@softactivate/adk 1.1.0

package/dist/web/auth/oauth2/oauth2_discovery.js

@@ -0,0 +1,156 @@
+import {createRequire as topLevelCreateRequire} from 'module';
+const require = topLevelCreateRequire(import.meta.url);
+/**
+ * @license
+ * Copyright 2026 Google LLC
+ * SPDX-License-Identifier: Apache-2.0
+ */
+import { z } from "zod";
+import { logger } from "../../utils/logger.js";
+const AuthorizationServerMetadataSchema = z.object({
+  issuer: z.string(),
+  authorization_endpoint: z.string(),
+  token_endpoint: z.string(),
+  scopes_supported: z.array(z.string()).optional(),
+  registration_endpoint: z.string().optional()
+});
+const ProtectedResourceMetadataSchema = z.object({
+  resource: z.string(),
+  authorization_servers: z.array(z.string()).default([])
+});
+class OAuth2DiscoveryManager {
+  /**
+   * Discovers the OAuth2 authorization server metadata.
+   */
+  async discoverAuthServerMetadata(issuerUrl) {
+    if (!validateDiscoveryUrl(issuerUrl)) {
+      return void 0;
+    }
+    let baseUrl;
+    let path;
+    try {
+      const url = new URL(issuerUrl);
+      baseUrl = "".concat(url.protocol, "//").concat(url.host);
+      path = url.pathname;
+    } catch (e) {
+      logger.warn("Failed to parse issuerUrl ".concat(issuerUrl, ": ").concat(e));
+      return void 0;
+    }
+    const endpointsToTry = [];
+    if (path && path !== "/") {
+      endpointsToTry.push(
+        "".concat(baseUrl, "/.well-known/oauth-authorization-server").concat(path),
+        "".concat(baseUrl, "/.well-known/openid-configuration").concat(path),
+        "".concat(baseUrl).concat(path, "/.well-known/openid-configuration")
+      );
+    } else {
+      endpointsToTry.push(
+        "".concat(baseUrl, "/.well-known/oauth-authorization-server"),
+        "".concat(baseUrl, "/.well-known/openid-configuration")
+      );
+    }
+    for (const endpoint of endpointsToTry) {
+      try {
+        const response = await fetch(endpoint, {
+          method: "GET",
+          headers: {
+            Accept: "application/json"
+          }
+        });
+        if (!response.ok) {
+          continue;
+        }
+        const data = await response.json();
+        const metadata = AuthorizationServerMetadataSchema.parse(data);
+        if (metadata.issuer.replace(/\/$/, "") === issuerUrl.replace(/\/$/, "")) {
+          return metadata;
+        } else {
+          logger.warn(
+            "Issuer in metadata ".concat(metadata.issuer, " does not match issuerUrl ").concat(issuerUrl)
+          );
+        }
+      } catch (e) {
+        logger.debug("Failed to fetch metadata from ".concat(endpoint, ": ").concat(e));
+      }
+    }
+    return void 0;
+  }
+  /**
+   * Discovers the OAuth2 protected resource metadata.
+   */
+  async discoverResourceMetadata(resourceUrl) {
+    if (!validateDiscoveryUrl(resourceUrl)) {
+      return void 0;
+    }
+    let baseUrl;
+    let path;
+    try {
+      const url = new URL(resourceUrl);
+      baseUrl = "".concat(url.protocol, "//").concat(url.host);
+      path = url.pathname;
+    } catch (e) {
+      logger.warn("Failed to parse resourceUrl ".concat(resourceUrl, ": ").concat(e));
+      return void 0;
+    }
+    let wellKnownEndpoint;
+    if (path && path !== "/") {
+      wellKnownEndpoint = "".concat(baseUrl, "/.well-known/oauth-protected-resource").concat(path);
+    } else {
+      wellKnownEndpoint = "".concat(baseUrl, "/.well-known/oauth-protected-resource");
+    }
+    try {
+      const response = await fetch(wellKnownEndpoint, {
+        method: "GET",
+        headers: {
+          Accept: "application/json"
+        }
+      });
+      if (!response.ok) {
+        return void 0;
+      }
+      const data = await response.json();
+      const metadata = ProtectedResourceMetadataSchema.parse(data);
+      if (metadata.resource.replace(/\/$/, "") === resourceUrl.replace(/\/$/, "")) {
+        return metadata;
+      } else {
+        logger.warn(
+          "Resource in metadata ".concat(metadata.resource, " does not match resourceUrl ").concat(resourceUrl)
+        );
+      }
+    } catch (e) {
+      logger.debug("Failed to fetch metadata from ".concat(wellKnownEndpoint, ": ").concat(e));
+    }
+    return void 0;
+  }
+}
+function validateDiscoveryUrl(urlStr) {
+  try {
+    const url = new URL(urlStr);
+    if (url.protocol !== "https:") {
+      logger.warn("Unsafe protocol for discovery URL: ".concat(url.protocol));
+      return false;
+    }
+    const host = url.hostname.toLowerCase();
+    if (host === "localhost" || host === "127.0.0.1" || host === "[::1]" || host.startsWith("10.") || host.startsWith("192.168.") || host.startsWith("169.254.")) {
+      logger.warn("Unsafe host for discovery URL: ".concat(host));
+      return false;
+    }
+    const match = host.match(/^172\.(\d+)\./);
+    if (match) {
+      const secondOctet = parseInt(match[1], 10);
+      if (secondOctet >= 16 && secondOctet <= 31) {
+        logger.warn("Unsafe host for discovery URL: ".concat(host));
+        return false;
+      }
+    }
+    return true;
+  } catch (e) {
+    logger.warn("Failed to parse URL for validation ".concat(urlStr, ": ").concat(e));
+    return false;
+  }
+}
+export {
+  AuthorizationServerMetadataSchema,
+  OAuth2DiscoveryManager,
+  ProtectedResourceMetadataSchema
+};

