@1mcp/agent 0.39.0-beta.3 → 0.39.0-beta.4

package/build/sdk/contracts/mcpParamHeaders.js

@@ -0,0 +1,134 @@
+import { createGatewayFailure } from '../../gateway/contracts/gatewayFailure.js';
+const invalidHeaderTokenCharacter = /[^!#$%&'*+.^_`|~0-9A-Za-z-]/;
+const excludedSubschemas = [
+    'items',
+    'prefixItems',
+    'contains',
+    'additionalItems',
+    'contentSchema',
+    'additionalProperties',
+    'unevaluatedProperties',
+    'unevaluatedItems',
+    'propertyNames',
+    'patternProperties',
+    'dependentSchemas',
+    'dependencies',
+    'oneOf',
+    'anyOf',
+    'allOf',
+    'not',
+    'if',
+    'then',
+    'else',
+    '$defs',
+    'definitions',
+];
+const mappedSubschemas = new Set(['patternProperties', 'dependentSchemas', 'dependencies', '$defs', 'definitions']);
+function record(value) {
+    if (value === null || Array.isArray(value) || typeof value !== 'object')
+        return undefined;
+    return value;
+}
+/** Scan only detached, budgeted catalog JSON. Never resolve a schema reference or read caller headers. */
+export function scanMcpParamDeclarations(schema) {
+    const declarations = [];
+    const names = new Set();
+    const visit = (value, path, reachable) => {
+        const node = record(value);
+        if (!node)
+            return undefined;
+        if (Object.hasOwn(node, 'x-mcp-header')) {
+            if (!reachable || path.length === 0)
+                return 'Annotation must be reachable through properties';
+            const name = node['x-mcp-header'];
+            if (typeof name !== 'string' || name.length === 0 || invalidHeaderTokenCharacter.test(name))
+                return 'Header name must be an HTTP token';
+            const type = node.type;
+            if (type !== 'string' && type !== 'integer' && type !== 'boolean')
+                return 'Header parameter must have type string, integer, or boolean';
+            const normalized = name.toLowerCase();
+            if (names.has(normalized))
+                return 'Header names must be case-insensitively unique';
+            names.add(normalized);
+            declarations.push({ path, name, type });
+        }
+        const properties = record(node.properties);
+        for (const [name, child] of Object.entries(properties ?? {})) {
+            const failure = visit(child, [...path, name], reachable);
+            if (failure)
+                return failure;
+        }
+        for (const keyword of excludedSubschemas) {
+            const sub = node[keyword];
+            if (sub === undefined)
+                continue;
+            let branches = [sub];
+            if (Array.isArray(sub))
+                branches = sub;
+            else if (mappedSubschemas.has(keyword))
+                branches = Object.values(record(sub) ?? {});
+            for (const branch of branches) {
+                const failure = visit(branch, [], false);
+                if (failure)
+                    return failure;
+            }
+        }
+        return undefined;
+    };
+    const reason = visit(schema, [], true);
+    return reason ? { valid: false, reason } : { valid: true, declarations };
+}
+function argumentAtPath(args, path) {
+    let value = args;
+    for (const name of path) {
+        const parent = record(value);
+        if (!parent || !Object.hasOwn(parent, name))
+            return undefined;
+        value = parent[name];
+    }
+    return value;
+}
+function primitiveValue(value, type) {
+    if (type === 'string')
+        return typeof value === 'string' ? value : undefined;
+    if (type === 'boolean')
+        return typeof value === 'boolean' ? String(value) : undefined;
+    if (typeof value !== 'number')
+        return undefined;
+    if (!Number.isSafeInteger(value))
+        throw createGatewayFailure({
+            kind: 'protocol',
+            code: '-32602',
+            message: 'Header integer parameter must be a safe integer',
+        });
+    return String(value);
+}
+function hasUnsafeFieldCharacter(value) {
+    for (let index = 0; index < value.length; index++) {
