cursor-guard 4.7.9 → 4.8.1

package/references/vscode-extension/dist/vendor/@modelcontextprotocol/sdk/dist/esm/client/auth.d.ts

@@ -1,446 +0,0 @@
-import { OAuthClientMetadata, OAuthClientInformationMixed, OAuthTokens, OAuthMetadata, OAuthClientInformationFull, OAuthProtectedResourceMetadata, AuthorizationServerMetadata } from '../shared/auth.js';
-import { OAuthError } from '../server/auth/errors.js';
-import { FetchLike } from '../shared/transport.js';
-/**
- * Function type for adding client authentication to token requests.
- */
-export type AddClientAuthentication = (headers: Headers, params: URLSearchParams, url: string | URL, metadata?: AuthorizationServerMetadata) => void | Promise<void>;
-/**
- * Implements an end-to-end OAuth client to be used with one MCP server.
- *
- * This client relies upon a concept of an authorized "session," the exact
- * meaning of which is application-defined. Tokens, authorization codes, and
- * code verifiers should not cross different sessions.
- */
-export interface OAuthClientProvider {
-    /**
-     * The URL to redirect the user agent to after authorization.
-     * Return undefined for non-interactive flows that don't require user interaction
-     * (e.g., client_credentials, jwt-bearer).
-     */
-    get redirectUrl(): string | URL | undefined;
-    /**
-     * External URL the server should use to fetch client metadata document
-     */
-    clientMetadataUrl?: string;
-    /**
-     * Metadata about this OAuth client.
-     */
-    get clientMetadata(): OAuthClientMetadata;
-    /**
-     * Returns a OAuth2 state parameter.
-     */
-    state?(): string | Promise<string>;
-    /**
-     * Loads information about this OAuth client, as registered already with the
-     * server, or returns `undefined` if the client is not registered with the
-     * server.
-     */
-    clientInformation(): OAuthClientInformationMixed | undefined | Promise<OAuthClientInformationMixed | undefined>;
-    /**
-     * If implemented, this permits the OAuth client to dynamically register with
-     * the server. Client information saved this way should later be read via
-     * `clientInformation()`.
-     *
-     * This method is not required to be implemented if client information is
-     * statically known (e.g., pre-registered).
-     */
-    saveClientInformation?(clientInformation: OAuthClientInformationMixed): void | Promise<void>;
-    /**
-     * Loads any existing OAuth tokens for the current session, or returns
-     * `undefined` if there are no saved tokens.
-     */
-    tokens(): OAuthTokens | undefined | Promise<OAuthTokens | undefined>;
-    /**
-     * Stores new OAuth tokens for the current session, after a successful
-     * authorization.
-     */
-    saveTokens(tokens: OAuthTokens): void | Promise<void>;
-    /**
-     * Invoked to redirect the user agent to the given URL to begin the authorization flow.
-     */
-    redirectToAuthorization(authorizationUrl: URL): void | Promise<void>;
-    /**
-     * Saves a PKCE code verifier for the current session, before redirecting to
-     * the authorization flow.
-     */
-    saveCodeVerifier(codeVerifier: string): void | Promise<void>;
-    /**
-     * Loads the PKCE code verifier for the current session, necessary to validate
-     * the authorization result.
-     */
-    codeVerifier(): string | Promise<string>;
-    /**
-     * Adds custom client authentication to OAuth token requests.
-     *
-     * This optional method allows implementations to customize how client credentials
-     * are included in token exchange and refresh requests. When provided, this method
-     * is called instead of the default authentication logic, giving full control over
-     * the authentication mechanism.
-     *
-     * Common use cases include:
-     * - Supporting authentication methods beyond the standard OAuth 2.0 methods
-     * - Adding custom headers for proprietary authentication schemes
-     * - Implementing client assertion-based authentication (e.g., JWT bearer tokens)
-     *
-     * @param headers - The request headers (can be modified to add authentication)
-     * @param params - The request body parameters (can be modified to add credentials)
-     * @param url - The token endpoint URL being called
-     * @param metadata - Optional OAuth metadata for the server, which may include supported authentication methods
-     */
-    addClientAuthentication?: AddClientAuthentication;
-    /**
-     * If defined, overrides the selection and validation of the
-     * RFC 8707 Resource Indicator. If left undefined, default
-     * validation behavior will be used.
-     *
-     * Implementations must verify the returned resource matches the MCP server.
