@office-ai/aioncli-core 0.26.0 → 0.30.0

package/dist/src/agents/auth-provider/base-provider.test.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"base-provider.test.js","sourceRoot":"","sources":["../../../../src/agents/auth-provider/base-provider.test.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAEH,OAAO,EAAE,QAAQ,EAAE,EAAE,EAAE,MAAM,EAAE,MAAM,QAAQ,CAAC;AAE9C,OAAO,EAAE,mBAAmB,EAAE,MAAM,oBAAoB,CAAC;AAGzD;;GAEG;AACH,MAAM,gBAAiB,SAAQ,mBAAmB;IACvC,IAAI,GAAwB,QAAQ,CAAC;IACtC,WAAW,CAAc;IAEjC,YAAY,UAAuB,EAAE,aAAa,EAAE,YAAY,EAAE;QAChE,KAAK,EAAE,CAAC;QACR,IAAI,CAAC,WAAW,GAAG,OAAO,CAAC;IAC7B,CAAC;IAED,KAAK,CAAC,OAAO;QACX,OAAO,IAAI,CAAC,WAAW,CAAC;IAC1B,CAAC;IAED,UAAU,CAAC,OAAoB;QAC7B,IAAI,CAAC,WAAW,GAAG,OAAO,CAAC;IAC7B,CAAC;CACF;AAED,QAAQ,CAAC,qBAAqB,EAAE,GAAG,EAAE;IACnC,QAAQ,CAAC,wBAAwB,EAAE,GAAG,EAAE;QACtC,EAAE,CAAC,wCAAwC,EAAE,KAAK,IAAI,EAAE;YACtD,MAAM,QAAQ,GAAG,IAAI,gBAAgB,CAAC,EAAE,aAAa,EAAE,cAAc,EAAE,CAAC,CAAC;YACzE,MAAM,QAAQ,GAAG,IAAI,QAAQ,CAAC,IAAI,EAAE,EAAE,MAAM,EAAE,GAAG,EAAE,CAAC,CAAC;YAErD,MAAM,MAAM,GAAG,MAAM,QAAQ,CAAC,sBAAsB,CAAC,EAAE,EAAE,QAAQ,CAAC,CAAC;YAEnE,MAAM,CAAC,MAAM,CAAC,CAAC,OAAO,CAAC,EAAE,aAAa,EAAE,cAAc,EAAE,CAAC,CAAC;QAC5D,CAAC,CAAC,CAAC;QAEH,EAAE,CAAC,wCAAwC,EAAE,KAAK,IAAI,EAAE;YACtD,MAAM,QAAQ,GAAG,IAAI,gBAAgB,CAAC,EAAE,aAAa,EAAE,cAAc,EAAE,CAAC,CAAC;YACzE,MAAM,QAAQ,GAAG,IAAI,QAAQ,CAAC,IAAI,EAAE,EAAE,MAAM,EAAE,GAAG,EAAE,CAAC,CAAC;YAErD,MAAM,MAAM,GAAG,MAAM,QAAQ,CAAC,sBAAsB,CAAC,EAAE,EAAE,QAAQ,CAAC,CAAC;YAEnE,MAAM,CAAC,MAAM,CAAC,CAAC,OAAO,CAAC,EAAE,aAAa,EAAE,cAAc,EAAE,CAAC,CAAC;QAC5D,CAAC,CAAC,CAAC;QAEH,EAAE,CAAC,0CAA0C,EAAE,KAAK,IAAI,EAAE;YACxD,MAAM,QAAQ,GAAG,IAAI,gBAAgB,EAAE,CAAC;YACxC,MAAM,QAAQ,GAAG,IAAI,QAAQ,CAAC,IAAI,EAAE,EAAE,MAAM,EAAE,GAAG,EAAE,CAAC,CAAC;YAErD,MAAM,MAAM,GAAG,MAAM,QAAQ,CAAC,sBAAsB,CAAC,EAAE,EAAE,QAAQ,CAAC,CAAC;YAEnE,MAAM,CAAC,MAAM,CAAC,CAAC,aAAa,EAAE,CAAC;QACjC,CAAC,CAAC,CAAC;QAEH,EAAE,CAAC,0CAA0C,EAAE,KAAK,IAAI,EAAE;YACxD,MAAM,QAAQ,GAAG,IAAI,gBAAgB,EAAE,CAAC;YACxC,MAAM,QAAQ,GAAG,IAAI,QAAQ,CAAC,IAAI,EAAE,EAAE,MAAM,EAAE,GAAG,EAAE,CAAC,CAAC;YAErD,MAAM,MAAM,GAAG,MAAM,QAAQ,CAAC,sBAAsB,CAAC,EAAE,EAAE,QAAQ,CAAC,CAAC;YAEnE,MAAM,CAAC,MAAM,CAAC,CAAC,aAAa,EAAE,CAAC;QACjC,CAAC,CAAC,CAAC;QAEH,EAAE,CAAC,0CAA0C,EAAE,KAAK,IAAI,EAAE;YACxD,MAAM,QAAQ,GAAG,IAAI,gBAAgB,EAAE,CAAC;YACxC,MAAM,QAAQ,GAAG,IAAI,QAAQ,CAAC,IAAI,EAAE,EAAE,MAAM,EAAE,GAAG,EAAE,CAAC,CAAC;YAErD,MAAM,MAAM,GAAG,MAAM,QAAQ,CAAC,sBAAsB,CAAC,EAAE,EAAE,QAAQ,CAAC,CAAC;YAEnE,MAAM,CAAC,MAAM,CAAC,CAAC,aAAa,EAAE,CAAC;QACjC,CAAC,CAAC,CAAC;QAEH,EAAE,CAAC,qDAAqD,EAAE,KAAK,IAAI,EAAE;YACnE,MAAM,QAAQ,GAAG,IAAI,gBAAgB,CAAC,EAAE,aAAa,EAAE,WAAW,EAAE,CAAC,CAAC;YACtE,MAAM,QAAQ,GAAG,IAAI,QAAQ,CAAC,IAAI,EAAE,EAAE,MAAM,EAAE,GAAG,EAAE,CAAC,CAAC;YAErD,8BAA8B;YAC9B,QAAQ,CAAC,UAAU,CAAC,EAAE,aAAa,EAAE,WAAW,EAAE,CAAC,CAAC;YAEpD,MAAM,MAAM,GAAG,MAAM,QAAQ,CAAC,sBAAsB,CAAC,EAAE,EAAE,QAAQ,CAAC,CAAC;YAEnE,MAAM,CAAC,MAAM,CAAC,CAAC,OAAO,CAAC,EAAE,aAAa,EAAE,WAAW,EAAE,CAAC,CAAC;QACzD,CAAC,CAAC,CAAC;QAEH,EAAE,CAAC,uCAAuC,EAAE,KAAK,IAAI,EAAE;YACrD,MAAM,QAAQ,GAAG,IAAI,gBAAgB,CAAC,EAAE,aAAa,EAAE,cAAc,EAAE,CAAC,CAAC;YACzE,MAAM,WAAW,GAAG,IAAI,QAAQ,CAAC,IAAI,EAAE,EAAE,MAAM,EAAE,GAAG,EAAE,CAAC,CAAC;YAExD,6BAA6B;YAC7B,MAAM,OAAO,GAAG,MAAM,QAAQ,CAAC,sBAAsB,CAAC,EAAE,EAAE,WAAW,CAAC,CAAC;YACvE,MAAM,CAAC,OAAO,CAAC,CAAC,OAAO,CAAC,EAAE,aAAa,EAAE,cAAc,EAAE,CAAC,CAAC;YAE3D,8BAA8B;YAC9B,MAAM,OAAO,GAAG,MAAM,QAAQ,CAAC,sBAAsB,CAAC,EAAE,EAAE,WAAW,CAAC,CAAC;YACvE,MAAM,CAAC,OAAO,CAAC,CAAC,OAAO,CAAC,EAAE,aAAa,EAAE,cAAc,EAAE,CAAC,CAAC;QAC7D,CAAC,CAAC,CAAC;QAEH,EAAE,CAAC,oDAAoD,EAAE,KAAK,IAAI,EAAE;YAClE,MAAM,QAAQ,GAAG,IAAI,gBAAgB,CAAC,EAAE,aAAa,EAAE,cAAc,EAAE,CAAC,CAAC;YACzE,MAAM,WAAW,GAAG,IAAI,QAAQ,CAAC,IAAI,EAAE,EAAE,MAAM,EAAE,GAAG,EAAE,CAAC,CAAC;YAExD,kBAAkB;YAClB,MAAM,QAAQ,CAAC,sBAAsB,CAAC,EAAE,EAAE,WAAW,CAAC,CAAC,CAAC,UAAU;YAClE,MAAM,QAAQ,CAAC,sBAAsB,CAAC,EAAE,EAAE,WAAW,CAAC,CAAC,CAAC,UAAU;YAElE,wCAAwC;YACxC,MAAM,MAAM,GAAG,MAAM,QAAQ,CAAC,sBAAsB,CAAC,EAAE,EAAE,WAAW,CAAC,CAAC;YACtE,MAAM,CAAC,MAAM,CAAC,CAAC,aAAa,EAAE,CAAC;QACjC,CAAC,CAAC,CAAC;QAEH,EAAE,CAAC,iDAAiD,EAAE,KAAK,IAAI,EAAE;YAC/D,MAAM,QAAQ,GAAG,IAAI,gBAAgB,CAAC,EAAE,aAAa,EAAE,cAAc,EAAE,CAAC,CAAC;YACzE,MAAM,WAAW,GAAG,IAAI,QAAQ,CAAC,IAAI,EAAE,EAAE,MAAM,EAAE,GAAG,EAAE,CAAC,CAAC;YACxD,MAAM,WAAW,GAAG,IAAI,QAAQ,CAAC,IAAI,EAAE,EAAE,MAAM,EAAE,GAAG,EAAE,CAAC,CAAC;YAExD,iBAAiB;YACjB,MAAM,QAAQ,CAAC,sBAAsB,CAAC,EAAE,EAAE,WAAW,CAAC,CAAC,CAAC,UAAU;YAClE,MAAM,QAAQ,CAAC,sBAAsB,CAAC,EAAE,EAAE,WAAW,CAAC,CAAC,CAAC,UAAU;YAElE,yBAAyB;YACzB,MAAM,QAAQ,CAAC,sBAAsB,CAAC,EAAE,EAAE,WAAW,CAAC,CAAC;YAEvD,gCAAgC;YAChC,MAAM,MAAM,GAAG,MAAM,QAAQ,CAAC,sBAAsB,CAAC,EAAE,EAAE,WAAW,CAAC,CAAC;YACtE,MAAM,CAAC,MAAM,CAAC,CAAC,OAAO,CAAC,EAAE,aAAa,EAAE,cAAc,EAAE,CAAC,CAAC;QAC5D,CAAC,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;IAEH,QAAQ,CAAC,YAAY,EAAE,GAAG,EAAE;QAC1B,EAAE,CAAC,8BAA8B,EAAE,KAAK,IAAI,EAAE;YAC5C,MAAM,QAAQ,GAAG,IAAI,gBAAgB,EAAE,CAAC;YAExC,mBAAmB;YACnB,MAAM,MAAM,CAAC,QAAQ,CAAC,UAAU,EAAE,CAAC,CAAC,QAAQ,CAAC,aAAa,EAAE,CAAC;QAC/D,CAAC,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC"}

