1 files changed, 148 insertions, 0 deletions
diff --git a/packages/cli/src/validateNonInterActiveAuth.test.ts b/packages/cli/src/validateNonInterActiveAuth.test.ts
new file mode 100644
index 00000000..9238bbe4
--- /dev/null
+++ b/packages/cli/src/validateNonInterActiveAuth.test.ts
@@ -0,0 +1,148 @@
+/**
+ * @license
+ * Copyright 2025 Google LLC
+ * SPDX-License-Identifier: Apache-2.0
+ */
+
+import { describe, it, expect, vi, beforeEach, afterEach } from 'vitest';
+import {
+  validateNonInteractiveAuth,
+  NonInteractiveConfig,
+} from './validateNonInterActiveAuth.js';
+import { AuthType } from '@google/gemini-cli-core';
+
+describe('validateNonInterActiveAuth', () => {
+  let originalEnvGeminiApiKey: string | undefined;
+  let originalEnvVertexAi: string | undefined;
+  let consoleErrorSpy: ReturnType<typeof vi.spyOn>;
+  let processExitSpy: ReturnType<typeof vi.spyOn>;
+  let refreshAuthMock: jest.MockedFunction<
+    (authType: AuthType) => Promise<unknown>
+  >;
+
+  beforeEach(() => {
+    originalEnvGeminiApiKey = process.env.GEMINI_API_KEY;
+    originalEnvVertexAi = process.env.GOOGLE_GENAI_USE_VERTEXAI;
+    delete process.env.GEMINI_API_KEY;
+    delete process.env.GOOGLE_GENAI_USE_VERTEXAI;
+    consoleErrorSpy = vi.spyOn(console, 'error').mockImplementation(() => {});
+    processExitSpy = vi.spyOn(process, 'exit').mockImplementation((code) => {
+      throw new Error(`process.exit(${code}) called`);
+    });
+    refreshAuthMock = vi.fn().mockResolvedValue('refreshed');
+  });
+
+  afterEach(() => {
+    if (originalEnvGeminiApiKey !== undefined) {
+      process.env.GEMINI_API_KEY = originalEnvGeminiApiKey;
+    } else {
+      delete process.env.GEMINI_API_KEY;
+    }
+    if (originalEnvVertexAi !== undefined) {
+      process.env.GOOGLE_GENAI_USE_VERTEXAI = originalEnvVertexAi;
+    } else {
+      delete process.env.GOOGLE_GENAI_USE_VERTEXAI;
+    }
+    vi.restoreAllMocks();
+  });
+
+  it('exits if no auth type is configured or env vars set', async () => {
+    const nonInteractiveConfig: NonInteractiveConfig = {
+      refreshAuth: refreshAuthMock,
+    };
+    try {
+      await validateNonInteractiveAuth(undefined, nonInteractiveConfig);
+      expect.fail('Should have exited');
+    } catch (e) {
+      expect((e as Error).message).toContain('process.exit(1) called');
+    }
+    expect(consoleErrorSpy).toHaveBeenCalledWith(
+      expect.stringContaining('Please set an Auth method'),
+    );
+    expect(processExitSpy).toHaveBeenCalledWith(1);
+  });
+
+  it('uses USE_GEMINI if GEMINI_API_KEY is set', async () => {
+    process.env.GEMINI_API_KEY = 'fake-key';
+    const nonInteractiveConfig: NonInteractiveConfig = {
+      refreshAuth: refreshAuthMock,
+    };
+    await validateNonInteractiveAuth(undefined, nonInteractiveConfig);
+    expect(refreshAuthMock).toHaveBeenCalledWith(AuthType.USE_GEMINI);
+  });
+
+  it('uses USE_VERTEX_AI if GOOGLE_GENAI_USE_VERTEXAI is true (with GOOGLE_CLOUD_PROJECT and GOOGLE_CLOUD_LOCATION)', async () => {
+    process.env.GOOGLE_GENAI_USE_VERTEXAI = 'true';
+    process.env.GOOGLE_CLOUD_PROJECT = 'test-project';