+        const code = value.charCodeAt(index);
+        if (code === 9)
+            continue;
+        if (code < 32 || code > 126)
+            return true;
+    }
+    return false;
+}
+function encodeValue(value) {
+    if (value.length === 0 ||
+        value !== value.trim() ||
+        hasUnsafeFieldCharacter(value) ||
+        (value.startsWith('=?base64?') && value.endsWith('?='))) {
+        return `=?base64?${Buffer.from(value, 'utf8').toString('base64')}?=`;
+    }
+    return value;
+}
+export function createMcpParamHeaders(declarations, args) {
+    const headers = {};
+    for (const declaration of declarations) {
+        const value = primitiveValue(argumentAtPath(args, declaration.path), declaration.type);
+        if (value !== undefined)
+            headers[`Mcp-Param-${declaration.name}`] = encodeValue(value);
+    }
+    return headers;
+}
+//# sourceMappingURL=mcpParamHeaders.js.map

package/build/sdk/contracts/mcpParamHeaders.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"mcpParamHeaders.js","sourceRoot":"","sources":["../../../src/sdk/contracts/mcpParamHeaders.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,oBAAoB,EAAE,MAAM,0CAA0C,CAAC;AAahF,MAAM,2BAA2B,GAAG,6BAA6B,CAAC;AAClE,MAAM,kBAAkB,GAAG;IACzB,OAAO;IACP,aAAa;IACb,UAAU;IACV,iBAAiB;IACjB,eAAe;IACf,sBAAsB;IACtB,uBAAuB;IACvB,kBAAkB;IAClB,eAAe;IACf,mBAAmB;IACnB,kBAAkB;IAClB,cAAc;IACd,OAAO;IACP,OAAO;IACP,OAAO;IACP,KAAK;IACL,IAAI;IACJ,MAAM;IACN,MAAM;IACN,OAAO;IACP,aAAa;CACL,CAAC;AACX,MAAM,gBAAgB,GAAG,IAAI,GAAG,CAAC,CAAC,mBAAmB,EAAE,kBAAkB,EAAE,cAAc,EAAE,OAAO,EAAE,aAAa,CAAC,CAAC,CAAC;AAEpH,SAAS,MAAM,CAAC,KAA4B;IAC1C,IAAI,KAAK,KAAK,IAAI,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,IAAI,OAAO,KAAK,KAAK,QAAQ;QAAE,OAAO,SAAS,CAAC;IAC1F,OAAO,KAAK,CAAC;AACf,CAAC;AAED,0GAA0G;AAC1G,MAAM,UAAU,wBAAwB,CAAC,MAAiB;IACxD,MAAM,YAAY,GAA0B,EAAE,CAAC;IAC/C,MAAM,KAAK,GAAG,IAAI,GAAG,EAAU,CAAC;IAChC,MAAM,KAAK,GAAG,CAAC,KAAgB,EAAE,IAAuB,EAAE,SAAkB,EAAsB,EAAE;QAClG,MAAM,IAAI,GAAG,MAAM,CAAC,KAAK,CAAC,CAAC;QAC3B,IAAI,CAAC,IAAI;YAAE,OAAO,SAAS,CAAC;QAC5B,IAAI,MAAM,CAAC,MAAM,CAAC,IAAI,EAAE,cAAc,CAAC,EAAE,CAAC;YACxC,IAAI,CAAC,SAAS,IAAI,IAAI,CAAC,MAAM,KAAK,CAAC;gBAAE,OAAO,iDAAiD,CAAC;YAC9F,MAAM,IAAI,GAAG,IAAI,CAAC,cAAc,CAAC,CAAC;YAClC,IAAI,OAAO,IAAI,KAAK,QAAQ,IAAI,IAAI,CAAC,MAAM,KAAK,CAAC,IAAI,2BAA2B,CAAC,IAAI,CAAC,IAAI,CAAC;gBACzF,OAAO,mCAAmC,CAAC;YAC7C,MAAM,IAAI,GAAG,IAAI,CAAC,IAAI,CAAC;YACvB,IAAI,IAAI,KAAK,QAAQ,IAAI,IAAI,KAAK,SAAS,IAAI,IAAI,KAAK,SAAS;gBAC/D,OAAO,6DAA6D,CAAC;YACvE,MAAM,UAAU,GAAG,IAAI,CAAC,WAAW,EAAE,CAAC;YACtC,IAAI,KAAK,CAAC,GAAG,CAAC,UAAU,CAAC;gBAAE,OAAO,gDAAgD,CAAC;YACnF,KAAK,CAAC,GAAG,CAAC,UAAU,CAAC,CAAC;YACtB,YAAY,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC,CAAC;QAC1C,CAAC;QACD,MAAM,UAAU,GAAG,MAAM,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC;QAC3C,KAAK,MAAM,CAAC,IAAI,EAAE,KAAK,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,UAAU,IAAI,EAAE,CAAC,EAAE,CAAC;YAC7D,MAAM,OAAO,GAAG,KAAK,CAAC,KAAK,EAAE,CAAC,GAAG,IAAI,EAAE,IAAI,CAAC,EAAE,SAAS,CAAC,CAAC;YACzD,IAAI,OAAO;gBAAE,OAAO,OAAO,CAAC;QAC9B,CAAC;QACD,KAAK,MAAM,OAAO,IAAI,kBAAkB,EAAE,CAAC;YACzC,MAAM,GAAG,GAAG,IAAI,CAAC,OAAO,CAAC,CAAC;YAC1B,IAAI,GAAG,KAAK,SAAS;gBAAE,SAAS;YAChC,IAAI,QAAQ,GAAyB,CAAC,GAAG,CAAC,CAAC;YAC3C,IAAI,KAAK,CAAC,OAAO,CAAC,GAAG,CAAC;gBAAE,QAAQ,GAAG,GAAG,CAAC;iBAClC,IAAI,gBAAgB,CAAC,GAAG,CAAC,OAAO,CAAC;gBAAE,QAAQ,GAAG,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,GAAG,CAAC,IAAI,EAAE,CAAC,CAAC;YACpF,KAAK,MAAM,MAAM,IAAI,QAAQ,EAAE,CAAC;gBAC9B,MAAM,OAAO,GAAG,KAAK,CAAC,MAAM,EAAE,EAAE,EAAE,KAAK,CAAC,CAAC;gBACzC,IAAI,OAAO;oBAAE,OAAO,OAAO,CAAC;YAC9B,CAAC;QACH,CAAC;QACD,OAAO,SAAS,CAAC;IACnB,CAAC,CAAC;IACF,MAAM,MAAM,GAAG,KAAK,CAAC,MAAM,EAAE,EAAE,EAAE,IAAI,CAAC,CAAC;IACvC,OAAO,MAAM,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,KAAK,EAAE,MAAM,EAAE,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,IAAI,EAAE,YAAY,EAAE,CAAC;AAC3E,CAAC;AAED,SAAS,cAAc,CAAC,IAA2B,EAAE,IAAuB;IAC1E,IAAI,KAAK,GAAG,IAAI,CAAC;IACjB,KAAK,MAAM,IAAI,IAAI,IAAI,EAAE,CAAC;QACxB,MAAM,MAAM,GAAG,MAAM,CAAC,KAAK,CAAC,CAAC;QAC7B,IAAI,CAAC,MAAM,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC,MAAM,EAAE,IAAI,CAAC;YAAE,OAAO,SAAS,CAAC;QAC9D,KAAK,GAAG,MAAM,CAAC,IAAI,CAAC,CAAC;IACvB,CAAC;IACD,OAAO,KAAK,CAAC;AACf,CAAC;AAED,SAAS,cAAc,CAAC,KAA4B,EAAE,IAAiC;IACrF,IAAI,IAAI,KAAK,QAAQ;QAAE,OAAO,OAAO,KAAK,KAAK,QAAQ,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,SAAS,CAAC;IAC5E,IAAI,IAAI,KAAK,SAAS;QAAE,OAAO,OAAO,KAAK,KAAK,SAAS,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;IACtF,IAAI,OAAO,KAAK,KAAK,QAAQ;QAAE,OAAO,SAAS,CAAC;IAChD,IAAI,CAAC,MAAM,CAAC,aAAa,CAAC,KAAK,CAAC;QAC9B,MAAM,oBAAoB,CAAC;YACzB,IAAI,EAAE,UAAU;YAChB,IAAI,EAAE,QAAQ;YACd,OAAO,EAAE,iDAAiD;SAC3D,CAAC,CAAC;IACL,OAAO,MAAM,CAAC,KAAK,CAAC,CAAC;AACvB,CAAC;AAED,SAAS,uBAAuB,CAAC,KAAa;IAC5C,KAAK,IAAI,KAAK,GAAG,CAAC,EAAE,KAAK,GAAG,KAAK,CAAC,MAAM,EAAE,KAAK,EAAE,EAAE,CAAC;QAClD,MAAM,IAAI,GAAG,KAAK,CAAC,UAAU,CAAC,KAAK,CAAC,CAAC;QACrC,IAAI,IAAI,KAAK,CAAC;YAAE,SAAS;QACzB,IAAI,IAAI,GAAG,EAAE,IAAI,IAAI,GAAG,GAAG;YAAE,OAAO,IAAI,CAAC;IAC3C,CAAC;IACD,OAAO,KAAK,CAAC;AACf,CAAC;AAED,SAAS,WAAW,CAAC,KAAa;IAChC,IACE,KAAK,CAAC,MAAM,KAAK,CAAC;QAClB,KAAK,KAAK,KAAK,CAAC,IAAI,EAAE;QACtB,uBAAuB,CAAC,KAAK,CAAC;QAC9B,CAAC,KAAK,CAAC,UAAU,CAAC,WAAW,CAAC,IAAI,KAAK,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,EACvD,CAAC;QACD,OAAO,YAAY,MAAM,CAAC,IAAI,CAAC,KAAK,EAAE,MAAM,CAAC,CAAC,QAAQ,CAAC,QAAQ,CAAC,IAAI,CAAC;IACvE,CAAC;IACD,OAAO,KAAK,CAAC;AACf,CAAC;AAED,MAAM,UAAU,qBAAqB,CACnC,YAA4C,EAC5C,IAA2B;IAE3B,MAAM,OAAO,GAA2B,EAAE,CAAC;IAC3C,KAAK,MAAM,WAAW,IAAI,YAAY,EAAE,CAAC;QACvC,MAAM,KAAK,GAAG,cAAc,CAAC,cAAc,CAAC,IAAI,EAAE,WAAW,CAAC,IAAI,CAAC,EAAE,WAAW,CAAC,IAAI,CAAC,CAAC;QACvF,IAAI,KAAK,KAAK,SAAS;YAAE,OAAO,CAAC,aAAa,WAAW,CAAC,IAAI,EAAE,CAAC,GAAG,WAAW,CAAC,KAAK,CAAC,CAAC;IACzF,CAAC;IACD,OAAO,OAAO,CAAC;AACjB,CAAC"}

package/build/sdk/contracts/requestProgress.d.ts

@@ -0,0 +1,29 @@
+export interface RequestProgressNotification {
+    readonly method: 'notifications/progress';
+    readonly params: {
+        progressToken: string | number;
+        progress: number;
+        total?: number;
+        message?: string;
+    };
+}
+interface Owner {
+    accepting: boolean;
+    active: boolean;
+    pending: number;
+    bytes: number;
+    tail: Promise<void>;
+    failure?: unknown;
+    readonly token: string | number;
+    readonly signal?: AbortSignal;
+    readonly assertCurrent?: () => void;
+    readonly send: (notification: RequestProgressNotification) => Promise<void>;
+}
+/** Retain an opaque scalar token exactly; it never becomes an upstream request token. */
+export declare function requestProgressToken(value: unknown): string | number | undefined;
+/** One inbound exchange owns a bounded delivery queue, independently of any SDK request id. */
+export declare function withRequestProgress<T>(token: unknown, send: Owner['send'], operation: () => Promise<T>, signal?: AbortSignal, assertCurrent?: () => void): Promise<T>;
+/** SDK onprogress already correlates a private SDK token; never accept raw notifications here. */
+export declare function currentRequestProgress(): ((progress: unknown) => void) | undefined;
+export {};
+//# sourceMappingURL=requestProgress.d.ts.map

package/build/sdk/contracts/requestProgress.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"requestProgress.d.ts","sourceRoot":"","sources":["../../../src/sdk/contracts/requestProgress.ts"],"names":[],"mappings":"AAWA,MAAM,WAAW,2BAA2B;IAC1C,QAAQ,CAAC,MAAM,EAAE,wBAAwB,CAAC;IAC1C,QAAQ,CAAC,MAAM,EAAE;QAAE,aAAa,EAAE,MAAM,GAAG,MAAM,CAAC;QAAC,QAAQ,EAAE,MAAM,CAAC;QAAC,KAAK,CAAC,EAAE,MAAM,CAAC;QAAC,OAAO,CAAC,EAAE,MAAM,CAAA;KAAE,CAAC;CACzG;AACD,UAAU,KAAK;IACb,SAAS,EAAE,OAAO,CAAC;IACnB,MAAM,EAAE,OAAO,CAAC;IAChB,OAAO,EAAE,MAAM,CAAC;IAChB,KAAK,EAAE,MAAM,CAAC;IACd,IAAI,EAAE,OAAO,CAAC,IAAI,CAAC,CAAC;IACpB,OAAO,CAAC,EAAE,OAAO,CAAC;IAClB,QAAQ,CAAC,KAAK,EAAE,MAAM,GAAG,MAAM,CAAC;IAChC,QAAQ,CAAC,MAAM,CAAC,EAAE,WAAW,CAAC;IAC9B,QAAQ,CAAC,aAAa,CAAC,EAAE,MAAM,IAAI,CAAC;IACpC,QAAQ,CAAC,IAAI,EAAE,CAAC,YAAY,EAAE,2BAA2B,KAAK,OAAO,CAAC,IAAI,CAAC,CAAC;CAC7E;AAsBD,yFAAyF;AACzF,wBAAgB,oBAAoB,CAAC,KAAK,EAAE,OAAO,GAAG,MAAM,GAAG,MAAM,GAAG,SAAS,CAIhF;AAED,+FAA+F;AAC/F,wBAAsB,mBAAmB,CAAC,CAAC,EACzC,KAAK,EAAE,OAAO,EACd,IAAI,EAAE,KAAK,CAAC,MAAM,CAAC,EACnB,SAAS,EAAE,MAAM,OAAO,CAAC,CAAC,CAAC,EAC3B,MAAM,CAAC,EAAE,WAAW,EACpB,aAAa,CAAC,EAAE,MAAM,IAAI,GACzB,OAAO,CAAC,CAAC,CAAC,CA2BZ;AAED,kGAAkG;AAClG,wBAAgB,sBAAsB,IAAI,CAAC,CAAC,QAAQ,EAAE,OAAO,KAAK,IAAI,CAAC,GAAG,SAAS,CA8ClF"}

