cursor-guard 4.7.9 → 4.8.2

package/references/vscode-extension/dist/vendor/@modelcontextprotocol/sdk/dist/cjs/server/auth/errors.js

@@ -1,202 +0,0 @@
-"use strict";
-Object.defineProperty(exports, "__esModule", { value: true });
-exports.OAUTH_ERRORS = exports.CustomOAuthError = exports.InvalidTargetError = exports.InsufficientScopeError = exports.InvalidClientMetadataError = exports.TooManyRequestsError = exports.MethodNotAllowedError = exports.InvalidTokenError = exports.UnsupportedTokenTypeError = exports.UnsupportedResponseTypeError = exports.TemporarilyUnavailableError = exports.ServerError = exports.AccessDeniedError = exports.InvalidScopeError = exports.UnsupportedGrantTypeError = exports.UnauthorizedClientError = exports.InvalidGrantError = exports.InvalidClientError = exports.InvalidRequestError = exports.OAuthError = void 0;
-/**
- * Base class for all OAuth errors
- */
-class OAuthError extends Error {
-    constructor(message, errorUri) {
-        super(message);
-        this.errorUri = errorUri;
-        this.name = this.constructor.name;
-    }
-    /**
-     * Converts the error to a standard OAuth error response object
-     */
-    toResponseObject() {
-        const response = {
-            error: this.errorCode,
-            error_description: this.message
-        };
-        if (this.errorUri) {
-            response.error_uri = this.errorUri;
-        }
-        return response;
-    }
-    get errorCode() {
-        return this.constructor.errorCode;
-    }
-}
-exports.OAuthError = OAuthError;
-/**
- * Invalid request error - The request is missing a required parameter,
- * includes an invalid parameter value, includes a parameter more than once,
- * or is otherwise malformed.
- */
-class InvalidRequestError extends OAuthError {
-}
-exports.InvalidRequestError = InvalidRequestError;
-InvalidRequestError.errorCode = 'invalid_request';
-/**
- * Invalid client error - Client authentication failed (e.g., unknown client, no client
- * authentication included, or unsupported authentication method).
- */
-class InvalidClientError extends OAuthError {
-}
-exports.InvalidClientError = InvalidClientError;
-InvalidClientError.errorCode = 'invalid_client';
-/**
- * Invalid grant error - The provided authorization grant or refresh token is
- * invalid, expired, revoked, does not match the redirection URI used in the
- * authorization request, or was issued to another client.
- */
-class InvalidGrantError extends OAuthError {
-}
-exports.InvalidGrantError = InvalidGrantError;
-InvalidGrantError.errorCode = 'invalid_grant';
-/**
- * Unauthorized client error - The authenticated client is not authorized to use
- * this authorization grant type.
- */
-class UnauthorizedClientError extends OAuthError {
-}
-exports.UnauthorizedClientError = UnauthorizedClientError;
-UnauthorizedClientError.errorCode = 'unauthorized_client';
-/**
- * Unsupported grant type error - The authorization grant type is not supported
- * by the authorization server.
- */
-class UnsupportedGrantTypeError extends OAuthError {
-}
-exports.UnsupportedGrantTypeError = UnsupportedGrantTypeError;
-UnsupportedGrantTypeError.errorCode = 'unsupported_grant_type';
-/**
- * Invalid scope error - The requested scope is invalid, unknown, malformed, or
- * exceeds the scope granted by the resource owner.
- */
-class InvalidScopeError extends OAuthError {
-}
-exports.InvalidScopeError = InvalidScopeError;
-InvalidScopeError.errorCode = 'invalid_scope';
-/**
- * Access denied error - The resource owner or authorization server denied the request.
- */
-class AccessDeniedError extends OAuthError {
-}
-exports.AccessDeniedError = AccessDeniedError;
-AccessDeniedError.errorCode = 'access_denied';
-/**
- * Server error - The authorization server encountered an unexpected condition
- * that prevented it from fulfilling the request.