-     */
-    validateResourceURL?(serverUrl: string | URL, resource?: string): Promise<URL | undefined>;
-    /**
-     * If implemented, provides a way for the client to invalidate (e.g. delete) the specified
-     * credentials, in the case where the server has indicated that they are no longer valid.
-     * This avoids requiring the user to intervene manually.
-     */
-    invalidateCredentials?(scope: 'all' | 'client' | 'tokens' | 'verifier' | 'discovery'): void | Promise<void>;
-    /**
-     * Prepares grant-specific parameters for a token request.
-     *
-     * This optional method allows providers to customize the token request based on
-     * the grant type they support. When implemented, it returns the grant type and
-     * any grant-specific parameters needed for the token exchange.
-     *
-     * If not implemented, the default behavior depends on the flow:
-     * - For authorization code flow: uses code, code_verifier, and redirect_uri
-     * - For client_credentials: detected via grant_types in clientMetadata
-     *
-     * @param scope - Optional scope to request
-     * @returns Grant type and parameters, or undefined to use default behavior
-     *
-     * @example
-     * // For client_credentials grant:
-     * prepareTokenRequest(scope) {
-     *   return {
-     *     grantType: 'client_credentials',
-     *     params: scope ? { scope } : {}
-     *   };
-     * }
-     *
-     * @example
-     * // For authorization_code grant (default behavior):
-     * async prepareTokenRequest() {
-     *   return {
-     *     grantType: 'authorization_code',
-     *     params: {
-     *       code: this.authorizationCode,
-     *       code_verifier: await this.codeVerifier(),
-     *       redirect_uri: String(this.redirectUrl)
-     *     }
-     *   };
-     * }
-     */
-    prepareTokenRequest?(scope?: string): URLSearchParams | Promise<URLSearchParams | undefined> | undefined;
-    /**
-     * Saves the OAuth discovery state after RFC 9728 and authorization server metadata
-     * discovery. Providers can persist this state to avoid redundant discovery requests
-     * on subsequent {@linkcode auth} calls.
-     *
-     * This state can also be provided out-of-band (e.g., from a previous session or
-     * external configuration) to bootstrap the OAuth flow without discovery.
-     *
-     * Called by {@linkcode auth} after successful discovery.
-     */
-    saveDiscoveryState?(state: OAuthDiscoveryState): void | Promise<void>;
-    /**
-     * Returns previously saved discovery state, or `undefined` if none is cached.
-     *
-     * When available, {@linkcode auth} restores the discovery state (authorization server
-     * URL, resource metadata, etc.) instead of performing RFC 9728 discovery, reducing
-     * latency on subsequent calls.
-     *
-     * Providers should clear cached discovery state on repeated authentication failures
-     * (via {@linkcode invalidateCredentials} with scope `'discovery'` or `'all'`) to allow
-     * re-discovery in case the authorization server has changed.
-     */
-    discoveryState?(): OAuthDiscoveryState | undefined | Promise<OAuthDiscoveryState | undefined>;
-}
-/**
- * Discovery state that can be persisted across sessions by an {@linkcode OAuthClientProvider}.
- *
- * Contains the results of RFC 9728 protected resource metadata discovery and
- * authorization server metadata discovery. Persisting this state avoids
- * redundant discovery HTTP requests on subsequent {@linkcode auth} calls.
- */
-export interface OAuthDiscoveryState extends OAuthServerInfo {
-    /** The URL at which the protected resource metadata was found, if available. */
-    resourceMetadataUrl?: string;
-}
-export type AuthResult = 'AUTHORIZED' | 'REDIRECT';
-export declare class UnauthorizedError extends Error {
-    constructor(message?: string);
-}
-type ClientAuthMethod = 'client_secret_basic' | 'client_secret_post' | 'none';
-/**
- * Determines the best client authentication method to use based on server support and client configuration.
- *
- * Priority order (highest to lowest):
- * 1. client_secret_basic (if client secret is available)
- * 2. client_secret_post (if client secret is available)
- * 3. none (for public clients)
- *
- * @param clientInformation - OAuth client information containing credentials
- * @param supportedMethods - Authentication methods supported by the authorization server
- * @returns The selected authentication method
- */
-export declare function selectClientAuthMethod(clientInformation: OAuthClientInformationMixed, supportedMethods: string[]): ClientAuthMethod;
-/**
- * Parses an OAuth error response from a string or Response object.
