()\n    .setExpirationTime(\"1h\")\n    .sign(privateKey);\n  return customToken;\n}\n\n/**\n * Retrieves an access token for authenticating with Google Cloud APIs.\n *\n * - Tokens are cached based on the token URI and private key ID\n * - Cache entries are valid for up to 1 hour\n * - Expired tokens trigger automatic refresh\n * - Multiple concurrent requests for the same token are deduplicated\n *\n * The function handles both access tokens and ID tokens, automatically detecting\n * which type is returned by the token endpoint and extracting the appropriate\n * expiration time.\n *\n * @param credentials - The GCP service account credentials used to request the token\n * @returns A Promise that resolves to the access token string\n *\n * @throws {AuthError} If the token request fails (e.g., invalid credentials,\n *                     network error, or API error)\n *\n * @see https://cloud.google.com/iam/docs/creating-short-lived-service-account-credentials\n * @see https://datatracker.ietf.org/doc/html/rfc7523\n *\n * @example\n * ```typescript\n * const credentials = normalizeGCPCredentials(credentialsJson);\n * const accessToken = await getGCPCredentialsAccessToken(credentials);\n *\n * // Use the access token in API requests\n * const response = await fetch('https://api.google.com/...', {\n *   headers: {\n *     'Authorization': `Bearer ${accessToken}`\n *   }\n * });\n * ```\n *\n * @remarks\n * The caching mechanism uses a two-level validation:\n * 1. Cache entry age (must be less than CACHE_MAX_AGE)\n * 2. Token expiration time (must not be expired)\n *\n * This ensures that even if a cache entry is fresh, an expired token\n * will trigger a refresh request.\n */\nexport async function getGCPCredentialsAccessToken(\n  credentials: GCPCredentials\n): Promise<string> {\n  const tokenUrl = credentials.token_uri;\n\n  const cacheKeyUrl = new URL(tokenUrl);\n  cacheKeyUrl.searchParams.set(\"key\", credentials.private_key_id);\n  const cacheKey = cacheKeyUrl.toString();\n\n  // Attempt to retrieve the token from the cache\n  const cacheValue = cache.get(cacheKey);\n  let now = Math.floor(Date.now() / 1000);\n\n  if (cacheValue) {\n    if (cacheValue.created > now - CACHE_MAX_AGE) {\n      let token = await cacheValue.promise;\n\n      if (token.expires > now) {\n        return token.token;\n      } else {\n        const nextValue = cache.get(cacheKey);\n\n        if (nextValue && nextValue !== cacheValue) {\n          token = await nextValue.promise;\n          if (token.expires > now) {\n            return token.token;\n          } else {\n            cache.delete(cacheKey);\n          }\n        }\n      }\n    } else {\n      cache.delete(cacheKey);\n    }\n  }\n\n  const promise = iife(async () => {\n    now = Math.floor(Date.now() / 1000);\n\n    // Request a new token from the Google Cloud API\n    const jwt = await getGCPCustomToken(credentials);\n    const body = new URLSearchParams();\n    body.append(\"grant_type\", \"urn:ietf:params:oauth:grant-type:jwt-bearer\");\n    body.append(\"assertion\", jwt);\n    const res = await fetch(tokenUrl, {\n      method: \"POST\",\n      headers: { \"Content-Type\": \"application/x-www-form-urlencoded\" },\n      body,\n    });\n\n    if (!res.ok) {\n      throw await AuthError.fromResponse(res);\n    }\n\n    const data = await res.json();\n\n    if (\"id_token\" in data) {\n      const { decodeJwt } = await getJose();\n      const claims = decodeJwt(data.id_token);\n      return { token: data.id_token, expires: claims.exp as number };\n    }\n\n    const lastModified = res.headers.get(\"last-modified\");\n    const expires = lastModified\n      ? Math.floor(new Date(lastModified).valueOf() / 1000) + data.expires_in\n      : now + data.expires_in;\n\n    return { expires, token: data.access_token };\n  });\n\n  cache.set(cacheKey, { created: now, promise });\n  return await promise.then((data) => data.token);\n}\n"],"mappings":";;;;;;;;;;AAaA,IAAI;AAEJ,eAAe,UAA+B;CAC5C,sBAAsB,OAAO;CAC7B,OAAO;AACT;AA0CA,MAAM,wBAAQ,IAAI,IAAwB;AAC1C,MAAM,gBAAgB;;;;;;;;;;;;;;;;;;;;;;;;;;AA2BtB,SAAgB,wBACd,aACgB;CAChB,OAAO,OAAO,gBAAgB,WAC1B,OAAO,OAAO,KAAK,MAAM,WAAW,CAAC,IACrC,OAAO,SAAS,WAAW,IACzB,cACA,OAAO,OAAO,WAAW;AACjC;;;;;;;;;;;;;;;;;;;;AAqBA,eAAsB,iBAAiB,aAA6B;CAClE,MAAM,EAAE,gBAAgB,MAAM,QAAQ;CACtC,OAAO,YAAY,YAAY,aAAa,OAAO;AACrD;;;;;;;;;;;;;;;;;;;;;;;;;;;AA4BA,eAAsB,kBAAkB,aAA6B;CACnE,MAAM,EAAE,YAAY,MAAM,QAAQ;CAClC,MAAM,aAAa,MAAM,iBAAiB,WAAW;CASrD,OAAO,MARmB,IAAI,QAAQ,CAAC,CACpC,UAAU,YAAY,YAAY,CAAC,CACnC,YAAY,YAAY,SAAS,CAAC,CAClC,WAAW,YAAY,YAAY,CAAC,CACpC,mBAAmB,EAAE,KAAK,QAAQ,CAAC,CAAC,CACpC,YAAY,CAAC,CACb,kBAAkB,IAAI,CAAC,CACvB,KAAK,UAAU;AAEpB;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AA4CA,eAAsB,6BACpB,aACiB;CACjB,MAAM,WAAW,YAAY;CAE7B,MAAM,cAAc,IAAI,IAAI,QAAQ;CACpC,YAAY,aAAa,IAAI,OAAO,YAAY,cAAc;CAC9D,MAAM,WAAW,YAAY,SAAS;CAGtC,MAAM,aAAa,MAAM,IAAI,QAAQ;CACrC,IAAI,MAAM,KAAK,MAAM,KAAK,IAAI,IAAI,GAAI;CAEtC,IAAI,YAAY;EACd,IAAI,WAAW,UAAU,MAAM,eAAe;GAC5C,IAAI,QAAQ,MAAM,WAAW;GAE7B,IAAI,MAAM,UAAU,KAClB,OAAO,MAAM;QACR;IACL,MAAM,YAAY,MAAM,IAAI,QAAQ;IAEpC,IAAI,aAAa,cAAc,YAAY;KACzC,QAAQ,MAAM,UAAU;KACxB,IAAI,MAAM,UAAU,KAClB,OAAO,MAAM;UAEb,MAAM,OAAO,QAAQ;IAEzB;GACF;EACF,OACE,MAAM,OAAO,QAAQ;CAEzB;CAEA,MAAM,UAAUA,aAAAA,KAAK,YAAY;EAC/B,MAAM,KAAK,MAAM,KAAK,IAAI,IAAI,GAAI;EAGlC,MAAM,MAAM,MAAM,kBAAkB,WAAW;EAC/C,MAAM,OAAO,IAAI,gBAAgB;EACjC,KAAK,OAAO,cAAc,6CAA6C;EACvE,KAAK,OAAO,aAAa,GAAG;EAC5B,MAAM,MAAM,MAAM,MAAM,UAAU;GAChC,QAAQ;GACR,SAAS,EAAE,gBAAgB,oCAAoC;GAC/D;EACF,CAAC;EAED,IAAI,CAAC,IAAI,IACP,MAAM,MAAMC,eAAAA,UAAU,aAAa,GAAG;EAGxC,MAAM,OAAO,MAAM,IAAI,KAAK;EAE5B,IAAI,cAAc,MAAM;GACtB,MAAM,EAAE,cAAc,MAAM,QAAQ;GACpC,MAAM,SAAS,UAAU,KAAK,QAAQ;GACtC,OAAO;IAAE,OAAO,KAAK;IAAU,SAAS,OAAO;GAAc;EAC/D;EAEA,MAAM,eAAe,IAAI,QAAQ,IAAI,eAAe;EAKpD,OAAO;GAAE,SAJO,eACZ,KAAK,MAAM,IAAI,KAAK,YAAY,CAAC,CAAC,QAAQ,IAAI,GAAI,IAAI,KAAK,aAC3D,MAAM,KAAK;GAEG,OAAO,KAAK;EAAa;CAC7C,CAAC;CAED,MAAM,IAAI,UAAU;EAAE,SAAS;EAAK;CAAQ,CAAC;CAC7C,OAAO,MAAM,QAAQ,MAAM,SAAS,KAAK,KAAK;AAChD"}

package/dist/utils/gcp-auth.js

@@ -146,18 +146,20 @@ async function getGCPCredentialsAccessToken(credentials) {
 	const cacheKey = cacheKeyUrl.toString();
 	const cacheValue = cache.get(cacheKey);
 	let now = Math.floor(Date.now() / 1e3);
-	if (cacheValue) if (cacheValue.created > now - CACHE_MAX_AGE) {
-		let token = await cacheValue.promise;
-		if (token.expires > now) return token.token;
-		else {
-			const nextValue = cache.get(cacheKey);
-			if (nextValue && nextValue !== cacheValue) {
-				token = await nextValue.promise;
-				if (token.expires > now) return token.token;
-				else cache.delete(cacheKey);
+	if (cacheValue) {
+		if (cacheValue.created > now - CACHE_MAX_AGE) {
+			let token = await cacheValue.promise;
+			if (token.expires > now) return token.token;
+			else {
+				const nextValue = cache.get(cacheKey);
+				if (nextValue && nextValue !== cacheValue) {
+					token = await nextValue.promise;
+					if (token.expires > now) return token.token;
+					else cache.delete(cacheKey);
+				}
 			}
-		}
-	} else cache.delete(cacheKey);
+		} else cache.delete(cacheKey);
+	}
 	const promise = iife(async () => {
 		now = Math.floor(Date.now() / 1e3);
 		const jwt = await getGCPCustomToken(credentials);

package/dist/utils/gcp-auth.js.map

@@ -1 +1 @@
-{"version":3,"file":"gcp-auth.js","names":[],"sources":["../../src/utils/gcp-auth.ts"],"sourcesContent":["/**\n * GCP authentication utilities.\n *\n * Adapted from: https://github.com/kriasoft/web-auth-library\n * Original source: web-auth-library by Kriasoft\n * License: MIT (https://github.com/kriasoft/web-auth-library/blob/main/LICENSE)\n */\n\nimport { AuthError } from \"../utils/errors.js\";\nimport { iife } from \"../utils/misc.js\";\n\ntype JoseModule = typeof import(\"jose\");\n\nlet joseModulePromise: Promise<JoseModule> | undefined;\n\nasync function getJose(): Promise<JoseModule> {\n  joseModulePromise ??= import(\"jose\");\n  return joseModulePromise;\n}\n\n/**\n * Google Cloud Platform service account credentials interface.\n *\n * This interface represents the structure of a GCP service account key file,\n * which is used for authenticating with Google Cloud APIs. Service account\n * keys can be downloaded from the Google Cloud Console and contain all the\n * information needed to authenticate as a service account.\n *\n * @see https://cloud.google.com/iam/docs/creating-managing-service-account-keys\n */\nexport interface GCPCredentials {\n  /** The type of credential, typically \"service_account\" */\n  type: string;\n  /** The GCP project ID associated with this service account */\n  project_id: string;\n  /** The unique identifier for the private key */\n  private_key_id: string;\n  /** The RSA private key in PEM format used for signing JWTs */\n  private_key: string;\n  /** The unique client ID for this service account */\n  client_id: string;\n  /** The email address of the service account */\n  client_email: string;\n  /** The OAuth2 authorization endpoint URI */\n  auth_uri: string;\n  /** The OAuth2 token endpoint URI where access tokens are requested */\n  token_uri: string;\n  /** The URL for the OAuth2 provider's x509 certificate */\n  auth_provider_x509_cert_url: string;\n  /** The URL for this service account's x509 certificate */\n  client_x509_cert_url: string;\n}\n\ninterface CacheValue {\n  /** Unix timestamp (in seconds) when this cache entry was created */\n  created: number;\n  /** Promise that resolves to the token and its expiration time */\n  promise: Promise<{ token: string; expires: number }>;\n}\n\nconst cache = new Map<string, CacheValue>();\nconst CACHE_MAX_AGE = 60 * 60; // 1 hour\n\n/**\n * Normalizes GCP credentials to a frozen GCPCredentials object.