- */
-class ServerError extends OAuthError {
-}
-exports.ServerError = ServerError;
-ServerError.errorCode = 'server_error';
-/**
- * Temporarily unavailable error - The authorization server is currently unable to
- * handle the request due to a temporary overloading or maintenance of the server.
- */
-class TemporarilyUnavailableError extends OAuthError {
-}
-exports.TemporarilyUnavailableError = TemporarilyUnavailableError;
-TemporarilyUnavailableError.errorCode = 'temporarily_unavailable';
-/**
- * Unsupported response type error - The authorization server does not support
- * obtaining an authorization code using this method.
- */
-class UnsupportedResponseTypeError extends OAuthError {
-}
-exports.UnsupportedResponseTypeError = UnsupportedResponseTypeError;
-UnsupportedResponseTypeError.errorCode = 'unsupported_response_type';
-/**
- * Unsupported token type error - The authorization server does not support
- * the requested token type.
- */
-class UnsupportedTokenTypeError extends OAuthError {
-}
-exports.UnsupportedTokenTypeError = UnsupportedTokenTypeError;
-UnsupportedTokenTypeError.errorCode = 'unsupported_token_type';
-/**
- * Invalid token error - The access token provided is expired, revoked, malformed,
- * or invalid for other reasons.
- */
-class InvalidTokenError extends OAuthError {
-}
-exports.InvalidTokenError = InvalidTokenError;
-InvalidTokenError.errorCode = 'invalid_token';
-/**
- * Method not allowed error - The HTTP method used is not allowed for this endpoint.
- * (Custom, non-standard error)
- */
-class MethodNotAllowedError extends OAuthError {
-}
-exports.MethodNotAllowedError = MethodNotAllowedError;
-MethodNotAllowedError.errorCode = 'method_not_allowed';
-/**
- * Too many requests error - Rate limit exceeded.
- * (Custom, non-standard error based on RFC 6585)
- */
-class TooManyRequestsError extends OAuthError {
-}
-exports.TooManyRequestsError = TooManyRequestsError;
-TooManyRequestsError.errorCode = 'too_many_requests';
-/**
- * Invalid client metadata error - The client metadata is invalid.
- * (Custom error for dynamic client registration - RFC 7591)
- */
-class InvalidClientMetadataError extends OAuthError {
-}
-exports.InvalidClientMetadataError = InvalidClientMetadataError;
-InvalidClientMetadataError.errorCode = 'invalid_client_metadata';
-/**
- * Insufficient scope error - The request requires higher privileges than provided by the access token.
- */
-class InsufficientScopeError extends OAuthError {
-}
-exports.InsufficientScopeError = InsufficientScopeError;
-InsufficientScopeError.errorCode = 'insufficient_scope';
-/**
- * Invalid target error - The requested resource is invalid, missing, unknown, or malformed.