- *
- * If the input is a standard OAuth2.0 error response, it will be parsed according to the spec
- * and an instance of the appropriate OAuthError subclass will be returned.
- * If parsing fails, it falls back to a generic ServerError that includes
- * the response status (if available) and original content.
- *
- * @param input - A Response object or string containing the error response
- * @returns A Promise that resolves to an OAuthError instance
- */
-export declare function parseErrorResponse(input: Response | string): Promise<OAuthError>;
-/**
- * Orchestrates the full auth flow with a server.
- *
- * This can be used as a single entry point for all authorization functionality,
- * instead of linking together the other lower-level functions in this module.
- */
-export declare function auth(provider: OAuthClientProvider, options: {
-    serverUrl: string | URL;
-    authorizationCode?: string;
-    scope?: string;
-    resourceMetadataUrl?: URL;
-    fetchFn?: FetchLike;
-}): Promise<AuthResult>;
-/**
- * SEP-991: URL-based Client IDs
- * Validate that the client_id is a valid URL with https scheme
- */
-export declare function isHttpsUrl(value?: string): boolean;
-export declare function selectResourceURL(serverUrl: string | URL, provider: OAuthClientProvider, resourceMetadata?: OAuthProtectedResourceMetadata): Promise<URL | undefined>;
-/**
- * Extract resource_metadata, scope, and error from WWW-Authenticate header.
- */
-export declare function extractWWWAuthenticateParams(res: Response): {
-    resourceMetadataUrl?: URL;
-    scope?: string;
-    error?: string;
-};
-/**
- * Extract resource_metadata from response header.
- * @deprecated Use `extractWWWAuthenticateParams` instead.
- */
-export declare function extractResourceMetadataUrl(res: Response): URL | undefined;
-/**
- * Looks up RFC 9728 OAuth 2.0 Protected Resource Metadata.
- *
- * If the server returns a 404 for the well-known endpoint, this function will
- * return `undefined`. Any other errors will be thrown as exceptions.
- */
-export declare function discoverOAuthProtectedResourceMetadata(serverUrl: string | URL, opts?: {
-    protocolVersion?: string;
-    resourceMetadataUrl?: string | URL;
-}, fetchFn?: FetchLike): Promise<OAuthProtectedResourceMetadata>;
-/**
- * Looks up RFC 8414 OAuth 2.0 Authorization Server Metadata.
- *
- * If the server returns a 404 for the well-known endpoint, this function will
- * return `undefined`. Any other errors will be thrown as exceptions.
- *
- * @deprecated This function is deprecated in favor of `discoverAuthorizationServerMetadata`.
- */
-export declare function discoverOAuthMetadata(issuer: string | URL, { authorizationServerUrl, protocolVersion }?: {
-    authorizationServerUrl?: string | URL;
-    protocolVersion?: string;
-}, fetchFn?: FetchLike): Promise<OAuthMetadata | undefined>;
-/**
- * Builds a list of discovery URLs to try for authorization server metadata.
- * URLs are returned in priority order:
- * 1. OAuth metadata at the given URL
- * 2. OIDC metadata endpoints at the given URL
- */
-export declare function buildDiscoveryUrls(authorizationServerUrl: string | URL): {
-    url: URL;
-    type: 'oauth' | 'oidc';
-}[];
-/**
- * Discovers authorization server metadata with support for RFC 8414 OAuth 2.0 Authorization Server Metadata
- * and OpenID Connect Discovery 1.0 specifications.
- *
- * This function implements a fallback strategy for authorization server discovery:
- * 1. Attempts RFC 8414 OAuth metadata discovery first
- * 2. If OAuth discovery fails, falls back to OpenID Connect Discovery
- *
- * @param authorizationServerUrl - The authorization server URL obtained from the MCP Server's
- *                                 protected resource metadata, or the MCP server's URL if the
- *                                 metadata was not found.
- * @param options - Configuration options
- * @param options.fetchFn - Optional fetch function for making HTTP requests, defaults to global fetch
- * @param options.protocolVersion - MCP protocol version to use, defaults to LATEST_PROTOCOL_VERSION
- * @returns Promise resolving to authorization server metadata, or undefined if discovery fails
- */
-export declare function discoverAuthorizationServerMetadata(authorizationServerUrl: string | URL, { fetchFn, protocolVersion }?: {
-    fetchFn?: FetchLike;
-    protocolVersion?: string;
-}): Promise<AuthorizationServerMetadata | undefined>;
-/**
- * Result of {@linkcode discoverOAuthServerInfo}.
