@office-ai/aioncli-core 0.26.0 → 0.30.1

package/dist/src/agents/auth-provider/api-key-provider.test.js

@@ -0,0 +1,130 @@
+/**
+ * @license
+ * Copyright 2026 Google LLC
+ * SPDX-License-Identifier: Apache-2.0
+ */
+import { describe, it, expect, afterEach, vi } from 'vitest';
+import { ApiKeyAuthProvider } from './api-key-provider.js';
+describe('ApiKeyAuthProvider', () => {
+    afterEach(() => {
+        vi.unstubAllEnvs();
+    });
+    describe('initialization', () => {
+        it('should initialize with literal API key', async () => {
+            const provider = new ApiKeyAuthProvider({
+                type: 'apiKey',
+                key: 'my-api-key',
+            });
+            await provider.initialize();
+            const headers = await provider.headers();
+            expect(headers).toEqual({ 'X-API-Key': 'my-api-key' });
+        });
+        it('should resolve API key from environment variable', async () => {
+            vi.stubEnv('TEST_API_KEY', 'env-api-key');
+            const provider = new ApiKeyAuthProvider({
+                type: 'apiKey',
+                key: '$TEST_API_KEY',
+            });
+            await provider.initialize();
+            const headers = await provider.headers();
+            expect(headers).toEqual({ 'X-API-Key': 'env-api-key' });
+        });
+        it('should throw if environment variable is not set', async () => {
+            const provider = new ApiKeyAuthProvider({
+                type: 'apiKey',
+                key: '$MISSING_KEY_12345',
+            });
+            await expect(provider.initialize()).rejects.toThrow("Environment variable 'MISSING_KEY_12345' is not set");
+        });
+    });
+    describe('headers', () => {
+        it('should throw if not initialized', async () => {
+            const provider = new ApiKeyAuthProvider({
+                type: 'apiKey',
+                key: 'test-key',
+            });
+            await expect(provider.headers()).rejects.toThrow('not initialized');
+        });
+        it('should use custom header name', async () => {
+            const provider = new ApiKeyAuthProvider({
+                type: 'apiKey',
+                key: 'my-key',
+                name: 'X-Custom-Auth',
+            });
+            await provider.initialize();
+            const headers = await provider.headers();
+            expect(headers).toEqual({ 'X-Custom-Auth': 'my-key' });
+        });
+        it('should use default header name X-API-Key', async () => {
+            const provider = new ApiKeyAuthProvider({
+                type: 'apiKey',
+                key: 'my-key',
+            });
+            await provider.initialize();
+            const headers = await provider.headers();
+            expect(headers).toEqual({ 'X-API-Key': 'my-key' });
+        });
+    });
+    describe('shouldRetryWithHeaders', () => {
+        it('should return undefined for non-auth errors', async () => {
+            const provider = new ApiKeyAuthProvider({
+                type: 'apiKey',
+                key: 'test-key',
+            });
+            await provider.initialize();
+            const result = await provider.shouldRetryWithHeaders({}, new Response(null, { status: 500 }));
+            expect(result).toBeUndefined();
+        });
+        it('should return undefined for literal keys on 401 (same headers would fail again)', async () => {
+            const provider = new ApiKeyAuthProvider({
+                type: 'apiKey',
+                key: 'test-key',
+            });
+            await provider.initialize();
+            const result = await provider.shouldRetryWithHeaders({}, new Response(null, { status: 401 }));
+            expect(result).toBeUndefined();
+        });
+        it('should return undefined for env-var keys on 403', async () => {
+            vi.stubEnv('RETRY_TEST_KEY', 'some-key');
+            const provider = new ApiKeyAuthProvider({
+                type: 'apiKey',
+                key: '$RETRY_TEST_KEY',
+            });
+            await provider.initialize();
+            const result = await provider.shouldRetryWithHeaders({}, new Response(null, { status: 403 }));
+            expect(result).toBeUndefined();
+        });
+        it('should re-resolve and return headers for command keys on 401', async () => {
+            const provider = new ApiKeyAuthProvider({
+                type: 'apiKey',
+                key: '!echo refreshed-key',
+            });
+            await provider.initialize();
+            const result = await provider.shouldRetryWithHeaders({}, new Response(null, { status: 401 }));
+            expect(result).toEqual({ 'X-API-Key': 'refreshed-key' });
+        });
+        it('should stop retrying after MAX_AUTH_RETRIES', async () => {
+            const provider = new ApiKeyAuthProvider({
+                type: 'apiKey',
+                key: '!echo rotating-key',
+            });
+            await provider.initialize();
+            const r1 = await provider.shouldRetryWithHeaders({}, new Response(null, { status: 401 }));
+            expect(r1).toBeDefined();
+            const r2 = await provider.shouldRetryWithHeaders({}, new Response(null, { status: 401 }));
+            expect(r2).toBeDefined();
+            const r3 = await provider.shouldRetryWithHeaders({}, new Response(null, { status: 401 }));
+            expect(r3).toBeUndefined();
+        });
+    });
+    describe('type property', () => {
+        it('should have type apiKey', () => {
+            const provider = new ApiKeyAuthProvider({
+                type: 'apiKey',
+                key: 'test',
+            });
+            expect(provider.type).toBe('apiKey');
+        });
+    });
+});
+//# sourceMappingURL=api-key-provider.test.js.map