- * (Custom error for resource indicators - RFC 8707)
- */
-class InvalidTargetError extends OAuthError {
-}
-exports.InvalidTargetError = InvalidTargetError;
-InvalidTargetError.errorCode = 'invalid_target';
-/**
- * A utility class for defining one-off error codes
- */
-class CustomOAuthError extends OAuthError {
-    constructor(customErrorCode, message, errorUri) {
-        super(message, errorUri);
-        this.customErrorCode = customErrorCode;
-    }
-    get errorCode() {
-        return this.customErrorCode;
-    }
-}
-exports.CustomOAuthError = CustomOAuthError;
-/**
- * A full list of all OAuthErrors, enabling parsing from error responses
- */
-exports.OAUTH_ERRORS = {
-    [InvalidRequestError.errorCode]: InvalidRequestError,
-    [InvalidClientError.errorCode]: InvalidClientError,
-    [InvalidGrantError.errorCode]: InvalidGrantError,
-    [UnauthorizedClientError.errorCode]: UnauthorizedClientError,
-    [UnsupportedGrantTypeError.errorCode]: UnsupportedGrantTypeError,
-    [InvalidScopeError.errorCode]: InvalidScopeError,
-    [AccessDeniedError.errorCode]: AccessDeniedError,
-    [ServerError.errorCode]: ServerError,
-    [TemporarilyUnavailableError.errorCode]: TemporarilyUnavailableError,
-    [UnsupportedResponseTypeError.errorCode]: UnsupportedResponseTypeError,
-    [UnsupportedTokenTypeError.errorCode]: UnsupportedTokenTypeError,
-    [InvalidTokenError.errorCode]: InvalidTokenError,
-    [MethodNotAllowedError.errorCode]: MethodNotAllowedError,
-    [TooManyRequestsError.errorCode]: TooManyRequestsError,
-    [InvalidClientMetadataError.errorCode]: InvalidClientMetadataError,
-    [InsufficientScopeError.errorCode]: InsufficientScopeError,
-    [InvalidTargetError.errorCode]: InvalidTargetError
-};
-//# sourceMappingURL=errors.js.map

package/references/vscode-extension/dist/vendor/@modelcontextprotocol/sdk/dist/cjs/server/auth/errors.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"errors.js","sourceRoot":"","sources":["../../../../src/server/auth/errors.ts"],"names":[],"mappings":";;;AAEA;;GAEG;AACH,MAAa,UAAW,SAAQ,KAAK;IAGjC,YACI,OAAe,EACC,QAAiB;QAEjC,KAAK,CAAC,OAAO,CAAC,CAAC;QAFC,aAAQ,GAAR,QAAQ,CAAS;QAGjC,IAAI,CAAC,IAAI,GAAG,IAAI,CAAC,WAAW,CAAC,IAAI,CAAC;IACtC,CAAC;IAED;;OAEG;IACH,gBAAgB;QACZ,MAAM,QAAQ,GAAuB;YACjC,KAAK,EAAE,IAAI,CAAC,SAAS;YACrB,iBAAiB,EAAE,IAAI,CAAC,OAAO;SAClC,CAAC;QAEF,IAAI,IAAI,CAAC,QAAQ,EAAE,CAAC;YAChB,QAAQ,CAAC,SAAS,GAAG,IAAI,CAAC,QAAQ,CAAC;QACvC,CAAC;QAED,OAAO,QAAQ,CAAC;IACpB,CAAC;IAED,IAAI,SAAS;QACT,OAAQ,IAAI,CAAC,WAAiC,CAAC,SAAS,CAAC;IAC7D,CAAC;CACJ;AA9BD,gCA8BC;AAED;;;;GAIG;AACH,MAAa,mBAAoB,SAAQ,UAAU;;AAAnD,kDAEC;AADU,6BAAS,GAAG,iBAAiB,CAAC;AAGzC;;;GAGG;AACH,MAAa,kBAAmB,SAAQ,UAAU;;AAAlD,gDAEC;AADU,4BAAS,GAAG,gBAAgB,CAAC;AAGxC;;;;GAIG;AACH,MAAa,iBAAkB,SAAQ,UAAU;;AAAjD,8CAEC;AADU,2BAAS,GAAG,eAAe,CAAC;AAGvC;;;GAGG;AACH,MAAa,uBAAwB,SAAQ,UAAU;;AAAvD,0DAEC;AADU,iCAAS,GAAG,qBAAqB,CAAC;AAG7C;;;GAGG;AACH,MAAa,yBAA0B,SAAQ,UAAU;;AAAzD,8DAEC;AADU,mCAAS,GAAG,wBAAwB,CAAC;AAGhD;;;GAGG;AACH,MAAa,iBAAkB,SAAQ,UAAU;;AAAjD,8CAEC;AADU,2BAAS,GAAG,eAAe,CAAC;AAGvC;;GAEG;AACH,MAAa,iBAAkB,SAAQ,UAAU;;AAAjD,8CAEC;AADU,2BAAS,GAAG,eAAe,CAAC;AAGvC;;;GAGG;AACH,MAAa,WAAY,SAAQ,UAAU;;AAA3C,kCAEC;AADU,qBAAS,GAAG,cAAc,CAAC;AAGtC;;;GAGG;AACH,MAAa,2BAA4B,SAAQ,UAAU;;AAA3D,kEAEC;AADU,qCAAS,GAAG,yBAAyB,CAAC;AAGjD;;;GAGG;AACH,MAAa,4BAA6B,SAAQ,UAAU;;AAA5D,oEAEC;AADU,sCAAS,GAAG,2BAA2B,CAAC;AAGnD;;;GAGG;AACH,MAAa,yBAA0B,SAAQ,UAAU;;AAAzD,8DAEC;AADU,mCAAS,GAAG,wBAAwB,CAAC;AAGhD;;;GAGG;AACH,MAAa,iBAAkB,SAAQ,UAAU;;AAAjD,8CAEC;AADU,2BAAS,GAAG,eAAe,CAAC;AAGvC;;;GAGG;AACH,MAAa,qBAAsB,SAAQ,UAAU;;AAArD,sDAEC;AADU,+BAAS,GAAG,oBAAoB,CAAC;AAG5C;;;GAGG;AACH,MAAa,oBAAqB,SAAQ,UAAU;;AAApD,oDAEC;AADU,8BAAS,GAAG,mBAAmB,CAAC;AAG3C;;;GAGG;AACH,MAAa,0BAA2B,SAAQ,UAAU;;AAA1D,gEAEC;AADU,oCAAS,GAAG,yBAAyB,CAAC;AAGjD;;GAEG;AACH,MAAa,sBAAuB,SAAQ,UAAU;;AAAtD,wDAEC;AADU,gCAAS,GAAG,oBAAoB,CAAC;AAG5C;;;GAGG;AACH,MAAa,kBAAmB,SAAQ,UAAU;;AAAlD,gDAEC;AADU,4BAAS,GAAG,gBAAgB,CAAC;AAGxC;;GAEG;AACH,MAAa,gBAAiB,SAAQ,UAAU;IAC5C,YACqB,eAAuB,EACxC,OAAe,EACf,QAAiB;QAEjB,KAAK,CAAC,OAAO,EAAE,QAAQ,CAAC,CAAC;QAJR,oBAAe,GAAf,eAAe,CAAQ;IAK5C,CAAC;IAED,IAAI,SAAS;QACT,OAAO,IAAI,CAAC,eAAe,CAAC;IAChC,CAAC;CACJ;AAZD,4CAYC;AAED;;GAEG;AACU,QAAA,YAAY,GAAG;IACxB,CAAC,mBAAmB,CAAC,SAAS,CAAC,EAAE,mBAAmB;IACpD,CAAC,kBAAkB,CAAC,SAAS,CAAC,EAAE,kBAAkB;IAClD,CAAC,iBAAiB,CAAC,SAAS,CAAC,EAAE,iBAAiB;IAChD,CAAC,uBAAuB,CAAC,SAAS,CAAC,EAAE,uBAAuB;IAC5D,CAAC,yBAAyB,CAAC,SAAS,CAAC,EAAE,yBAAyB;IAChE,CAAC,iBAAiB,CAAC,SAAS,CAAC,EAAE,iBAAiB;IAChD,CAAC,iBAAiB,CAAC,SAAS,CAAC,EAAE,iBAAiB;IAChD,CAAC,WAAW,CAAC,SAAS,CAAC,EAAE,WAAW;IACpC,CAAC,2BAA2B,CAAC,SAAS,CAAC,EAAE,2BAA2B;IACpE,CAAC,4BAA4B,CAAC,SAAS,CAAC,EAAE,4BAA4B;IACtE,CAAC,yBAAyB,CAAC,SAAS,CAAC,EAAE,yBAAyB;IAChE,CAAC,iBAAiB,CAAC,SAAS,CAAC,EAAE,iBAAiB;IAChD,CAAC,qBAAqB,CAAC,SAAS,CAAC,EAAE,qBAAqB;IACxD,CAAC,oBAAoB,CAAC,SAAS,CAAC,EAAE,oBAAoB;IACtD,CAAC,0BAA0B,CAAC,SAAS,CAAC,EAAE,0BAA0B;IAClE,CAAC,sBAAsB,CAAC,SAAS,CAAC,EAAE,sBAAsB;IAC1D,CAAC,kBAAkB,CAAC,SAAS,CAAC,EAAE,kBAAkB;CAC5C,CAAC"}

package/references/vscode-extension/dist/vendor/@modelcontextprotocol/sdk/dist/cjs/server/auth/handlers/authorize.d.ts

@@ -1,13 +0,0 @@
-import { RequestHandler } from 'express';
-import { OAuthServerProvider } from '../provider.js';
-import { Options as RateLimitOptions } from 'express-rate-limit';
-export type AuthorizationHandlerOptions = {
-    provider: OAuthServerProvider;
-    /**
-     * Rate limiting configuration for the authorization endpoint.