\n *\n * This function accepts credentials in either string (JSON) or object format\n * and ensures the returned value is a frozen (immutable) GCPCredentials object.\n * Freezing the credentials prevents accidental modification and ensures\n * consistency throughout the application lifecycle.\n *\n * @param credentials - The GCP service account credentials, either as a JSON string\n *                      or as a GCPCredentials object\n * @returns A frozen GCPCredentials object that cannot be modified\n *\n * @example\n * ```typescript\n * // From JSON string\n * const creds = normalizeGCPCredentials('{\"type\":\"service_account\",...}');\n *\n * // From object\n * const creds = normalizeGCPCredentials({\n *   type: \"service_account\",\n *   project_id: \"my-project\",\n *   // ... other fields\n * });\n * ```\n */\nexport function normalizeGCPCredentials(\n  credentials: string | GCPCredentials\n): GCPCredentials {\n  return typeof credentials === \"string\"\n    ? Object.freeze(JSON.parse(credentials))\n    : Object.isFrozen(credentials)\n      ? credentials\n      : Object.freeze(credentials);\n}\n\n/**\n * Imports and returns the private key from GCP credentials for JWT signing.\n *\n * This function extracts the RSA private key from the service account credentials\n * and imports it using the PKCS#8 format with the RS256 algorithm. The returned\n * key can be used to sign JWTs for authentication with Google Cloud services.\n *\n * @param credentials - The GCP service account credentials containing the private key\n * @returns A Promise that resolves to the imported private key suitable for JWT signing\n *\n * @throws {Error} If the private key format is invalid or cannot be imported\n *\n * @example\n * ```typescript\n * const credentials = normalizeGCPCredentials(credentialsJson);\n * const privateKey = await getGCPPrivateKey(credentials);\n * // Use privateKey for signing operations\n * ```\n */\nexport async function getGCPPrivateKey(credentials: GCPCredentials) {\n  const { importPKCS8 } = await getJose();\n  return importPKCS8(credentials.private_key, \"RS256\");\n}\n\n/**\n * Generates a custom JWT token for authenticating with Google Cloud services.\n *\n * This function creates a signed JWT (JSON Web Token) using the service account's\n * private key. The token includes standard claims such as issuer, audience, subject,\n * issued-at time, and expiration time. This custom token can be exchanged for an\n * access token or ID token through Google's OAuth2 token endpoint.\n *\n * The generated JWT is valid for 1 hour and follows the OAuth 2.0 JWT Bearer\n * Token flow as specified by RFC 7523.\n *\n * @param credentials - The GCP service account credentials used to sign the JWT\n * @returns A Promise that resolves to the signed JWT string\n *\n * @throws {Error} If the private key cannot be imported or the JWT cannot be signed\n *\n * @see https://datatracker.ietf.org/doc/html/rfc7523\n * @see https://cloud.google.com/iam/docs/creating-short-lived-service-account-credentials\n *\n * @example\n * ```typescript\n * const credentials = normalizeGCPCredentials(credentialsJson);\n * const customToken = await getGCPCustomToken(credentials);\n * // Use customToken to request an access token\n * ```\n */\nexport async function getGCPCustomToken(credentials: GCPCredentials) {\n  const { SignJWT } = await getJose();\n  const privateKey = await getGCPPrivateKey(credentials);\n  const customToken = await new SignJWT()\n    .setIssuer(credentials.client_email)\n    .setAudience(credentials.token_uri)\n    .setSubject(credentials.client_email)\n    .setProtectedHeader({ alg: \"RS256\" })\n    .setIssuedAt()\n    .setExpirationTime(\"1h\")\n    .sign(privateKey);\n  return customToken;\n}\n\n/**\n * Retrieves an access token for authenticating with Google Cloud APIs.\n *\n * - Tokens are cached based on the token URI and private key ID\n * - Cache entries are valid for up to 1 hour\n * - Expired tokens trigger automatic refresh\n * - Multiple concurrent requests for the same token are deduplicated\n *\n * The function handles both access tokens and ID tokens, automatically detecting\n * which type is returned by the token endpoint and extracting the appropriate\n * expiration time.\n *\n * @param credentials - The GCP service account credentials used to request the token\n * @returns A Promise that resolves to the access token string\n *\n * @throws {AuthError} If the token request fails (e.g., invalid credentials,\n *                     network error, or API error)\n *\n * @see https://cloud.google.com/iam/docs/creating-short-lived-service-account-credentials\n * @see https://datatracker.ietf.org/doc/html/rfc7523\n *\n * @example\n * ```typescript\n * const credentials = normalizeGCPCredentials(credentialsJson);\n * const accessToken = await getGCPCredentialsAccessToken(credentials);\n *\n * // Use the access token in API requests\n * const response = await fetch('https://api.google.com/...', {\n *   headers: {\n *     'Authorization': `Bearer ${accessToken}`\n *   }\n * });\n * ```\n *\n * @remarks\n * The caching mechanism uses a two-level validation:\n * 1. Cache entry age (must be less than CACHE_MAX_AGE)\n * 2. Token expiration time (must not be expired)\n *\n * This ensures that even if a cache entry is fresh, an expired token\n * will trigger a refresh request.\n */\nexport async function getGCPCredentialsAccessToken(\n  credentials: GCPCredentials\n): Promise<string> {\n  const tokenUrl = credentials.token_uri;\n\n  const cacheKeyUrl = new URL(tokenUrl);\n  cacheKeyUrl.searchParams.set(\"key\", credentials.private_key_id);\n  const cacheKey = cacheKeyUrl.toString();\n\n  // Attempt to retrieve the token from the cache\n  const cacheValue = cache.get(cacheKey);\n  let now = Math.floor(Date.now() / 1000);\n\n  if (cacheValue) {\n    if (cacheValue.created > now - CACHE_MAX_AGE) {\n      let token = await cacheValue.promise;\n\n      if (token.expires > now) {\n        return token.token;\n      } else {\n        const nextValue = cache.get(cacheKey);\n\n        if (nextValue && nextValue !== cacheValue) {\n          token = await nextValue.promise;\n          if (token.expires > now) {\n            return token.token;\n          } else {\n            cache.delete(cacheKey);\n          }\n        }\n      }\n    } else {\n      cache.delete(cacheKey);\n    }\n  }\n\n  const promise = iife(async () => {\n    now = Math.floor(Date.now() / 1000);\n\n    // Request a new token from the Google Cloud API\n    const jwt = await getGCPCustomToken(credentials);\n    const body = new URLSearchParams();\n    body.append(\"grant_type\", \"urn:ietf:params:oauth:grant-type:jwt-bearer\");\n    body.append(\"assertion\", jwt);\n    const res = await fetch(tokenUrl, {\n      method: \"POST\",\n      headers: { \"Content-Type\": \"application/x-www-form-urlencoded\" },\n      body,\n    });\n\n    if (!res.ok) {\n      throw await AuthError.fromResponse(res);\n    }\n\n    const data = await res.json();\n\n    if (\"id_token\" in data) {\n      const { decodeJwt } = await getJose();\n      const claims = decodeJwt(data.id_token);\n      return { token: data.id_token, expires: claims.exp as number };\n    }\n\n    const lastModified = res.headers.get(\"last-modified\");\n    const expires = lastModified\n      ? Math.floor(new Date(lastModified).valueOf() / 1000) + data.expires_in\n      : now + data.expires_in;\n\n    return { expires, token: data.access_token };\n  });\n\n  cache.set(cacheKey, { created: now, promise });\n  return await promise.then((data) => data.token);\n}\n"],"mappings":";;;;;;;;;;AAaA,IAAI;AAEJ,eAAe,UAA+B;CAC5C,sBAAsB,OAAO;CAC7B,OAAO;AACT;AA0CA,MAAM,wBAAQ,IAAI,IAAwB;AAC1C,MAAM,gBAAgB;;;;;;;;;;;;;;;;;;;;;;;;;;AA2BtB,SAAgB,wBACd,aACgB;CAChB,OAAO,OAAO,gBAAgB,WAC1B,OAAO,OAAO,KAAK,MAAM,WAAW,CAAC,IACrC,OAAO,SAAS,WAAW,IACzB,cACA,OAAO,OAAO,WAAW;AACjC;;;;;;;;;;;;;;;;;;;;AAqBA,eAAsB,iBAAiB,aAA6B;CAClE,MAAM,EAAE,gBAAgB,MAAM,QAAQ;CACtC,OAAO,YAAY,YAAY,aAAa,OAAO;AACrD;;;;;;;;;;;;;;;;;;;;;;;;;;;AA4BA,eAAsB,kBAAkB,aAA6B;CACnE,MAAM,EAAE,YAAY,MAAM,QAAQ;CAClC,MAAM,aAAa,MAAM,iBAAiB,WAAW;CASrD,OAAO,MARmB,IAAI,QAAQ,CAAC,CACpC,UAAU,YAAY,YAAY,CAAC,CACnC,YAAY,YAAY,SAAS,CAAC,CAClC,WAAW,YAAY,YAAY,CAAC,CACpC,mBAAmB,EAAE,KAAK,QAAQ,CAAC,CAAC,CACpC,YAAY,CAAC,CACb,kBAAkB,IAAI,CAAC,CACvB,KAAK,UAAU;AAEpB;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AA4CA,eAAsB,6BACpB,aACiB;CACjB,MAAM,WAAW,YAAY;CAE7B,MAAM,cAAc,IAAI,IAAI,QAAQ;CACpC,YAAY,aAAa,IAAI,OAAO,YAAY,cAAc;CAC9D,MAAM,WAAW,YAAY,SAAS;CAGtC,MAAM,aAAa,MAAM,IAAI,QAAQ;CACrC,IAAI,MAAM,KAAK,MAAM,KAAK,IAAI,IAAI,GAAI;CAEtC,IAAI,YACF,IAAI,WAAW,UAAU,MAAM,eAAe;EAC5C,IAAI,QAAQ,MAAM,WAAW;EAE7B,IAAI,MAAM,UAAU,KAClB,OAAO,MAAM;OACR;GACL,MAAM,YAAY,MAAM,IAAI,QAAQ;GAEpC,IAAI,aAAa,cAAc,YAAY;IACzC,QAAQ,MAAM,UAAU;IACxB,IAAI,MAAM,UAAU,KAClB,OAAO,MAAM;SAEb,MAAM,OAAO,QAAQ;GAEzB;EACF;CACF,OACE,MAAM,OAAO,QAAQ;CAIzB,MAAM,UAAU,KAAK,YAAY;EAC/B,MAAM,KAAK,MAAM,KAAK,IAAI,IAAI,GAAI;EAGlC,MAAM,MAAM,MAAM,kBAAkB,WAAW;EAC/C,MAAM,OAAO,IAAI,gBAAgB;EACjC,KAAK,OAAO,cAAc,6CAA6C;EACvE,KAAK,OAAO,aAAa,GAAG;EAC5B,MAAM,MAAM,MAAM,MAAM,UAAU;GAChC,QAAQ;GACR,SAAS,EAAE,gBAAgB,oCAAoC;GAC/D;EACF,CAAC;EAED,IAAI,CAAC,IAAI,IACP,MAAM,MAAM,UAAU,aAAa,GAAG;EAGxC,MAAM,OAAO,MAAM,IAAI,KAAK;EAE5B,IAAI,cAAc,MAAM;GACtB,MAAM,EAAE,cAAc,MAAM,QAAQ;GACpC,MAAM,SAAS,UAAU,KAAK,QAAQ;GACtC,OAAO;IAAE,OAAO,KAAK;IAAU,SAAS,OAAO;GAAc;EAC/D;EAEA,MAAM,eAAe,IAAI,QAAQ,IAAI,eAAe;EAKpD,OAAO;GAAE,SAJO,eACZ,KAAK,MAAM,IAAI,KAAK,YAAY,CAAC,CAAC,QAAQ,IAAI,GAAI,IAAI,KAAK,aAC3D,MAAM,KAAK;GAEG,OAAO,KAAK;EAAa;CAC7C,CAAC;CAED,MAAM,IAAI,UAAU;EAAE,SAAS;EAAK;CAAQ,CAAC;CAC7C,OAAO,MAAM,QAAQ,MAAM,SAAS,KAAK,KAAK;AAChD"}