package/dist/src/agents/auth-provider/factory.d.ts

@@ -0,0 +1,27 @@
+/**
+ * @license
+ * Copyright 2026 Google LLC
+ * SPDX-License-Identifier: Apache-2.0
+ */
+import type { AgentCard, SecurityScheme } from '@a2a-js/sdk';
+import type { A2AAuthConfig, A2AAuthProvider, AuthValidationResult } from './types.js';
+export interface CreateAuthProviderOptions {
+    /** Required for OAuth/OIDC token storage. */
+    agentName?: string;
+    authConfig?: A2AAuthConfig;
+    agentCard?: AgentCard;
+}
+/**
+ * Factory for creating A2A authentication providers.
+ * @see https://a2a-protocol.org/latest/specification/#451-securityscheme
+ */
+export declare class A2AAuthProviderFactory {
+    static create(options: CreateAuthProviderOptions): Promise<A2AAuthProvider | undefined>;
+    /** Create provider directly from config, bypassing AgentCard validation. */
+    static createFromConfig(authConfig: A2AAuthConfig, agentName?: string): Promise<A2AAuthProvider>;
+    /** Validate auth config against AgentCard's security requirements. */
+    static validateAuthConfig(authConfig: A2AAuthConfig | undefined, securitySchemes: Record<string, SecurityScheme> | undefined): AuthValidationResult;
+    private static findMatchingScheme;
+    /** Get human-readable description of required auth for error messages. */
+    static describeRequiredAuth(securitySchemes: Record<string, SecurityScheme>): string;
+}

package/dist/src/agents/auth-provider/factory.js

@@ -0,0 +1,161 @@
+/**
+ * @license
+ * Copyright 2026 Google LLC
+ * SPDX-License-Identifier: Apache-2.0
+ */
+/**
+ * Factory for creating A2A authentication providers.
+ * @see https://a2a-protocol.org/latest/specification/#451-securityscheme
+ */
+export class A2AAuthProviderFactory {
+    static async create(options) {
+        const { agentName: _agentName, authConfig, agentCard } = options;
+        if (!authConfig) {
+            if (agentCard?.securitySchemes &&
+                Object.keys(agentCard.securitySchemes).length > 0) {
+                return undefined; // Caller should prompt user to configure auth
+            }
+            return undefined;
+        }
+        switch (authConfig.type) {
+            case 'google-credentials':
+                // TODO: Implement
+                throw new Error('google-credentials auth provider not yet implemented');
+            case 'apiKey':
+                // TODO: Implement
+                throw new Error('apiKey auth provider not yet implemented');
+            case 'http':
+                // TODO: Implement
+                throw new Error('http auth provider not yet implemented');
+            case 'oauth2':
+                // TODO: Implement
+                throw new Error('oauth2 auth provider not yet implemented');
+            case 'openIdConnect':
+                // TODO: Implement
+                throw new Error('openIdConnect auth provider not yet implemented');
+            default: {
+                const _exhaustive = authConfig;
+                throw new Error(`Unknown auth type: ${_exhaustive.type}`);
+            }
+        }
+    }
+    /** Create provider directly from config, bypassing AgentCard validation. */
+    static async createFromConfig(authConfig, agentName) {
+        const provider = await A2AAuthProviderFactory.create({
+            authConfig,
+            agentName,
+        });
+        // create() returns undefined only when authConfig is missing.
+        // Since authConfig is required here, provider will always be defined
+        // (or create() throws for unimplemented types).
+        return provider;
+    }
+    /** Validate auth config against AgentCard's security requirements. */
+    static validateAuthConfig(authConfig, securitySchemes) {
+        if (!securitySchemes || Object.keys(securitySchemes).length === 0) {
+            return { valid: true };
+        }
+        const requiredSchemes = Object.keys(securitySchemes);
+        if (!authConfig) {
+            return {
+                valid: false,
+                diff: {
+                    requiredSchemes,
+                    configuredType: undefined,
+                    missingConfig: ['Authentication is required but not configured'],
+                },
+            };
+        }
+        const matchResult = A2AAuthProviderFactory.findMatchingScheme(authConfig, securitySchemes);
+        if (matchResult.matched) {
+            return { valid: true };
+        }
+        return {
+            valid: false,
+            diff: {
+                requiredSchemes,
+                configuredType: authConfig.type,
+                missingConfig: matchResult.missingConfig,
+            },
+        };
+    }
+    // Security schemes have OR semantics per A2A spec - matching any single scheme is sufficient
+    static findMatchingScheme(authConfig, securitySchemes) {
+        const missingConfig = [];
+        for (const [schemeName, scheme] of Object.entries(securitySchemes)) {
+            switch (scheme.type) {
+                case 'apiKey':
+                    if (authConfig.type === 'apiKey') {
+                        return { matched: true, missingConfig: [] };
+                    }
+                    missingConfig.push(`Scheme '${schemeName}' requires apiKey authentication`);
+                    break;
+                case 'http':
+                    if (authConfig.type === 'http') {
+                        if (authConfig.scheme.toLowerCase() === scheme.scheme.toLowerCase()) {
+                            return { matched: true, missingConfig: [] };
+                        }
+                        missingConfig.push(`Scheme '${schemeName}' requires HTTP ${scheme.scheme} authentication, but ${authConfig.scheme} was configured`);
+                    }
+                    else if (authConfig.type === 'google-credentials' &&
+                        scheme.scheme.toLowerCase() === 'bearer') {
+                        return { matched: true, missingConfig: [] };
+                    }
+                    else {
+                        missingConfig.push(`Scheme '${schemeName}' requires HTTP ${scheme.scheme} authentication`);
+                    }
+                    break;
+                case 'oauth2':
+                    if (authConfig.type === 'oauth2') {
+                        return { matched: true, missingConfig: [] };
+                    }
+                    missingConfig.push(`Scheme '${schemeName}' requires OAuth 2.0 authentication`);
+                    break;
+                case 'openIdConnect':
+                    if (authConfig.type === 'openIdConnect') {
+                        return { matched: true, missingConfig: [] };
+                    }
+                    missingConfig.push(`Scheme '${schemeName}' requires OpenID Connect authentication`);
+                    break;
+                case 'mutualTLS':
+                    missingConfig.push(`Scheme '${schemeName}' requires mTLS authentication (not yet supported)`);
+                    break;
+                default: {
+                    const _exhaustive = scheme;
+                    missingConfig.push(`Unknown security scheme type: ${_exhaustive.type}`);
+                }
+            }
+        }
+        return { matched: false, missingConfig };
+    }
+    /** Get human-readable description of required auth for error messages. */
+    static describeRequiredAuth(securitySchemes) {
+        const descriptions = [];
+        for (const [name, scheme] of Object.entries(securitySchemes)) {
+            switch (scheme.type) {
+                case 'apiKey':
+                    descriptions.push(`API Key (${name}): Send ${scheme.name} in ${scheme.in}`);
+                    break;
+                case 'http':
+                    descriptions.push(`HTTP ${scheme.scheme} (${name})`);
+                    break;
+                case 'oauth2':
+                    descriptions.push(`OAuth 2.0 (${name})`);
+                    break;
+                case 'openIdConnect':
+                    descriptions.push(`OpenID Connect (${name})`);
+                    break;
+                case 'mutualTLS':
+                    descriptions.push(`Mutual TLS (${name})`);
+                    break;
+                default: {
+                    const _exhaustive = scheme;
+                    // This ensures TypeScript errors if a new SecurityScheme type is added
+                    descriptions.push(`Unknown (${name}): ${_exhaustive.type}`);
+                }
+            }
+        }
+        return descriptions.join(' OR ');
+    }
+}
+//# sourceMappingURL=factory.js.map