-     * Set to false to disable rate limiting for this endpoint.
-     */
-    rateLimit?: Partial<RateLimitOptions> | false;
-};
-export declare function authorizationHandler({ provider, rateLimit: rateLimitConfig }: AuthorizationHandlerOptions): RequestHandler;
-//# sourceMappingURL=authorize.d.ts.map

package/references/vscode-extension/dist/vendor/@modelcontextprotocol/sdk/dist/cjs/server/auth/handlers/authorize.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"authorize.d.ts","sourceRoot":"","sources":["../../../../../src/server/auth/handlers/authorize.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,cAAc,EAAE,MAAM,SAAS,CAAC;AAGzC,OAAO,EAAE,mBAAmB,EAAE,MAAM,gBAAgB,CAAC;AACrD,OAAO,EAAa,OAAO,IAAI,gBAAgB,EAAE,MAAM,oBAAoB,CAAC;AAI5E,MAAM,MAAM,2BAA2B,GAAG;IACtC,QAAQ,EAAE,mBAAmB,CAAC;IAC9B;;;OAGG;IACH,SAAS,CAAC,EAAE,OAAO,CAAC,gBAAgB,CAAC,GAAG,KAAK,CAAC;CACjD,CAAC;AAqBF,wBAAgB,oBAAoB,CAAC,EAAE,QAAQ,EAAE,SAAS,EAAE,eAAe,EAAE,EAAE,2BAA2B,GAAG,cAAc,CAgH1H"}

package/references/vscode-extension/dist/vendor/@modelcontextprotocol/sdk/dist/cjs/server/auth/handlers/authorize.js

@@ -1,167 +0,0 @@
-"use strict";
-var __createBinding = (this && this.__createBinding) || (Object.create ? (function(o, m, k, k2) {
-    if (k2 === undefined) k2 = k;
-    var desc = Object.getOwnPropertyDescriptor(m, k);
-    if (!desc || ("get" in desc ? !m.__esModule : desc.writable || desc.configurable)) {
-      desc = { enumerable: true, get: function() { return m[k]; } };
-    }
-    Object.defineProperty(o, k2, desc);
-}) : (function(o, m, k, k2) {
-    if (k2 === undefined) k2 = k;
-    o[k2] = m[k];
-}));
-var __setModuleDefault = (this && this.__setModuleDefault) || (Object.create ? (function(o, v) {
-    Object.defineProperty(o, "default", { enumerable: true, value: v });
-}) : function(o, v) {
-    o["default"] = v;
-});
-var __importStar = (this && this.__importStar) || function (mod) {
-    if (mod && mod.__esModule) return mod;
-    var result = {};
-    if (mod != null) for (var k in mod) if (k !== "default" && Object.prototype.hasOwnProperty.call(mod, k)) __createBinding(result, mod, k);
-    __setModuleDefault(result, mod);
-    return result;
-};
-var __importDefault = (this && this.__importDefault) || function (mod) {
-    return (mod && mod.__esModule) ? mod : { "default": mod };
-};
-Object.defineProperty(exports, "__esModule", { value: true });
-exports.authorizationHandler = authorizationHandler;
-const z = __importStar(require("zod/v4"));
-const express_1 = __importDefault(require("express"));
-const express_rate_limit_1 = require("express-rate-limit");
-const allowedMethods_js_1 = require("../middleware/allowedMethods.js");
-const errors_js_1 = require("../errors.js");
-// Parameters that must be validated in order to issue redirects.