+{"version":3,"file":"gcp-auth.js","names":[],"sources":["../../src/utils/gcp-auth.ts"],"sourcesContent":["/**\n * GCP authentication utilities.\n *\n * Adapted from: https://github.com/kriasoft/web-auth-library\n * Original source: web-auth-library by Kriasoft\n * License: MIT (https://github.com/kriasoft/web-auth-library/blob/main/LICENSE)\n */\n\nimport { AuthError } from \"../utils/errors.js\";\nimport { iife } from \"../utils/misc.js\";\n\ntype JoseModule = typeof import(\"jose\");\n\nlet joseModulePromise: Promise<JoseModule> | undefined;\n\nasync function getJose(): Promise<JoseModule> {\n  joseModulePromise ??= import(\"jose\");\n  return joseModulePromise;\n}\n\n/**\n * Google Cloud Platform service account credentials interface.\n *\n * This interface represents the structure of a GCP service account key file,\n * which is used for authenticating with Google Cloud APIs. Service account\n * keys can be downloaded from the Google Cloud Console and contain all the\n * information needed to authenticate as a service account.\n *\n * @see https://cloud.google.com/iam/docs/creating-managing-service-account-keys\n */\nexport interface GCPCredentials {\n  /** The type of credential, typically \"service_account\" */\n  type: string;\n  /** The GCP project ID associated with this service account */\n  project_id: string;\n  /** The unique identifier for the private key */\n  private_key_id: string;\n  /** The RSA private key in PEM format used for signing JWTs */\n  private_key: string;\n  /** The unique client ID for this service account */\n  client_id: string;\n  /** The email address of the service account */\n  client_email: string;\n  /** The OAuth2 authorization endpoint URI */\n  auth_uri: string;\n  /** The OAuth2 token endpoint URI where access tokens are requested */\n  token_uri: string;\n  /** The URL for the OAuth2 provider's x509 certificate */\n  auth_provider_x509_cert_url: string;\n  /** The URL for this service account's x509 certificate */\n  client_x509_cert_url: string;\n}\n\ninterface CacheValue {\n  /** Unix timestamp (in seconds) when this cache entry was created */\n  created: number;\n  /** Promise that resolves to the token and its expiration time */\n  promise: Promise<{ token: string; expires: number }>;\n}\n\nconst cache = new Map<string, CacheValue>();\nconst CACHE_MAX_AGE = 60 * 60; // 1 hour\n\n/**\n * Normalizes GCP credentials to a frozen GCPCredentials object.\n *\n * This function accepts credentials in either string (JSON) or object format\n * and ensures the returned value is a frozen (immutable) GCPCredentials object.\n * Freezing the credentials prevents accidental modification and ensures\n * consistency throughout the application lifecycle.\n *\n * @param credentials - The GCP service account credentials, either as a JSON string\n *                      or as a GCPCredentials object\n * @returns A frozen GCPCredentials object that cannot be modified\n *\n * @example\n * ```typescript\n * // From JSON string\n * const creds = normalizeGCPCredentials('{\"type\":\"service_account\",...}');\n *\n * // From object\n * const creds = normalizeGCPCredentials({\n *   type: \"service_account\",\n *   project_id: \"my-project\",\n *   // ... other fields\n * });\n * ```\n */\nexport function normalizeGCPCredentials(\n  credentials: string | GCPCredentials\n): GCPCredentials {\n  return typeof credentials === \"string\"\n    ? Object.freeze(JSON.parse(credentials))\n    : Object.isFrozen(credentials)\n      ? credentials\n      : Object.freeze(credentials);\n}\n\n/**\n * Imports and returns the private key from GCP credentials for JWT signing.\n *\n * This function extracts the RSA private key from the service account credentials\n * and imports it using the PKCS#8 format with the RS256 algorithm. The returned\n * key can be used to sign JWTs for authentication with Google Cloud services.\n *\n * @param credentials - The GCP service account credentials containing the private key\n * @returns A Promise that resolves to the imported private key suitable for JWT signing\n *\n * @throws {Error} If the private key format is invalid or cannot be imported\n *\n * @example\n * ```typescript\n * const credentials = normalizeGCPCredentials(credentialsJson);\n * const privateKey = await getGCPPrivateKey(credentials);\n * // Use privateKey for signing operations\n * ```\n */\nexport async function getGCPPrivateKey(credentials: GCPCredentials) {\n  const { importPKCS8 } = await getJose();\n  return importPKCS8(credentials.private_key, \"RS256\");\n}\n\n/**\n * Generates a custom JWT token for authenticating with Google Cloud services.\n *\n * This function creates a signed JWT (JSON Web Token) using the service account's\n * private key. The token includes standard claims such as issuer, audience, subject,\n * issued-at time, and expiration time. This custom token can be exchanged for an\n * access token or ID token through Google's OAuth2 token endpoint.\n *\n * The generated JWT is valid for 1 hour and follows the OAuth 2.0 JWT Bearer\n * Token flow as specified by RFC 7523.\n *\n * @param credentials - The GCP service account credentials used to sign the JWT\n * @returns A Promise that resolves to the signed JWT string\n *\n * @throws {Error} If the private key cannot be imported or the JWT cannot be signed\n *\n * @see https://datatracker.ietf.org/doc/html/rfc7523\n * @see https://cloud.google.com/iam/docs/creating-short-lived-service-account-credentials\n *\n * @example\n * ```typescript\n * const credentials = normalizeGCPCredentials(credentialsJson);\n * const customToken = await getGCPCustomToken(credentials);\n * // Use customToken to request an access token\n * ```\n */\nexport async function getGCPCustomToken(credentials: GCPCredentials) {\n  const { SignJWT } = await getJose();\n  const privateKey = await getGCPPrivateKey(credentials);\n  const customToken = await new SignJWT()\n    .setIssuer(credentials.client_email)\n    .setAudience(credentials.token_uri)\n    .setSubject(credentials.client_email)\n    .setProtectedHeader({ alg: \"RS256\" })\n    .setIssuedAt()\n    .setExpirationTime(\"1h\")\n    .sign(privateKey);\n  return customToken;\n}\n\n/**\n * Retrieves an access token for authenticating with Google Cloud APIs.\n *\n * - Tokens are cached based on the token URI and private key ID\n * - Cache entries are valid for up to 1 hour\n * - Expired tokens trigger automatic refresh\n * - Multiple concurrent requests for the same token are deduplicated\n *\n * The function handles both access tokens and ID tokens, automatically detecting\n * which type is returned by the token endpoint and extracting the appropriate\n * expiration time.\n *\n * @param credentials - The GCP service account credentials used to request the token\n * @returns A Promise that resolves to the access token string\n *\n * @throws {AuthError} If the token request fails (e.g., invalid credentials,\n *                     network error, or API error)\n *\n * @see https://cloud.google.com/iam/docs/creating-short-lived-service-account-credentials\n * @see https://datatracker.ietf.org/doc/html/rfc7523\n *\n * @example\n * ```typescript\n * const credentials = normalizeGCPCredentials(credentialsJson);\n * const accessToken = await getGCPCredentialsAccessToken(credentials);\n *\n * // Use the access token in API requests\n * const response = await fetch('https://api.google.com/...', {\n *   headers: {\n *     'Authorization': `Bearer ${accessToken}`\n *   }\n * });\n * ```\n *\n * @remarks\n * The caching mechanism uses a two-level validation:\n * 1. Cache entry age (must be less than CACHE_MAX_AGE)\n * 2. Token expiration time (must not be expired)\n *\n * This ensures that even if a cache entry is fresh, an expired token\n * will trigger a refresh request.\n */\nexport async function getGCPCredentialsAccessToken(\n  credentials: GCPCredentials\n): Promise<string> {\n  const tokenUrl = credentials.token_uri;\n\n  const cacheKeyUrl = new URL(tokenUrl);\n  cacheKeyUrl.searchParams.set(\"key\", credentials.private_key_id);\n  const cacheKey = cacheKeyUrl.toString();\n\n  // Attempt to retrieve the token from the cache\n  const cacheValue = cache.get(cacheKey);\n  let now = Math.floor(Date.now() / 1000);\n\n  if (cacheValue) {\n    if (cacheValue.created > now - CACHE_MAX_AGE) {\n      let token = await cacheValue.promise;\n\n      if (token.expires > now) {\n        return token.token;\n      } else {\n        const nextValue = cache.get(cacheKey);\n\n        if (nextValue && nextValue !