package/dist/src/agents/auth-provider/api-key-provider.test.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"api-key-provider.test.js","sourceRoot":"","sources":["../../../../src/agents/auth-provider/api-key-provider.test.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAEH,OAAO,EAAE,QAAQ,EAAE,EAAE,EAAE,MAAM,EAAE,SAAS,EAAE,EAAE,EAAE,MAAM,QAAQ,CAAC;AAC7D,OAAO,EAAE,kBAAkB,EAAE,MAAM,uBAAuB,CAAC;AAE3D,QAAQ,CAAC,oBAAoB,EAAE,GAAG,EAAE;IAClC,SAAS,CAAC,GAAG,EAAE;QACb,EAAE,CAAC,aAAa,EAAE,CAAC;IACrB,CAAC,CAAC,CAAC;IAEH,QAAQ,CAAC,gBAAgB,EAAE,GAAG,EAAE;QAC9B,EAAE,CAAC,wCAAwC,EAAE,KAAK,IAAI,EAAE;YACtD,MAAM,QAAQ,GAAG,IAAI,kBAAkB,CAAC;gBACtC,IAAI,EAAE,QAAQ;gBACd,GAAG,EAAE,YAAY;aAClB,CAAC,CAAC;YACH,MAAM,QAAQ,CAAC,UAAU,EAAE,CAAC;YAE5B,MAAM,OAAO,GAAG,MAAM,QAAQ,CAAC,OAAO,EAAE,CAAC;YACzC,MAAM,CAAC,OAAO,CAAC,CAAC,OAAO,CAAC,EAAE,WAAW,EAAE,YAAY,EAAE,CAAC,CAAC;QACzD,CAAC,CAAC,CAAC;QAEH,EAAE,CAAC,kDAAkD,EAAE,KAAK,IAAI,EAAE;YAChE,EAAE,CAAC,OAAO,CAAC,cAAc,EAAE,aAAa,CAAC,CAAC;YAE1C,MAAM,QAAQ,GAAG,IAAI,kBAAkB,CAAC;gBACtC,IAAI,EAAE,QAAQ;gBACd,GAAG,EAAE,eAAe;aACrB,CAAC,CAAC;YACH,MAAM,QAAQ,CAAC,UAAU,EAAE,CAAC;YAE5B,MAAM,OAAO,GAAG,MAAM,QAAQ,CAAC,OAAO,EAAE,CAAC;YACzC,MAAM,CAAC,OAAO,CAAC,CAAC,OAAO,CAAC,EAAE,WAAW,EAAE,aAAa,EAAE,CAAC,CAAC;QAC1D,CAAC,CAAC,CAAC;QAEH,EAAE,CAAC,iDAAiD,EAAE,KAAK,IAAI,EAAE;YAC/D,MAAM,QAAQ,GAAG,IAAI,kBAAkB,CAAC;gBACtC,IAAI,EAAE,QAAQ;gBACd,GAAG,EAAE,oBAAoB;aAC1B,CAAC,CAAC;YAEH,MAAM,MAAM,CAAC,QAAQ,CAAC,UAAU,EAAE,CAAC,CAAC,OAAO,CAAC,OAAO,CACjD,qDAAqD,CACtD,CAAC;QACJ,CAAC,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;IAEH,QAAQ,CAAC,SAAS,EAAE,GAAG,EAAE;QACvB,EAAE,CAAC,iCAAiC,EAAE,KAAK,IAAI,EAAE;YAC/C,MAAM,QAAQ,GAAG,IAAI,kBAAkB,CAAC;gBACtC,IAAI,EAAE,QAAQ;gBACd,GAAG,EAAE,UAAU;aAChB,CAAC,CAAC;YAEH,MAAM,MAAM,CAAC,QAAQ,CAAC,OAAO,EAAE,CAAC,CAAC,OAAO,CAAC,OAAO,CAAC,iBAAiB,CAAC,CAAC;QACtE,CAAC,CAAC,CAAC;QAEH,EAAE,CAAC,+BAA+B,EAAE,KAAK,IAAI,EAAE;YAC7C,MAAM,QAAQ,GAAG,IAAI,kBAAkB,CAAC;gBACtC,IAAI,EAAE,QAAQ;gBACd,GAAG,EAAE,QAAQ;gBACb,IAAI,EAAE,eAAe;aACtB,CAAC,CAAC;YACH,MAAM,QAAQ,CAAC,UAAU,EAAE,CAAC;YAE5B,MAAM,OAAO,GAAG,MAAM,QAAQ,CAAC,OAAO,EAAE,CAAC;YACzC,MAAM,CAAC,OAAO,CAAC,CAAC,OAAO,CAAC,EAAE,eAAe,EAAE,QAAQ,EAAE,CAAC,CAAC;QACzD,CAAC,CAAC,CAAC;QAEH,EAAE,CAAC,0CAA0C,EAAE,KAAK,IAAI,EAAE;YACxD,MAAM,QAAQ,GAAG,IAAI,kBAAkB,CAAC;gBACtC,IAAI,EAAE,QAAQ;gBACd,GAAG,EAAE,QAAQ;aACd,CAAC,CAAC;YACH,MAAM,QAAQ,CAAC,UAAU,EAAE,CAAC;YAE5B,MAAM,OAAO,GAAG,MAAM,QAAQ,CAAC,OAAO,EAAE,CAAC;YACzC,MAAM,CAAC,OAAO,CAAC,CAAC,OAAO,CAAC,EAAE,WAAW,EAAE,QAAQ,EAAE,CAAC,CAAC;QACrD,CAAC,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;IAEH,QAAQ,CAAC,wBAAwB,EAAE,GAAG,EAAE;QACtC,EAAE,CAAC,6CAA6C,EAAE,KAAK,IAAI,EAAE;YAC3D,MAAM,QAAQ,GAAG,IAAI,kBAAkB,CAAC;gBACtC,IAAI,EAAE,QAAQ;gBACd,GAAG,EAAE,UAAU;aAChB,CAAC,CAAC;YACH,MAAM,QAAQ,CAAC,UAAU,EAAE,CAAC;YAE5B,MAAM,MAAM,GAAG,MAAM,QAAQ,CAAC,sBAAsB,CAClD,EAAE,EACF,IAAI,QAAQ,CAAC,IAAI,EAAE,EAAE,MAAM,EAAE,GAAG,EAAE,CAAC,CACpC,CAAC;YACF,MAAM,CAAC,MAAM,CAAC,CAAC,aAAa,EAAE,CAAC;QACjC,CAAC,CAAC,CAAC;QAEH,EAAE,CAAC,iFAAiF,EAAE,KAAK,IAAI,EAAE;YAC/F,MAAM,QAAQ,GAAG,IAAI,kBAAkB,CAAC;gBACtC,IAAI,EAAE,QAAQ;gBACd,GAAG,EAAE,UAAU;aAChB,CAAC,CAAC;YACH,MAAM,QAAQ,CAAC,UAAU,EAAE,CAAC;YAE5B,MAAM,MAAM,GAAG,MAAM,QAAQ,CAAC,sBAAsB,CAClD,EAAE,EACF,IAAI,QAAQ,CAAC,IAAI,EAAE,EAAE,MAAM,EAAE,GAAG,EAAE,CAAC,CACpC,CAAC;YACF,MAAM,CAAC,MAAM,CAAC,CAAC,aAAa,EAAE,CAAC;QACjC,CAAC,CAAC,CAAC;QAEH,EAAE,CAAC,iDAAiD,EAAE,KAAK,IAAI,EAAE;YAC/D,EAAE,CAAC,OAAO,CAAC,gBAAgB,EAAE,UAAU,CAAC,CAAC;YACzC,MAAM,QAAQ,GAAG,IAAI,kBAAkB,CAAC;gBACtC,IAAI,EAAE,QAAQ;gBACd,GAAG,EAAE,iBAAiB;aACvB,CAAC,CAAC;YACH,MAAM,QAAQ,CAAC,UAAU,EAAE,CAAC;YAE5B,MAAM,MAAM,GAAG,MAAM,QAAQ,CAAC,sBAAsB,CAClD,EAAE,EACF,IAAI,QAAQ,CAAC,IAAI,EAAE,EAAE,MAAM,EAAE,GAAG,EAAE,CAAC,CACpC,CAAC;YACF,MAAM,CAAC,MAAM,CAAC,CAAC,aAAa,EAAE,CAAC;QACjC,CAAC,CAAC,CAAC;QAEH,EAAE,CAAC,8DAA8D,EAAE,KAAK,IAAI,EAAE;YAC5E,MAAM,QAAQ,GAAG,IAAI,kBAAkB,CAAC;gBACtC,IAAI,EAAE,QAAQ;gBACd,GAAG,EAAE,qBAAqB;aAC3B,CAAC,CAAC;YACH,MAAM,QAAQ,CAAC,UAAU,EAAE,CAAC;YAE5B,MAAM,MAAM,GAAG,MAAM,QAAQ,CAAC,sBAAsB,CAClD,EAAE,EACF,IAAI,QAAQ,CAAC,IAAI,EAAE,EAAE,MAAM,EAAE,GAAG,EAAE,CAAC,CACpC,CAAC;YACF,MAAM,CAAC,MAAM,CAAC,CAAC,OAAO,CAAC,EAAE,WAAW,EAAE,eAAe,EAAE,CAAC,CAAC;QAC3D,CAAC,CAAC,CAAC;QAEH,EAAE,CAAC,6CAA6C,EAAE,KAAK,IAAI,EAAE;YAC3D,MAAM,QAAQ,GAAG,IAAI,kBAAkB,CAAC;gBACtC,IAAI,EAAE,QAAQ;gBACd,GAAG,EAAE,oBAAoB;aAC1B,CAAC,CAAC;YACH,MAAM,QAAQ,CAAC,UAAU,EAAE,CAAC;YAE5B,MAAM,EAAE,GAAG,MAAM,QAAQ,CAAC,sBAAsB,CAC9C,EAAE,EACF,IAAI,QAAQ,CAAC,IAAI,EAAE,EAAE,MAAM,EAAE,GAAG,EAAE,CAAC,CACpC,CAAC;YACF,MAAM,CAAC,EAAE,CAAC,CAAC,WAAW,EAAE,CAAC;YAEzB,MAAM,EAAE,GAAG,MAAM,QAAQ,CAAC,sBAAsB,CAC9C,EAAE,EACF,IAAI,QAAQ,CAAC,IAAI,EAAE,EAAE,MAAM,EAAE,GAAG,EAAE,CAAC,CACpC,CAAC;YACF,MAAM,CAAC,EAAE,CAAC,CAAC,WAAW,EAAE,CAAC;YAEzB,MAAM,EAAE,GAAG,MAAM,QAAQ,CAAC,sBAAsB,CAC9C,EAAE,EACF,IAAI,QAAQ,CAAC,IAAI,EAAE,EAAE,MAAM,EAAE,GAAG,EAAE,CAAC,CACpC,CAAC;YACF,MAAM,CAAC,EAAE,CAAC,CAAC,aAAa,EAAE,CAAC;QAC7B,CAAC,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;IAEH,QAAQ,CAAC,eAAe,EAAE,GAAG,EAAE;QAC7B,EAAE,CAAC,yBAAyB,EAAE,GAAG,EAAE;YACjC,MAAM,QAAQ,GAAG,IAAI,kBAAkB,CAAC;gBACtC,IAAI,EAAE,QAAQ;gBACd,GAAG,EAAE,MAAM;aACZ,CAAC,CAAC;YACH,MAAM,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;QACvC,CAAC,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC"}