-const ClientAuthorizationParamsSchema = z.object({
-    client_id: z.string(),
-    redirect_uri: z
-        .string()
-        .optional()
-        .refine(value => value === undefined || URL.canParse(value), { message: 'redirect_uri must be a valid URL' })
-});
-// Parameters that must be validated for a successful authorization request. Failure can be reported to the redirect URI.
-const RequestAuthorizationParamsSchema = z.object({
-    response_type: z.literal('code'),
-    code_challenge: z.string(),
-    code_challenge_method: z.literal('S256'),
-    scope: z.string().optional(),
-    state: z.string().optional(),
-    resource: z.string().url().optional()
-});
-function authorizationHandler({ provider, rateLimit: rateLimitConfig }) {
-    // Create a router to apply middleware
-    const router = express_1.default.Router();
-    router.use((0, allowedMethods_js_1.allowedMethods)(['GET', 'POST']));
-    router.use(express_1.default.urlencoded({ extended: false }));
-    // Apply rate limiting unless explicitly disabled
-    if (rateLimitConfig !== false) {
-        router.use((0, express_rate_limit_1.rateLimit)({
-            windowMs: 15 * 60 * 1000, // 15 minutes
-            max: 100, // 100 requests per windowMs
-            standardHeaders: true,
-            legacyHeaders: false,
-            message: new errors_js_1.TooManyRequestsError('You have exceeded the rate limit for authorization requests').toResponseObject(),
-            ...rateLimitConfig
-        }));
-    }
-    router.all('/', async (req, res) => {
-        res.setHeader('Cache-Control', 'no-store');
-        // In the authorization flow, errors are split into two categories:
-        // 1. Pre-redirect errors (direct response with 400)
-        // 2. Post-redirect errors (redirect with error parameters)
-        // Phase 1: Validate client_id and redirect_uri. Any errors here must be direct responses.
-        let client_id, redirect_uri, client;
-        try {
-            const result = ClientAuthorizationParamsSchema.safeParse(req.method === 'POST' ? req.body : req.query);
-            if (!result.success) {
-                throw new errors_js_1.InvalidRequestError(result.error.message);
-            }
-            client_id = result.data.client_id;
-            redirect_uri = result.data.redirect_uri;
-            client = await provider.clientsStore.getClient(client_id);
-            if (!client) {
-                throw new errors_js_1.InvalidClientError('Invalid client_id');
-            }
-            if (redirect_uri !== undefined) {
-                if (!client.redirect_uris.includes(redirect_uri)) {
-                    throw new errors_js_1.InvalidRequestError('Unregistered redirect_uri');
-                }
-            }
-            else if (client.redirect_uris.length === 1) {
-                redirect_uri = client.redirect_uris[0];
-            }
-            else {
-                throw new errors_js_1.InvalidRequestError('redirect_uri must be specified when client has multiple registered URIs');
-            }
-        }
-        catch (error) {
-            // Pre-redirect errors - return direct response
-            //
-            // These don't need to be JSON encoded, as they'll be displayed in a user
-            // agent, but OTOH they all represent exceptional situations (arguably,
-            // "programmer error"), so presenting a nice HTML page doesn't help the
-            // user anyway.
-            if (error instanceof errors_js_1.OAuthError) {
-                const status = error instanceof errors_js_1.ServerError ? 500 : 400;
-                res.status(status).json(error.toResponseObject());
-            }
-            else {
-                const serverError = new errors_js_1.ServerError('Internal Server Error');
-                res.status(500).json(serverError.toResponseObject());
-            }
-            return;
-        }
-        // Phase 2: Validate other parameters. Any errors here should go into redirect responses.