== cacheValue) {\n          token = await nextValue.promise;\n          if (token.expires > now) {\n            return token.token;\n          } else {\n            cache.delete(cacheKey);\n          }\n        }\n      }\n    } else {\n      cache.delete(cacheKey);\n    }\n  }\n\n  const promise = iife(async () => {\n    now = Math.floor(Date.now() / 1000);\n\n    // Request a new token from the Google Cloud API\n    const jwt = await getGCPCustomToken(credentials);\n    const body = new URLSearchParams();\n    body.append(\"grant_type\", \"urn:ietf:params:oauth:grant-type:jwt-bearer\");\n    body.append(\"assertion\", jwt);\n    const res = await fetch(tokenUrl, {\n      method: \"POST\",\n      headers: { \"Content-Type\": \"application/x-www-form-urlencoded\" },\n      body,\n    });\n\n    if (!res.ok) {\n      throw await AuthError.fromResponse(res);\n    }\n\n    const data = await res.json();\n\n    if (\"id_token\" in data) {\n      const { decodeJwt } = await getJose();\n      const claims = decodeJwt(data.id_token);\n      return { token: data.id_token, expires: claims.exp as number };\n    }\n\n    const lastModified = res.headers.get(\"last-modified\");\n    const expires = lastModified\n      ? Math.floor(new Date(lastModified).valueOf() / 1000) + data.expires_in\n      : now + data.expires_in;\n\n    return { expires, token: data.access_token };\n  });\n\n  cache.set(cacheKey, { created: now, promise });\n  return await promise.then((data) => data.token);\n}\n"],"mappings":";;;;;;;;;;AAaA,IAAI;AAEJ,eAAe,UAA+B;CAC5C,sBAAsB,OAAO;CAC7B,OAAO;AACT;AA0CA,MAAM,wBAAQ,IAAI,IAAwB;AAC1C,MAAM,gBAAgB;;;;;;;;;;;;;;;;;;;;;;;;;;AA2BtB,SAAgB,wBACd,aACgB;CAChB,OAAO,OAAO,gBAAgB,WAC1B,OAAO,OAAO,KAAK,MAAM,WAAW,CAAC,IACrC,OAAO,SAAS,WAAW,IACzB,cACA,OAAO,OAAO,WAAW;AACjC;;;;;;;;;;;;;;;;;;;;AAqBA,eAAsB,iBAAiB,aAA6B;CAClE,MAAM,EAAE,gBAAgB,MAAM,QAAQ;CACtC,OAAO,YAAY,YAAY,aAAa,OAAO;AACrD;;;;;;;;;;;;;;;;;;;;;;;;;;;AA4BA,eAAsB,kBAAkB,aAA6B;CACnE,MAAM,EAAE,YAAY,MAAM,QAAQ;CAClC,MAAM,aAAa,MAAM,iBAAiB,WAAW;CASrD,OAAO,MARmB,IAAI,QAAQ,CAAC,CACpC,UAAU,YAAY,YAAY,CAAC,CACnC,YAAY,YAAY,SAAS,CAAC,CAClC,WAAW,YAAY,YAAY,CAAC,CACpC,mBAAmB,EAAE,KAAK,QAAQ,CAAC,CAAC,CACpC,YAAY,CAAC,CACb,kBAAkB,IAAI,CAAC,CACvB,KAAK,UAAU;AAEpB;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AA4CA,eAAsB,6BACpB,aACiB;CACjB,MAAM,WAAW,YAAY;CAE7B,MAAM,cAAc,IAAI,IAAI,QAAQ;CACpC,YAAY,aAAa,IAAI,OAAO,YAAY,cAAc;CAC9D,MAAM,WAAW,YAAY,SAAS;CAGtC,MAAM,aAAa,MAAM,IAAI,QAAQ;CACrC,IAAI,MAAM,KAAK,MAAM,KAAK,IAAI,IAAI,GAAI;CAEtC,IAAI,YAAY;EACd,IAAI,WAAW,UAAU,MAAM,eAAe;GAC5C,IAAI,QAAQ,MAAM,WAAW;GAE7B,IAAI,MAAM,UAAU,KAClB,OAAO,MAAM;QACR;IACL,MAAM,YAAY,MAAM,IAAI,QAAQ;IAEpC,IAAI,aAAa,cAAc,YAAY;KACzC,QAAQ,MAAM,UAAU;KACxB,IAAI,MAAM,UAAU,KAClB,OAAO,MAAM;UAEb,MAAM,OAAO,QAAQ;IAEzB;GACF;EACF,OACE,MAAM,OAAO,QAAQ;CAEzB;CAEA,MAAM,UAAU,KAAK,YAAY;EAC/B,MAAM,KAAK,MAAM,KAAK,IAAI,IAAI,GAAI;EAGlC,MAAM,MAAM,MAAM,kBAAkB,WAAW;EAC/C,MAAM,OAAO,IAAI,gBAAgB;EACjC,KAAK,OAAO,cAAc,6CAA6C;EACvE,KAAK,OAAO,aAAa,GAAG;EAC5B,MAAM,MAAM,MAAM,MAAM,UAAU;GAChC,QAAQ;GACR,SAAS,EAAE,gBAAgB,oCAAoC;GAC/D;EACF,CAAC;EAED,IAAI,CAAC,IAAI,IACP,MAAM,MAAM,UAAU,aAAa,GAAG;EAGxC,MAAM,OAAO,MAAM,IAAI,KAAK;EAE5B,IAAI,cAAc,MAAM;GACtB,MAAM,EAAE,cAAc,MAAM,QAAQ;GACpC,MAAM,SAAS,UAAU,KAAK,QAAQ;GACtC,OAAO;IAAE,OAAO,KAAK;IAAU,SAAS,OAAO;GAAc;EAC/D;EAEA,MAAM,eAAe,IAAI,QAAQ,IAAI,eAAe;EAKpD,OAAO;GAAE,SAJO,eACZ,KAAK,MAAM,IAAI,KAAK,YAAY,CAAC,CAAC,QAAQ,IAAI,GAAI,IAAI,KAAK,aAC3D,MAAM,KAAK;GAEG,OAAO,KAAK;EAAa;CAC7C,CAAC;CAED,MAAM,IAAI,UAAU;EAAE,SAAS;EAAK;CAAQ,CAAC;CAC7C,OAAO,MAAM,QAAQ,MAAM,SAAS,KAAK,KAAK;AAChD"}

package/dist/utils/stream_events.cjs

@@ -51,54 +51,55 @@ async function* convertGoogleGeminiStream(source, options = {}) {
 		const parts = candidate?.content?.parts;
 		if (!parts) continue;
 		let toolIdx = 0;
-		for (const part of parts) if (part.text) if (part.thought) {
-			const { index, isNew } = getOrCreateBlockIndex("reasoning", {
-				type: "reasoning",
-				reasoning: ""
-			});
-			if (isNew) yield {
-				event: "content-block-start",
-				index,
-				content: {
+		for (const part of parts) if (part.text) {
+			if (part.thought) {
+				const { index, isNew } = getOrCreateBlockIndex("reasoning", {
 					type: "reasoning",
 					reasoning: ""
-				}
-			};
-			const acc = blockAccumulators.get(index);
-			acc.reasoning = (acc.reasoning ?? "") + part.text;
-			yield {
-				event: "content-block-delta",
-				index,
-				delta: {
-					type: "reasoning-delta",
-					reasoning: part.text
-				}
-			};
-		} else {
-			const { index, isNew } = getOrCreateBlockIndex("text", {
-				type: "text",
-				text: ""
-			});
-			if (isNew) yield {
-				event: "content-block-start",
-				index,
-				content: {
+				});
+				if (isNew) yield {
+					event: "content-block-start",
+					index,
+					content: {
+						type: "reasoning",
+						reasoning: ""
+					}
+				};
+				const acc = blockAccumulators.get(index);
+				acc.reasoning = (acc.reasoning ?? "") + part.text;
+				yield {
+					event: "content-block-delta",
+					index,
+					delta: {
+						type: "reasoning-delta",
+						reasoning: part.text
+					}
+				};
+			} else {
+				const { index, isNew } = getOrCreateBlockIndex("text", {
 					type: "text",
 					text: ""
-				}
-			};
-			const acc = blockAccumulators.get(index);
-			acc.text = (acc.text ?? "") + part.text;
-			yield {
-				event: "content-block-delta",
-				index,
-				delta: {
-					type: "text-delta",
-					text: part.text
-				}
-			};
-		}
-		else if (part.functionCall) {
+				});
+				if (isNew) yield {
+					event: "content-block-start",
+					index,
+					content: {
+						type: "text",
+						text: ""
+					}
+				};
+				const acc = blockAccumulators.get(index);
+				acc.text = (acc.text ?? "") + part.text;
+				yield {
+					event: "content-block-delta",
+					index,
+					delta: {
+						type: "text-delta",
+						text: part.text
+					}
+				};
+			}
+		} else if (part.functionCall) {
 			const key = `tool:${toolIdx}`;
 			const args = JSON.stringify(part.functionCall.args ?? {});
 			const { index, isNew } = getOrCreateBlockIndex(key, {

package/dist/utils/stream_events.cjs.map

@@ -1 +1 @@
-{"version":3,"file":"stream_events.cjs","names":[],"sources":["../../src/utils/stream_events.ts"],"sourcesContent":["/**\n * Converts Gemini stream responses into LangChain ChatModelStreamEvents.\n *\n * @module\n */\n\nimport { finalizeContentBlock } from \"@langchain/core/language_models/compat\";\nimport type {\n  ChatModelStreamEvent,\n  FinishReason,\n} from \"@langchain/core/language_models/event\";\nimport type { ContentBlock, UsageMetadata } from \"@langchain/core/messages\";\nimport type { Gemini } from \"../chat_models/api-types.js\";\n\nexport type GeminiStreamResponse = Gemini.GenerateContentResponse;\n\nexport interface ConvertGoogleGeminiStreamOptions {\n  streamUsage?: boolean;\n}\n\ntype BlockKey = \"text\" | \"reasoning\" | `tool:${number}`;\n\nexport async function* convertGoogleGeminiStream(\n  source: AsyncIterable<GeminiStreamResponse>,\n  options: ConvertGoogleGeminiStreamOptions = {}\n): AsyncGenerator<ChatModelStreamEvent> {\n  const shouldStreamUsage = options.streamUsage ?? true;\n  const blockAccumulators = new Map<\n    number,\n    // oxlint-disable-next-line @typescript-eslint/no-explicit-any\n    Record<string, any>\n  >();\n  const blockKeyToIndex = new Map<BlockKey, number>();\n  let nextBlockIndex = 0;\n  let messageStarted = false;\n  let usageSnapshot: UsageMetadata | undefined;\n  let finishReason: FinishReason = \"stop\";\n\n  const getOrCreateBlockIndex = (\n    key: BlockKey,\n    initial: Record<string, unknown>\n  ): { index: number; isNew: boolean } => {\n    const existing = blockKeyToIndex.get(key);\n    if (existing !== undefined) {\n      return { index: existing, isNew: false };\n    }\n    const index = nextBlockIndex++;\n    blockKeyToIndex.set(key, index);\n    blockAccumulators.set(index, { ...initial });\n    return { index, isNew: true };\n  };\n\n  for await (const response of source) {\n    if (!messageStarted) {\n      messageStarted = true;\n      yield { event: \"message-start\" as const };\n    }\n\n    const usageMetadata = response.usageMetadata ?? response.usage_metadata;\n    if (shouldStreamUsage && usageMetadata) {\n      const input = usageMetadata.promptTokenCount ?? 0;\n      const output = usageMetadata.candidatesTokenCount ?? 0;\n      usageSnapshot = {\n        input_tokens: input,\n        output_tokens: output,\n        total_tokens: usageMetadata.totalTokenCount ?? input + output,\n      };\n      yield { event: \"usage\" as const, usage: usageSnapshot };\n    }\n\n    const candidate = response.candidates?.