package/dist/src/agents/auth-provider/base-provider.d.ts

@@ -0,0 +1,40 @@
+/**
+ * @license
+ * Copyright 2026 Google LLC
+ * SPDX-License-Identifier: Apache-2.0
+ */
+import type { HttpHeaders } from '@a2a-js/sdk/client';
+import type { A2AAuthProvider, A2AAuthProviderType } from './types.js';
+/**
+ * Abstract base class for A2A authentication providers.
+ * Provides default implementations for optional methods.
+ */
+export declare abstract class BaseA2AAuthProvider implements A2AAuthProvider {
+    /**
+     * The type of authentication provider.
+     */
+    abstract readonly type: A2AAuthProviderType;
+    /**
+     * Get the HTTP headers to include in requests.
+     * Subclasses must implement this method.
+     */
+    abstract headers(): Promise<HttpHeaders>;
+    private static readonly MAX_AUTH_RETRIES;
+    private authRetryCount;
+    /**
+     * Check if a request should be retried with new headers.
+     *
+     * The default implementation checks for 401/403 status codes and
+     * returns fresh headers for retry. Subclasses can override for
+     * custom retry logic.
+     *
+     * @param _req The original request init
+     * @param res The response from the server
+     * @returns New headers for retry, or undefined if no retry should be made
+     */
+    shouldRetryWithHeaders(_req: RequestInit, res: Response): Promise<HttpHeaders | undefined>;
+    /**
+     * Initialize the provider. Override in subclasses that need async setup.
+     */
+    initialize(): Promise<void>;
+}

package/dist/src/agents/auth-provider/base-provider.js

@@ -0,0 +1,43 @@
+/**
+ * @license
+ * Copyright 2026 Google LLC
+ * SPDX-License-Identifier: Apache-2.0
+ */
+/**
+ * Abstract base class for A2A authentication providers.
+ * Provides default implementations for optional methods.
+ */
+export class BaseA2AAuthProvider {
+    static MAX_AUTH_RETRIES = 2;
+    authRetryCount = 0;
+    /**
+     * Check if a request should be retried with new headers.
+     *
+     * The default implementation checks for 401/403 status codes and
+     * returns fresh headers for retry. Subclasses can override for
+     * custom retry logic.
+     *
+     * @param _req The original request init
+     * @param res The response from the server
+     * @returns New headers for retry, or undefined if no retry should be made
+     */
+    async shouldRetryWithHeaders(_req, res) {
+        if (res.status === 401 || res.status === 403) {
+            if (this.authRetryCount >= BaseA2AAuthProvider.MAX_AUTH_RETRIES) {
+                return undefined; // Max retries exceeded
+            }
+            this.authRetryCount++;
+            return this.headers();
+        }
+        // Reset count if not an auth error
+        this.authRetryCount = 0;
+        return undefined;
+    }
+    /**
+     * Initialize the provider. Override in subclasses that need async setup.
+     */
+    async initialize() {
+        // Default: no-op
+    }
+}
+//# sourceMappingURL=base-provider.js.map

package/dist/src/agents/auth-provider/base-provider.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"base-provider.js","sourceRoot":"","sources":["../../../../src/agents/auth-provider/base-provider.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAKH;;;GAGG;AACH,MAAM,OAAgB,mBAAmB;IAY/B,MAAM,CAAU,gBAAgB,GAAG,CAAC,CAAC;IACrC,cAAc,GAAG,CAAC,CAAC;IAE3B;;;;;;;;;;OAUG;IACH,KAAK,CAAC,sBAAsB,CAC1B,IAAiB,EACjB,GAAa;QAEb,IAAI,GAAG,CAAC,MAAM,KAAK,GAAG,IAAI,GAAG,CAAC,MAAM,KAAK,GAAG,EAAE,CAAC;YAC7C,IAAI,IAAI,CAAC,cAAc,IAAI,mBAAmB,CAAC,gBAAgB,EAAE,CAAC;gBAChE,OAAO,SAAS,CAAC,CAAC,uBAAuB;YAC3C,CAAC;YACD,IAAI,CAAC,cAAc,EAAE,CAAC;YACtB,OAAO,IAAI,CAAC,OAAO,EAAE,CAAC;QACxB,CAAC;QACD,mCAAmC;QACnC,IAAI,CAAC,cAAc,GAAG,CAAC,CAAC;QACxB,OAAO,SAAS,CAAC;IACnB,CAAC;IAED;;OAEG;IACH,KAAK,CAAC,UAAU;QACd,iBAAiB;IACnB,CAAC"}