-        let state;
-        try {
-            // Parse and validate authorization parameters
-            const parseResult = RequestAuthorizationParamsSchema.safeParse(req.method === 'POST' ? req.body : req.query);
-            if (!parseResult.success) {
-                throw new errors_js_1.InvalidRequestError(parseResult.error.message);
-            }
-            const { scope, code_challenge, resource } = parseResult.data;
-            state = parseResult.data.state;
-            // Validate scopes
-            let requestedScopes = [];
-            if (scope !== undefined) {
-                requestedScopes = scope.split(' ');
-            }
-            // All validation passed, proceed with authorization
-            await provider.authorize(client, {
-                state,
-                scopes: requestedScopes,
-                redirectUri: redirect_uri,
-                codeChallenge: code_challenge,
-                resource: resource ? new URL(resource) : undefined
-            }, res);
-        }
-        catch (error) {
-            // Post-redirect errors - redirect with error parameters
-            if (error instanceof errors_js_1.OAuthError) {
-                res.redirect(302, createErrorRedirect(redirect_uri, error, state));
-            }
-            else {
-                const serverError = new errors_js_1.ServerError('Internal Server Error');
-                res.redirect(302, createErrorRedirect(redirect_uri, serverError, state));
-            }
-        }
-    });
-    return router;
-}
-/**
- * Helper function to create redirect URL with error parameters
- */
-function createErrorRedirect(redirectUri, error, state) {
-    const errorUrl = new URL(redirectUri);
-    errorUrl.searchParams.set('error', error.errorCode);
-    errorUrl.searchParams.set('error_description', error.message);
-    if (error.errorUri) {
-        errorUrl.searchParams.set('error_uri', error.errorUri);
-    }
-    if (state) {
-        errorUrl.searchParams.set('state', state);
-    }
-    return errorUrl.href;
-}
-//# sourceMappingURL=authorize.js.map

package/references/vscode-extension/dist/vendor/@modelcontextprotocol/sdk/dist/cjs/server/auth/handlers/authorize.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"authorize.js","sourceRoot":"","sources":["../../../../../src/server/auth/handlers/authorize.