- */
-export interface OAuthServerInfo {
-    /**
-     * The authorization server URL, either discovered via RFC 9728
-     * or derived from the MCP server URL as a fallback.
-     */
-    authorizationServerUrl: string;
-    /**
-     * The authorization server metadata (endpoints, capabilities),
-     * or `undefined` if metadata discovery failed.
-     */
-    authorizationServerMetadata?: AuthorizationServerMetadata;
-    /**
-     * The OAuth 2.0 Protected Resource Metadata from RFC 9728,
-     * or `undefined` if the server does not support it.
-     */
-    resourceMetadata?: OAuthProtectedResourceMetadata;
-}
-/**
- * Discovers the authorization server for an MCP server following
- * {@link https://datatracker.ietf.org/doc/html/rfc9728 | RFC 9728} (OAuth 2.0 Protected
- * Resource Metadata), with fallback to treating the server URL as the
- * authorization server.
- *
- * This function combines two discovery steps into one call:
- * 1. Probes `/.well-known/oauth-protected-resource` on the MCP server to find the
- *    authorization server URL (RFC 9728).
- * 2. Fetches authorization server metadata from that URL (RFC 8414 / OpenID Connect Discovery).
- *
- * Use this when you need the authorization server metadata for operations outside the
- * {@linkcode auth} orchestrator, such as token refresh or token revocation.
- *
- * @param serverUrl - The MCP resource server URL
- * @param opts - Optional configuration
- * @param opts.resourceMetadataUrl - Override URL for the protected resource metadata endpoint
- * @param opts.fetchFn - Custom fetch function for HTTP requests
- * @returns Authorization server URL, metadata, and resource metadata (if available)
- */
-export declare function discoverOAuthServerInfo(serverUrl: string | URL, opts?: {
-    resourceMetadataUrl?: URL;
-    fetchFn?: FetchLike;
-}): Promise<OAuthServerInfo>;
-/**
- * Begins the authorization flow with the given server, by generating a PKCE challenge and constructing the authorization URL.
- */
-export declare function startAuthorization(authorizationServerUrl: string | URL, { metadata, clientInformation, redirectUrl, scope, state, resource }: {
-    metadata?: AuthorizationServerMetadata;
-    clientInformation: OAuthClientInformationMixed;
-    redirectUrl: string | URL;
-    scope?: string;
-    state?: string;
-    resource?: URL;
-}): Promise<{
-    authorizationUrl: URL;
-    codeVerifier: string;
-}>;
-/**
- * Prepares token request parameters for an authorization code exchange.
- *
- * This is the default implementation used by fetchToken when the provider
- * doesn't implement prepareTokenRequest.
- *
- * @param authorizationCode - The authorization code received from the authorization endpoint
- * @param codeVerifier - The PKCE code verifier
- * @param redirectUri - The redirect URI used in the authorization request
- * @returns URLSearchParams for the authorization_code grant
- */
-export declare function prepareAuthorizationCodeRequest(authorizationCode: string, codeVerifier: string, redirectUri: string | URL): URLSearchParams;
-/**
- * Exchanges an authorization code for an access token with the given server.
- *
- * Supports multiple client authentication methods as specified in OAuth 2.1:
- * - Automatically selects the best authentication method based on server support
- * - Falls back to appropriate defaults when server metadata is unavailable
- *
- * @param authorizationServerUrl - The authorization server's base URL
- * @param options - Configuration object containing client info, auth code, etc.
- * @returns Promise resolving to OAuth tokens
- * @throws {Error} When token exchange fails or authentication is invalid
- */
-export declare function exchangeAuthorization(authorizationServerUrl: string | URL, { metadata, clientInformation, authorizationCode, codeVerifier, redirectUri, resource, addClientAuthentication, fetchFn }: {
-    metadata?: AuthorizationServerMetadata;
-    clientInformation: OAuthClientInformationMixed;
-    authorizationCode: string;
-    codeVerifier: string;
-    redirectUri: string | URL;
-    resource?: URL;
-    addClientAuthentication?: OAuthClientProvider['addClientAuthentication'];
-    fetchFn?: FetchLike;
-}): Promise<OAuthTokens>;
-/**
- * Exchange a refresh token for an updated access token.