package/dist/src/agents/auth-provider/base-provider.test.d.ts

@@ -0,0 +1,6 @@
+/**
+ * @license
+ * Copyright 2026 Google LLC
+ * SPDX-License-Identifier: Apache-2.0
+ */
+export {};

package/dist/src/agents/auth-provider/base-provider.test.js

@@ -0,0 +1,107 @@
+/**
+ * @license
+ * Copyright 2026 Google LLC
+ * SPDX-License-Identifier: Apache-2.0
+ */
+import { describe, it, expect } from 'vitest';
+import { BaseA2AAuthProvider } from './base-provider.js';
+/**
+ * Concrete implementation of BaseA2AAuthProvider for testing.
+ */
+class TestAuthProvider extends BaseA2AAuthProvider {
+    type = 'apiKey';
+    testHeaders;
+    constructor(headers = { Authorization: 'test-token' }) {
+        super();
+        this.testHeaders = headers;
+    }
+    async headers() {
+        return this.testHeaders;
+    }
+    setHeaders(headers) {
+        this.testHeaders = headers;
+    }
+}
+describe('BaseA2AAuthProvider', () => {
+    describe('shouldRetryWithHeaders', () => {
+        it('should return headers for 401 response', async () => {
+            const provider = new TestAuthProvider({ Authorization: 'Bearer token' });
+            const response = new Response(null, { status: 401 });
+            const result = await provider.shouldRetryWithHeaders({}, response);
+            expect(result).toEqual({ Authorization: 'Bearer token' });
+        });
+        it('should return headers for 403 response', async () => {
+            const provider = new TestAuthProvider({ Authorization: 'Bearer token' });
+            const response = new Response(null, { status: 403 });
+            const result = await provider.shouldRetryWithHeaders({}, response);
+            expect(result).toEqual({ Authorization: 'Bearer token' });
+        });
+        it('should return undefined for 200 response', async () => {
+            const provider = new TestAuthProvider();
+            const response = new Response(null, { status: 200 });
+            const result = await provider.shouldRetryWithHeaders({}, response);
+            expect(result).toBeUndefined();
+        });
+        it('should return undefined for 500 response', async () => {
+            const provider = new TestAuthProvider();
+            const response = new Response(null, { status: 500 });
+            const result = await provider.shouldRetryWithHeaders({}, response);
+            expect(result).toBeUndefined();
+        });
+        it('should return undefined for 404 response', async () => {
+            const provider = new TestAuthProvider();
+            const response = new Response(null, { status: 404 });
+            const result = await provider.shouldRetryWithHeaders({}, response);
+            expect(result).toBeUndefined();
+        });
+        it('should call headers() to get fresh headers on retry', async () => {
+            const provider = new TestAuthProvider({ Authorization: 'old-token' });
+            const response = new Response(null, { status: 401 });
+            // Change headers before retry
+            provider.setHeaders({ Authorization: 'new-token' });
+            const result = await provider.shouldRetryWithHeaders({}, response);
+            expect(result).toEqual({ Authorization: 'new-token' });
+        });
+        it('should retry up to 2 times on 401/403', async () => {
+            const provider = new TestAuthProvider({ Authorization: 'Bearer token' });
+            const response401 = new Response(null, { status: 401 });
+            // First retry should succeed
+            const result1 = await provider.shouldRetryWithHeaders({}, response401);
+            expect(result1).toEqual({ Authorization: 'Bearer token' });
+            // Second retry should succeed
+            const result2 = await provider.shouldRetryWithHeaders({}, response401);
+            expect(result2).toEqual({ Authorization: 'Bearer token' });
+        });
+        it('should return undefined after max retries exceeded', async () => {
+            const provider = new TestAuthProvider({ Authorization: 'Bearer token' });
+            const response401 = new Response(null, { status: 401 });
+            // Exhaust retries
+            await provider.shouldRetryWithHeaders({}, response401); // retry 1
+            await provider.shouldRetryWithHeaders({}, response401); // retry 2
+            // Third attempt should return undefined
+            const result = await provider.shouldRetryWithHeaders({}, response401);
+            expect(result).toBeUndefined();
+        });
+        it('should reset retry count on successful response', async () => {
+            const provider = new TestAuthProvider({ Authorization: 'Bearer token' });
+            const response401 = new Response(null, { status: 401 });
+            const response200 = new Response(null, { status: 200 });
+            // Use up retries
+            await provider.shouldRetryWithHeaders({}, response401); // retry 1
+            await provider.shouldRetryWithHeaders({}, response401); // retry 2
+            // Success resets counter
+            await provider.shouldRetryWithHeaders({}, response200);
+            // Should be able to retry again
+            const result = await provider.shouldRetryWithHeaders({}, response401);
+            expect(result).toEqual({ Authorization: 'Bearer token' });
+        });
+    });
+    describe('initialize', () => {
+        it('should be a no-op by default', async () => {
+            const provider = new TestAuthProvider();
+            // Should not throw
+            await expect(provider.initialize()).resolves.toBeUndefined();
+        });
+    });
+});
+//# sourceMappingURL=base-provider.test.js.map