package/dist/src/agents/auth-provider/factory.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"factory.js","sourceRoot":"","sources":["../../../../src/agents/auth-provider/factory.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAgBH;;;GAGG;AACH,MAAM,OAAO,sBAAsB;IACjC,MAAM,CAAC,KAAK,CAAC,MAAM,CACjB,OAAkC;QAElC,MAAM,EAAE,SAAS,EAAE,UAAU,EAAE,UAAU,EAAE,SAAS,EAAE,GAAG,OAAO,CAAC;QAEjE,IAAI,CAAC,UAAU,EAAE,CAAC;YAChB,IACE,SAAS,EAAE,eAAe;gBAC1B,MAAM,CAAC,IAAI,CAAC,SAAS,CAAC,eAAe,CAAC,CAAC,MAAM,GAAG,CAAC,EACjD,CAAC;gBACD,OAAO,SAAS,CAAC,CAAC,8CAA8C;YAClE,CAAC;YACD,OAAO,SAAS,CAAC;QACnB,CAAC;QAED,QAAQ,UAAU,CAAC,IAAI,EAAE,CAAC;YACxB,KAAK,oBAAoB;gBACvB,kBAAkB;gBAClB,MAAM,IAAI,KAAK,CAAC,sDAAsD,CAAC,CAAC;YAE1E,KAAK,QAAQ;gBACX,kBAAkB;gBAClB,MAAM,IAAI,KAAK,CAAC,0CAA0C,CAAC,CAAC;YAE9D,KAAK,MAAM;gBACT,kBAAkB;gBAClB,MAAM,IAAI,KAAK,CAAC,wCAAwC,CAAC,CAAC;YAE5D,KAAK,QAAQ;gBACX,kBAAkB;gBAClB,MAAM,IAAI,KAAK,CAAC,0CAA0C,CAAC,CAAC;YAE9D,KAAK,eAAe;gBAClB,kBAAkB;gBAClB,MAAM,IAAI,KAAK,CAAC,iDAAiD,CAAC,CAAC;YAErE,OAAO,CAAC,CAAC,CAAC;gBACR,MAAM,WAAW,GAAU,UAAU,CAAC;gBACtC,MAAM,IAAI,KAAK,CACb,sBAAuB,WAA6B,CAAC,IAAI,EAAE,CAC5D,CAAC;YACJ,CAAC;QACH,CAAC;IACH,CAAC;IAED,4EAA4E;IAC5E,MAAM,CAAC,KAAK,CAAC,gBAAgB,CAC3B,UAAyB,EACzB,SAAkB;QAElB,MAAM,QAAQ,GAAG,MAAM,sBAAsB,CAAC,MAAM,CAAC;YACnD,UAAU;YACV,SAAS;SACV,CAAC,CAAC;QAEH,8DAA8D;QAC9D,qEAAqE;QACrE,gDAAgD;QAChD,OAAO,QAAS,CAAC;IACnB,CAAC;IAED,sEAAsE;IACtE,MAAM,CAAC,kBAAkB,CACvB,UAAqC,EACrC,eAA2D;QAE3D,IAAI,CAAC,eAAe,IAAI,MAAM,CAAC,IAAI,CAAC,eAAe,CAAC,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YAClE,OAAO,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC;QACzB,CAAC;QAED,MAAM,eAAe,GAAG,MAAM,CAAC,IAAI,CAAC,eAAe,CAAC,CAAC;QAErD,IAAI,CAAC,UAAU,EAAE,CAAC;YAChB,OAAO;gBACL,KAAK,EAAE,KAAK;gBACZ,IAAI,EAAE;oBACJ,eAAe;oBACf,cAAc,EAAE,SAAS;oBACzB,aAAa,EAAE,CAAC,+CAA+C,CAAC;iBACjE;aACF,CAAC;QACJ,CAAC;QAED,MAAM,WAAW,GAAG,sBAAsB,CAAC,kBAAkB,CAC3D,UAAU,EACV,eAAe,CAChB,CAAC;QAEF,IAAI,WAAW,CAAC,OAAO,EAAE,CAAC;YACxB,OAAO,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC;QACzB,CAAC;QAED,OAAO;YACL,KAAK,EAAE,KAAK;YACZ,IAAI,EAAE;gBACJ,eAAe;gBACf,cAAc,EAAE,UAAU,CAAC,IAAI;gBAC/B,aAAa,EAAE,WAAW,CAAC,aAAa;aACzC;SACF,CAAC;IACJ,CAAC;IAED,6FAA6F;IACrF,MAAM,CAAC,kBAAkB,CAC/B,UAAyB,EACzB,eAA+C;QAE/C,MAAM,aAAa,GAAa,EAAE,CAAC;QAEnC,KAAK,MAAM,CAAC,UAAU,EAAE,MAAM,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,eAAe,CAAC,EAAE,CAAC;YACnE,QAAQ,MAAM,CAAC,IAAI,EAAE,CAAC;gBACpB,KAAK,QAAQ;oBACX,IAAI,UAAU,CAAC,IAAI,KAAK,QAAQ,EAAE,CAAC;wBACjC,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,aAAa,EAAE,EAAE,EAAE,CAAC;oBAC9C,CAAC;oBACD,aAAa,CAAC,IAAI,CAChB,WAAW,UAAU,kCAAkC,CACxD,CAAC;oBACF,MAAM;gBAER,KAAK,MAAM;oBACT,IAAI,UAAU,CAAC,IAAI,KAAK,MAAM,EAAE,CAAC;wBAC/B,IACE,UAAU,CAAC,MAAM,CAAC,WAAW,EAAE,KAAK,MAAM,CAAC,MAAM,CAAC,WAAW,EAAE,EAC/D,CAAC;4BACD,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,aAAa,EAAE,EAAE,EAAE,CAAC;wBAC9C,CAAC;wBACD,aAAa,CAAC,IAAI,CAChB,WAAW,UAAU,mBAAmB,MAAM,CAAC,MAAM,wBAAwB,UAAU,CAAC,MAAM,iBAAiB,CAChH,CAAC;oBACJ,CAAC;yBAAM,IACL,UAAU,CAAC,IAAI,KAAK,oBAAoB;wBACxC,MAAM,CAAC,MAAM,CAAC,WAAW,EAAE,KAAK,QAAQ,EACxC,CAAC;wBACD,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,aAAa,EAAE,EAAE,EAAE,CAAC;oBAC9C,CAAC;yBAAM,CAAC;wBACN,aAAa,CAAC,IAAI,CAChB,WAAW,UAAU,mBAAmB,MAAM,CAAC,MAAM,iBAAiB,CACvE,CAAC;oBACJ,CAAC;oBACD,MAAM;gBAER,KAAK,QAAQ;oBACX,IAAI,UAAU,CAAC,IAAI,KAAK,QAAQ,EAAE,CAAC;wBACjC,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,aAAa,EAAE,EAAE,EAAE,CAAC;oBAC9C,CAAC;oBACD,aAAa,CAAC,IAAI,CAChB,WAAW,UAAU,qCAAqC,CAC3D,CAAC;oBACF,MAAM;gBAER,KAAK,eAAe;oBAClB,IAAI,UAAU,CAAC,IAAI,KAAK,eAAe,EAAE,CAAC;wBACxC,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,aAAa,EAAE,EAAE,EAAE,CAAC;oBAC9C,CAAC;oBACD,aAAa,CAAC,IAAI,CAChB,WAAW,UAAU,0CAA0C,CAChE,CAAC;oBACF,MAAM;gBAER,KAAK,WAAW;oBACd,aAAa,CAAC,IAAI,CAChB,WAAW,UAAU,oDAAoD,CAC1E,CAAC;oBACF,MAAM;gBAER,OAAO,CAAC,CAAC,CAAC;oBACR,MAAM,WAAW,GAAU,MAAM,CAAC;oBAClC,aAAa,CAAC,IAAI,CAChB,iCAAkC,WAA8B,CAAC,IAAI,EAAE,CACxE,CAAC;gBACJ,CAAC;YACH,CAAC;QACH,CAAC;QAED,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,aAAa,EAAE,CAAC;IAC3C,CAAC;IAED,0EAA0E;IAC1E,MAAM,CAAC,oBAAoB,CACzB,eAA+C;QAE/C,MAAM,YAAY,GAAa,EAAE,CAAC;QAElC,KAAK,MAAM,CAAC,IAAI,EAAE,MAAM,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,eAAe,CAAC,EAAE,CAAC;YAC7D,QAAQ,MAAM,CAAC,IAAI,EAAE,CAAC;gBACpB,KAAK,QAAQ;oBACX,YAAY,CAAC,IAAI,CACf,YAAY,IAAI,WAAW,MAAM,CAAC,IAAI,OAAO,MAAM,CAAC,EAAE,EAAE,CACzD,CAAC;oBACF,MAAM;gBACR,KAAK,MAAM;oBACT,YAAY,CAAC,IAAI,CAAC,QAAQ,MAAM,CAAC,MAAM,KAAK,IAAI,GAAG,CAAC,CAAC;oBACrD,MAAM;gBACR,KAAK,QAAQ;oBACX,YAAY,CAAC,IAAI,CAAC,cAAc,IAAI,GAAG,CAAC,CAAC;oBACzC,MAAM;gBACR,KAAK,eAAe;oBAClB,YAAY,CAAC,IAAI,CAAC,mBAAmB,IAAI,GAAG,CAAC,CAAC;oBAC9C,MAAM;gBACR,KAAK,WAAW;oBACd,YAAY,CAAC,IAAI,CAAC,eAAe,IAAI,GAAG,CAAC,CAAC;oBAC1C,MAAM;gBACR,OAAO,CAAC,CAAC,CAAC;oBACR,MAAM,WAAW,GAAU,MAAM,CAAC;oBAClC,uEAAuE;oBACvE,YAAY,CAAC,IAAI,CACf,YAAY,IAAI,MAAO,WAA8B,CAAC,IAAI,EAAE,CAC7D,CAAC;gBACJ,CAAC;YACH,CAAC;QACH,CAAC;QAED,OAAO,YAAY,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;IACnC,CAAC;CACF"}