package/build/sdk/contracts/requestProgress.js

@@ -0,0 +1,126 @@
+import { AsyncLocalStorage } from 'node:async_hooks';
+import { z } from 'zod';
+const progressSchema = z.object({
+    progress: z.number().finite(),
+    total: z.number().finite().optional(),
+    message: z.string().max(4096).optional(),
+});
+const maxPending = 64;
+const maxPendingBytes = 256 * 1024;
+const owners = new AsyncLocalStorage();
+async function drain(owner) {
+    if (owner.signal?.aborted)
+        return;
+    let timer;
+    let abort;
+    try {
+        await Promise.race([
+            owner.tail,
+            new Promise((resolve) => {
+                timer = setTimeout(resolve, 1000);
+                abort = resolve;
+                owner.signal?.addEventListener('abort', abort, { once: true });
+            }),
+        ]);
+    }
+    finally {
+        if (timer)
+            clearTimeout(timer);
+        if (abort)
+            owner.signal?.removeEventListener('abort', abort);
+    }
+}
+/** Retain an opaque scalar token exactly; it never becomes an upstream request token. */
+export function requestProgressToken(value) {
+    if (typeof value === 'number')
+        return Number.isFinite(value) ? value : undefined;
+    if (typeof value !== 'string' || Buffer.byteLength(value) > 1024)
+        return undefined;
+    return value;
+}
+/** One inbound exchange owns a bounded delivery queue, independently of any SDK request id. */
+export async function withRequestProgress(token, send, operation, signal, assertCurrent) {
+    const validated = requestProgressToken(token);
+    if (validated === undefined)
+        return owners.run(undefined, operation);
+    const owner = {
+        accepting: true,
+        active: true,
+        pending: 0,
+        bytes: 0,
+        tail: Promise.resolve(),
+        token: validated,
+        send,
+        signal,
+        assertCurrent,
+    };
+    try {
+        return await owners.run(owner, async () => {
+            signal?.throwIfAborted();
+            const result = await operation();
+            owner.accepting = false;
+            // Optional progress cannot change an already completed operation's outcome.
+            await drain(owner);
+            return result;
+        });
+    }
+    finally {
+        owner.accepting = false;
+        owner.active = false;
+    }
+}
+/** SDK onprogress already correlates a private SDK token; never accept raw notifications here. */
+export function currentRequestProgress() {
+    const owner = owners.getStore();
+    if (!owner?.active)
+        return undefined;
+    return (progress) => {
+        if (!owner.accepting || !owner.active || owner.signal?.aborted || owner.failure !== undefined)
+            return;
+        if (typeof progress !== 'object' || progress === null)
+            return;
+        let parsed;
+        try {
+            const values = Object.fromEntries(['progress', 'total', 'message'].flatMap((key) => {
+                const descriptor = Object.getOwnPropertyDescriptor(progress, key);
+                if (!descriptor)
+                    return [];
+                if (!('value' in descriptor))
+                    throw new Error('Invalid progress field');
+                return [[key, descriptor.value]];
+            }));
+            parsed = progressSchema.safeParse(values);
+        }
+        catch {
+            return;
+        }
+        if (!parsed.success)
+            return;
+        const notification = {
+            method: 'notifications/progress',
+            params: { ...parsed.data, progressToken: owner.token },
+        };
+        const bytes = Buffer.byteLength(JSON.stringify(notification));
+        if (owner.pending >= maxPending || owner.bytes + bytes > maxPendingBytes) {
+            owner.failure = new Error('Request progress delivery capacity exceeded');
+            return;
+        }
+        owner.pending++;
+        owner.bytes += bytes;
+        owner.tail = owner.tail