package/dist/src/agents/auth-provider/base-provider.test.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"base-provider.test.js","sourceRoot":"","sources":["../../../../src/agents/auth-provider/base-provider.test.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAEH,OAAO,EAAE,QAAQ,EAAE,EAAE,EAAE,MAAM,EAAE,MAAM,QAAQ,CAAC;AAE9C,OAAO,EAAE,mBAAmB,EAAE,MAAM,oBAAoB,CAAC;AAGzD;;GAEG;AACH,MAAM,gBAAiB,SAAQ,mBAAmB;IACvC,IAAI,GAAwB,QAAQ,CAAC;IACtC,WAAW,CAAc;IAEjC,YAAY,UAAuB,EAAE,aAAa,EAAE,YAAY,EAAE;QAChE,KAAK,EAAE,CAAC;QACR,IAAI,CAAC,WAAW,GAAG,OAAO,CAAC;IAC7B,CAAC;IAED,KAAK,CAAC,OAAO;QACX,OAAO,IAAI,CAAC,WAAW,CAAC;IAC1B,CAAC;IAED,UAAU,CAAC,OAAoB;QAC7B,IAAI,CAAC,WAAW,GAAG,OAAO,CAAC;IAC7B,CAAC;CACF;AAED,QAAQ,CAAC,qBAAqB,EAAE,GAAG,EAAE;IACnC,QAAQ,CAAC,wBAAwB,EAAE,GAAG,EAAE;QACtC,EAAE,CAAC,wCAAwC,EAAE,KAAK,IAAI,EAAE;YACtD,MAAM,QAAQ,GAAG,IAAI,gBAAgB,CAAC,EAAE,aAAa,EAAE,cAAc,EAAE,CAAC,CAAC;YACzE,MAAM,QAAQ,GAAG,IAAI,QAAQ,CAAC,IAAI,EAAE,EAAE,MAAM,EAAE,GAAG,EAAE,CAAC,CAAC;YAErD,MAAM,MAAM,GAAG,MAAM,QAAQ,CAAC,sBAAsB,CAAC,EAAE,EAAE,QAAQ,CAAC,CAAC;YAEnE,MAAM,CAAC,MAAM,CAAC,CAAC,OAAO,CAAC,EAAE,aAAa,EAAE,cAAc,EAAE,CAAC,CAAC;QAC5D,CAAC,CAAC,CAAC;QAEH,EAAE,CAAC,wCAAwC,EAAE,KAAK,IAAI,EAAE;YACtD,MAAM,QAAQ,GAAG,IAAI,gBAAgB,CAAC,EAAE,aAAa,EAAE,cAAc,EAAE,CAAC,CAAC;YACzE,MAAM,QAAQ,GAAG,IAAI,QAAQ,CAAC,IAAI,EAAE,EAAE,MAAM,EAAE,GAAG,EAAE,CAAC,CAAC;YAErD,MAAM,MAAM,GAAG,MAAM,QAAQ,CAAC,sBAAsB,CAAC,EAAE,EAAE,QAAQ,CAAC,CAAC;YAEnE,MAAM,CAAC,MAAM,CAAC,CAAC,OAAO,CAAC,EAAE,aAAa,EAAE,cAAc,EAAE,CAAC,CAAC;QAC5D,CAAC,CAAC,CAAC;QAEH,EAAE,CAAC,0CAA0C,EAAE,KAAK,IAAI,EAAE;YACxD,MAAM,QAAQ,GAAG,IAAI,gBAAgB,EAAE,CAAC;YACxC,MAAM,QAAQ,GAAG,IAAI,QAAQ,CAAC,IAAI,EAAE,EAAE,MAAM,EAAE,GAAG,EAAE,CAAC,CAAC;YAErD,MAAM,MAAM,GAAG,MAAM,QAAQ,CAAC,sBAAsB,CAAC,EAAE,EAAE,QAAQ,CAAC,CAAC;YAEnE,MAAM,CAAC,MAAM,CAAC,CAAC,aAAa,EAAE,CAAC;QACjC,CAAC,CAAC,CAAC;QAEH,EAAE,CAAC,0CAA0C,EAAE,KAAK,IAAI,EAAE;YACxD,MAAM,QAAQ,GAAG,IAAI,gBAAgB,EAAE,CAAC;YACxC,MAAM,QAAQ,GAAG,IAAI,QAAQ,CAAC,IAAI,EAAE,EAAE,MAAM,EAAE,GAAG,EAAE,CAAC,CAAC;YAErD,MAAM,MAAM,GAAG,MAAM,QAAQ,CAAC,sBAAsB,CAAC,EAAE,EAAE,QAAQ,CAAC,CAAC;YAEnE,MAAM,CAAC,MAAM,CAAC,CAAC,aAAa,EAAE,CAAC;QACjC,CAAC,CAAC,CAAC;QAEH,EAAE,CAAC,0CAA0C,EAAE,KAAK,IAAI,EAAE;YACxD,MAAM,QAAQ,GAAG,IAAI,gBAAgB,EAAE,CAAC;YACxC,MAAM,QAAQ,GAAG,IAAI,QAAQ,CAAC,IAAI,EAAE,EAAE,MAAM,EAAE,GAAG,EAAE,CAAC,CAAC;YAErD,MAAM,MAAM,GAAG,MAAM,QAAQ,CAAC,sBAAsB,CAAC,EAAE,EAAE,QAAQ,CAAC,CAAC;YAEnE,MAAM,CAAC,MAAM,CAAC,CAAC,aAAa,EAAE,CAAC;QACjC,CAAC,CAAC,CAAC;QAEH,EAAE,CAAC,qDAAqD,EAAE,KAAK,IAAI,EAAE;YACnE,MAAM,QAAQ,GAAG,IAAI,gBAAgB,CAAC,EAAE,aAAa,EAAE,WAAW,EAAE,CAAC,CAAC;YACtE,MAAM,QAAQ,GAAG,IAAI,QAAQ,CAAC,IAAI,EAAE,EAAE,MAAM,EAAE,GAAG,EAAE,CAAC,CAAC;YAErD,8BAA8B;YAC9B,QAAQ,CAAC,UAAU,CAAC,EAAE,aAAa,EAAE,WAAW,EAAE,CAAC,CAAC;YAEpD,MAAM,MAAM,GAAG,MAAM,QAAQ,CAAC,sBAAsB,CAAC,EAAE,EAAE,QAAQ,CAAC,CAAC;YAEnE,MAAM,CAAC,MAAM,CAAC,CAAC,OAAO,CAAC,EAAE,aAAa,EAAE,WAAW,EAAE,CAAC,CAAC;QACzD,CAAC,CAAC,CAAC;QAEH,EAAE,CAAC,uCAAuC,EAAE,KAAK,IAAI,EAAE;YACrD,MAAM,QAAQ,GAAG,IAAI,gBAAgB,CAAC,EAAE,aAAa,EAAE,cAAc,EAAE,CAAC,CAAC;YACzE,MAAM,WAAW,GAAG,IAAI,QAAQ,CAAC,IAAI,EAAE,EAAE,MAAM,EAAE,GAAG,EAAE,CAAC,CAAC;YAExD,6BAA6B;YAC7B,MAAM,OAAO,GAAG,MAAM,QAAQ,CAAC,sBAAsB,CAAC,EAAE,EAAE,WAAW,CAAC,CAAC;YACvE,MAAM,CAAC,OAAO,CAAC,CAAC,OAAO,CAAC,EAAE,aAAa,EAAE,cAAc,EAAE,CAAC,CAAC;YAE3D,8BAA8B;YAC9B,MAAM,OAAO,GAAG,MAAM,QAAQ,CAAC,sBAAsB,CAAC,EAAE,EAAE,WAAW,CAAC,CAAC;YACvE,MAAM,CAAC,OAAO,CAAC,CAAC,OAAO,CAAC,EAAE,aAAa,EAAE,cAAc,EAAE,CAAC,CAAC;QAC7D,CAAC,CAAC,CAAC;QAEH,EAAE,CAAC,oDAAoD,EAAE,KAAK,IAAI,EAAE;YAClE,MAAM,QAAQ,GAAG,IAAI,gBAAgB,CAAC,EAAE,aAAa,EAAE,cAAc,EAAE,CAAC,CAAC;YACzE,MAAM,WAAW,GAAG,IAAI,QAAQ,CAAC,IAAI,EAAE,EAAE,MAAM,EAAE,GAAG,EAAE,CAAC,CAAC;YAExD,kBAAkB;YAClB,MAAM,QAAQ,CAAC,sBAAsB,CAAC,EAAE,EAAE,WAAW,CAAC,CAAC,CAAC,UAAU;YAClE,MAAM,QAAQ,CAAC,sBAAsB,CAAC,EAAE,EAAE,WAAW,CAAC,CAAC,CAAC,UAAU;YAElE,wCAAwC;YACxC,MAAM,MAAM,GAAG,MAAM,QAAQ,CAAC,sBAAsB,CAAC,EAAE,EAAE,WAAW,CAAC,CAAC;YACtE,MAAM,CAAC,MAAM,CAAC,CAAC,aAAa,EAAE,CAAC;QACjC,CAAC,CAAC,CAAC;QAEH,EAAE,CAAC,iDAAiD,EAAE,KAAK,IAAI,EAAE;YAC/D,MAAM,QAAQ,GAAG,IAAI,gBAAgB,CAAC,EAAE,aAAa,EAAE,cAAc,EAAE,CAAC,CAAC;YACzE,MAAM,WAAW,GAAG,IAAI,QAAQ,CAAC,IAAI,EAAE,EAAE,MAAM,EAAE,GAAG,EAAE,CAAC,CAAC;YACxD,MAAM,WAAW,GAAG,IAAI,QAAQ,CAAC,IAAI,EAAE,EAAE,MAAM,EAAE,GAAG,EAAE,CAAC,CAAC;YAExD,iBAAiB;YACjB,MAAM,QAAQ,CAAC,sBAAsB,CAAC,EAAE,EAAE,WAAW,CAAC,CAAC,CAAC,UAAU;YAClE,MAAM,QAAQ,CAAC,sBAAsB,CAAC,EAAE,EAAE,WAAW,CAAC,CAAC,CAAC,UAAU;YAElE,yBAAyB;YACzB,MAAM,QAAQ,CAAC,sBAAsB,CAAC,EAAE,EAAE,WAAW,CAAC,CAAC;YAEvD,gCAAgC;YAChC,MAAM,MAAM,GAAG,MAAM,QAAQ,CAAC,sBAAsB,CAAC,EAAE,EAAE,WAAW,CAAC,CAAC;YACtE,MAAM,CAAC,MAAM,CAAC,CAAC,OAAO,CAAC,EAAE,aAAa,EAAE,cAAc,EAAE,CAAC,CAAC;QAC5D,CAAC,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;IAEH,QAAQ,CAAC,YAAY,EAAE,GAAG,EAAE;QAC1B,EAAE,CAAC,8BAA8B,EAAE,KAAK,IAAI,EAAE;YAC5C,MAAM,QAAQ,GAAG,IAAI,gBAAgB,EAAE,CAAC;YAExC,mBAAmB;YACnB,MAAM,MAAM,CAAC,QAAQ,CAAC,UAAU,EAAE,CAAC,CAAC,QAAQ,CAAC,aAAa,EAAE,CAAC;QAC/D,CAAC,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC"}