package/dist/web/auth/oauth2/oauth2_utils.js

@@ -0,0 +1,87 @@
+import {createRequire as topLevelCreateRequire} from 'module';
+const require = topLevelCreateRequire(import.meta.url);
+/**
+ * @license
+ * Copyright 2026 Google LLC
+ * SPDX-License-Identifier: Apache-2.0
+ */
+import { logger } from "../../utils/logger.js";
+function getTokenEndpoint(authScheme) {
+  if (authScheme.type === "openIdConnect" && authScheme.tokenEndpoint) {
+    return authScheme.tokenEndpoint;
+  }
+  if (authScheme.type === "oauth2" && authScheme.flows) {
+    const flows = authScheme.flows;
+    const flow = flows.authorizationCode || flows.clientCredentials || flows.password || flows.implicit;
+    if (flow && "tokenUrl" in flow) {
+      return flow.tokenUrl;
+    }
+  }
+  return void 0;
+}
+async function fetchOAuth2Tokens(endpoint, body) {
+  try {
+    const response = await fetch(endpoint, {
+      method: "POST",
+      headers: {
+        "Content-Type": "application/x-www-form-urlencoded"
+      },
+      body: body.toString()
+    });
+    if (!response.ok) {
+      throw new Error("Token request failed with status ".concat(response.status));
+    }
+    const data = await response.json();
+    return {
+      accessToken: data.access_token,
+      refreshToken: data.refresh_token,
+      idToken: data.id_token,
+      expiresIn: data.expires_in,
+      expiresAt: data.expires_in ? Date.now() + data.expires_in * 1e3 : void 0
+    };
+  } catch (e) {
+    logger.error("Failed to fetch OAuth2 tokens: ".concat(e));
+    throw e;
+  }
+}
+function parseAuthorizationCode(uri) {
+  try {
+    const url = new URL(uri);
+    return url.searchParams.get("code") || void 0;
+  } catch (e) {
+    logger.warn("Failed to parse authorization URI ".concat(uri, ": ").concat(e));
+    return void 0;
+  }
+}
+function createOAuth2TokenRequestBody(params) {
+  const body = new URLSearchParams();
+  body.set("grant_type", params.grantType);
+  body.set("client_id", params.clientId);
+  body.set("client_secret", params.clientSecret);
+  if (params.grantType === "authorization_code") {
+    body.set("code", params.code);
+    if (params.redirectUri) {
+      body.set("redirect_uri", params.redirectUri);
+    }
+    if (params.codeVerifier) {
+      body.set("code_verifier", params.codeVerifier);
+    }
+  } else if (params.grantType === "refresh_token") {
+    body.set("refresh_token", params.refreshToken);
+  }
+  return body;
+}
+function isTokenExpired(token, leeway = 60) {
+  if (typeof token.expiresAt !== "number") {
+    return false;
+  }
+  const expirationThreshold = token.expiresAt - leeway * 1e3;
+  return expirationThreshold < Date.now();
+}
+export {
+  createOAuth2TokenRequestBody,
+  fetchOAuth2Tokens,
+  getTokenEndpoint,
+  isTokenExpired,
+  parseAuthorizationCode
+};