+            .then(async () => {
+            if (!owner.active || owner.signal?.aborted || owner.failure !== undefined)
+                return;
+            owner.assertCurrent?.();
+            await owner.send(notification);
+        })
+            .catch((error) => {
+            owner.failure ??= error;
+        })
+            .finally(() => {
+            owner.pending--;
+            owner.bytes -= bytes;
+        });
+    };
+}
+//# sourceMappingURL=requestProgress.js.map

package/build/sdk/contracts/requestProgress.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"requestProgress.js","sourceRoot":"","sources":["../../../src/sdk/contracts/requestProgress.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,iBAAiB,EAAE,MAAM,kBAAkB,CAAC;AAErD,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAExB,MAAM,cAAc,GAAG,CAAC,CAAC,MAAM,CAAC;IAC9B,QAAQ,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,MAAM,EAAE;IAC7B,KAAK,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IACrC,OAAO,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,QAAQ,EAAE;CACzC,CAAC,CAAC;AACH,MAAM,UAAU,GAAG,EAAE,CAAC;AACtB,MAAM,eAAe,GAAG,GAAG,GAAG,IAAI,CAAC;AAiBnC,MAAM,MAAM,GAAG,IAAI,iBAAiB,EAAqB,CAAC;AAE1D,KAAK,UAAU,KAAK,CAAC,KAAY;IAC/B,IAAI,KAAK,CAAC,MAAM,EAAE,OAAO;QAAE,OAAO;IAClC,IAAI,KAAgD,CAAC;IACrD,IAAI,KAA+B,CAAC;IACpC,IAAI,CAAC;QACH,MAAM,OAAO,CAAC,IAAI,CAAC;YACjB,KAAK,CAAC,IAAI;YACV,IAAI,OAAO,CAAO,CAAC,OAAO,EAAE,EAAE;gBAC5B,KAAK,GAAG,UAAU,CAAC,OAAO,EAAE,IAAI,CAAC,CAAC;gBAClC,KAAK,GAAG,OAAO,CAAC;gBAChB,KAAK,CAAC,MAAM,EAAE,gBAAgB,CAAC,OAAO,EAAE,KAAK,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC,CAAC;YACjE,CAAC,CAAC;SACH,CAAC,CAAC;IACL,CAAC;YAAS,CAAC;QACT,IAAI,KAAK;YAAE,YAAY,CAAC,KAAK,CAAC,CAAC;QAC/B,IAAI,KAAK;YAAE,KAAK,CAAC,MAAM,EAAE,mBAAmB,CAAC,OAAO,EAAE,KAAK,CAAC,CAAC;IAC/D,CAAC;AACH,CAAC;AAED,yFAAyF;AACzF,MAAM,UAAU,oBAAoB,CAAC,KAAc;IACjD,IAAI,OAAO,KAAK,KAAK,QAAQ;QAAE,OAAO,MAAM,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,SAAS,CAAC;IACjF,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,MAAM,CAAC,UAAU,CAAC,KAAK,CAAC,GAAG,IAAI;QAAE,OAAO,SAAS,CAAC;IACnF,OAAO,KAAK,CAAC;AACf,CAAC;AAED,+FAA+F;AAC/F,MAAM,CAAC,KAAK,UAAU,mBAAmB,CACvC,KAAc,EACd,IAAmB,EACnB,SAA2B,EAC3B,MAAoB,EACpB,aAA0B;IAE1B,MAAM,SAAS,GAAG,oBAAoB,CAAC,KAAK,CAAC,CAAC;IAC9C,IAAI,SAAS,KAAK,SAAS;QAAE,OAAO,MAAM,CAAC,GAAG,CAAC,SAAS,EAAE,SAAS,CAAC,CAAC;IACrE,MAAM,KAAK,GAAU;QACnB,SAAS,EAAE,IAAI;QACf,MAAM,EAAE,IAAI;QACZ,OAAO,EAAE,CAAC;QACV,KAAK,EAAE,CAAC;QACR,IAAI,EAAE,OAAO,CAAC,OAAO,EAAE;QACvB,KAAK,EAAE,SAAS;QAChB,IAAI;QACJ,MAAM;QACN,aAAa;KACd,CAAC;IACF,IAAI,CAAC;QACH,OAAO,MAAM,MAAM,CAAC,GAAG,CAAC,KAAK,EAAE,KAAK,IAAI,EAAE;YACxC,MAAM,EAAE,cAAc,EAAE,CAAC;YACzB,MAAM,MAAM,GAAG,MAAM,SAAS,EAAE,CAAC;YACjC,KAAK,CAAC,SAAS,GAAG,KAAK,CAAC;YACxB,4EAA4E;YAC5E,MAAM,KAAK,CAAC,KAAK,CAAC,CAAC;YACnB,OAAO,MAAM,CAAC;QAChB,CAAC,CAAC,CAAC;IACL,CAAC;YAAS,CAAC;QACT,KAAK,CAAC,SAAS,GAAG,KAAK,CAAC;QACxB,KAAK,CAAC,MAAM,GAAG,KAAK,CAAC;IACvB,CAAC;AACH,CAAC;AAED,kGAAkG;AAClG,MAAM,UAAU,sBAAsB;IACpC,MAAM,KAAK,GAAG,MAAM,CAAC,QAAQ,EAAE,CAAC;IAChC,IAAI,CAAC,KAAK,EAAE,MAAM;QAAE,OAAO,SAAS,CAAC;IACrC,OAAO,CAAC,QAAQ,EAAE,EAAE;QAClB,IAAI,CAAC,KAAK,CAAC,SAAS,IAAI,CAAC,KAAK,CAAC,MAAM,IAAI,KAAK,CAAC,MAAM,EAAE,OAAO,IAAI,KAAK,CAAC,OAAO,KAAK,SAAS;YAAE,OAAO;QACtG,IAAI,OAAO,QAAQ,KAAK,QAAQ,IAAI,QAAQ,KAAK,IAAI;YAAE,OAAO;QAC9D,IAAI,MAAmD,CAAC;QACxD,IAAI,CAAC;YACH,MAAM,MAAM,GAAG,MAAM,CAAC,WAAW,CAC/B,CAAC,UAAU,EAAE,OAAO,EAAE,SAAS,CAAC,CAAC,OAAO,CAAC,CAAC,GAAG,EAAE,EAAE;gBAC/C,MAAM,UAAU,GAAG,MAAM,CAAC,wBAAwB,CAAC,QAAQ,EAAE,GAAG,CAAC,CAAC;gBAClE,IAAI,CAAC,UAAU;oBAAE,OAAO,EAAE,CAAC;gBAC3B,IAAI,CAAC,CAAC,OAAO,IAAI,UAAU,CAAC;oBAAE,MAAM,IAAI,KAAK,CAAC,wBAAwB,CAAC,CAAC;gBACxE,OAAO,CAAC,CAAC,GAAG,EAAE,UAAU,CAAC,KAAgB,CAAC,CAAC,CAAC;YAC9C,CAAC,CAAC,CACH,CAAC;YACF,MAAM,GAAG,cAAc,CAAC,SAAS,CAAC,MAAM,CAAC,CAAC;QAC5C,CAAC;QAAC,MAAM,CAAC;YACP,OAAO;QACT,CAAC;QACD,IAAI,CAAC,MAAM,CAAC,OAAO;YAAE,OAAO;QAC5B,MAAM,YAAY,GAAgC;YAChD,MAAM,EAAE,wBAAwB;YAChC,MAAM,EAAE,EAAE,GAAG,MAAM,CAAC,IAAI,EAAE,aAAa,EAAE,KAAK,CAAC,KAAK,EAAE;SACvD,CAAC;QACF,MAAM,KAAK,GAAG,MAAM,CAAC,UAAU,CAAC,IAAI,CAAC,SAAS,CAAC,YAAY,CAAC,CAAC,CAAC;QAC9D,IAAI,KAAK,CAAC,OAAO,IAAI,UAAU,IAAI,KAAK,CAAC,KAAK,