package/dist/src/agents/auth-provider/factory.d.ts

@@ -0,0 +1,27 @@
+/**
+ * @license
+ * Copyright 2026 Google LLC
+ * SPDX-License-Identifier: Apache-2.0
+ */
+import type { AgentCard, SecurityScheme } from '@a2a-js/sdk';
+import type { A2AAuthConfig, A2AAuthProvider, AuthValidationResult } from './types.js';
+export interface CreateAuthProviderOptions {
+    /** Required for OAuth/OIDC token storage. */
+    agentName?: string;
+    authConfig?: A2AAuthConfig;
+    agentCard?: AgentCard;
+}
+/**
+ * Factory for creating A2A authentication providers.
+ * @see https://a2a-protocol.org/latest/specification/#451-securityscheme
+ */
+export declare class A2AAuthProviderFactory {
+    static create(options: CreateAuthProviderOptions): Promise<A2AAuthProvider | undefined>;
+    /** Create provider directly from config, bypassing AgentCard validation. */
+    static createFromConfig(authConfig: A2AAuthConfig, agentName?: string): Promise<A2AAuthProvider>;
+    /** Validate auth config against AgentCard's security requirements. */
+    static validateAuthConfig(authConfig: A2AAuthConfig | undefined, securitySchemes: Record<string, SecurityScheme> | undefined): AuthValidationResult;
+    private static findMatchingScheme;
+    /** Get human-readable description of required auth for error messages. */
+    static describeRequiredAuth(securitySchemes: Record<string, SecurityScheme>): string;
+}