package/dist/web/auth/refresher/base_credential_refresher.js

@@ -0,0 +1,16 @@
+import {createRequire as topLevelCreateRequire} from 'module';
+const require = topLevelCreateRequire(import.meta.url);
+/**
+ * @license
+ * Copyright 2026 Google LLC
+ * SPDX-License-Identifier: Apache-2.0
+ */
+class CredentialRefresherError extends Error {
+  constructor(message) {
+    super(message);
+    this.name = "CredentialRefresherError";
+  }
+}
+export {
+  CredentialRefresherError
+};

package/dist/web/auth/refresher/credential_refresher_registry.js

@@ -0,0 +1,40 @@
+import {createRequire as topLevelCreateRequire} from 'module';
+const require = topLevelCreateRequire(import.meta.url);
+/**
+ * @license
+ * Copyright 2026 Google LLC
+ * SPDX-License-Identifier: Apache-2.0
+ */
+import { AuthCredentialTypes } from "../auth_credential.js";
+class CredentialRefresherRegistry {
+  constructor() {
+    this.refreshers = {
+      [AuthCredentialTypes.API_KEY]: void 0,
+      [AuthCredentialTypes.HTTP]: void 0,
+      [AuthCredentialTypes.OAUTH2]: void 0,
+      [AuthCredentialTypes.OPEN_ID_CONNECT]: void 0,
+      [AuthCredentialTypes.SERVICE_ACCOUNT]: void 0
+    };
+  }
+  /**
+   * Register a refresher instance for a credential type.
+   *
+   * @param credentialType The credential type to register for.
+   * @param refresherInstance The refresher instance to register.
+   */
+  register(credentialType, refresherInstance) {
+    this.refreshers[credentialType] = refresherInstance;
+  }
+  /**
+   * Get the refresher instance for a credential type.
+   *
+   * @param credentialType The credential type to get refresher for.
+   * @returns The refresher instance if registered, undefined otherwise.
+   */
+  getRefresher(credentialType) {
+    return this.refreshers[credentialType];
+  }
+}
+export {
+  CredentialRefresherRegistry
+};

package/dist/web/code_executors/base_code_executor.js

@@ -0,0 +1,63 @@
+import {createRequire as topLevelCreateRequire} from 'module';
+const require = topLevelCreateRequire(import.meta.url);
+/**
+ * @license
+ * Copyright 2025 Google LLC
+ * SPDX-License-Identifier: Apache-2.0
+ */
+var _a;
+const BASE_CODE_EXECUTOR_SIGNATURE_SYMBOL = Symbol.for(
+  "google.adk.baseCodeExecutor"
+);
+function isBaseCodeExecutor(obj) {
+  return typeof obj === "object" && obj !== null && BASE_CODE_EXECUTOR_SIGNATURE_SYMBOL in obj && obj[BASE_CODE_EXECUTOR_SIGNATURE_SYMBOL] === true;
+}
+_a = BASE_CODE_EXECUTOR_SIGNATURE_SYMBOL;
+class BaseCodeExecutor {
+  constructor() {
+    /** A unique symbol to identify BaseCodeExecutor class. */
+    this[_a] = true;
+    /**
+     * If true, extract and process data files from the model request
+     * and attach them to the code executor.
+     *
+     * Supported data file MimeTypes are [text/csv].
+     * Default to false.
+     */
+    this.optimizeDataFile = false;
+    /**
+     * Whether the code executor is stateful. Default to false.
+     */
+    this.stateful = false;
+    /**
+     * The number of attempts to retry on consecutive code execution errors.
+     * Default to 2.
+     */
+    this.errorRetryAttempts = 2;
+    /**
+     * The list of the enclosing delimiters to identify the code blocks.
+     * For example, the delimiter('```javascript\\n', '\\n```') can be used to
+     * identify code blocks with the following format:
+     *
+     * ```javascript
+     *  console.log("hello")
+     * ```
+     */
+    this.codeBlockDelimiters = [
+      ["```tool_code\n", "\n```"],
+      ["```python\n", "\n```"],
+      ["```javascript\n", "\n```"],
+      ["```typescript\n", "\n```"],
+      ["```bash\n", "\n```"],
+      ["```sh\n", "\n```"]
+    ];
+    /**
+     * The delimiters to format the code execution result.
+     */
+    this.executionResultDelimiters = ["```tool_output\n", "\n```"];
+  }
+}
+export {
+  BaseCodeExecutor,
+  isBaseCodeExecutor
+};