- *
- * Supports multiple client authentication methods as specified in OAuth 2.1:
- * - Automatically selects the best authentication method based on server support
- * - Preserves the original refresh token if a new one is not returned
- *
- * @param authorizationServerUrl - The authorization server's base URL
- * @param options - Configuration object containing client info, refresh token, etc.
- * @returns Promise resolving to OAuth tokens (preserves original refresh_token if not replaced)
- * @throws {Error} When token refresh fails or authentication is invalid
- */
-export declare function refreshAuthorization(authorizationServerUrl: string | URL, { metadata, clientInformation, refreshToken, resource, addClientAuthentication, fetchFn }: {
-    metadata?: AuthorizationServerMetadata;
-    clientInformation: OAuthClientInformationMixed;
-    refreshToken: string;
-    resource?: URL;
-    addClientAuthentication?: OAuthClientProvider['addClientAuthentication'];
-    fetchFn?: FetchLike;
-}): Promise<OAuthTokens>;
-/**
- * Unified token fetching that works with any grant type via provider.prepareTokenRequest().
- *
- * This function provides a single entry point for obtaining tokens regardless of the
- * OAuth grant type. The provider's prepareTokenRequest() method determines which grant
- * to use and supplies the grant-specific parameters.
- *
- * @param provider - OAuth client provider that implements prepareTokenRequest()
- * @param authorizationServerUrl - The authorization server's base URL
- * @param options - Configuration for the token request
- * @returns Promise resolving to OAuth tokens
- * @throws {Error} When provider doesn't implement prepareTokenRequest or token fetch fails
- *
- * @example
- * // Provider for client_credentials:
- * class MyProvider implements OAuthClientProvider {
- *   prepareTokenRequest(scope) {
- *     const params = new URLSearchParams({ grant_type: 'client_credentials' });
- *     if (scope) params.set('scope', scope);
- *     return params;
- *   }
- *   // ... other methods
- * }
- *
- * const tokens = await fetchToken(provider, authServerUrl, { metadata });
- */
-export declare function fetchToken(provider: OAuthClientProvider, authorizationServerUrl: string | URL, { metadata, resource, authorizationCode, fetchFn }?: {
-    metadata?: AuthorizationServerMetadata;
-    resource?: URL;
-    /** Authorization code for the default authorization_code grant flow */