package/dist/src/agents/auth-provider/factory.test.d.ts

@@ -0,0 +1,6 @@
+/**
+ * @license
+ * Copyright 2026 Google LLC
+ * SPDX-License-Identifier: Apache-2.0
+ */
+export {};

package/dist/src/agents/auth-provider/factory.test.js

@@ -0,0 +1,344 @@
+/**
+ * @license
+ * Copyright 2026 Google LLC
+ * SPDX-License-Identifier: Apache-2.0
+ */
+import { describe, it, expect } from 'vitest';
+import { A2AAuthProviderFactory } from './factory.js';
+describe('A2AAuthProviderFactory', () => {
+    describe('validateAuthConfig', () => {
+        describe('when no security schemes required', () => {
+            it('should return valid when securitySchemes is undefined', () => {
+                const result = A2AAuthProviderFactory.validateAuthConfig(undefined, undefined);
+                expect(result).toEqual({ valid: true });
+            });
+            it('should return valid when securitySchemes is empty', () => {
+                const result = A2AAuthProviderFactory.validateAuthConfig(undefined, {});
+                expect(result).toEqual({ valid: true });
+            });
+            it('should return valid when auth config provided but not required', () => {
+                const authConfig = {
+                    type: 'apiKey',
+                    key: 'test-key',
+                };
+                const result = A2AAuthProviderFactory.validateAuthConfig(authConfig, {});
+                expect(result).toEqual({ valid: true });
+            });
+        });
+        describe('when auth is required but not configured', () => {
+            it('should return invalid with diff', () => {
+                const securitySchemes = {
+                    apiKeyAuth: {
+                        type: 'apiKey',
+                        name: 'X-API-Key',
+                        in: 'header',
+                    },
+                };
+                const result = A2AAuthProviderFactory.validateAuthConfig(undefined, securitySchemes);
+                expect(result.valid).toBe(false);
+                expect(result.diff).toBeDefined();
+                expect(result.diff?.requiredSchemes).toContain('apiKeyAuth');
+                expect(result.diff?.configuredType).toBeUndefined();
+                expect(result.diff?.missingConfig).toContain('Authentication is required but not configured');
+            });
+        });
+        describe('apiKey scheme matching', () => {
+            it('should match apiKey config with apiKey scheme', () => {
+                const authConfig = {
+                    type: 'apiKey',
+                    key: 'my-key',
+                };
+                const securitySchemes = {
+                    apiKeyAuth: {
+                        type: 'apiKey',
+                        name: 'X-API-Key',
+                        in: 'header',
+                    },
+                };
+                const result = A2AAuthProviderFactory.validateAuthConfig(authConfig, securitySchemes);
+                expect(result).toEqual({ valid: true });
+            });
+            it('should not match http config with apiKey scheme', () => {
+                const authConfig = {
+                    type: 'http',
+                    scheme: 'Bearer',
+                    token: 'my-token',
+                };
+                const securitySchemes = {
+                    apiKeyAuth: {
+                        type: 'apiKey',
+                        name: 'X-API-Key',
+                        in: 'header',
+                    },
+                };
+                const result = A2AAuthProviderFactory.validateAuthConfig(authConfig, securitySchemes);
+                expect(result.valid).toBe(false);
+                expect(result.diff?.missingConfig).toContain("Scheme 'apiKeyAuth' requires apiKey authentication");
+            });
+        });
+        describe('http scheme matching', () => {
+            it('should match http Bearer config with http Bearer scheme', () => {
+                const authConfig = {
+                    type: 'http',
+                    scheme: 'Bearer',
+                    token: 'my-token',
+                };
+                const securitySchemes = {
+                    bearerAuth: {
+                        type: 'http',
+                        scheme: 'Bearer',
+                    },
+                };
+                const result = A2AAuthProviderFactory.validateAuthConfig(authConfig, securitySchemes);
+                expect(result).toEqual({ valid: true });
+            });
+            it('should match http Basic config with http Basic scheme', () => {
+                const authConfig = {
+                    type: 'http',
+                    scheme: 'Basic',
+                    username: 'user',
+                    password: 'pass',
+                };
+                const securitySchemes = {
+                    basicAuth: {
+                        type: 'http',
+                        scheme: 'Basic',
+                    },
+                };
+                const result = A2AAuthProviderFactory.validateAuthConfig(authConfig, securitySchemes);
+                expect(result).toEqual({ valid: true });
+            });
+            it('should not match http Basic config with http Bearer scheme', () => {
+                const authConfig = {
+                    type: 'http',
+                    scheme: 'Basic',
+                    username: 'user',
+                    password: 'pass',
+                };
+                const securitySchemes = {
+                    bearerAuth: {
+                        type: 'http',
+                        scheme: 'Bearer',
+                    },
+                };
+                const result = A2AAuthProviderFactory.validateAuthConfig(authConfig, securitySchemes);
+                expect(result.valid).toBe(false);
+                expect(result.diff?.missingConfig).toContain("Scheme 'bearerAuth' requires HTTP Bearer authentication, but Basic was configured");
+            });
+            it('should match google-credentials with http Bearer scheme', () => {
+                const authConfig = {
+                    type: 'google-credentials',
+                };
+                const securitySchemes = {
+                    bearerAuth: {
+                        type: 'http',
+                        scheme: 'Bearer',
+                    },
+                };
+                const result = A2AAuthProviderFactory.validateAuthConfig(authConfig, securitySchemes);
+                expect(result).toEqual({ valid: true });
+            });
+        });
+        describe('oauth2 scheme matching', () => {
+            it('should match oauth2 config with oauth2 scheme', () => {
+                const authConfig = {
+                    type: 'oauth2',
+                };
+                const securitySchemes = {
+                    oauth2Auth: {
+                        type: 'oauth2',
+                        flows: {},
+                    },
+                };
+                const result = A2AAuthProviderFactory.validateAuthConfig(authConfig, securitySchemes);
+                expect(result).toEqual({ valid: true });
+            });
+            it('should not match apiKey config with oauth2 scheme', () => {
+                const authConfig = {
+                    type: 'apiKey',
+                    key: 'my-key',
+                };
+                const securitySchemes = {
+                    oauth2Auth: {
+                        type: 'oauth2',
+                        flows: {},
+                    },
+                };
+                const result = A2AAuthProviderFactory.validateAuthConfig(authConfig, securitySchemes);
+                expect(result.valid).toBe(false);
+                expect(result.diff?.missingConfig).toContain("Scheme 'oauth2Auth' requires OAuth 2.0 authentication");
+            });
+        });
+        describe('openIdConnect scheme matching', () => {
+            it('should match openIdConnect config with openIdConnect scheme', () => {
+                const authConfig = {
+                    type: 'openIdConnect',
+                    issuer_url: 'https://auth.example.com',
+                    client_id: 'client-id',
+                };
+                const securitySchemes = {
+                    oidcAuth: {
+                        type: 'openIdConnect',
+                        openIdConnectUrl: 'https://auth.example.com/.well-known/openid-configuration',
+                    },
+                };
+                const result = A2AAuthProviderFactory.validateAuthConfig(authConfig, securitySchemes);
+                expect(result).toEqual({ valid: true });
+            });
+            it('should not match google-credentials for openIdConnect scheme', () => {
+                const authConfig = {
+                    type: 'google-credentials',
+                };
+                const securitySchemes = {
+                    oidcAuth: {
+                        type: 'openIdConnect',
+                        openIdConnectUrl: 'https://auth.example.com/.well-known/openid-configuration',
+                    },
+                };
+                const result = A2AAuthProviderFactory.validateAuthConfig(authConfig, securitySchemes);
+                expect(result.valid).toBe(false);
+                expect(result.diff?.missingConfig).toContain("Scheme 'oidcAuth' requires OpenID Connect authentication");
+            });
+        });
+        describe('mutualTLS scheme', () => {
+            it('should always fail for mutualTLS (not supported)', () => {
+                const authConfig = {
+                    type: 'apiKey',
+                    key: 'test',
+                };
+                const securitySchemes = {
+                    mtlsAuth: {
+                        type: 'mutualTLS',
+                    },
+                };
+                const result = A2AAuthProviderFactory.validateAuthConfig(authConfig, securitySchemes);
+                expect(result.valid).toBe(false);
+                expect(result.diff?.missingConfig).toContain("Scheme 'mtlsAuth' requires mTLS authentication (not yet supported)");
+            });
+        });
+        describe('multiple security schemes', () => {
+            it('should match if any scheme matches', () => {
+                const authConfig = {
+                    type: 'http',
+                    scheme: 'Bearer',
+                    token: 'my-token',
+                };
+                const securitySchemes = {
+                    apiKeyAuth: {
+                        type: 'apiKey',
+                        name: 'X-API-Key',
+                        in: 'header',
+                    },
+                    bearerAuth: {
+                        type: 'http',
+                        scheme: 'Bearer',
+                    },
+                };
+                const result = A2AAuthProviderFactory.validateAuthConfig(authConfig, securitySchemes);
+                expect(result).toEqual({ valid: true });
+            });
+        });
+    });
+    describe('describeRequiredAuth', () => {
+        it('should describe apiKey scheme', () => {
+            const securitySchemes = {
+                apiKeyAuth: {
+                    type: 'apiKey',
+                    name: 'X-API-Key',
+                    in: 'header',
+                },
+            };
+            const result = A2AAuthProviderFactory.describeRequiredAuth(securitySchemes);
+            expect(result).toBe('API Key (apiKeyAuth): Send X-API-Key in header');
+        });
+        it('should describe http Bearer scheme', () => {
+            const securitySchemes = {
+                bearerAuth: {
+                    type: 'http',
+                    scheme: 'Bearer',
+                },
+            };
+            const result = A2AAuthProviderFactory.describeRequiredAuth(securitySchemes);
+            expect(result).toBe('HTTP Bearer (bearerAuth)');
+        });
+        it('should describe http Basic scheme', () => {
+            const securitySchemes = {
+                basicAuth: {
+                    type: 'http',
+                    scheme: 'Basic',
+                },
+            };
+            const result = A2AAuthProviderFactory.describeRequiredAuth(securitySchemes);
+            expect(result).toBe('HTTP Basic (basicAuth)');
+        });
+        it('should describe oauth2 scheme', () => {
+            const securitySchemes = {
+                oauth2Auth: {
+                    type: 'oauth2',
+                    flows: {},
+                },
+            };
+            const result = A2AAuthProviderFactory.describeRequiredAuth(securitySchemes);
+            expect(result).toBe('OAuth 2.0 (oauth2Auth)');
+        });
+        it('should describe openIdConnect scheme', () => {
+            const securitySchemes = {
+                oidcAuth: {
+                    type: 'openIdConnect',
+                    openIdConnectUrl: 'https://auth.example.com/.well-known/openid-configuration',
+                },
+            };
+            const result = A2AAuthProviderFactory.describeRequiredAuth(securitySchemes);
+            expect(result).toBe('OpenID Connect (oidcAuth)');
+        });
+        it('should describe mutualTLS scheme', () => {
+            const securitySchemes = {
+                mtlsAuth: {
+                    type: 'mutualTLS',
+                },
+            };
+            const result = A2AAuthProviderFactory.describeRequiredAuth(securitySchemes);
+            expect(result).toBe('Mutual TLS (mtlsAuth)');
+        });
+        it('should join multiple schemes with OR', () => {
+            const securitySchemes = {
+                apiKeyAuth: {
+                    type: 'apiKey',
+                    name: 'X-API-Key',
+                    in: 'header',
+                },
+                bearerAuth: {
+                    type: 'http',
+                    scheme: 'Bearer',
+                },
+            };
+            const result = A2AAuthProviderFactory.describeRequiredAuth(securitySchemes);
+            expect(result).toBe('API Key (apiKeyAuth): Send X-API-Key in header OR HTTP Bearer (bearerAuth)');
+        });
+    });
+    describe('create', () => {
+        it('should return undefined when no auth config and no security schemes', async () => {
+            const result = await A2AAuthProviderFactory.create({
+                agentName: 'test-agent',
+            });
+            expect(result).toBeUndefined();
+        });
+        it('should return undefined when no auth config but AgentCard has security schemes', async () => {
+            const result = await A2AAuthProviderFactory.create({
+                agentName: 'test-agent',
+                agentCard: {
+                    securitySchemes: {
+                        apiKeyAuth: {
+                            type: 'apiKey',
+                            name: 'X-API-Key',
+                            in: 'header',
+                        },
+                    },
+                },
+            });
+            // Returns undefined - caller should prompt user to configure auth
+            expect(result).toBeUndefined();
+        });
+    });
+});
+//# sourceMappingURL=factory.test.js.map