[0];\n    if (candidate?.finishReason) {\n      finishReason = mapGeminiFinishReason(candidate.finishReason);\n    }\n\n    const parts = candidate?.content?.parts;\n    if (!parts) continue;\n\n    let toolIdx = 0;\n    for (const part of parts) {\n      if (part.text) {\n        if (part.thought) {\n          const key: BlockKey = \"reasoning\";\n          const { index, isNew } = getOrCreateBlockIndex(key, {\n            type: \"reasoning\",\n            reasoning: \"\",\n          });\n          if (isNew) {\n            yield {\n              event: \"content-block-start\" as const,\n              index,\n              content: { type: \"reasoning\", reasoning: \"\" } as ContentBlock,\n            };\n          }\n          const acc = blockAccumulators.get(index)!;\n          acc.reasoning = (acc.reasoning ?? \"\") + part.text;\n          yield {\n            event: \"content-block-delta\" as const,\n            index,\n            delta: { type: \"reasoning-delta\" as const, reasoning: part.text },\n          };\n        } else {\n          const key: BlockKey = \"text\";\n          const { index, isNew } = getOrCreateBlockIndex(key, {\n            type: \"text\",\n            text: \"\",\n          });\n          if (isNew) {\n            yield {\n              event: \"content-block-start\" as const,\n              index,\n              content: { type: \"text\", text: \"\" } as ContentBlock,\n            };\n          }\n          const acc = blockAccumulators.get(index)!;\n          acc.text = (acc.text ?? \"\") + part.text;\n          yield {\n            event: \"content-block-delta\" as const,\n            index,\n            delta: { type: \"text-delta\" as const, text: part.text },\n          };\n        }\n      } else if (part.functionCall) {\n        const key: BlockKey = `tool:${toolIdx}`;\n        const args = JSON.stringify(part.functionCall.args ?? {});\n        const { index, isNew } = getOrCreateBlockIndex(key, {\n          type: \"tool_call_chunk\",\n          name: part.functionCall.name,\n          args: \"\",\n          index: toolIdx,\n        });\n        if (isNew) {\n          yield {\n            event: \"content-block-start\" as const,\n            index,\n            content: {\n              type: \"tool_call_chunk\",\n              name: part.functionCall.name,\n              args: \"\",\n              index: toolIdx,\n            } as ContentBlock,\n          };\n        }\n        const acc = blockAccumulators.get(index)!;\n        acc.args = args;\n        yield {\n          event: \"content-block-delta\" as const,\n          index,\n          delta: {\n            type: \"block-delta\" as const,\n            fields: {\n              type: \"tool_call_chunk\",\n              name: acc.name,\n              args: acc.args,\n            },\n          },\n        };\n        toolIdx += 1;\n      }\n    }\n  }\n\n  for (const [index, acc] of blockAccumulators) {\n    yield {\n      event: \"content-block-finish\" as const,\n      index,\n      content: finalizeContentBlock(acc as ContentBlock),\n    };\n  }\n\n  yield {\n    event: \"message-finish\" as const,\n    reason: finishReason,\n    ...(usageSnapshot ? { usage: usageSnapshot } : {}),\n    responseMetadata: { model_provider: \"google\" },\n  };\n}\n\nfunction mapGeminiFinishReason(reason: string): FinishReason {\n  switch (reason.toLowerCase()) {\n    case \"max_tokens\":\n    case \"max-token\":\n    case \"max_token\":\n      return \"length\";\n    case \"safety\":\n    case \"recitation\":\n    case \"language\":\n    case \"blocklist\":\n    case \"prohibited_content\":\n    case \"prohibited-content\":\n    case \"spii\":\n    case \"image_safety\":\n    case \"image-safety\":\n    case \"image_prohibited_content\":\n    case \"image-prohibited-content\":\n    case \"image_recitation\":\n    case \"image-recitation\":\n      return \"content_filter\";\n    default:\n      return \"stop\";\n  }\n}\n"],"mappings":";;;;;;;AAsBA,gBAAuB,0BACrB,QACA,UAA4C,CAAC,GACP;CACtC,MAAM,oBAAoB,QAAQ,eAAe;CACjD,MAAM,oCAAoB,IAAI,IAI5B;CACF,MAAM,kCAAkB,IAAI,IAAsB;CAClD,IAAI,iBAAiB;CACrB,IAAI,iBAAiB;CACrB,IAAI;CACJ,IAAI,eAA6B;CAEjC,MAAM,yBACJ,KACA,YACsC;EACtC,MAAM,WAAW,gBAAgB,IAAI,GAAG;EACxC,IAAI,aAAa,KAAA,GACf,OAAO;GAAE,OAAO;GAAU,OAAO;EAAM;EAEzC,MAAM,QAAQ;EACd,gBAAgB,IAAI,KAAK,KAAK;EAC9B,kBAAkB,IAAI,OAAO,EAAE,GAAG,QAAQ,CAAC;EAC3C,OAAO;GAAE;GAAO,OAAO;EAAK;CAC9B;CAEA,WAAW,MAAM,YAAY,QAAQ;EACnC,IAAI,CAAC,gBAAgB;GACnB,iBAAiB;GACjB,MAAM,EAAE,OAAO,gBAAyB;EAC1C;EAEA,MAAM,gBAAgB,SAAS,iBAAiB,SAAS;EACzD,IAAI,qBAAqB,eAAe;GACtC,MAAM,QAAQ,cAAc,oBAAoB;GAChD,MAAM,SAAS,cAAc,wBAAwB;GACrD,gBAAgB;IACd,cAAc;IACd,eAAe;IACf,cAAc,cAAc,mBAAmB,QAAQ;GACzD;GACA,MAAM;IAAE,OAAO;IAAkB,OAAO;GAAc;EACxD;EAEA,MAAM,YAAY,SAAS,aAAa;EACxC,IAAI,WAAW,cACb,eAAe,sBAAsB,UAAU,YAAY;EAG7D,MAAM,QAAQ,WAAW,SAAS;EAClC,IAAI,CAAC,OAAO;EAEZ,IAAI,UAAU;EACd,KAAK,MAAM,QAAQ,OACjB,IAAI,KAAK,MACP,IAAI,KAAK,SAAS;GAEhB,MAAM,EAAE,OAAO,UAAU,sBAAsB,aAAK;IAClD,MAAM;IACN,WAAW;GACb,CAAC;GACD,IAAI,OACF,MAAM;IACJ,OAAO;IACP;IACA,SAAS;KAAE,MAAM;KAAa,WAAW;IAAG;GAC9C;GAEF,MAAM,MAAM,kBAAkB,IAAI,KAAK;GACvC,IAAI,aAAa,IAAI,aAAa,MAAM,KAAK;GAC7C,MAAM;IACJ,OAAO;IACP;IACA,OAAO;KAAE,MAAM;KAA4B,WAAW,KAAK;IAAK;GAClE;EACF,OAAO;GAEL,MAAM,EAAE,OAAO,UAAU,sBAAsB,QAAK;IAClD,MAAM;IACN,MAAM;GACR,CAAC;GACD,IAAI,OACF,MAAM;IACJ,OAAO;IACP;IACA,SAAS;KAAE,MAAM;KAAQ,MAAM;IAAG;GACpC;GAEF,MAAM,MAAM,kBAAkB,IAAI,KAAK;GACvC,IAAI,QAAQ,IAAI,QAAQ,MAAM,KAAK;GACnC,MAAM;IACJ,OAAO;IACP;IACA,OAAO;KAAE,MAAM;KAAuB,MAAM,KAAK;IAAK;GACxD;EACF;OACK,IAAI,KAAK,cAAc;GAC5B,MAAM,MAAgB,QAAQ;GAC9B,MAAM,OAAO,KAAK,UAAU,KAAK,aAAa,QAAQ,CAAC,CAAC;GACxD,MAAM,EAAE,OAAO,UAAU,sBAAsB,KAAK;IAClD,MAAM;IACN,MAAM,KAAK,aAAa;IACxB,MAAM;IACN,OAAO;GACT,CAAC;GACD,IAAI,OACF,MAAM;IACJ,OAAO;IACP;IACA,SAAS;KACP,MAAM;KACN,MAAM,KAAK,aAAa;KACxB,MAAM;KACN,OAAO;IACT;GACF;GAEF,MAAM,MAAM,kBAAkB,IAAI,KAAK;GACvC,IAAI,OAAO;GACX,MAAM;IACJ,OAAO;IACP;IACA,OAAO;KACL,MAAM;KACN,QAAQ;MACN,MAAM;MACN,MAAM,IAAI;MACV,MAAM,IAAI;KACZ;IACF;GACF;GACA,WAAW;EACb;CAEJ;CAEA,KAAK,MAAM,CAAC,OAAO,QAAQ,mBACzB,MAAM;EACJ,OAAO;EACP;EACA,UAAA,GAAA,uCAAA,qBAAA,CAA8B,GAAmB;CACnD;CAGF,MAAM;EACJ,OAAO;EACP,QAAQ;EACR,GAAI,gBAAgB,EAAE,OAAO,cAAc,IAAI,CAAC;EAChD,kBAAkB,EAAE,gBAAgB,SAAS;CAC/C;AACF;AAEA,SAAS,sBAAsB,QAA8B;CAC3D,QAAQ,OAAO,YAAY,GAA3B;EACE,KAAK;EACL,KAAK;EACL,KAAK,aACH,OAAO;EACT,KAAK;EACL,KAAK;EACL,KAAK;EACL,KAAK;EACL,KAAK;EACL,KAAK;EACL,KAAK;EACL,KAAK;EACL,KAAK;EACL,KAAK;EACL,KAAK;EACL,KAAK;EACL,KAAK,oBACH,OAAO;EACT,SACE,OAAO;CACX;AACF"}
+{"version":3,"file":"stream_events.cjs","names":["finalizeContentBlock"],"sources":["../../src/utils/stream_events.ts"],"sourcesContent":["/**\n * Converts Gemini stream responses into LangChain ChatModelStreamEvents.\n *\n * @module\n */\n\nimport { finalizeContentBlock } from \"@langchain/core/language_models/compat\";\nimport type {\n  ChatModelStreamEvent,\n  FinishReason,\n} from \"@langchain/core/language_models/event\";\nimport type { ContentBlock, UsageMetadata } from \"@langchain/core/messages\";\nimport type { Gemini } from \"../chat_models/api-types.js\";\n\nexport type GeminiStreamResponse = Gemini.GenerateContentResponse;\n\nexport interface ConvertGoogleGeminiStreamOptions {\n  streamUsage?: boolean;\n}\n\ntype BlockKey = \"text\" | \"reasoning\" | `tool:${number}`;\n\nexport async function* convertGoogleGeminiStream(\n  source: AsyncIterable<GeminiStreamResponse>,\n  options: ConvertGoogleGeminiStreamOptions = {}\n): AsyncGenerator<ChatModelStreamEvent> {\n  const shouldStreamUsage = options.streamUsage ?? true;\n  const blockAccumulators = new Map<\n    number,\n    // oxlint-disable-next-line @typescript-eslint/no-explicit-any\n    Record<string, any>\n  >();\n  const blockKeyToIndex = new Map<BlockKey, number>();\n  let nextBlockIndex = 0;\n  let messageStarted = false;\n  let usageSnapshot: UsageMetadata | undefined;\n  let finishReason: FinishReason = \"stop\";\n\n  const getOrCreateBlockIndex = (\n    key: BlockKey,\n    initial: Record<string, unknown>\n  ): { index: number; isNew: boolean } => {\n    const existing = blockKeyToIndex.get(key);\n    if (existing !== undefined) {\n      return { index: existing, isNew: false };\n    }\n    const index = nextBlockIndex++;\n    blockKeyToIndex.set(key, index);\n    blockAccumulators.set(index, { ...initial });\n    return { index, isNew: true };\n  };\n\n  for await (const response of source) {\n    if (!messageStarted) {\n      messageStarted = true;\n      yield { event: \"message-start\" as const };\n    }\n\n    const usageMetadata = response.usageMetadata ?? response.usage_metadata;\n    if (shouldStreamUsage && usageMetadata) {\n      const input = usageMetadata.promptTokenCount ?? 0;\n      const output = usageMetadata.candidatesTokenCount ?? 0;\n      usageSnapshot = {\n        input_tokens: input,\n        output_tokens: output,\n        total_tokens: usageMetadata.totalTokenCount ?? input + output,\n      };\n      yield { event: \"usage\" as const, usage: usageSnapshot };\n    }\n\n    const candidate = response.candidates?.