-    authorizationCode?: string;
-    fetchFn?: FetchLike;
-}): Promise<OAuthTokens>;
-/**
- * Performs OAuth 2.0 Dynamic Client Registration according to RFC 7591.
- */
-export declare function registerClient(authorizationServerUrl: string | URL, { metadata, clientMetadata, fetchFn }: {
-    metadata?: AuthorizationServerMetadata;
-    clientMetadata: OAuthClientMetadata;
-    fetchFn?: FetchLike;
-}): Promise<OAuthClientInformationFull>;
-export {};
-//# sourceMappingURL=auth.d.ts.map

package/references/vscode-extension/dist/vendor/@modelcontextprotocol/sdk/dist/esm/client/auth.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"auth.d.ts","sourceRoot":"","sources":["../../../src/client/auth.ts"],"names":[],"mappings":"AAEA,OAAO,EACH,mBAAmB,EAEnB,2BAA2B,EAC3B,WAAW,EACX,aAAa,EACb,0BAA0B,EAC1B,8BAA8B,EAE9B,2BAA2B,EAE9B,MAAM,mBAAmB,CAAC;AAQ3B,OAAO,EAKH,UAAU,EAGb,MAAM,0BAA0B,CAAC;AAClC,OAAO,EAAE,SAAS,EAAE,MAAM,wBAAwB,CAAC;AAEnD;;GAEG;AACH,MAAM,MAAM,uBAAuB,GAAG,CAClC,OAAO,EAAE,OAAO,EAChB,MAAM,EAAE,eAAe,EACvB,GAAG,EAAE,MAAM,GAAG,GAAG,EACjB,QAAQ,CAAC,EAAE,2BAA2B,KACrC,IAAI,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;AAE1B;;;;;;GAMG;AACH,MAAM,WAAW,mBAAmB;IAChC;;;;OAIG;IACH,IAAI,WAAW,IAAI,MAAM,GAAG,GAAG,GAAG,SAAS,CAAC;IAE5C;;OAEG;IACH,iBAAiB,CAAC,EAAE,MAAM,CAAC;IAE3B;;OAEG;IACH,IAAI,cAAc,IAAI,mBAAmB,CAAC;IAE1C;;OAEG;IACH,KAAK,CAAC,IAAI,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC,CAAC;IAEnC;;;;OAIG;IACH,iBAAiB,IAAI,2BAA2B,GAAG,SAAS,GAAG,OAAO,CAAC,2BAA2B,GAAG,SAAS,CAAC,CAAC;IAEhH;;;;;;;OAOG;IACH,qBAAqB,CAAC,CAAC,iBAAiB,EAAE,2BAA2B,GAAG,IAAI,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IAE7F;;;OAGG;IACH,MAAM,IAAI,WAAW,GAAG,SAAS,GAAG,OAAO,CAAC,WAAW,GAAG,SAAS,CAAC,CAAC;IAErE;;;OAGG;IACH,UAAU,CAAC,MAAM,EAAE,WAAW,GAAG,IAAI,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IAEtD;;OAEG;IACH,uBAAuB,CAAC,gBAAgB,EAAE,GAAG,GAAG,IAAI,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IAErE;;;OAGG;IACH,gBAAgB,CAAC,YAAY,EAAE,MAAM,GAAG,IAAI,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IAE7D;;;OAGG;IACH,YAAY,IAAI,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC,CAAC;IAEzC;;;;;;;;;;;;;;;;;OAiBG;IACH,uBAAuB,CAAC,EAAE,uBAAuB,CAAC;IAElD;;;;;;OAMG;IACH,mBAAmB,CAAC,CAAC,SAAS,EAAE,MAAM,GAAG,GAAG,EAAE,QAAQ,CAAC,EAAE,MAAM,GAAG,OAAO,CAAC,GAAG,GAAG,SAAS,CAAC,CAAC;IAE3F;;;;OAIG;IACH,qBAAqB,CAAC,CAAC,KAAK,EAAE,KAAK,GAAG,QAAQ,GAAG,QAAQ,GAAG,UAAU,GAAG,WAAW,GAAG,IAAI,