package/dist/src/agents/auth-provider/factory.js

@@ -0,0 +1,161 @@
+/**
+ * @license
+ * Copyright 2026 Google LLC
+ * SPDX-License-Identifier: Apache-2.0
+ */
+/**
+ * Factory for creating A2A authentication providers.
+ * @see https://a2a-protocol.org/latest/specification/#451-securityscheme
+ */
+export class A2AAuthProviderFactory {
+    static async create(options) {
+        const { agentName: _agentName, authConfig, agentCard } = options;
+        if (!authConfig) {
+            if (agentCard?.securitySchemes &&
+                Object.keys(agentCard.securitySchemes).length > 0) {
+                return undefined; // Caller should prompt user to configure auth
+            }
+            return undefined;
+        }
+        switch (authConfig.type) {
+            case 'google-credentials':
+                // TODO: Implement
+                throw new Error('google-credentials auth provider not yet implemented');
+            case 'apiKey':
+                // TODO: Implement
+                throw new Error('apiKey auth provider not yet implemented');
+            case 'http':
+                // TODO: Implement
+                throw new Error('http auth provider not yet implemented');
+            case 'oauth2':
+                // TODO: Implement
+                throw new Error('oauth2 auth provider not yet implemented');
+            case 'openIdConnect':
+                // TODO: Implement
+                throw new Error('openIdConnect auth provider not yet implemented');
+            default: {
+                const _exhaustive = authConfig;
+                throw new Error(`Unknown auth type: ${_exhaustive.type}`);
+            }
+        }
+    }
+    /** Create provider directly from config, bypassing AgentCard validation. */
+    static async createFromConfig(authConfig, agentName) {
+        const provider = await A2AAuthProviderFactory.create({
+            authConfig,
+            agentName,
+        });
+        // create() returns undefined only when authConfig is missing.
+        // Since authConfig is required here, provider will always be defined
+        // (or create() throws for unimplemented types).
+        return provider;
+    }
+    /** Validate auth config against AgentCard's security requirements. */
+    static validateAuthConfig(authConfig, securitySchemes) {
+        if (!securitySchemes || Object.keys(securitySchemes).length === 0) {
+            return { valid: true };
+        }
+        const requiredSchemes = Object.keys(securitySchemes);
+        if (!authConfig) {
+            return {
+                valid: false,
+                diff: {
+                    requiredSchemes,
+                    configuredType: undefined,
+                    missingConfig: ['Authentication is required but not configured'],
+                },
+            };
+        }
+        const matchResult = A2AAuthProviderFactory.findMatchingScheme(authConfig, securitySchemes);
+        if (matchResult.matched) {
+            return { valid: true };
+        }
+        return {
+            valid: false,
+            diff: {
+                requiredSchemes,
+                configuredType: authConfig.type,
+                missingConfig: matchResult.missingConfig,
+            },
+        };
+    }
+    // Security schemes have OR semantics per A2A spec - matching any single scheme is sufficient
+    static findMatchingScheme(authConfig, securitySchemes) {
+        const missingConfig = [];
+        for (const [schemeName, scheme] of Object.entries(securitySchemes)) {
+            switch (scheme.type) {
+                case 'apiKey':
+                    if (authConfig.type === 'apiKey') {
+                        return { matched: true, missingConfig: [] };
+                    }
+                    missingConfig.push(`Scheme '${schemeName}' requires apiKey authentication`);
+                    break;
+                case 'http':
+                    if (authConfig.type === 'http') {
+                        if (authConfig.scheme.toLowerCase() === scheme.scheme.toLowerCase()) {
+                            return { matched: true, missingConfig: [] };
+                        }
+                        missingConfig.push(`Scheme '${schemeName}' requires HTTP ${scheme.scheme} authentication, but ${authConfig.scheme} was configured`);
+                    }
+                    else if (authConfig.type === 'google-credentials' &&
+                        scheme.scheme.toLowerCase() === 'bearer') {
+                        return { matched: true, missingConfig: [] };
+                    }
+                    else {
+                        missingConfig.push(`Scheme '${schemeName}' requires HTTP ${scheme.scheme} authentication`);
+                    }
+                    break;
+                case 'oauth2':
+                    if (authConfig.type === 'oauth2') {
+                        return { matched: true, missingConfig: [] };
+                    }
+                    missingConfig.push(`Scheme '${schemeName}' requires OAuth 2.0 authentication`);
+                    break;
+                case 'openIdConnect':
+                    if (authConfig.type === 'openIdConnect') {
+                        return { matched: true, missingConfig: [] };
+                    }
+                    missingConfig.push(`Scheme '${schemeName}' requires OpenID Connect authentication`);
+                    break;
+                case 'mutualTLS':
+                    missingConfig.push(`Scheme '${schemeName}' requires mTLS authentication (not yet supported)`);
+                    break;
+                default: {
+                    const _exhaustive = scheme;
+                    missingConfig.push(`Unknown security scheme type: ${_exhaustive.type}`);
+                }
+            }
+        }
+        return { matched: false, missingConfig };
+    }
+    /** Get human-readable description of required auth for error messages. */
+    static describeRequiredAuth(securitySchemes) {
+        const descriptions = [];
+        for (const [name, scheme] of Object.entries(securitySchemes)) {
+            switch (scheme.type) {
+                case 'apiKey':
+                    descriptions.push(`API Key (${name}): Send ${scheme.name} in ${scheme.in}`);
+                    break;
+                case 'http':
+                    descriptions.push(`HTTP ${scheme.scheme} (${name})`);
+                    break;
+                case 'oauth2':
+                    descriptions.push(`OAuth 2.0 (${name})`);
+                    break;
+                case 'openIdConnect':
+                    descriptions.push(`OpenID Connect (${name})`);
+                    break;
+                case 'mutualTLS':
+                    descriptions.push(`Mutual TLS (${name})`);
+                    break;
+                default: {
+                    const _exhaustive = scheme;
+                    // This ensures TypeScript errors if a new SecurityScheme type is added
+                    descriptions.push(`Unknown (${name}): ${_exhaustive.type}`);
+                }
+            }
+        }
+        return descriptions.join(' OR ');
+    }
+}
+//# sourceMappingURL=factory.js.map