[0];\n    if (candidate?.finishReason) {\n      finishReason = mapGeminiFinishReason(candidate.finishReason);\n    }\n\n    const parts = candidate?.content?.parts;\n    if (!parts) continue;\n\n    let toolIdx = 0;\n    for (const part of parts) {\n      if (part.text) {\n        if (part.thought) {\n          const key: BlockKey = \"reasoning\";\n          const { index, isNew } = getOrCreateBlockIndex(key, {\n            type: \"reasoning\",\n            reasoning: \"\",\n          });\n          if (isNew) {\n            yield {\n              event: \"content-block-start\" as const,\n              index,\n              content: { type: \"reasoning\", reasoning: \"\" } as ContentBlock,\n            };\n          }\n          const acc = blockAccumulators.get(index)!;\n          acc.reasoning = (acc.reasoning ?? \"\") + part.text;\n          yield {\n            event: \"content-block-delta\" as const,\n            index,\n            delta: { type: \"reasoning-delta\" as const, reasoning: part.text },\n          };\n        } else {\n          const key: BlockKey = \"text\";\n          const { index, isNew } = getOrCreateBlockIndex(key, {\n            type: \"text\",\n            text: \"\",\n          });\n          if (isNew) {\n            yield {\n              event: \"content-block-start\" as const,\n              index,\n              content: { type: \"text\", text: \"\" } as ContentBlock,\n            };\n          }\n          const acc = blockAccumulators.get(index)!;\n          acc.text = (acc.text ?? \"\") + part.text;\n          yield {\n            event: \"content-block-delta\" as const,\n            index,\n            delta: { type: \"text-delta\" as const, text: part.text },\n          };\n        }\n      } else if (part.functionCall) {\n        const key: BlockKey = `tool:${toolIdx}`;\n        const args = JSON.stringify(part.functionCall.args ?? {});\n        const { index, isNew } = getOrCreateBlockIndex(key, {\n          type: \"tool_call_chunk\",\n          name: part.functionCall.name,\n          args: \"\",\n          index: toolIdx,\n        });\n        if (isNew) {\n          yield {\n            event: \"content-block-start\" as const,\n            index,\n            content: {\n              type: \"tool_call_chunk\",\n              name: part.functionCall.name,\n              args: \"\",\n              index: toolIdx,\n            } as ContentBlock,\n          };\n        }\n        const acc = blockAccumulators.get(index)!;\n        acc.args = args;\n        yield {\n          event: \"content-block-delta\" as const,\n          index,\n          delta: {\n            type: \"block-delta\" as const,\n            fields: {\n              type: \"tool_call_chunk\",\n              name: acc.name,\n              args: acc.args,\n            },\n          },\n        };\n        toolIdx += 1;\n      }\n    }\n  }\n\n  for (const [index, acc] of blockAccumulators) {\n    yield {\n      event: \"content-block-finish\" as const,\n      index,\n      content: finalizeContentBlock(acc as ContentBlock),\n    };\n  }\n\n  yield {\n    event: \"message-finish\" as const,\n    reason: finishReason,\n    ...(usageSnapshot ? { usage: usageSnapshot } : {}),\n    responseMetadata: { model_provider: \"google\" },\n  };\n}\n\nfunction mapGeminiFinishReason(reason: string): FinishReason {\n  switch (reason.toLowerCase()) {\n    case \"max_tokens\":\n    case \"max-token\":\n    case \"max_token\":\n      return \"length\";\n    case \"safety\":\n    case \"recitation\":\n    case \"language\":\n    case \"blocklist\":\n    case \"prohibited_content\":\n    case \"prohibited-content\":\n    case \"spii\":\n    case \"image_safety\":\n    case \"image-safety\":\n    case \"image_prohibited_content\":\n    case \"image-prohibited-content\":\n    case \"image_recitation\":\n    case \"image-recitation\":\n      return \"content_filter\";\n    default:\n      return \"stop\";\n  }\n}\n"],"mappings":";;;;;;;AAsBA,gBAAuB,0BACrB,QACA,UAA4C,CAAC,GACP;CACtC,MAAM,oBAAoB,QAAQ,eAAe;CACjD,MAAM,oCAAoB,IAAI,IAI5B;CACF,MAAM,kCAAkB,IAAI,IAAsB;CAClD,IAAI,iBAAiB;CACrB,IAAI,iBAAiB;CACrB,IAAI;CACJ,IAAI,eAA6B;CAEjC,MAAM,yBACJ,KACA,YACsC;EACtC,MAAM,WAAW,gBAAgB,IAAI,GAAG;EACxC,IAAI,aAAa,KAAA,GACf,OAAO;GAAE,OAAO;GAAU,OAAO;EAAM;EAEzC,MAAM,QAAQ;EACd,gBAAgB,IAAI,KAAK,KAAK;EAC9B,kBAAkB,IAAI,OAAO,EAAE,GAAG,QAAQ,CAAC;EAC3C,OAAO;GAAE;GAAO,OAAO;EAAK;CAC9B;CAEA,WAAW,MAAM,YAAY,QAAQ;EACnC,IAAI,CAAC,gBAAgB;GACnB,iBAAiB;GACjB,MAAM,EAAE,OAAO,gBAAyB;EAC1C;EAEA,MAAM,gBAAgB,SAAS,iBAAiB,SAAS;EACzD,IAAI,qBAAqB,eAAe;GACtC,MAAM,QAAQ,cAAc,oBAAoB;GAChD,MAAM,SAAS,cAAc,wBAAwB;GACrD,gBAAgB;IACd,cAAc;IACd,eAAe;IACf,cAAc,cAAc,mBAAmB,QAAQ;GACzD;GACA,MAAM;IAAE,OAAO;IAAkB,OAAO;GAAc;EACxD;EAEA,MAAM,YAAY,SAAS,aAAa;EACxC,IAAI,WAAW,cACb,eAAe,sBAAsB,UAAU,YAAY;EAG7D,MAAM,QAAQ,WAAW,SAAS;EAClC,IAAI,CAAC,OAAO;EAEZ,IAAI,UAAU;EACd,KAAK,MAAM,QAAQ,OACjB,IAAI,KAAK,MAAM;GACb,IAAI,KAAK,SAAS;IAEhB,MAAM,EAAE,OAAO,UAAU,sBAAsB,aAAK;KAClD,MAAM;KACN,WAAW;IACb,CAAC;IACD,IAAI,OACF,MAAM;KACJ,OAAO;KACP;KACA,SAAS;MAAE,MAAM;MAAa,WAAW;KAAG;IAC9C;IAEF,MAAM,MAAM,kBAAkB,IAAI,KAAK;IACvC,IAAI,aAAa,IAAI,aAAa,MAAM,KAAK;IAC7C,MAAM;KACJ,OAAO;KACP;KACA,OAAO;MAAE,MAAM;MAA4B,WAAW,KAAK;KAAK;IAClE;GACF,OAAO;IAEL,MAAM,EAAE,OAAO,UAAU,sBAAsB,QAAK;KAClD,MAAM;KACN,MAAM;IACR,CAAC;IACD,IAAI,OACF,MAAM;KACJ,OAAO;KACP;KACA,SAAS;MAAE,MAAM;MAAQ,MAAM;KAAG;IACpC;IAEF,MAAM,MAAM,kBAAkB,IAAI,KAAK;IACvC,IAAI,QAAQ,IAAI,QAAQ,MAAM,KAAK;IACnC,MAAM;KACJ,OAAO;KACP;KACA,OAAO;MAAE,MAAM;MAAuB,MAAM,KAAK;KAAK;IACxD;GACF;EACF,OAAO,IAAI,KAAK,cAAc;GAC5B,MAAM,MAAgB,QAAQ;GAC9B,MAAM,OAAO,KAAK,UAAU,KAAK,aAAa,QAAQ,CAAC,CAAC;GACxD,MAAM,EAAE,OAAO,UAAU,sBAAsB,KAAK;IAClD,MAAM;IACN,MAAM,KAAK,aAAa;IACxB,MAAM;IACN,OAAO;GACT,CAAC;GACD,IAAI,OACF,MAAM;IACJ,OAAO;IACP;IACA,SAAS;KACP,MAAM;KACN,MAAM,KAAK,aAAa;KACxB,MAAM;KACN,OAAO;IACT;GACF;GAEF,MAAM,MAAM,kBAAkB,IAAI,KAAK;GACvC,IAAI,OAAO;GACX,MAAM;IACJ,OAAO;IACP;IACA,OAAO;KACL,MAAM;KACN,QAAQ;MACN,MAAM;MACN,MAAM,IAAI;MACV,MAAM,IAAI;KACZ;IACF;GACF;GACA,WAAW;EACb;CAEJ;CAEA,KAAK,MAAM,CAAC,OAAO,QAAQ,mBACzB,MAAM;EACJ,OAAO;EACP;EACA,UAAA,GAASA,uCAAAA,qBAAAA,CAAqB,GAAmB;CACnD;CAGF,MAAM;EACJ,OAAO;EACP,QAAQ;EACR,GAAI,gBAAgB,EAAE,OAAO,cAAc,IAAI,CAAC;EAChD,kBAAkB,EAAE,gBAAgB,SAAS;CAC/C;AACF;AAEA,SAAS,sBAAsB,QAA8B;CAC3D,QAAQ,OAAO,YAAY,GAA3B;EACE,KAAK;EACL,KAAK;EACL,KAAK,aACH,OAAO;EACT,KAAK;EACL,KAAK;EACL,KAAK;EACL,KAAK;EACL,KAAK;EACL,KAAK;EACL,KAAK;EACL,KAAK;EACL,KAAK;EACL,KAAK;EACL,KAAK;EACL,KAAK;EACL,KAAK,oBACH,OAAO;EACT,SACE,OAAO;CACX;AACF"}

package/dist/utils/stream_events.js

@@ -51,54 +51,55 @@ async function* convertGoogleGeminiStream(source, options = {}) {
 		const parts = candidate?.content?.parts;
 		if (!parts) continue;
 		let toolIdx = 0;
-		for (const part of parts) if (part.text) if (part.thought) {
-			const { index, isNew } = getOrCreateBlockIndex("reasoning", {
-				type: "reasoning",
-				reasoning: ""
-			});
-			if (isNew) yield {
-				event: "content-block-start",
-				index,
-				content: {
+		for (const part of parts) if (part.text) {
+			if (part.thought) {
+				const { index, isNew } = getOrCreateBlockIndex("reasoning", {
 					type: "reasoning",
 					reasoning: ""
-				}
-			};
-			const acc = blockAccumulators.get(index);
-			acc.reasoning = (acc.reasoning ?? "") + part.text;
-			yield {
-				event: "content-block-delta",
-				index,
-				delta: {
-					type: "reasoning-delta",
-					reasoning: part.text
-				}
-			};
-		} else {
-			const { index, isNew } = getOrCreateBlockIndex("text", {
-				type: "text",
-				text: ""
-			});
-			if (isNew) yield {
-				event: "content-block-start",
-				index,
-				content: {
+				});
+				if (isNew) yield {
+					event: "content-block-start",
+					index,
+					content: {
+						type: "reasoning",
+						reasoning: ""
+					}
+				};
+				const acc = blockAccumulators.get(index);
+				acc.reasoning = (acc.reasoning ?? "") + part.text;
+				yield {
+					event: "content-block-delta",
+					index,
+					delta: {
+						type: "reasoning-delta",
+						reasoning: part.text
+					}
+				};
+			} else {
+				const { index, isNew } = getOrCreateBlockIndex("text", {
 					type: "text",
 					text: ""
-				}
-			};
-			const acc = blockAccumulators.get(index);
-			acc.text = (acc.text ?? "") + part.text;
-			yield {
-				event: "content-block-delta",
-				index,
-				delta: {
-					type: "text-delta",
-					text: part.text
-				}
-			};
-		}
-		else if (part.functionCall) {
+				});
+				if (isNew) yield {
+					event: "content-block-start",
+					index,
+					content: {
+						type: "text",
+						text: ""
+					}
+				};
+				const acc = blockAccumulators.get(index);
+				acc.text = (acc.text ?? "") + part.text;
+				yield {
+					event: "content-block-delta",
+					index,
+					delta: {
+						type: "text-delta",
+						text: part.text
+					}
+				};
+			}
+		} else if (part.functionCall) {
 			const key = `tool:${toolIdx}`;
 			const args = JSON.stringify(part.functionCall.args ?? {});
 			const { index, isNew } = getOrCreateBlockIndex(key, {

package/dist/utils/stream_events.js.map

@@ -1 +1 @@