+    process.env.GOOGLE_CLOUD_LOCATION = 'us-central1';
+    const nonInteractiveConfig: NonInteractiveConfig = {
+      refreshAuth: refreshAuthMock,
+    };
+    await validateNonInteractiveAuth(undefined, nonInteractiveConfig);
+    expect(refreshAuthMock).toHaveBeenCalledWith(AuthType.USE_VERTEX_AI);
+  });
+
+  it('uses USE_VERTEX_AI if GOOGLE_GENAI_USE_VERTEXAI is true and GOOGLE_API_KEY is set', async () => {
+    process.env.GOOGLE_GENAI_USE_VERTEXAI = 'true';
+    process.env.GOOGLE_API_KEY = 'vertex-api-key';
+    const nonInteractiveConfig: NonInteractiveConfig = {
+      refreshAuth: refreshAuthMock,
+    };
+    await validateNonInteractiveAuth(undefined, nonInteractiveConfig);
+    expect(refreshAuthMock).toHaveBeenCalledWith(AuthType.USE_VERTEX_AI);
+  });
+
+  it('uses USE_VERTEX_AI if both GEMINI_API_KEY and GOOGLE_GENAI_USE_VERTEXAI are set', async () => {
+    process.env.GEMINI_API_KEY = 'fake-key';
+    process.env.GOOGLE_GENAI_USE_VERTEXAI = 'true';
+    process.env.GOOGLE_CLOUD_PROJECT = 'test-project';
+    process.env.GOOGLE_CLOUD_LOCATION = 'us-central1';
+    const nonInteractiveConfig: NonInteractiveConfig = {
+      refreshAuth: refreshAuthMock,
+    };
+    await validateNonInteractiveAuth(undefined, nonInteractiveConfig);
+    expect(refreshAuthMock).toHaveBeenCalledWith(AuthType.USE_VERTEX_AI);
+  });
+
+  it('uses USE_GEMINI if GOOGLE_GENAI_USE_VERTEXAI is false, GEMINI_API_KEY is set, and project/location are available', async () => {
+    process.env.GOOGLE_GENAI_USE_VERTEXAI = 'false';
+    process.env.GEMINI_API_KEY = 'fake-key';
+    process.env.GOOGLE_CLOUD_PROJECT = 'test-project';
+    process.env.GOOGLE_CLOUD_LOCATION = 'us-central1';
+    const nonInteractiveConfig: NonInteractiveConfig = {
+      refreshAuth: refreshAuthMock,
+    };
+    await validateNonInteractiveAuth(undefined, nonInteractiveConfig);
+    expect(refreshAuthMock).toHaveBeenCalledWith(AuthType.USE_GEMINI);
+  });
+
+  it('uses configuredAuthType if provided', async () => {
+    // Set required env var for USE_GEMINI
+    process.env.GEMINI_API_KEY = 'fake-key';
+    const nonInteractiveConfig: NonInteractiveConfig = {
+      refreshAuth: refreshAuthMock,
+    };
+    await validateNonInteractiveAuth(AuthType.USE_GEMINI, nonInteractiveConfig);
+    expect(refreshAuthMock).toHaveBeenCalledWith(AuthType.USE_GEMINI);
+  });
+
+  it('exits if validateAuthMethod returns error', async () => {
+    // Mock validateAuthMethod to return error
+    const mod = await import('./config/auth.js');
+    vi.spyOn(mod, 'validateAuthMethod').mockReturnValue('Auth error!');
+    const nonInteractiveConfig: NonInteractiveConfig = {
+      refreshAuth: refreshAuthMock,
+    };
+    try {
+      await validateNonInteractiveAuth(
+        AuthType.USE_GEMINI,
+        nonInteractiveConfig,
+      );
+      expect.fail('Should have exited');
+    } catch (e) {
+      expect((e as Error).message).toContain('process.exit(1) called');
+    }
+    expect(consoleErrorSpy).toHaveBeenCalledWith('Auth error!');
+    expect(processExitSpy).toHaveBeenCalledWith(1);
+  });
+});