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IAE5G;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;OAmCG;IACH,mBAAmB,CAAC,CAAC,KAAK,CAAC,EAAE,MAAM,GAAG,eAAe,GAAG,OAAO,CAAC,eAAe,GAAG,SAAS,CAAC,GAAG,SAAS,CAAC;IAEzG;;;;;;;;;OASG;IACH,kBAAkB,CAAC,CAAC,KAAK,EAAE,mBAAmB,GAAG,IAAI,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IAEtE;;;;;;;;;;OAUG;IACH,cAAc,CAAC,IAAI,mBAAmB,GAAG,SAAS,GAAG,OAAO,CAAC,mBAAmB,GAAG,SAAS,CAAC,CAAC;CACjG;AAED;;;;;;GAMG;AAIH,MAAM,WAAW,mBAAoB,SAAQ,eAAe;IACxD,gFAAgF;IAChF,mBAAmB,CAAC,EAAE,MAAM,CAAC;CAChC;AAED,MAAM,MAAM,UAAU,GAAG,YAAY,GAAG,UAAU,CAAC;AAEnD,qBAAa,iBAAkB,SAAQ,KAAK;gBAC5B,OAAO,CAAC,EAAE,MAAM;CAG/B;AAED,KAAK,gBAAgB,GAAG,qBAAqB,GAAG,oBAAoB,GAAG,MAAM,CAAC;AAS9E;;;;;;;;;;;GAWG;AACH,wBAAgB,sBAAsB,CAAC,iBAAiB,EAAE,2BAA2B,EAAE,gBAAgB,EAAE,MAAM,EAAE,GAAG,gBAAgB,CAiCnI;AAoED;;;;;;;;;;GAUG;AACH,wBAAsB,kBAAkB,CAAC,KAAK,EAAE,QAAQ,GAAG,MAAM,GAAG,OAAO,CAAC,UAAU,CAAC,CActF;AAED;;;;;GAKG;AACH,wBAAsB,IAAI,CACtB,QAAQ,EAAE,mBAAmB,EAC7B,OAAO,EAAE;IACL,SAAS,EAAE,MAAM,GAAG,GAAG,CAAC;IACxB,iBAAiB,CAAC,EAAE,MAAM,CAAC;IAC3B,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,mBAAmB,CAAC,EAAE,GAAG,CAAC;IAC1B,OAAO,CAAC,EAAE,SAAS,CAAC;CACvB,GACF,OAAO,CAAC,UAAU,CAAC,CAgBrB;AAwLD;;;GAGG;AACH,wBAAgB,UAAU,CAAC,KAAK,CAAC,EAAE,MAAM,GAAG,OAAO,CAQlD;AAED,wBAAsB,iBAAiB,CACnC,SAAS,EAAE,MAAM,GAAG,GAAG,EACvB,QAAQ,EAAE,mBAAmB,EAC7B,gBAAgB,CAAC,EAAE,8BAA8B,GAClD,OAAO,CAAC,GAAG,GAAG,SAAS,CAAC,CAmB1B;AAED;;GAEG;AACH,wBAAgB,4BAA4B,CAAC,GAAG,EAAE,QAAQ,GAAG;IAAE,mBAAmB,CAAC,EAAE,GAAG,CAAC;IAAC,KAAK,CAAC,EAAE,MAAM,CAAC;IAAC,KAAK,CAAC,EAAE,MAAM,CAAA;CAAE,CA8BzH;AA0BD;;;GAGG;AACH,wBAAgB,0BAA0B,CAAC,GAAG,EAAE,QAAQ,GAAG,GAAG,GAAG,SAAS,CAsBzE;AAED;;;;;GAKG;AACH,wBAAsB,sCAAsC,CACxD,SAAS,EAAE,MAAM,GAAG,GAAG,EACvB,IAAI,CAAC,EAAE;IAAE,eAAe,CAAC,EAAE,MAAM,CAAC;IAAC,mBAAmB,CAAC,EAAE,MAAM,GAAG,GAAG,CAAA;CAAE,EACvE,OAAO,GAAE,SAAiB,GAC3B,OAAO,CAAC,8BAA8B,CAAC,CAgBzC;AAwFD;;;;;;;GAOG;AACH,wBAAsB,qBAAqB,CACvC,MAAM,EAAE,MAAM,GAAG,GAAG,EACpB,EACI,sBAAsB,EACtB,eAAe,EAClB,GAAE;IACC,sBAAsB,CAAC,EAAE,MAAM,GAAG,GAAG,CAAC;IACtC,eAAe,CAAC,EAAE,MAAM,CAAC;CACvB,EACN,OAAO,GAAE,SAAiB,GAC3B,OAAO,CAAC,aAAa,GAAG,SAAS,CAAC,CA4BpC;AAED;;;;;GAKG;AACH,wBAAgB,kBAAkB,CAAC,sBAAsB,EAAE,MAAM,GAAG,GAAG,GAAG;IAAE,GAAG,EAAE,GAAG,CAAC;IAAC,IAAI,EAAE,OAAO,GAAG,MAAM,CAAA;CAAE,EAAE,CAgD/G;AAED;;;;;;;;;;;;;;;GAeG;AACH,wBAAsB,mCAAmC,CACrD,sBAAsB,EAAE,MAAM,GAAG,GAAG,EACpC,EACI,OAAe,EACf,eAAyC,EAC5C,GAAE;IACC,OAAO,CAAC,EAAE,SAAS,CAAC;IACpB,eAAe,CAAC,