package/dist/web/code_executors/built_in_code_executor.js

@@ -0,0 +1,45 @@
+import {createRequire as topLevelCreateRequire} from 'module';
+const require = topLevelCreateRequire(import.meta.url);
+/**
+ * @license
+ * Copyright 2025 Google LLC
+ * SPDX-License-Identifier: Apache-2.0
+ */
+var _a, _b;
+import { isGemini2OrAbove } from "../utils/model_name.js";
+import { BaseCodeExecutor } from "./base_code_executor.js";
+const BUILT_IN_CODE_EXECUTOR_SIGNATURE_SYMBOL = Symbol.for(
+  "google.adk.builtInCodeExecutor"
+);
+function isBuiltInCodeExecutor(obj) {
+  return typeof obj === "object" && obj !== null && BUILT_IN_CODE_EXECUTOR_SIGNATURE_SYMBOL in obj && obj[BUILT_IN_CODE_EXECUTOR_SIGNATURE_SYMBOL] === true;
+}
+class BuiltInCodeExecutor extends (_b = BaseCodeExecutor, _a = BUILT_IN_CODE_EXECUTOR_SIGNATURE_SYMBOL, _b) {
+  constructor() {
+    super(...arguments);
+    /** A unique symbol to identify BuiltInCodeExecutor class. */
+    this[_a] = true;
+  }
+  executeCode(_params) {
+    return Promise.resolve({
+      stdout: "",
+      stderr: "",
+      outputFiles: []
+    });
+  }
+  processLlmRequest(llmRequest) {
+    if (llmRequest.model && isGemini2OrAbove(llmRequest.model)) {
+      llmRequest.config = llmRequest.config || {};
+      llmRequest.config.tools = llmRequest.config.tools || [];
+      llmRequest.config.tools.push({ codeExecution: {} });
+      return;
+    }
+    throw new Error(
+      "Gemini code execution tool is not supported for model ".concat(llmRequest.model)
+    );
+  }
+}
+export {
+  BuiltInCodeExecutor,
+  isBuiltInCodeExecutor
+};