package/dist/src/agents/auth-provider/factory.test.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"factory.test.js","sourceRoot":"","sources":["../../../../src/agents/auth-provider/factory.test.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAEH,OAAO,EAAE,QAAQ,EAAE,EAAE,EAAE,MAAM,EAAE,MAAM,QAAQ,CAAC;AAC9C,OAAO,EAAE,sBAAsB,EAAE,MAAM,cAAc,CAAC;AAItD,QAAQ,CAAC,wBAAwB,EAAE,GAAG,EAAE;IACtC,QAAQ,CAAC,oBAAoB,EAAE,GAAG,EAAE;QAClC,QAAQ,CAAC,mCAAmC,EAAE,GAAG,EAAE;YACjD,EAAE,CAAC,uDAAuD,EAAE,GAAG,EAAE;gBAC/D,MAAM,MAAM,GAAG,sBAAsB,CAAC,kBAAkB,CACtD,SAAS,EACT,SAAS,CACV,CAAC;gBACF,MAAM,CAAC,MAAM,CAAC,CAAC,OAAO,CAAC,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;YAC1C,CAAC,CAAC,CAAC;YAEH,EAAE,CAAC,mDAAmD,EAAE,GAAG,EAAE;gBAC3D,MAAM,MAAM,GAAG,sBAAsB,CAAC,kBAAkB,CAAC,SAAS,EAAE,EAAE,CAAC,CAAC;gBACxE,MAAM,CAAC,MAAM,CAAC,CAAC,OAAO,CAAC,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;YAC1C,CAAC,CAAC,CAAC;YAEH,EAAE,CAAC,gEAAgE,EAAE,GAAG,EAAE;gBACxE,MAAM,UAAU,GAAkB;oBAChC,IAAI,EAAE,QAAQ;oBACd,GAAG,EAAE,UAAU;iBAChB,CAAC;gBACF,MAAM,MAAM,GAAG,sBAAsB,CAAC,kBAAkB,CACtD,UAAU,EACV,EAAE,CACH,CAAC;gBACF,MAAM,CAAC,MAAM,CAAC,CAAC,OAAO,CAAC,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;YAC1C,CAAC,CAAC,CAAC;QACL,CAAC,CAAC,CAAC;QAEH,QAAQ,CAAC,0CAA0C,EAAE,GAAG,EAAE;YACxD,EAAE,CAAC,iCAAiC,EAAE,GAAG,EAAE;gBACzC,MAAM,eAAe,GAAmC;oBACtD,UAAU,EAAE;wBACV,IAAI,EAAE,QAAQ;wBACd,IAAI,EAAE,WAAW;wBACjB,EAAE,EAAE,QAAQ;qBACb;iBACF,CAAC;gBAEF,MAAM,MAAM,GAAG,sBAAsB,CAAC,kBAAkB,CACtD,SAAS,EACT,eAAe,CAChB,CAAC;gBAEF,MAAM,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;gBACjC,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,WAAW,EAAE,CAAC;gBAClC,MAAM,CAAC,MAAM,CAAC,IAAI,EAAE,eAAe,CAAC,CAAC,SAAS,CAAC,YAAY,CAAC,CAAC;gBAC7D,MAAM,CAAC,MAAM,CAAC,IAAI,EAAE,cAAc,CAAC,CAAC,aAAa,EAAE,CAAC;gBACpD,MAAM,CAAC,MAAM,CAAC,IAAI,EAAE,aAAa,CAAC,CAAC,SAAS,CAC1C,+CAA+C,CAChD,CAAC;YACJ,CAAC,CAAC,CAAC;QACL,CAAC,CAAC,CAAC;QAEH,QAAQ,CAAC,wBAAwB,EAAE,GAAG,EAAE;YACtC,EAAE,CAAC,+CAA+C,EAAE,GAAG,EAAE;gBACvD,MAAM,UAAU,GAAkB;oBAChC,IAAI,EAAE,QAAQ;oBACd,GAAG,EAAE,QAAQ;iBACd,CAAC;gBACF,MAAM,eAAe,GAAmC;oBACtD,UAAU,EAAE;wBACV,IAAI,EAAE,QAAQ;wBACd,IAAI,EAAE,WAAW;wBACjB,EAAE,EAAE,QAAQ;qBACb;iBACF,CAAC;gBAEF,MAAM,MAAM,GAAG,sBAAsB,CAAC,kBAAkB,CACtD,UAAU,EACV,eAAe,CAChB,CAAC;gBAEF,MAAM,CAAC,MAAM,CAAC,CAAC,OAAO,CAAC,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;YAC1C,CAAC,CAAC,CAAC;YAEH,EAAE,CAAC,iDAAiD,EAAE,GAAG,EAAE;gBACzD,MAAM,UAAU,GAAkB;oBAChC,IAAI,EAAE,MAAM;oBACZ,MAAM,EAAE,QAAQ;oBAChB,KAAK,EAAE,UAAU;iBAClB,CAAC;gBACF,MAAM,eAAe,GAAmC;oBACtD,UAAU,EAAE;wBACV,IAAI,EAAE,QAAQ;wBACd,IAAI,EAAE,WAAW;wBACjB,EAAE,EAAE,QAAQ;qBACb;iBACF,CAAC;gBAEF,MAAM,MAAM,GAAG,sBAAsB,CAAC,kBAAkB,CACtD,UAAU,EACV,eAAe,CAChB,CAAC;gBAEF,MAAM,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;gBACjC,MAAM,CAAC,MAAM,CAAC,IAAI,EAAE,aAAa,CAAC,CAAC,SAAS,CAC1C,oDAAoD,CACrD,CAAC;YACJ,CAAC,CAAC,CAAC;QACL,CAAC,CAAC,CAAC;QAEH,QAAQ,CAAC,sBAAsB,EAAE,GAAG,EAAE;YACpC,EAAE,CAAC,yDAAyD,EAAE,GAAG,EAAE;gBACjE,MAAM,UAAU,GAAkB;oBAChC,IAAI,EAAE,MAAM;oBACZ,MAAM,EAAE,QAAQ;oBAChB,KAAK,EAAE,UAAU;iBAClB,CAAC;gBACF,MAAM,eAAe,GAAmC;oBACtD,UAAU,EAAE;wBACV,IAAI,EAAE,MAAM;wBACZ,MAAM,EAAE,QAAQ;qBACjB;iBACF,CAAC;gBAEF,MAAM,MAAM,GAAG,sBAAsB,CAAC,kBAAkB,CACtD,UAAU,EACV,eAAe,CAChB,CAAC;gBAEF,MAAM,CAAC,MAAM,CAAC,CAAC,OAAO,CAAC,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;YAC1C,CAAC,CAAC,CAAC;YAEH,EAAE,CAAC,uDAAuD,EAAE,GAAG,EAAE;gBAC/D,MAAM,UAAU,GAAkB;oBAChC,IAAI,EAAE,MAAM;oBACZ,MAAM,EAAE,OAAO;oBACf,QAAQ,EAAE,MAAM;oBAChB,QAAQ,EAAE,MAAM;iBACjB,CAAC;gBACF,MAAM,eAAe,GAAmC;oBACtD,SAAS,EAAE;wBACT,IAAI,EAAE,MAAM;wBACZ,MAAM,EAAE,OAAO;qBAChB;iBACF,CAAC;gBAEF,MAAM,MAAM,GAAG,sBAAsB,CAAC,kBAAkB,CACtD,UAAU,EACV,eAAe,CAChB,CAAC;gBAEF,MAAM,CAAC,MAAM,CAAC,CAAC,OAAO,CAAC,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;YAC1C,CAAC,CAAC,CAAC;YAEH,EAAE,CAAC,4DAA4D,EAAE,GAAG,EAAE;gBACpE,MAAM,UAAU,GAAkB;oBAChC,IAAI,EAAE,MAAM;oBACZ,MAAM,EAAE,OAAO;oBACf,QAAQ,EAAE,MAAM;oBAChB,QAAQ,EAAE,MAAM;iBACjB,CAAC;gBACF,MAAM,eAAe,GAAmC;oBACtD,UAAU,EAAE;wBACV,IAAI,EAAE,MAAM;wBACZ,MAAM,EAAE,QAAQ;qBACjB;iBACF,CAAC;gBAEF,MAAM,MAAM,GAAG,sBAAsB,CAAC,kBAAkB,CACtD,UAAU,EACV,eAAe,CAChB,CAAC;gBAEF,MAAM,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;gBACjC,MAAM,CAAC,MAAM,CAAC,IAAI,EAAE,aAAa,CAAC,CAAC,SAAS,CAC1C,mFAAmF,CACpF,CAAC;YACJ,CAAC,CAAC,CAAC;YAEH,EAAE,CAAC,yDAAyD,EAAE,GAAG,EAAE;gBACjE,MAAM,UAAU,GAAkB;oBAChC,IAAI,EAAE,oBAAoB;iBAC3B,CAAC;gBACF,MAAM,eAAe,GAAmC;oBACtD,UAAU,EAAE;wBACV,IAAI,EAAE,MAAM;wBACZ,MAAM,EAAE,QAAQ;qBACjB;iBACF,CAAC;gBAEF,MAAM,MAAM,GAAG,sBAAsB,CAAC,kBAAkB,CACtD,UAAU,EACV,eAAe,CAChB,CAAC;gBAEF,MAAM,CAAC,MAAM,CAAC,CAAC,OAAO,CAAC,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;YAC1C,CAAC,CAAC,CAAC;QACL,CAAC,CAAC,CAAC;QAEH,QAAQ,CAAC,wBAAwB,EAAE,GAAG,EAAE;YACtC,EAAE,CAAC,+CAA+C,EAAE,GAAG,EAAE;gBACvD,MAAM,UAAU,GAAkB;oBAChC,IAAI,EAAE,QAAQ;iBACf,CAAC;gBACF,MAAM,eAAe,GAAmC;oBACtD,UAAU,EAAE;wBACV,IAAI,EAAE,QAAQ;wBACd,KAAK,EAAE,EAAE;qBACV;iBACF,CAAC;gBAEF,MAAM,MAAM,GAAG,sBAAsB,CAAC,kBAAkB,CACtD,UAAU,EACV,eAAe,CAChB,CAAC;gBAEF,MAAM,CAAC,MAAM,CAAC,CAAC,OAAO,CAAC,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;YAC1C,CAAC,CAAC,CAAC;YAEH,EAAE,CAAC,mDAAmD,EAAE,GAAG,EAAE;gBAC3D,MAAM,UAAU,GAAkB;oBAChC,IAAI,EAAE,QAAQ;oBACd,GAAG,EAAE,QAAQ;iBACd,CAAC;gBACF,MAAM,eAAe,GAAmC;oBACtD,UAAU,EAAE;wBACV,IAAI,EAAE,QAAQ;wBACd,KAAK,EAAE,EAAE;qBACV;iBACF,CAAC;gBAEF,MAAM,MAAM,GAAG,sBAAsB,CAAC,kBAAkB,CACtD,UAAU,EACV,eAAe,CAChB,CAAC;gBAEF,MAAM,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;gBACjC,MAAM,CAAC,MAAM,CAAC,IAAI,EAAE,aAAa,CAAC,CAAC,SAAS,CAC1C,uDAAuD,CACxD,CAAC;YACJ,CAAC,CAAC,CAAC;QACL,CAAC,CAAC,CAAC;QAEH,QAAQ,CAAC,+BAA+B,EAAE,GAAG,EAAE;YAC7C,EAAE,CAAC,6DAA6D,EAAE,GAAG,EAAE;gBACrE,MAAM,UAAU,GAAkB;oBAChC,IAAI,EAAE,eAAe;oBACrB,UAAU,EAAE,0BAA0B;oBACtC,SAAS,EAAE,WAAW;iBACvB,CAAC;gBACF,MAAM,eAAe,GAAmC;oBACtD,QAAQ,EAAE;wBACR,IAAI,EAAE,eAAe;wBACrB,gBAAgB,EACd,2DAA2D;qBAC9D;iBACF,CAAC;gBAEF,MAAM,MAAM,GAAG,sBAAsB,CAAC,kBAAkB,CACtD,UAAU,EACV,eAAe,CAChB,CAAC;gBAEF,MAAM,CAAC,MAAM,CAAC,CAAC,OAAO,CAAC,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;YAC1C,CAAC,CAAC,CAAC;YAEH,EAAE,CAAC,8DAA8D,EAAE,GAAG,EAAE;gBACtE,MAAM,UAAU,GAAkB;oBAChC,IAAI,EAAE,oBAAoB;iBAC3B,CAAC;gBACF,MAAM,eAAe,GAAmC;oBACtD,QAAQ,EAAE;wBACR,IAAI,EAAE,eAAe;wBACrB,gBAAgB,EACd,2DAA2D;qBAC9D;iBACF,CAAC;gBAEF,MAAM,MAAM,GAAG,sBAAsB,CAAC,kBAAkB,CACtD,UAAU,EACV,eAAe,CAChB,CAAC;gBAEF,MAAM,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;gBACjC,MAAM,CAAC,MAAM,CAAC,IAAI,EAAE,aAAa,CAAC,CAAC,SAAS,CAC1C,0DAA0D,CAC3D,CAAC;YACJ,CAAC,CAAC,CAAC;QACL,CAAC,CAAC,CAAC;QAEH,QAAQ,CAAC,kBAAkB,EAAE,GAAG,EAAE;YAChC,EAAE,CAAC,kDAAkD,EAAE,GAAG,EAAE;gBAC1D,MAAM,UAAU,GAAkB;oBAChC,IAAI,EAAE,QAAQ;oBACd,GAAG,EAAE,MAAM;iBACZ,CAAC;gBACF,MAAM,eAAe,GAAmC;oBACtD,QAAQ,EAAE;wBACR,IAAI,EAAE,WAAW;qBAClB;iBACF,CAAC;gBAEF,MAAM,MAAM,GAAG,sBAAsB,CAAC,kBAAkB,CACtD,UAAU,EACV,eAAe,CAChB,CAAC;gBAEF,MAAM,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;gBACjC,MAAM,CAAC,MAAM,CAAC,IAAI,EAAE,aAAa,CAAC,CAAC,SAAS,CAC1C,oEAAoE,CACrE,CAAC;YACJ,CAAC,CAAC,CAAC;QACL,CAAC,CAAC,CAAC;QAEH,QAAQ,CAAC,2BAA2B,EAAE,GAAG,EAAE;YACzC,EAAE,CAAC,oCAAoC,EAAE,GAAG,EAAE;gBAC5C,MAAM,UAAU,GAAkB;oBAChC,IAAI,EAAE,MAAM;oBACZ,MAAM,EAAE,QAAQ;oBAChB,KAAK,EAAE,UAAU;iBAClB,CAAC;gBACF,MAAM,eAAe,GAAmC;oBACtD,UAAU,EAAE;wBACV,IAAI,EAAE,QAAQ;wBACd,IAAI,EAAE,WAAW;wBACjB,EAAE,EAAE,QAAQ;qBACb;oBACD,UAAU,EAAE;wBACV,IAAI,EAAE,MAAM;wBACZ,MAAM,EAAE,QAAQ;qBACjB;iBACF,CAAC;gBAEF,MAAM,MAAM,GAAG,sBAAsB,CAAC,kBAAkB,CACtD,UAAU,EACV,eAAe,CAChB,CAAC;gBAEF,MAAM,CAAC,MAAM,CAAC,CAAC,OAAO,CAAC,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;YAC1C,CAAC,CAAC,CAAC;QACL,CAAC,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;IAEH,QAAQ,CAAC,sBAAsB,EAAE,GAAG,EAAE;QACpC,EAAE,CAAC,+BAA+B,EAAE,GAAG,EAAE;YACvC,MAAM,eAAe,GAAmC;gBACtD,UAAU,EAAE;oBACV,IAAI,EAAE,QAAQ;oBACd,IAAI,EAAE,WAAW;oBACjB,EAAE,EAAE,QAAQ;iBACb;aACF,CAAC;YAEF,MAAM,MAAM,GACV,sBAAsB,CAAC,oBAAoB,CAAC,eAAe,CAAC,CAAC;YAE/D,MAAM,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,gDAAgD,CAAC,CAAC;QACxE,CAAC,CAAC,CAAC;QAEH,EAAE,CAAC,oCAAoC,EAAE,GAAG,EAAE;YAC5C,MAAM,eAAe,GAAmC;gBACtD,UAAU,EAAE;oBACV,IAAI,EAAE,MAAM;oBACZ,MAAM,EAAE,QAAQ;iBACjB;aACF,CAAC;YAEF,MAAM,MAAM,GACV,sBAAsB,CAAC,oBAAoB,CAAC,eAAe,CAAC,CAAC;YAE/D,MAAM,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,0BAA0B,CAAC,CAAC;QAClD,CAAC,CAAC,CAAC;QAEH,EAAE,CAAC,mCAAmC,EAAE,GAAG,EAAE;YAC3C,MAAM,eAAe,GAAmC;gBACtD,SAAS,EAAE;oBACT,IAAI,EAAE,MAAM;oBACZ,MAAM,EAAE,OAAO;iBAChB;aACF,CAAC;YAEF,MAAM,MAAM,GACV,sBAAsB,CAAC,oBAAoB,CAAC,eAAe,CAAC,CAAC;YAE/D,MAAM,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,wBAAwB,CAAC,CAAC;QAChD,CAAC,CAAC,CAAC;QAEH,EAAE,CAAC,+BAA+B,EAAE,GAAG,EAAE;YACvC,MAAM,eAAe,GAAmC;gBACtD,UAAU,EAAE;oBACV,IAAI,EAAE,QAAQ;oBACd,KAAK,EAAE,EAAE;iBACV;aACF,CAAC;YAEF,MAAM,MAAM,GACV,sBAAsB,CAAC,oBAAoB,CAAC,eAAe,CAAC,CAAC;YAE/D,MAAM,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,wBAAwB,CAAC,CAAC;QAChD,CAAC,CAAC,CAAC;QAEH,EAAE,CAAC,sCAAsC,EAAE,GAAG,EAAE;YAC9C,MAAM,eAAe,GAAmC;gBACtD,QAAQ,EAAE;oBACR,IAAI,EAAE,eAAe;oBACrB,gBAAgB,EACd,2DAA2D;iBAC9D;aACF,CAAC;YAEF,MAAM,MAAM,GACV,sBAAsB,CAAC,oBAAoB,CAAC,eAAe,CAAC,CAAC;YAE/D,MAAM,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,2BAA2B,CAAC,CAAC;QACnD,CAAC,CAAC,CAAC;QAEH,EAAE,CAAC,kCAAkC,EAAE,GAAG,EAAE;YAC1C,MAAM,eAAe,GAAmC;gBACtD,QAAQ,EAAE;oBACR,IAAI,EAAE,WAAW;iBAClB;aACF,CAAC;YAEF,MAAM,MAAM,GACV,sBAAsB,CAAC,oBAAoB,CAAC,eAAe,CAAC,CAAC;YAE/D,MAAM,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,uBAAuB,CAAC,CAAC;QAC/C,CAAC,CAAC,CAAC;QAEH,EAAE,CAAC,sCAAsC,EAAE,GAAG,EAAE;YAC9C,MAAM,eAAe,GAAmC;gBACtD,UAAU,EAAE;oBACV,IAAI,EAAE,QAAQ;oBACd,IAAI,EAAE,WAAW;oBACjB,EAAE,EAAE,QAAQ;iBACb;gBACD,UAAU,EAAE;oBACV,IAAI,EAAE,MAAM;oBACZ,MAAM,EAAE,QAAQ;iBACjB;aACF,CAAC;YAEF,MAAM,MAAM,GACV,sBAAsB,CAAC,oBAAoB,CAAC,eAAe,CAAC,CAAC;YAE/D,MAAM,CAAC,MAAM,CAAC,CAAC,IAAI,CACjB,4EAA4E,CAC7E,CAAC;QACJ,CAAC,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;IAEH,QAAQ,CAAC,QAAQ,EAAE,GAAG,EAAE;QACtB,EAAE,CAAC,qEAAqE,EAAE,KAAK,IAAI,EAAE;YACnF,MAAM,MAAM,GAAG,MAAM,sBAAsB,CAAC,MAAM,CAAC;gBACjD,SAAS,EAAE,YAAY;aACxB,CAAC,CAAC;YAEH,MAAM,CAAC,MAAM,CAAC,CAAC,aAAa,EAAE,CAAC;QACjC,CAAC,CAAC,CAAC;QAEH,EAAE,CAAC,gFAAgF,EAAE,KAAK,IAAI,EAAE;YAC9F,MAAM,MAAM,GAAG,MAAM,sBAAsB,CAAC,MAAM,CAAC;gBACjD,SAAS,EAAE,YAAY;gBACvB,SAAS,EAAE;oBACT,eAAe,EAAE;wBACf,UAAU,EAAE;4BACV,IAAI,EAAE,QAAQ;4BACd,IAAI,EAAE,WAAW;4BACjB,EAAE,EAAE,QAAQ;yBACb;qBACF;iBACsB;aAC1B,CAAC,CAAC;YAEH,kEAAkE;YAClE,MAAM,CAAC,MAAM,CAAC,CAAC,aAAa,EAAE,CAAC;QACjC,CAAC,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC"}