GAAG,KAAK,GAAG,eAAe,EAAE,CAAC;YACzE,KAAK,CAAC,OAAO,GAAG,IAAI,KAAK,CAAC,6CAA6C,CAAC,CAAC;YACzE,OAAO;QACT,CAAC;QACD,KAAK,CAAC,OAAO,EAAE,CAAC;QAChB,KAAK,CAAC,KAAK,IAAI,KAAK,CAAC;QACrB,KAAK,CAAC,IAAI,GAAG,KAAK,CAAC,IAAI;aACpB,IAAI,CAAC,KAAK,IAAI,EAAE;YACf,IAAI,CAAC,KAAK,CAAC,MAAM,IAAI,KAAK,CAAC,MAAM,EAAE,OAAO,IAAI,KAAK,CAAC,OAAO,KAAK,SAAS;gBAAE,OAAO;YAClF,KAAK,CAAC,aAAa,EAAE,EAAE,CAAC;YACxB,MAAM,KAAK,CAAC,IAAI,CAAC,YAAY,CAAC,CAAC;QACjC,CAAC,CAAC;aACD,KAAK,CAAC,CAAC,KAAc,EAAE,EAAE;YACxB,KAAK,CAAC,OAAO,KAAK,KAAK,CAAC;QAC1B,CAAC,CAAC;aACD,OAAO,CAAC,GAAG,EAAE;YACZ,KAAK,CAAC,OAAO,EAAE,CAAC;YAChB,KAAK,CAAC,KAAK,IAAI,KAAK,CAAC;QACvB,CAAC,CAAC,CAAC;IACP,CAAC,CAAC;AACJ,CAAC"}

package/build/sdk/legacy/auth/sdkOAuthClientProvider.d.ts

@@ -1,98 +1,91 @@
-import { OAuthClientProvider } from '../client/auth.js';
-import type { OAuthClientInformationFull, OAuthClientMetadata, OAuthTokens } from '../shared/auth.js';
-/**
- * OAuth client configuration for connecting to downstream MCP servers
- */
+import { type OAuthAuthorityContext } from '../../../auth/oauthAuthority.js';
+import type { OAuthClientProvider, OAuthDiscoveryState } from '../client/auth.js';
+import { type OAuthClientInformationFull, type OAuthClientMetadata, type OAuthTokens } from '../shared/auth.js';
 export interface OAuthClientConfig {
     clientId?: string;
     clientSecret?: string;
     scopes?: string[];
     redirectUrl: string;
+    issuer?: string;
+    clientMetadataUrl?: string;
+    autoRegister?: boolean;
+    credentialAuthority?: string;
+    authority?: OAuthAuthorityContext;
+    legacy?: boolean;
 }
-/**
- * SDK-compatible OAuth client provider that replaces the custom implementation.
- *
- * This provider implements the OAuth 2.1 Authorization Code Grant flow using
- * the SDK's OAuthClientProvider interface while maintaining compatibility with
- * the existing session storage system.
- */
+/** Shared by the released modern and legacy SDK adapters. SDK cache objects are never authority. */
 export declare class SDKOAuthClientProvider implements OAuthClientProvider {
-    private _clientMetadata;
-    private _clientInfo?;
-    private _tokens?;
-    private _codeVerifier?;
-    private _state?;
-    private sessionRepository;
-    private fileStorage;
-    private serverName;
-    private config;
-    private _authorizationUrl?;
+    private readonly serverName;
+    private readonly config;
+    private readonly sessionRepository;
+    private readonly fileStorage;
+    private readonly context?;
+    private readonly slot?;
+    private record?;
+    private readonly verifiers;
+    private readonly callbacks;
+    private authorizationAttempt?;
+    private callbackTail;
+    private readonly operations;
+    private sseEndpoint?;
+    private readonly tokenRequests;
+    private readonly tokenResponses;
+    private readonly registrationResponses;
+    private readonly discoveryResponses;
+    private readonly responseKey;
+    private readonly migration;
+    private readonly shutdownSignal;
+    private claim?;
+    readonly fetch: typeof fetch;
     constructor(serverName: string, config: OAuthClientConfig, sessionStoragePath?: string);
     get redirectUrl(): string;
+    get clientMetadataUrl(): string | undefined;
     get clientMetadata(): OAuthClientMetadata;
-    /**
-     * Returns current client registration information
-     */
-    clientInformation(): OAuthClientInformationFull | undefined;
-    /**
-     * Saves client registration information from dynamic registration
-     */
-    saveClientInformation(clientInfo: OAuthClientInformationFull): void;
-    /**
-     * Returns current OAuth tokens
-     */
-    tokens(): OAuthTokens | undefined;
-    /**
-     * Saves OAuth tokens after successful authorization
-     */
-    saveTokens(tokens: OAuthTokens): void;
-    /**
-     * Invalidates persisted OAuth credentials as requested by the MCP SDK.
-     */
-    invalidateCredentials(scope: 'all' | 'client' | 'tokens' | 'verifier' | 'discovery'): void;
-    /**
-     * Stores authorization URL instead of prompting user in console
-     */
-    redirectToAuthorization(authorizationUrl: URL): void;