-{"version":3,"file":"stream_events.js","names":[],"sources":["../../src/utils/stream_events.ts"],"sourcesContent":["/**\n * Converts Gemini stream responses into LangChain ChatModelStreamEvents.\n *\n * @module\n */\n\nimport { finalizeContentBlock } from \"@langchain/core/language_models/compat\";\nimport type {\n  ChatModelStreamEvent,\n  FinishReason,\n} from \"@langchain/core/language_models/event\";\nimport type { ContentBlock, UsageMetadata } from \"@langchain/core/messages\";\nimport type { Gemini } from \"../chat_models/api-types.js\";\n\nexport type GeminiStreamResponse = Gemini.GenerateContentResponse;\n\nexport interface ConvertGoogleGeminiStreamOptions {\n  streamUsage?: boolean;\n}\n\ntype BlockKey = \"text\" | \"reasoning\" | `tool:${number}`;\n\nexport async function* convertGoogleGeminiStream(\n  source: AsyncIterable<GeminiStreamResponse>,\n  options: ConvertGoogleGeminiStreamOptions = {}\n): AsyncGenerator<ChatModelStreamEvent> {\n  const shouldStreamUsage = options.streamUsage ?? true;\n  const blockAccumulators = new Map<\n    number,\n    // oxlint-disable-next-line @typescript-eslint/no-explicit-any\n    Record<string, any>\n  >();\n  const blockKeyToIndex = new Map<BlockKey, number>();\n  let nextBlockIndex = 0;\n  let messageStarted = false;\n  let usageSnapshot: UsageMetadata | undefined;\n  let finishReason: FinishReason = \"stop\";\n\n  const getOrCreateBlockIndex = (\n    key: BlockKey,\n    initial: Record<string, unknown>\n  ): { index: number; isNew: boolean } => {\n    const existing = blockKeyToIndex.get(key);\n    if (existing !== undefined) {\n      return { index: existing, isNew: false };\n    }\n    const index = nextBlockIndex++;\n    blockKeyToIndex.set(key, index);\n    blockAccumulators.set(index, { ...initial });\n    return { index, isNew: true };\n  };\n\n  for await (const response of source) {\n    if (!messageStarted) {\n      messageStarted = true;\n      yield { event: \"message-start\" as const };\n    }\n\n    const usageMetadata = response.usageMetadata ?? response.usage_metadata;\n    if (shouldStreamUsage && usageMetadata) {\n      const input = usageMetadata.promptTokenCount ?? 0;\n      const output = usageMetadata.candidatesTokenCount ?? 0;\n      usageSnapshot = {\n        input_tokens: input,\n        output_tokens: output,\n        total_tokens: usageMetadata.totalTokenCount ?? input + output,\n      };\n      yield { event: \"usage\" as const, usage: usageSnapshot };\n    }\n\n    const candidate = response.candidates?.[0];\n    if (candidate?.finishReason) {\n      finishReason = mapGeminiFinishReason(candidate.finishReason);\n    }\n\n    const parts = candidate?.content?.parts;\n    if (!parts) continue;\n\n    let toolIdx = 0;\n    for (const part of parts) {\n      if (part.text) {\n        if (part.thought) {\n          const key: BlockKey = \"reasoning\";\n          const { index, isNew } = getOrCreateBlockIndex(key, {\n            type: \"reasoning\",\n            reasoning: \"\",\n          });\n          if (isNew) {\n            yield {\n              event: \"content-block-start\" as const,\n              index,\n              content: { type: \"reasoning\", reasoning: \"\" } as ContentBlock,\n            };\n          }\n          const acc = blockAccumulators.get(index)!;\n          acc.reasoning = (acc.reasoning ?? \"\") + part.text;\n          yield {\n            event: \"content-block-delta\" as const,\n            index,\n            delta: { type: \"reasoning-delta\" as const, reasoning: part.text },\n          };\n        } else {\n          const key: BlockKey = \"text\";\n          const { index, isNew } = getOrCreateBlockIndex(key, {\n            type: \"text\",\n            text: \"\",\n          });\n          if (isNew) {\n            yield {\n              event: \"content-block-start\" as const,\n              index,\n              content: { type: \"text\", text: \"\" } as ContentBlock,\n            };\n          }\n          const acc = blockAccumulators.get(index)!;\n          acc.text = (acc.text ?? \"\") + part.text;\n          yield {\n            event: \"content-block-delta\" as const,\n            index,\n            delta: { type: \"text-delta\" as const, text: part.text },\n          };\n        }\n      } else if (part.functionCall) {\n        const key: BlockKey = `tool:${toolIdx}`;\n        const args = JSON.stringify(part.functionCall.args ?? {});\n        const { index, isNew } = getOrCreateBlockIndex(key, {\n          type: \"tool_call_chunk\",\n          name: part.functionCall.name,\n          args: \"\",\n          index: toolIdx,\n        });\n        if (isNew) {\n          yield {\n            event: \"content-block-start\" as const,\n            index,\n            content: {\n              type: \"tool_call_chunk\",\n              name: part.functionCall.name,\n              args: \"\",\n              index: toolIdx,\n            } as ContentBlock,\n          };\n        }\n        const acc = blockAccumulators.get(index)!;\n        acc.args = args;\n        yield {\n          event: \"content-block-delta\" as const,\n          index,\n          delta: {\n            type: \"block-delta\" as const,\n            fields: {\n              type: \"tool_call_chunk\",\n              name: acc.name,\n              args: acc.args,\n            },\n          },\n        };\n        toolIdx += 1;\n      }\n    }\n  }\n\n  for (const [index, acc] of blockAccumulators) {\n    yield {\n      event: \"content-block-finish\" as const,\n      index,\n      content: finalizeContentBlock(acc as ContentBlock),\n    };\n  }\n\n  yield {\n    event: \"message-finish\" as const,\n    reason: finishReason,\n    ...(usageSnapshot ? { usage: usageSnapshot } : {}),\n    responseMetadata: { model_provider: \"google\" },\n  };\n}\n\nfunction mapGeminiFinishReason(reason: string): FinishReason {\n  switch (reason.toLowerCase()) {\n    case \"max_tokens\":\n    case \"max-token\":\n    case \"max_token\":\n      return \"length\";\n    case \"safety\":\n    case \"recitation\":\n    case \"language\":\n    case \"blocklist\":\n    case \"prohibited_content\":\n    case \"prohibited-content\":\n    case \"spii\":\n    case \"image_safety\":\n    case \"image-safety\":\n    case \"image_prohibited_content\":\n    case \"image-prohibited-content\":\n    case \"image_recitation\":\n    case \"image-recitation\":\n      return \"content_filter\";\n    default:\n      return \"stop\";\n  }\n}\n"],"mappings":";;;;;;;AAsBA,gBAAuB,0BACrB,QACA,UAA4C,CAAC,GACP;CACtC,MAAM,oBAAoB,QAAQ,eAAe;CACjD,MAAM,oCAAoB,IAAI,IAI5B;CACF,MAAM,kCAAkB,IAAI,IAAsB;CAClD,IAAI,iBAAiB;CACrB,IAAI,iBAAiB;CACrB,IAAI;CACJ,IAAI,eAA6B;CAEjC,MAAM,yBACJ,KACA,YACsC;EACtC,MAAM,WAAW,gBAAgB,IAAI,GAAG;EACxC,IAAI,aAAa,KAAA,GACf,OAAO;GAAE,OAAO;GAAU,OAAO;EAAM;EAEzC,MAAM,QAAQ;EACd,gBAAgB,IAAI,KAAK,KAAK;EAC9B,kBAAkB,IAAI,OAAO,EAAE,GAAG,QAAQ,CAAC;EAC3C,OAAO;GAAE;GAAO,OAAO;EAAK;CAC9B;CAEA,WAAW,MAAM,YAAY,QAAQ;EACnC,IAAI,CAAC,gBAAgB;GACnB,iBAAiB;GACjB,MAAM,EAAE,OAAO,gBAAyB;EAC1C;EAEA,MAAM,gBAAgB,SAAS,iBAAiB,SAAS;EACzD,IAAI,qBAAqB,eAAe;GACtC,MAAM,QAAQ,cAAc,oBAAoB;GAChD,MAAM,SAAS,cAAc,wBAAwB;GACrD,gBAAgB;IACd,cAAc;IACd,eAAe;IACf,cAAc,cAAc,mBAAmB,QAAQ;GACzD;GACA,MAAM;IAAE,OAAO;IAAkB,OAAO;GAAc;EACxD;EAEA,MAAM,YAAY,SAAS,aAAa;EACxC,IAAI,WAAW,cACb,eAAe,sBAAsB,UAAU,YAAY;EAG7D,MAAM,QAAQ,WAAW,SAAS;EAClC,IAAI,CAAC,OAAO;EAEZ,IAAI,UAAU;EACd,KAAK,MAAM,QAAQ,OACjB,IAAI,KAAK,MACP,IAAI,KAAK,SAAS;GAEhB,MAAM,EAAE,OAAO,UAAU,sBAAsB,aAAK;IAClD,MAAM;IACN,WAAW;GACb,CAAC;GACD,IAAI,OACF,MAAM;IACJ,OAAO;IACP;IACA,SAAS;KAAE,MAAM;KAAa,WAAW;IAAG;GAC9C;GAEF,MAAM,MAAM,kBAAkB,IAAI,KAAK;GACvC,IAAI,aAAa,IAAI,aAAa,MAAM,KAAK;GAC7C,MAAM;IACJ,OAAO;IACP;IACA,OAAO;KAAE,MAAM;KAA4B,WAAW,KAAK;IAAK;GAClE;EACF,OAAO;GAEL,MAAM,EAAE,OAAO,UAAU,sBAAsB,QAAK;IAClD,MAAM;IACN,MAAM;GACR,CAAC;GACD,IAAI,OACF,MAAM;IACJ,OAAO;IACP;IACA,SAAS;KAAE,MAAM;KAAQ,MAAM;IAAG;GACpC;GAEF,MAAM,MAAM,kBAAkB,IAAI,KAAK;GACvC,IAAI,QAAQ,IAAI,QAAQ,MAAM,KAAK;GACnC,MAAM;IACJ,OAAO;IACP;IACA,OAAO;KAAE,MAAM;KAAuB,MAAM,KAAK;IAAK;GACxD;EACF;OACK,IAAI,KAAK,cAAc;GAC5B,MAAM,MAAgB,QAAQ;GAC9B,MAAM,OAAO,KAAK,UAAU,KAAK,aAAa,QAAQ,CAAC,CAAC;GACxD,MAAM,EAAE,OAAO,UAAU,sBAAsB,KAAK;IAClD,MAAM;IACN,MAAM,KAAK,aAAa;IACxB,MAAM;IACN,OAAO;GACT,CAAC;GACD,IAAI,OACF,MAAM;IACJ,OAAO;IACP;IACA,SAAS;KACP,MAAM;KACN,MAAM,KAAK,aAAa;KACxB,MAAM;KACN,OAAO;IACT;GACF;GAEF,MAAM,MAAM,kBAAkB,IAAI,KAAK;GACvC,IAAI,OAAO;GACX,MAAM;IACJ,OAAO;IACP;IACA,OAAO;KACL,MAAM;KACN,QAAQ;MACN,MAAM;MACN,MAAM,IAAI;MACV,MAAM,IAAI;KACZ;IACF;GACF;GACA,WAAW;EACb;CAEJ;CAEA,KAAK,MAAM,CAAC,OAAO,QAAQ,mBACzB,MAAM;EACJ,OAAO;EACP;EACA,SAAS,qBAAqB,GAAmB;CACnD;CAGF,MAAM;EACJ,OAAO;EACP,QAAQ;EACR,GAAI,gBAAgB,EAAE,OAAO,cAAc,IAAI,CAAC;EAChD,kBAAkB,EAAE,gBAAgB,SAAS;CAC/C;AACF;AAEA,SAAS,sBAAsB,QAA8B;CAC3D,QAAQ,OAAO,YAAY,GAA3B;EACE,KAAK;EACL,KAAK;EACL,KAAK,aACH,OAAO;EACT,KAAK;EACL,KAAK;EACL,KAAK;EACL,KAAK;EACL,KAAK;EACL,KAAK;EACL,KAAK;EACL,KAAK;EACL,KAAK;EACL,KAAK;EACL,KAAK;EACL,KAAK;EACL,KAAK,oBACH,OAAO;EACT,SACE,OAAO;CACX;AACF"}