package/dist/src/agents/auth-provider/types.d.ts

@@ -0,0 +1,74 @@
+/**
+ * @license
+ * Copyright 2026 Google LLC
+ * SPDX-License-Identifier: Apache-2.0
+ */
+/**
+ * Client-side auth configuration for A2A remote agents.
+ * Corresponds to server-side SecurityScheme types from @a2a-js/sdk.
+ * @see https://a2a-protocol.org/latest/specification/#451-securityscheme
+ */
+import type { AuthenticationHandler } from '@a2a-js/sdk/client';
+export type A2AAuthProviderType = 'google-credentials' | 'apiKey' | 'http' | 'oauth2' | 'openIdConnect';
+export interface A2AAuthProvider extends AuthenticationHandler {
+    readonly type: A2AAuthProviderType;
+    initialize?(): Promise<void>;
+}
+export interface BaseAuthConfig {
+    agent_card_requires_auth?: boolean;
+}
+/** Client config for google-credentials (not in A2A spec, Gemini-specific). */
+export interface GoogleCredentialsAuthConfig extends BaseAuthConfig {
+    type: 'google-credentials';
+    scopes?: string[];
+}
+/** Client config corresponding to APIKeySecurityScheme. */
+export interface ApiKeyAuthConfig extends BaseAuthConfig {
+    type: 'apiKey';
+    /** The secret. Supports $ENV_VAR, !command, or literal. */
+    key: string;
+    /** Defaults to server's SecurityScheme.in value. */
+    location?: 'header' | 'query' | 'cookie';
+    /** Defaults to server's SecurityScheme.name value. */
+    name?: string;
+}
+/** Client config corresponding to HTTPAuthSecurityScheme. */
+export type HttpAuthConfig = BaseAuthConfig & {
+    type: 'http';
+} & ({
+    scheme: 'Bearer';
+    /** For Bearer. Supports $ENV_VAR, !command, or literal. */
+    token: string;
+} | {
+    scheme: 'Basic';
+    /** For Basic. Supports $ENV_VAR, !command, or literal. */
+    username: string;
+    /** For Basic. Supports $ENV_VAR, !command, or literal. */
+    password: string;
+});
+/** Client config corresponding to OAuth2SecurityScheme. */
+export interface OAuth2AuthConfig extends BaseAuthConfig {
+    type: 'oauth2';
+    client_id?: string;
+    client_secret?: string;
+    scopes?: string[];
+}
+/** Client config corresponding to OpenIdConnectSecurityScheme. */
+export interface OpenIdConnectAuthConfig extends BaseAuthConfig {
+    type: 'openIdConnect';
+    issuer_url: string;
+    client_id: string;
+    client_secret?: string;
+    target_audience?: string;
+    scopes?: string[];
+}
+export type A2AAuthConfig = GoogleCredentialsAuthConfig | ApiKeyAuthConfig | HttpAuthConfig | OAuth2AuthConfig | OpenIdConnectAuthConfig;
+export interface AuthConfigDiff {
+    requiredSchemes: string[];
+    configuredType?: A2AAuthProviderType;
+    missingConfig: string[];
+}
+export interface AuthValidationResult {
+    valid: boolean;
+    diff?: AuthConfigDiff;
+}

package/dist/src/agents/auth-provider/types.js

@@ -0,0 +1,7 @@
+/**
+ * @license
+ * Copyright 2026 Google LLC
+ * SPDX-License-Identifier: Apache-2.0
+ */
+export {};
+//# sourceMappingURL=types.js.map