package/dist/web/code_executors/code_execution_utils.js

@@ -0,0 +1,124 @@
+import {createRequire as topLevelCreateRequire} from 'module';
+const require = topLevelCreateRequire(import.meta.url);
+/**
+ * @license
+ * Copyright 2025 Google LLC
+ * SPDX-License-Identifier: Apache-2.0
+ */
+import { Language, Outcome } from "@google/genai";
+import { cloneDeep } from "lodash-es";
+import { base64Encode, isBase64Encoded } from "../utils/env_aware_utils.js";
+var FileContentEncoding = /* @__PURE__ */ ((FileContentEncoding2) => {
+  FileContentEncoding2["UTF8"] = "utf-8";
+  FileContentEncoding2["BASE64"] = "base64";
+  return FileContentEncoding2;
+})(FileContentEncoding || {});
+var CodeExecutionLanguage = /* @__PURE__ */ ((CodeExecutionLanguage2) => {
+  CodeExecutionLanguage2["UNSPECIFIED"] = "unspecified";
+  CodeExecutionLanguage2["PYTHON"] = "python";
+  CodeExecutionLanguage2["JAVASCRIPT"] = "javascript";
+  CodeExecutionLanguage2["TYPESCRIPT"] = "typescript";
+  CodeExecutionLanguage2["SHELL"] = "shell";
+  CodeExecutionLanguage2["POWERSHELL"] = "powershell";
+  CodeExecutionLanguage2["WINDOWS_CMD"] = "cmd";
+  return CodeExecutionLanguage2;
+})(CodeExecutionLanguage || {});
+function getEncodedFileContent(data) {
+  return isBase64Encoded(data) ? data : base64Encode(data);
+}
+function extractCodeAndTruncateContent(content, codeBlockDelimiters) {
+  var _a;
+  if (!((_a = content.parts) == null ? void 0 : _a.length)) {
+    return "";
+  }
+  for (let i = 0; i < content.parts.length; i++) {
+    const part = content.parts[i];
+    if (part.executableCode && (i === content.parts.length - 1 || !content.parts[i + 1].codeExecutionResult)) {
+      content.parts = content.parts.slice(0, i + 1);
+      return part.executableCode.code;
+    }
+  }
+  const textParts = content.parts.filter((part) => part.text);
+  if (!textParts.length) {
+    return "";
+  }
+  const firstTextPart = cloneDeep(textParts[0]);
+  const responseText = textParts.map((part) => part.text).join("\n");
+  const leadingDelimiterPattern = codeBlockDelimiters.map((d) => d[0]).join("|");
+  const trailingDelimiterPattern = codeBlockDelimiters.map((d) => d[1]).join("|");
+  const match = new RegExp(
+    "?<prefix>.*?)(".concat(leadingDelimiterPattern, ")(?<codeStr>.*?)(").concat(trailingDelimiterPattern, ")(?<suffix>.*?)$"),
+    "s"
+  ).exec(responseText);
+  const { prefix, codeStr } = (match == null ? void 0 : match.groups) || {};
+  if (!codeStr) {
+    return "";
+  }
+  content.parts = [];
+  if (prefix) {
+    firstTextPart.text = prefix;
+    content.parts.push(firstTextPart);
+  }
+  content.parts.push(buildExecutableCodePart(codeStr));
+  return codeStr;
+}
+function buildExecutableCodePart(code) {
+  return {
+    text: code,
+    executableCode: {
+      code,
+      language: Language.PYTHON
+    }
+  };
+}
+function buildCodeExecutionResultPart(codeExecutionResult) {
+  if (codeExecutionResult.stderr) {
+    return {
+      text: codeExecutionResult.stderr,
+      codeExecutionResult: {
+        outcome: Outcome.OUTCOME_FAILED
+      }
+    };
+  }
+  const finalResult = [];
+  if (codeExecutionResult.stdout || !codeExecutionResult.outputFiles) {
+    finalResult.push("Code execution result:\n".concat(codeExecutionResult.stdout, "\n"));
+  }
+  if (codeExecutionResult.outputFiles) {
+    finalResult.push(
+      "Saved artifacts:\n" + codeExecutionResult.outputFiles.map((f) => f.name).join(", ")
+    );
+  }
+  return {
+    text: finalResult.join("\n\n"),
+    codeExecutionResult: {
+      outcome: Outcome.OUTCOME_OK
+    }
+  };
+}
+function convertCodeExecutionParts(content, codeBlockDelimiter, executionResultDelimiters) {
+  var _a;
+  if (!((_a = content.parts) == null ? void 0 : _a.length)) {
+    return;
+  }
+  const lastPart = content.parts[content.parts.length - 1];
+  if (lastPart.executableCode) {
+    content.parts[content.parts.length - 1] = {
+      text: codeBlockDelimiter[0] + lastPart.executableCode.code + codeBlockDelimiter[1]
+    };
+  } else if (content.parts.length == 1 && lastPart.codeExecutionResult) {
+    content.parts[content.parts.length - 1] = {
+      text: executionResultDelimiters[0] + lastPart.codeExecutionResult.output + executionResultDelimiters[1]
+    };
+    content.role = "user";
+  }
+}
+export {
+  CodeExecutionLanguage,
+  FileContentEncoding,
+  buildCodeExecutionResultPart,
+  buildExecutableCodePart,
+  convertCodeExecutionParts,
+  extractCodeAndTruncateContent,
+  getEncodedFileContent
+};