+{"version":3,"file":"stream_events.js","names":[],"sources":["../../src/utils/stream_events.ts"],"sourcesContent":["/**\n * Converts Gemini stream responses into LangChain ChatModelStreamEvents.\n *\n * @module\n */\n\nimport { finalizeContentBlock } from \"@langchain/core/language_models/compat\";\nimport type {\n  ChatModelStreamEvent,\n  FinishReason,\n} from \"@langchain/core/language_models/event\";\nimport type { ContentBlock, UsageMetadata } from \"@langchain/core/messages\";\nimport type { Gemini } from \"../chat_models/api-types.js\";\n\nexport type GeminiStreamResponse = Gemini.GenerateContentResponse;\n\nexport interface ConvertGoogleGeminiStreamOptions {\n  streamUsage?: boolean;\n}\n\ntype BlockKey = \"text\" | \"reasoning\" | `tool:${number}`;\n\nexport async function* convertGoogleGeminiStream(\n  source: AsyncIterable<GeminiStreamResponse>,\n  options: ConvertGoogleGeminiStreamOptions = {}\n): AsyncGenerator<ChatModelStreamEvent> {\n  const shouldStreamUsage = options.streamUsage ?? true;\n  const blockAccumulators = new Map<\n    number,\n    // oxlint-disable-next-line @typescript-eslint/no-explicit-any\n    Record<string, any>\n  >();\n  const blockKeyToIndex = new Map<BlockKey, number>();\n  let nextBlockIndex = 0;\n  let messageStarted = false;\n  let usageSnapshot: UsageMetadata | undefined;\n  let finishReason: FinishReason = \"stop\";\n\n  const getOrCreateBlockIndex = (\n    key: BlockKey,\n    initial: Record<string, unknown>\n  ): { index: number; isNew: boolean } => {\n    const existing = blockKeyToIndex.get(key);\n    if (existing !== undefined) {\n      return { index: existing, isNew: false };\n    }\n    const index = nextBlockIndex++;\n    blockKeyToIndex.set(key, index);\n    blockAccumulators.set(index, { ...initial });\n    return { index, isNew: true };\n  };\n\n  for await (const response of source) {\n    if (!messageStarted) {\n      messageStarted = true;\n      yield { event: \"message-start\" as const };\n    }\n\n    const usageMetadata = response.usageMetadata ?? response.usage_metadata;\n    if (shouldStreamUsage && usageMetadata) {\n      const input = usageMetadata.promptTokenCount ?? 0;\n      const output = usageMetadata.candidatesTokenCount ?? 0;\n      usageSnapshot = {\n        input_tokens: input,\n        output_tokens: output,\n        total_tokens: usageMetadata.totalTokenCount ?? input + output,\n      };\n      yield { event: \"usage\" as const, usage: usageSnapshot };\n    }\n\n    const candidate = response.candidates?.[0];\n    if (candidate?.finishReason) {\n      finishReason = mapGeminiFinishReason(candidate.finishReason);\n    }\n\n    const parts = candidate?.content?.parts;\n    if (!parts) continue;\n\n    let toolIdx = 0;\n    for (const part of parts) {\n      if (part.text) {\n        if (part.thought) {\n          const key: BlockKey = \"reasoning\";\n          const { index, isNew } = getOrCreateBlockIndex(key, {\n            type: \"reasoning\",\n            reasoning: \"\",\n          });\n          if (isNew) {\n            yield {\n              event: \"content-block-start\" as const,\n              index,\n              content: { type: \"reasoning\", reasoning: \"\" } as ContentBlock,\n            };\n          }\n          const acc = blockAccumulators.get(index)!;\n          acc.reasoning = (acc.reasoning ?? \"\") + part.text;\n          yield {\n            event: \"content-block-delta\" as const,\n            index,\n            delta: { type: \"reasoning-delta\" as const, reasoning: part.text },\n          };\n        } else {\n          const key: BlockKey = \"text\";\n          const { index, isNew } = getOrCreateBlockIndex(key, {\n            type: \"text\",\n            text: \"\",\n          });\n          if (isNew) {\n            yield {\n              event: \"content-block-start\" as const,\n              index,\n              content: { type: \"text\", text: \"\" } as ContentBlock,\n            };\n          }\n          const acc = blockAccumulators.get(index)!;\n          acc.text = (acc.text ?? \"\") + part.text;\n          yield {\n            event: \"content-block-delta\" as const,\n            index,\n            delta: { type: \"text-delta\" as const, text: part.text },\n          };\n        }\n      } else if (part.functionCall) {\n        const key: BlockKey = `tool:${toolIdx}`;\n        const args = JSON.stringify(part.functionCall.args ?? {});\n        const { index, isNew } = getOrCreateBlockIndex(key, {\n          type: \"tool_call_chunk\",\n          name: part.functionCall.name,\n          args: \"\",\n          index: toolIdx,\n        });\n        if (isNew) {\n          yield {\n            event: \"content-block-start\" as const,\n            index,\n            content: {\n              type: \"tool_call_chunk\",\n              name: part.functionCall.name,\n              args: \"\",\n              index: toolIdx,\n            } as ContentBlock,\n          };\n        }\n        const acc = blockAccumulators.get(index)!;\n        acc.args = args;\n        yield {\n          event: \"content-block-delta\" as const,\n          index,\n          delta: {\n            type: \"block-delta\" as const,\n            fields: {\n              type: \"tool_call_chunk\",\n              name: acc.name,\n              args: acc.args,\n            },\n          },\n        };\n        toolIdx += 1;\n      }\n    }\n  }\n\n  for (const [index, acc] of blockAccumulators) {\n    yield {\n      event: \"content-block-finish\" as const,\n      index,\n      content: finalizeContentBlock(acc as ContentBlock),\n    };\n  }\n\n  yield {\n    event: \"message-finish\" as const,\n    reason: finishReason,\n    ...(usageSnapshot ? { usage: usageSnapshot } : {}),\n    responseMetadata: { model_provider: \"google\" },\n  };\n}\n\nfunction mapGeminiFinishReason(reason: string): FinishReason {\n  switch (reason.toLowerCase()) {\n    case \"max_tokens\":\n    case \"max-token\":\n    case \"max_token\":\n      return \"length\";\n    case \"safety\":\n    case \"recitation\":\n    case \"language\":\n    case \"blocklist\":\n    case \"prohibited_content\":\n    case \"prohibited-content\":\n    case \"spii\":\n    case \"image_safety\":\n    case \"image-safety\":\n    case \"image_prohibited_content\":\n    case \"image-prohibited-content\":\n    case \"image_recitation\":\n    case \"image-recitation\":\n      return \"content_filter\";\n    default:\n      return \"stop\";\n  }\n}\n"],"mappings":";;;;;;;AAsBA,gBAAuB,0BACrB,QACA,UAA4C,CAAC,GACP;CACtC,MAAM,oBAAoB,QAAQ,eAAe;CACjD,MAAM,oCAAoB,IAAI,IAI5B;CACF,MAAM,kCAAkB,IAAI,IAAsB;CAClD,IAAI,iBAAiB;CACrB,IAAI,iBAAiB;CACrB,IAAI;CACJ,IAAI,eAA6B;CAEjC,MAAM,yBACJ,KACA,YACsC;EACtC,MAAM,WAAW,gBAAgB,IAAI,GAAG;EACxC,IAAI,aAAa,KAAA,GACf,OAAO;GAAE,OAAO;GAAU,OAAO;EAAM;EAEzC,MAAM,QAAQ;EACd,gBAAgB,IAAI,KAAK,KAAK;EAC9B,kBAAkB,IAAI,OAAO,EAAE,GAAG,QAAQ,CAAC;EAC3C,OAAO;GAAE;GAAO,OAAO;EAAK;CAC9B;CAEA,WAAW,MAAM,YAAY,QAAQ;EACnC,IAAI,CAAC,gBAAgB;GACnB,iBAAiB;GACjB,MAAM,EAAE,OAAO,gBAAyB;EAC1C;EAEA,MAAM,gBAAgB,SAAS,iBAAiB,SAAS;EACzD,IAAI,qBAAqB,eAAe;GACtC,MAAM,QAAQ,cAAc,oBAAoB;GAChD,MAAM,SAAS,cAAc,wBAAwB;GACrD,gBAAgB;IACd,cAAc;IACd,eAAe;IACf,cAAc,cAAc,mBAAmB,QAAQ;GACzD;GACA,MAAM;IAAE,OAAO;IAAkB,OAAO;GAAc;EACxD;EAEA,MAAM,YAAY,SAAS,aAAa;EACxC,IAAI,WAAW,cACb,eAAe,sBAAsB,UAAU,YAAY;EAG7D,MAAM,QAAQ,WAAW,SAAS;EAClC,IAAI,CAAC,OAAO;EAEZ,IAAI,UAAU;EACd,KAAK,MAAM,QAAQ,OACjB,IAAI,KAAK,MAAM;GACb,IAAI,KAAK,SAAS;IAEhB,MAAM,EAAE,OAAO,UAAU,sBAAsB,aAAK;KAClD,MAAM;KACN,WAAW;IACb,CAAC;IACD,IAAI,OACF,MAAM;KACJ,OAAO;KACP;KACA,SAAS;MAAE,MAAM;MAAa,WAAW;KAAG;IAC9C;IAEF,MAAM,MAAM,kBAAkB,IAAI,KAAK;IACvC,IAAI,aAAa,IAAI,aAAa,MAAM,KAAK;IAC7C,MAAM;KACJ,OAAO;KACP;KACA,OAAO;MAAE,MAAM;MAA4B,WAAW,KAAK;KAAK;IAClE;GACF,OAAO;IAEL,MAAM,EAAE,OAAO,UAAU,sBAAsB,QAAK;KAClD,MAAM;KACN,MAAM;IACR,CAAC;IACD,IAAI,OACF,MAAM;KACJ,OAAO;KACP;KACA,SAAS;MAAE,MAAM;MAAQ,MAAM;KAAG;IACpC;IAEF,MAAM,MAAM,kBAAkB,IAAI,KAAK;IACvC,IAAI,QAAQ,IAAI,QAAQ,MAAM,KAAK;IACnC,MAAM;KACJ,OAAO;KACP;KACA,OAAO;MAAE,MAAM;MAAuB,MAAM,KAAK;KAAK;IACxD;GACF;EACF,OAAO,IAAI,KAAK,cAAc;GAC5B,MAAM,MAAgB,QAAQ;GAC9B,MAAM,OAAO,KAAK,UAAU,KAAK,aAAa,QAAQ,CAAC,CAAC;GACxD,MAAM,EAAE,OAAO,UAAU,sBAAsB,KAAK;IAClD,MAAM;IACN,MAAM,KAAK,aAAa;IACxB,MAAM;IACN,OAAO;GACT,CAAC;GACD,IAAI,OACF,MAAM;IACJ,OAAO;IACP;IACA,SAAS;KACP,MAAM;KACN,MAAM,KAAK,aAAa;KACxB,MAAM;KACN,OAAO;IACT;GACF;GAEF,MAAM,MAAM,kBAAkB,IAAI,KAAK;GACvC,IAAI,OAAO;GACX,MAAM;IACJ,OAAO;IACP;IACA,OAAO;KACL,MAAM;KACN,QAAQ;MACN,MAAM;MACN,MAAM,IAAI;MACV,MAAM,IAAI;KACZ;IACF;GACF;GACA,WAAW;EACb;CAEJ;CAEA,KAAK,MAAM,CAAC,OAAO,QAAQ,mBACzB,MAAM;EACJ,OAAO;EACP;EACA,SAAS,qBAAqB,GAAmB;CACnD;CAGF,MAAM;EACJ,OAAO;EACP,QAAQ;EACR,GAAI,gBAAgB,EAAE,OAAO,cAAc,IAAI,CAAC;EAChD,kBAAkB,EAAE,gBAAgB,SAAS;CAC/C;AACF;AAEA,SAAS,sBAAsB,QAA8B;CAC3D,QAAQ,OAAO,YAAY,GAA3B;EACE,KAAK;EACL,KAAK;EACL,KAAK,aACH,OAAO;EACT,KAAK;EACL,KAAK;EACL,KAAK;EACL,KAAK;EACL,KAAK;EACL,KAAK;EACL,KAAK;EACL,KAAK;EACL,KAAK;EACL,KAAK;EACL,KAAK;EACL,KAAK;EACL,KAAK,oBACH,OAAO;EACT,SACE,OAAO;CACX;AACF"}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@langchain/google",
-  "version": "0.2.3",
+  "version": "0.2.5",
   "description": "Google integrations for LangChain.js",
   "author": "LangChain",
   "license": "MIT",
@@ -14,23 +14,23 @@
     "directory": "libs/providers/langchain-google"
   },
   "dependencies": {
-    "eventsource-parser": "^3.1.0",
-    "google-auth-library": "^10.9.1",
-    "jose": "^6.2.4"
+    "eventsource-parser": "^4.1.0",
+    "google-auth-library": "^11.0.2",
+    "jose": "^6.2.10"
   },
   "peerDependencies": {
-    "@langchain/core": "^1.2.9"
+    "@langchain/core": "^1.2.10"
   },
   "devDependencies": {
     "@tsconfig/recommended": "^1.0.10",
-    "@types/node": "^26.1.2",
-    "dpdm": "^3.14.0",
+    "@types/node": "^26.4.0",
+    "dpdm": "^4.3.0",
     "sparktype": "^0.1.3",
     "typescript": "~7.0.2",
     "vitest": "^4.1.8",
     "zod": "^3.25.76 || ^4",
     "zod-to-json-schema": "^3.25.2",
-    "@langchain/core": "^1.2.9",
+    "@langchain/core": "^1.2.10",
     "@langchain/standard-tests": "0.0.23"
   },
   "publishConfig": {