package/dist/src/agents/auth-provider/factory.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"factory.js","sourceRoot":"","sources":["../../../../src/agents/auth-provider/factory.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAgBH;;;GAGG;AACH,MAAM,OAAO,sBAAsB;IACjC,MAAM,CAAC,KAAK,CAAC,MAAM,CACjB,OAAkC;QAElC,MAAM,EAAE,SAAS,EAAE,UAAU,EAAE,UAAU,EAAE,SAAS,EAAE,GAAG,OAAO,CAAC;QAEjE,IAAI,CAAC,UAAU,EAAE,CAAC;YAChB,IACE,SAAS,EAAE,eAAe;gBAC1B,MAAM,CAAC,IAAI,CAAC,SAAS,CAAC,eAAe,CAAC,CAAC,MAAM,GAAG,CAAC,EACjD,CAAC;gBACD,OAAO,SAAS,CAAC,CAAC,8CAA8C;YAClE,CAAC;YACD,OAAO,SAAS,CAAC;QACnB,CAAC;QAED,QAAQ,UAAU,CAAC,IAAI,EAAE,CAAC;YACxB,KAAK,oBAAoB;gBACvB,kBAAkB;gBAClB,MAAM,IAAI,KAAK,CAAC,sDAAsD,CAAC,CAAC;YAE1E,KAAK,QAAQ;gBACX,kBAAkB;gBAClB,MAAM,IAAI,KAAK,CAAC,0CAA0C,CAAC,CAAC;YAE9D,KAAK,MAAM;gBACT,kBAAkB;gBAClB,MAAM,IAAI,KAAK,CAAC,wCAAwC,CAAC,CAAC;YAE5D,KAAK,QAAQ;gBACX,kBAAkB;gBAClB,MAAM,IAAI,KAAK,CAAC,0CAA0C,CAAC,CAAC;YAE9D,KAAK,eAAe;gBAClB,kBAAkB;gBAClB,MAAM,IAAI,KAAK,CAAC,iDAAiD,CAAC,CAAC;YAErE,OAAO,CAAC,CAAC,CAAC;gBACR,MAAM,WAAW,GAAU,UAAU,CAAC;gBACtC,MAAM,IAAI,KAAK,CACb,sBAAuB,WAA6B,CAAC,IAAI,EAAE,CAC5D,CAAC;YACJ,CAAC;QACH,CAAC;IACH,CAAC;IAED,4EAA4E;IAC5E,MAAM,CAAC,KAAK,CAAC,gBAAgB,CAC3B,UAAyB,EACzB,SAAkB;QAElB,MAAM,QAAQ,GAAG,MAAM,sBAAsB,CAAC,MAAM,CAAC;YACnD,UAAU;YACV,SAAS;SACV,CAAC,CAAC;QAEH,8DAA8D;QAC9D,qEAAqE;QACrE,gDAAgD;QAChD,OAAO,QAAS,CAAC;IACnB,CAAC;IAED,sEAAsE;IACtE,MAAM,CAAC,kBAAkB,CACvB,UAAqC,EACrC,eAA2D;QAE3D,IAAI,CAAC,eAAe,IAAI,MAAM,CAAC,IAAI,CAAC,eAAe,CAAC,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YAClE,OAAO,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC;QACzB,CAAC;QAED,MAAM,eAAe,GAAG,MAAM,CAAC,IAAI,CAAC,eAAe,CAAC,CAAC;QAErD,IAAI,CAAC,UAAU,EAAE,CAAC;YAChB,OAAO;gBACL,KAAK,EAAE,KAAK;gBACZ,IAAI,EAAE;oBACJ,eAAe;oBACf,cAAc,EAAE,SAAS;oBACzB,aAAa,EAAE,CAAC,+CAA+C,CAAC;iBACjE;aACF,CAAC;QACJ,CAAC;QAED,MAAM,WAAW,GAAG,sBAAsB,CAAC,kBAAkB,CAC3D,UAAU,EACV,eAAe,CAChB,CAAC;QAEF,IAAI,WAAW,CAAC,OAAO,EAAE,CAAC;YACxB,OAAO,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC;QACzB,CAAC;QAED,OAAO;YACL,KAAK,EAAE,KAAK;YACZ,IAAI,EAAE;gBACJ,eAAe;gBACf,cAAc,EAAE,UAAU,CAAC,IAAI;gBAC/B,aAAa,EAAE,WAAW,CAAC,aAAa;aACzC;SACF,CAAC;IACJ,CAAC;IAED,6FAA6F;IACrF,MAAM,CAAC,kBAAkB,CAC/B,UAAyB,EACzB,eAA+C;QAE/C,MAAM,aAAa,GAAa,EAAE,CAAC;QAEnC,KAAK,MAAM,CAAC,UAAU,EAAE,MAAM,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,eAAe,CAAC,EAAE,CAAC;YACnE,QAAQ,MAAM,CAAC,IAAI,EAAE,CAAC;gBACpB,KAAK,QAAQ;oBACX,IAAI,UAAU,CAAC,IAAI,KAAK,QAAQ,EAAE,CAAC;wBACjC,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,aAAa,EAAE,EAAE,EAAE,CAAC;oBAC9C,CAAC;oBACD,aAAa,CAAC,IAAI,CAChB,WAAW,UAAU,kCAAkC,CACxD,CAAC;oBACF,MAAM;gBAER,KAAK,MAAM;oBACT,IAAI,UAAU,CAAC,IAAI,KAAK,MAAM,EAAE,CAAC;wBAC/B,IACE,UAAU,CAAC,MAAM,CAAC,WAAW,EAAE,KAAK,MAAM,CAAC,MAAM,CAAC,WAAW,EAAE,EAC/D,CAAC;4BACD,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,aAAa,EAAE,EAAE,EAAE,CAAC;wBAC9C,CAAC;wBACD,aAAa,CAAC,IAAI,CAChB,WAAW,UAAU,mBAAmB,MAAM,CAAC,MAAM,wBAAwB,UAAU,CAAC,MAAM,iBAAiB,CAChH,CAAC;oBACJ,CAAC;yBAAM,IACL,UAAU,CAAC,IAAI,KAAK,oBAAoB;wBACxC,MAAM,CAAC,MAAM,CAAC,WAAW,EAAE,KAAK,QAAQ,EACxC,CAAC;wBACD,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,aAAa,EAAE,EAAE,EAAE,CAAC;oBAC9C,CAAC;yBAAM,CAAC;wBACN,aAAa,CAAC,IAAI,CAChB,WAAW,UAAU,mBAAmB,MAAM,CAAC,MAAM,iBAAiB,CACvE,CAAC;oBACJ,CAAC;oBACD,MAAM;gBAER,KAAK,QAAQ;oBACX,IAAI,UAAU,CAAC,IAAI,KAAK,QAAQ,EAAE,CAAC;wBACjC,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,aAAa,EAAE,EAAE,EAAE,CAAC;oBAC9C,CAAC;oBACD,aAAa,CAAC,IAAI,CAChB,WAAW,UAAU,qCAAqC,CAC3D,CAAC;oBACF,MAAM;gBAER,KAAK,eAAe;oBAClB,IAAI,UAAU,CAAC,IAAI,KAAK,eAAe,EAAE,CAAC;wBACxC,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,aAAa,EAAE,EAAE,EAAE,CAAC;oBAC9C,CAAC;oBACD,aAAa,CAAC,IAAI,CAChB,WAAW,UAAU,0CAA0C,CAChE,CAAC;oBACF,MAAM;gBAER,KAAK,WAAW;oBACd,aAAa,CAAC,IAAI,CAChB,WAAW,UAAU,oDAAoD,CAC1E,CAAC;oBACF,MAAM;gBAER,OAAO,CAAC,CAAC,CAAC;oBACR,MAAM,WAAW,GAAU,MAAM,CAAC;oBAClC,aAAa,CAAC,IAAI,CAChB,iCAAkC,WAA8B,CAAC,IAAI,EAAE,CACxE,CAAC;gBACJ,CAAC;YACH,CAAC;QACH,CAAC;QAED,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,aAAa,EAAE,CAAC;IAC3C,CAAC;IAED,0EAA0E;IAC1E,MAAM,CAAC,oBAAoB,CACzB,eAA+C;QAE/C,MAAM,YAAY,GAAa,EAAE,CAAC;QAElC,KAAK,MAAM,CAAC,IAAI,EAAE,MAAM,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,eAAe,CAAC,EAAE,CAAC;YAC7D,QAAQ,MAAM,CAAC,IAAI,EAAE,CAAC;gBACpB,KAAK,QAAQ;oBACX,YAAY,CAAC,IAAI,CACf,YAAY,IAAI,WAAW,MAAM,CAAC,IAAI,OAAO,MAAM,CAAC,EAAE,EAAE,CACzD,CAAC;oBACF,MAAM;gBACR,KAAK,MAAM;oBACT,YAAY,CAAC,IAAI,CAAC,QAAQ,MAAM,CAAC,MAAM,KAAK,IAAI,GAAG,CAAC,CAAC;oBACrD,MAAM;gBACR,KAAK,QAAQ;oBACX,YAAY,CAAC,IAAI,CAAC,cAAc,IAAI,GAAG,CAAC,CAAC;oBACzC,MAAM;gBACR,KAAK,eAAe;oBAClB,YAAY,CAAC,IAAI,CAAC,mBAAmB,IAAI,GAAG,CAAC,CAAC;oBAC9C,MAAM;gBACR,KAAK,WAAW;oBACd,YAAY,CAAC,IAAI,CAAC,eAAe,IAAI,GAAG,CAAC,CAAC;oBAC1C,MAAM;gBACR,OAAO,CAAC,CAAC,CAAC;oBACR,MAAM,WAAW,GAAU,MAAM,CAAC;oBAClC,uEAAuE;oBACvE,YAAY,CAAC,IAAI,CACf,YAAY,IAAI,MAAO,WAA8B,CAAC,IAAI,EAAE,CAC7D,CAAC;gBACJ,CAAC;YACH,CAAC;QACH,CAAC;QAED,OAAO,YAAY,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;IACnC,CAAC;CACF"}

package/dist/src/agents/auth-provider/factory.test.d.ts

@@ -0,0 +1,6 @@
+/**
+ * @license
+ * Copyright 2026 Google LLC
+ * SPDX-License-Identifier: Apache-2.0
+ */
+export {};