{
  "context": "This criteria evaluates how effectively the engineer uses @google/gemini-cli-core's MCP OAuth components to build a token manager. The focus is on proper usage of MCPOAuthTokenStorage, OAuthToken interface, and OAuthUtils for token validation.",
  "type": "weighted_checklist",
  "checklist": [
    {
      "name": "MCPOAuthTokenStorage Usage",
      "description": "Uses MCPOAuthTokenStorage class for token persistence with correct methods: storeToken(), getToken(), deleteToken(), listServers(), and clearAllTokens()",
      "max_score": 30
    },
    {
      "name": "OAuthToken Interface",
      "description": "Properly uses the OAuthToken interface structure with accessToken, tokenType, expiresAt, refreshToken, and scope fields matching the package's type definitions",
      "max_score": 20
    },
    {
      "name": "Token Validation",
      "description": "Uses OAuthUtils.isTokenValid() method with buffer time parameter for checking token expiration instead of implementing custom validation logic",
      "max_score": 20
    },
    {
      "name": "Refresh Logic",
      "description": "Implements getValidToken() that checks token validity and performs refresh when needed, properly updating stored tokens after refresh",
      "max_score": 15
    },
    {
      "name": "MCPOAuthProvider Integration",
      "description": "Optionally integrates with MCPOAuthProvider for token refresh operations or properly delegates refresh to callback function",
      "max_score": 10
    },
    {
      "name": "Async Operations",
      "description": "Correctly handles asynchronous token storage operations with proper await/Promise patterns matching the package's async API",
      "max_score": 5
    }
  ]
}