Summary

This PR fixes a bug in the DevTools fetch interceptor (ActivityLogger.patchGlobalFetch) where headers, methods, and bodies were being stripped when provided via a Request object (the first argument to fetch) instead of the init argument. This specifically caused issues with update checks (using ky) when private npm registries required authentication, leading to 403 errors.

Details

The interceptor was assuming that all request metadata resided in the init parameter. When libraries like ky pass a Request object with headers (e.g., Authorization) and an empty init object, the interceptor would create a new Headers object from the empty init, add the x-activity-request-id, and pass that to the original fetch, effectively overriding and losing the original headers on the Request object.

This fix:

• Fallbacks to extracting the method from the Request object if not in init.
• Merges headers from both the Request object and init.
• Fallbacks to the Request object's body if init.body is missing.

Related Issues

Fixes #23481

How to Validate

1. Run unit tests to ensure the regression test passes:

   npm test -w @google/gemini-cli -- src/utils/activityLogger.test.ts

2. (Optional) Manual verification:
   • Enable devtools in settings: "general": { "devtools": true }.
   • Perform a fetch call passing a Request object with custom headers and an empty init object.
   • Verify (e.g., via a mock server or logging) that the headers are correctly received by the target.

Pre-Merge Checklist

• Updated relevant documentation and README (if needed)
• Added/updated tests (if needed)
• Noted breaking changes (if any)
• Validated on required platforms/methods:
  • MacOS
    • npm run
    • npx
    • Docker
    • Podman
    • Seatbelt
  • Windows
    • npm run
    • npx
    • Docker
  • Linux
    • npm run
    • npx
    • Docker