EAAE,MAAM,CAAC;CACvB,GACP,OAAO,CAAC,2BAA2B,GAAG,SAAS,CAAC,CAyClD;AAED;;GAEG;AACH,MAAM,WAAW,eAAe;IAC5B;;;OAGG;IACH,sBAAsB,EAAE,MAAM,CAAC;IAE/B;;;OAGG;IACH,2BAA2B,CAAC,EAAE,2BAA2B,CAAC;IAE1D;;;OAGG;IACH,gBAAgB,CAAC,EAAE,8BAA8B,CAAC;CACrD;AAED;;;;;;;;;;;;;;;;;;;GAmBG;AACH,wBAAsB,uBAAuB,CACzC,SAAS,EAAE,MAAM,GAAG,GAAG,EACvB,IAAI,CAAC,EAAE;IACH,mBAAmB,CAAC,EAAE,GAAG,CAAC;IAC1B,OAAO,CAAC,EAAE,SAAS,CAAC;CACvB,GACF,OAAO,CAAC,eAAe,CAAC,CA8B1B;AAED;;GAEG;AACH,wBAAsB,kBAAkB,CACpC,sBAAsB,EAAE,MAAM,GAAG,GAAG,EACpC,EACI,QAAQ,EACR,iBAAiB,EACjB,WAAW,EACX,KAAK,EACL,KAAK,EACL,QAAQ,EACX,EAAE;IACC,QAAQ,CAAC,EAAE,2BAA2B,CAAC;IACvC,iBAAiB,EAAE,2BAA2B,CAAC;IAC/C,WAAW,EAAE,MAAM,GAAG,GAAG,CAAC;IAC1B,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,QAAQ,CAAC,EAAE,GAAG,CAAC;CAClB,GACF,OAAO,CAAC;IAAE,gBAAgB,EAAE,GAAG,CAAC;IAAC,YAAY,EAAE,MAAM,CAAA;CAAE,CAAC,CAkD1D;AAED;;;;;;;;;;GAUG;AACH,wBAAgB,+BAA+B,CAC3C,iBAAiB,EAAE,MAAM,EACzB,YAAY,EAAE,MAAM,EACpB,WAAW,EAAE,MAAM,GAAG,GAAG,GAC1B,eAAe,CAOjB;AAwDD;;;;;;;;;;;GAWG;AACH,wBAAsB,qBAAqB,CACvC,sBAAsB,EAAE,MAAM,GAAG,GAAG,EACpC,EACI,QAAQ,EACR,iBAAiB,EACjB,iBAAiB,EACjB,YAAY,EACZ,WAAW,EACX,QAAQ,EACR,uBAAuB,EACvB,OAAO,EACV,EAAE;IACC,QAAQ,CAAC,EAAE,2BAA2B,CAAC;IACvC,iBAAiB,EAAE,2BAA2B,CAAC;IAC/C,iBAAiB,EAAE,MAAM,CAAC;IAC1B,YAAY,EAAE,MAAM,CAAC;IACrB,WAAW,EAAE,MAAM,GAAG,GAAG,CAAC;IAC1B,QAAQ,CAAC,EAAE,GAAG,CAAC;IACf,uBAAuB,CAAC,EAAE,mBAAmB,CAAC,yBAAyB,CAAC,CAAC;IACzE,OAAO,CAAC,EAAE,SAAS,CAAC;CACvB,GACF,OAAO,CAAC,WAAW,CAAC,CAWtB;AAED;;;;;;;;;;;GAWG;AACH,wBAAsB,oBAAoB,CACtC,sBAAsB,EAAE,MAAM,GAAG,GAAG,EACpC,EACI,QAAQ,EACR,iBAAiB,EACjB,YAAY,EACZ,QAAQ,EACR,uBAAuB,EACvB,OAAO,EACV,EAAE;IACC,QAAQ,CAAC,EAAE,2BAA2B,CAAC;IACvC,iBAAiB,EAAE,2BAA2B,CAAC;IAC/C,YAAY,EAAE,MAAM,CAAC;IACrB,QAAQ,CAAC,EAAE,GAAG,CAAC;IACf,uBAAuB,CAAC,EAAE,mBAAmB,CAAC,yBAAyB,CAAC,CAAC;IACzE,OAAO,CAAC,EAAE,SAAS,CAAC;CACvB,GACF,OAAO,CAAC,WAAW,CAAC,CAiBtB;AAED;;;;;;;;;;;;;;;;;;;;;;;;;GAyBG;AACH,wBAAsB,UAAU,CAC5B,QAAQ,EAAE,mBAAmB,EAC7B,sBAAsB,EAAE,MAAM,GAAG,GAAG,EACpC,EACI,QAAQ,EACR,QAAQ,EACR,iBAAiB,EACjB,OAAO,EACV,GAAE;IACC,QAAQ,CAAC,EAAE,2BAA2B,CAAC;IACvC,QAAQ,CAAC,EAAE,GAAG,CAAC;IACf,uEAAuE;IACvE,iBAAiB,CAAC,EAAE,MAAM,CAAC;IAC3B,OAAO,CAAC,EAAE,SAAS,CAAC;CAClB,GACP,OAAO,CAAC,WAAW,CAAC,CA+BtB;AAED;;GAEG;AACH,wBAAsB,cAAc,CAChC,sBAAsB,EAAE,MAAM,GAAG,GAAG,EACpC,EACI,QAAQ,EACR,cAAc,EACd,OAAO,EACV,EAAE;IACC,QAAQ,CAAC,EAAE,2BAA2B,CAAC;IACvC,cAAc,EAAE,mBAAmB,CAAC;IACpC,OAAO,CAAC,EAAE,SAAS,CAAC;CACvB,GACF,OAAO,CAAC,0BAA0B,CAAC,CA0BrC"}