-    /**
-     * Gets the current authorization URL
-     */
+    clientInformation(ctx?: {
+        issuer: string;
+    }): (OAuthClientInformationFull & {
+        issuer?: string;
+    }) | undefined;
+    saveClientInformation(clientInfo: OAuthClientInformationFull, ctx?: {
+        issuer: string;
+    }): Promise<void>;
+    tokens(ctx?: {
+        issuer: string;
+    }): OAuthTokens | undefined;
+    saveTokens(tokens: OAuthTokens, ctx?: {
+        issuer: string;
+    }): Promise<void>;
+    invalidateCredentials(scope: 'all' | 'client' | 'tokens' | 'verifier' | 'discovery'): Promise<void>;
+    state(): string;
+    saveCodeVerifier(verifier: string): void;
+    codeVerifier(): string;
+    redirectToAuthorization(url: URL): Promise<void>;
     getAuthorizationUrl(): string | undefined;
-    /**
-     * Clears the stored authorization URL
-     */
+    /** Only a live, unconsumed attempt owned by this provider can be resumed. */
+    getPendingAuthorizationUrl(): string | undefined;
     clearAuthorizationUrl(): void;
-    /**
-     * Saves PKCE code verifier for the authorization session
-     */
-    saveCodeVerifier(codeVerifier: string): void;
-    /**
-     * Returns the PKCE code verifier for token exchange
-     */
-    codeVerifier(): string | Promise<string>;
-    /**
-     * Returns the OAuth state parameter for CSRF protection
-     */
-    state(): string | Promise<string>;
-    /**
-     * Custom resource validation (optional)
-     */
-    validateResourceURL(serverUrl: string | URL, resource?: string): Promise<URL | undefined>;
-    /**
-     * Load persisted OAuth data from unified client session storage
-     */
-    private loadPersistedData;
-    /**
-     * Persist all OAuth data to unified client session storage
-     */
-    private persistAllData;
-    /**
-     * Check if OAuth tokens are expired
-     */
-    private isTokenExpired;
-    /**
-     * Clean up resources
-     */
-    shutdown(): void;
+    /** Validation and durable consumption happen before the SDK can see a code, for both eras. */
+    withAuthorizationCallback<T>(response: URLSearchParams, operation: () => Promise<T>): Promise<T>;
+    bindAdminReturn(state: string, origin: string): Promise<void>;
+    getAdminReturn(state: string): string | undefined;
+    validateResourceURL(serverUrl: string | URL, resource?: string): Promise<URL>;
+    private selectResourceURL;
+    discoveryState(): OAuthDiscoveryState | undefined;
+    saveDiscoveryState(state: OAuthDiscoveryState): Promise<void>;
+    private current;
+    private requireCurrent;
+    private checkIssuer;
+    private assertScopes;
+    private validateMetadata;
+    private prepareFetch;
+    private responseMap;
+    private advanceOperation;
+    private rejectOperation;
+    private assertOperation;
+    private reserveRequest;
+    private responseDigest;
+    private discoveryKey;
+    private recordResponse;
+    shutdown(): Promise<void>;
 }
 //# sourceMappingURL=sdkOAuthClientProvider.d.ts.map

package/build/sdk/legacy/auth/sdkOAuthClientProvider.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"sdkOAuthClientProvider.d.ts","sourceRoot":"","sources":["../../../../src/sdk/legacy/auth/sdkOAuthClientProvider.ts"],"names":[],"mappings":"AAOA,OAAO,EAAE,mBAAmB,EAAE,MAAM,gCAAgC,CAAC;AACrE,OAAO,KAAK,EAAE,0BAA0B,EAAE,mBAAmB,EAAE,WAAW,EAAE,MAAM,gCAAgC,CAAC;AAEnH;;GAEG;AACH,MAAM,WAAW,iBAAiB;IAChC,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,MAAM,CAAC,EAAE,MAAM,EAAE,CAAC;IAClB,WAAW,EAAE,MAAM,CAAC;CACrB;AAED;;;;;;GAMG;AACH,qBAAa,sBAAuB,YAAW,mBAAmB;IAChE,OAAO,CAAC,eAAe,CAAsB;IAC7C,OAAO,CAAC,WAAW,CAAC,CAA6B;IACjD,OAAO,CAAC,OAAO,CAAC,CAAc;IAC9B,OAAO,CAAC,aAAa,CAAC,CAAS;IAC/B,OAAO,CAAC,MAAM,CAAC,CAAS;IACxB,OAAO,CAAC,iBAAiB,CAA0B;IACnD,OAAO,CAAC,WAAW,CAAqB;IACxC,OAAO,CAAC,UAAU,CAAS;IAC3B,OAAO,CAAC,MAAM,CAAoB;IAClC,OAAO,CAAC,iBAAiB,CAAC,CAAS;gBAEvB,UAAU,EAAE,MAAM,EAAE,MAAM,EAAE,iBAAiB,EAAE,kBAAkB,CAAC,EAAE,MAAM;IAmCtF,IAAI,WAAW,IAAI,MAAM,CAExB;IAED,IAAI,cAAc,IAAI,mBAAmB,CAExC;IAED;;OAEG;IACH,iBAAiB,IAAI,0BAA0B,GAAG,SAAS;IAI3D;;OAEG;IACH,qBAAqB,CAAC,UAAU,EAAE,0BAA0B,GAAG,IAAI;IAMnE;;OAEG;IACH,MAAM,IAAI,WAAW,GAAG,SAAS;IAIjC;;OAEG;IACH,UAAU,CAAC,MAAM,EAAE,WAAW,GAAG,IAAI;IAMrC;;OAEG;IACH,qBAAqB,CAAC,KAAK,EAAE,KAAK,GAAG,QAAQ,GAAG,QAAQ,GAAG,UAAU,GAAG,WAAW,GAAG,IAAI;IA4B1F;;OAEG;IACH,uBAAuB,CAAC,gBAAgB,EAAE,GAAG,GAAG,IAAI;IAIpD;;OAEG;IACH,mBAAmB,IAAI,MAAM,GAAG,SAAS;IAIzC;;OAEG;IACH,qBAAqB,IAAI,IAAI;IAI7B;;OAEG;IACH,gBAAgB,CAAC,YAAY,EAAE,MAAM,GAAG,IAAI;IAK5C;;OAEG;IACH,YAAY,IAAI,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC;IAIxC;;OAEG;IACH,KAAK,IAAI,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC;IAQjC;;OAEG;IACG,mBAAmB,CAAC,SAAS,EAAE,MAAM,GAAG,GAAG,EAAE,QAAQ,CAAC,EAAE,MAAM,GAAG,OAAO,CAAC,GAAG,GAAG,SAAS,CAAC;IAS/F;;OAEG;IACH,OAAO,CAAC,iBAAiB;IAiCzB;;OAEG;IACH,OAAO,CAAC,cAAc;IAwBtB;;OAEG;IACH,OAAO,CAAC,cAAc;IAUtB;;OAEG;IACH,QAAQ,IAAI,IAAI;CAOjB"}
+{"version":3,"file":"sdkOAuthClientProvider.d.ts","sourceRoot":"","sources":["../../../../src/sdk/legacy/auth/sdkOAuthClientProvider.ts"],"names":[],"mappings":"AAGA,OAAO,EAML,KAAK,qBAAqB,EAK3B,MAAM,6BAA6B,CAAC;AAMrC,OAAO,KAAK,EAAE,mBAAmB,EAAE,mBAAmB,EAAE,MAAM,gCAAgC,CAAC;AAC/F,OAAO,EACL,KAAK,0BAA0B,EAE/B,KAAK,mBAAmB,EACxB,KAAK,WAAW,EAEjB,MAAM,gCAAgC,CAAC;AAExC,MAAM,WAAW,iBAAiB;IAChC,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,MAAM,CAAC,EAAE,MAAM,EAAE,CAAC;IAClB,WAAW,EAAE,MAAM,CAAC;IACpB,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,iBAAiB,CAAC,EAAE,MAAM,CAAC;IAC3B,YAAY,CAAC,EAAE,OAAO,CAAC;IACvB,mBAAmB,CAAC,EAAE,MAAM,CAAC;IAC7B,SAAS,CAAC,EAAE,qBAAqB,CAAC;IAClC,MAAM,CAAC,EAAE,OAAO,CAAC;CAClB;AASD,oGAAoG;AACpG,qBAAa,sBAAuB,YAAW,mBAAmB;IA+B9D,OAAO,CAAC,QAAQ,CAAC,UAAU;IAC3B,OAAO,CAAC,QAAQ,CAAC,MAAM;IA/BzB,OAAO,CAAC,QAAQ,CAAC,iBAAiB,CAA0B;IAC5D,OAAO,CAAC,QAAQ,CAAC,WAAW,CAAuB;IACnD,OAAO,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAwB;IACjD,OAAO,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAS;IAC/B,OAAO,CAAC,MAAM,CAAC,CAAqB;IACpC,OAAO,CAAC,QAAQ,CAAC,SAAS,CAA6B;IACvD,OAAO,CAAC,QAAQ,CAAC,SAAS,CAAqE;IAC/F,OAAO,CAAC,oBAAoB,CAAC,CAA+B;IAC5D,OAAO,CAAC,YAAY,CAAuC;IAC3D,OAAO,CAAC,QAAQ,CAAC,UAAU,CAItB;IACL,OAAO,CAAC,WAAW,CAAC,CAAS;IAC7B,OAAO,CAAC,QAAQ,CAAC,aAAa,CAG1B;IACJ,OAAO,CAAC,QAAQ,CAAC,cAAc,CAA0C;IACzE,OAAO,CAAC,QAAQ,CAAC,qBAAqB,CAA0C;IAChF,OAAO,CAAC,QAAQ,CAAC,kBAAkB,CAA0C;IAE7E,OAAO,CAAC,QAAQ,CAAC,WAAW,CAAmB;IAC/C,OAAO,CAAC,QAAQ,CAAC,SAAS,CAAgB;IAC1C,OAAO,CAAC,QAAQ,CAAC,cAAc,CAAyB;IACxD,OAAO,CAAC,KAAK,CAAC,CAAS;IACvB,QAAQ,CAAC,KAAK,EAAE,OAAO,KAAK,CAAC;gBAGV,UAAU,EAAE,MAAM,EAClB,MAAM,EAAE,iBAAiB,EAC1C,kBAAkB,CAAC,EAAE,MAAM;IAwF7B,IAAI,WAAW,IAAI,MAAM,CAExB;IACD,IAAI,iBAAiB,IAAI,MAAM,GAAG,SAAS,CAE1C;IACD,IAAI,cAAc,IAAI,mBAAmB,CASxC;IAED,iBAAiB,CAAC,GAAG,CAAC,EAAE;QAAE,MAAM,EAAE,MAAM,CAAA;KAAE,GAAG,CAAC,0BAA0B,GAAG;QAAE,MAAM,CAAC,EAAE,MAAM,CAAA;KAAE,CAAC,GAAG,SAAS;IAuBrG,qBAAqB,CAAC,UAAU,EAAE,0BAA0B,EAAE,GAAG,CAAC,EAAE;QAAE,MAAM,EAAE,MAAM,CAAA;KAAE,GAAG,OAAO,CAAC,IAAI,CAAC;IA0B5G,MAAM,CAAC,GAAG,CAAC,EAAE;QAAE,MAAM,EAAE,MAAM,CAAA;KAAE,GAAG,WAAW,GAAG,SAAS;IAWnD,UAAU,CAAC,MAAM,EAAE,WAAW,EAAE,GAAG,CAAC,EAAE;QAAE,MAAM,EAAE,MAAM,CAAA;KAAE,GAAG,OAAO,CAAC,IAAI,CAAC;IA2BxE,qBAAqB,CAAC,KAAK,EAAE,KAAK,GAAG,QAAQ,GAAG,QAAQ,GAAG,UAAU,GAAG,WAAW,GAAG,OAAO,CAAC,IAAI,CAAC;IAiBzG,KAAK,IAAI,MAAM;IAGf,gBAAgB,CAAC,QAAQ,EAAE,MAAM,GAAG,IAAI;IAIxC,YAAY,IAAI,MAAM;IAMhB,uBAAuB,CAAC,GAAG,EAAE,GAAG,GAAG,OAAO,CAAC,IAAI,CAAC;IA+BtD,mBAAmB,IAAI,MAAM,GAAG,SAAS;IAGzC,6EAA6E;IAC7E,0BAA0B,IAAI,MAAM,GAAG,SAAS;IAchD,qBAAqB,IAAI,IAAI;IAI7B,8FAA8F;IACxF,yBAAyB,CAAC,CAAC,EAAE,QAAQ,EAAE,eAAe,EAAE,SAAS,EAAE,MAAM,OAAO,CAAC,CAAC,CAAC,GAAG,OAAO,CAAC,CAAC,CAAC;IAkChG,eAAe,CAAC,KAAK,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC;IAQnE,cAAc,CAAC,KAAK,EAAE,MAAM,GAAG,MAAM,GAAG,SAAS;IAK3C,mBAAmB,CAAC,SAAS,EAAE,MAAM,GAAG,GAAG,EAAE,QAAQ,CAAC,EAAE,MAAM,GAAG,OAAO,CAAC,GAAG,CAAC;IAInF,OAAO,CAAC,iBAAiB;IAuBzB,cAAc,IAAI,mBAAmB,GAAG,SAAS;IAiB3C,kBAAkB,CAAC,KAAK,EAAE,mBAAmB,GAAG,OAAO,CAAC,IAAI,CAAC;IAiEnE,OAAO,CAAC,OAAO;IAaf,OAAO,CAAC,cAAc;IAKtB,OAAO,CAAC,WAAW;IAKnB,OAAO,CAAC,YAAY;IAKpB,OAAO,CAAC,gBAAgB;YAiCV,YAAY;IAgE1B,OAAO,CAAC,WAAW;IAQnB,OAAO,CAAC,gBAAgB;IAKxB,OAAO,CAAC,eAAe;IAMvB,OAAO,CAAC,eAAe;YAIT,cAAc;IAO5B,OAAO,CAAC,cAAc;IAItB,OAAO,CAAC,YAAY;IASpB,OAAO,CAAC,cAAc;IAUhB,QAAQ,IAAI,OAAO,CAAC,IAAI,CAAC;CAKhC"}