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;;;;AAoCA,oDAgHC;AAnJD,0CAA4B;AAC5B,sDAA8B;AAE9B,2DAA4E;AAC5E,uEAAiE;AACjE,4CAAsH;AAWtH,iEAAiE;AACjE,MAAM,+BAA+B,GAAG,CAAC,CAAC,MAAM,CAAC;IAC7C,SAAS,EAAE,CAAC,CAAC,MAAM,EAAE;IACrB,YAAY,EAAE,CAAC;SACV,MAAM,EAAE;SACR,QAAQ,EAAE;SACV,MAAM,CAAC,KAAK,CAAC,EAAE,CAAC,KAAK,KAAK,SAAS,IAAI,GAAG,CAAC,QAAQ,CAAC,KAAK,CAAC,EAAE,EAAE,OAAO,EAAE,kCAAkC,EAAE,CAAC;CACpH,CAAC,CAAC;AAEH,yHAAyH;AACzH,MAAM,gCAAgC,GAAG,CAAC,CAAC,MAAM,CAAC;IAC9C,aAAa,EAAE,CAAC,CAAC,OAAO,CAAC,MAAM,CAAC;IAChC,cAAc,EAAE,CAAC,CAAC,MAAM,EAAE;IAC1B,qBAAqB,EAAE,CAAC,CAAC,OAAO,CAAC,MAAM,CAAC;IACxC,KAAK,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IAC5B,KAAK,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IAC5B,QAAQ,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,QAAQ,EAAE;CACxC,CAAC,CAAC;AAEH,SAAgB,oBAAoB,CAAC,EAAE,QAAQ,EAAE,SAAS,EAAE,eAAe,EAA+B;IACtG,sCAAsC;IACtC,MAAM,MAAM,GAAG,iBAAO,CAAC,MAAM,EAAE,CAAC;IAChC,MAAM,CAAC,GAAG,CAAC,IAAA,kCAAc,EAAC,CAAC,KAAK,EAAE,MAAM,CAAC,CAAC,CAAC,CAAC;IAC5C,MAAM,CAAC,GAAG,CAAC,iBAAO,CAAC,UAAU,CAAC,EAAE,QAAQ,EAAE,KAAK,EAAE,CAAC,CAAC,CAAC;IAEpD,iDAAiD;IACjD,IAAI,eAAe,KAAK,KAAK,EAAE,CAAC;QAC5B,MAAM,CAAC,GAAG,CACN,IAAA,8BAAS,EAAC;YACN,QAAQ,EAAE,EAAE,GAAG,EAAE,GAAG,IAAI,EAAE,aAAa;YACvC,GAAG,EAAE,GAAG,EAAE,4BAA4B;YACtC,eAAe,EAAE,IAAI;YACrB,aAAa,EAAE,KAAK;YACpB,OAAO,EAAE,IAAI,gCAAoB,CAAC,6DAA6D,CAAC,CAAC,gBAAgB,EAAE;YACnH,GAAG,eAAe;SACrB,CAAC,CACL,CAAC;IACN,CAAC;IAED,MAAM,CAAC,GAAG,CAAC,GAAG,EAAE,KAAK,EAAE,GAAG,EAAE,GAAG,EAAE,EAAE;QAC/B,GAAG,CAAC,SAAS,CAAC,eAAe,EAAE,UAAU,CAAC,CAAC;QAE3C,mEAAmE;QACnE,oDAAoD;QACpD,2DAA2D;QAE3D,0FAA0F;QAC1F,IAAI,SAAS,EAAE,YAAY,EAAE,MAAM,CAAC;QACpC,IAAI,CAAC;YACD,MAAM,MAAM,GAAG,+BAA+B,CAAC,SAAS,CAAC,GAAG,CAAC,MAAM,KAAK,MAAM,CAAC,CAAC,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC;YACvG,IAAI,CAAC,MAAM,CAAC,OAAO,EAAE,CAAC;gBAClB,MAAM,IAAI,+BAAmB,CAAC,MAAM,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC;YACxD,CAAC;YAED,SAAS,GAAG,MAAM,CAAC,IAAI,CAAC,SAAS,CAAC;YAClC,YAAY,GAAG,MAAM,CAAC,IAAI,CAAC,YAAY,CAAC;YAExC,MAAM,GAAG,MAAM,QAAQ,CAAC,YAAY,CAAC,SAAS,CAAC,SAAS,CAAC,CAAC;YAC1D,IAAI,CAAC,MAAM,EAAE,CAAC;gBACV,MAAM,IAAI,8BAAkB,CAAC,mBAAmB,CAAC,CAAC;YACtD,CAAC;YAED,IAAI,YAAY,KAAK,SAAS,EAAE,CAAC;gBAC7B,IAAI,CAAC,MAAM,CAAC,aAAa,CAAC,QAAQ,CAAC,YAAY,CAAC,EAAE,CAAC;oBAC/C,MAAM,IAAI,+BAAmB,CAAC,2BAA2B,CAAC,CAAC;gBAC/D,CAAC;YACL,CAAC;iBAAM,IAAI,MAAM,CAAC,aAAa,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;gBAC3C,YAAY,GAAG,MAAM,CAAC,aAAa,CAAC,CAAC,CAAC,CAAC;YAC3C,CAAC;iBAAM,CAAC;gBACJ,MAAM,IAAI,+BAAmB,CAAC,yEAAyE,CAAC,CAAC;YAC7G,CAAC;QACL,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACb,+CAA+C;YAC/C,EAAE;YACF,yEAAyE;YACzE,uEAAuE;YACvE,uEAAuE;YACvE,eAAe;YACf,IAAI,KAAK,YAAY,sBAAU,EAAE,CAAC;gBAC9B,MAAM,MAAM,GAAG,KAAK,YAAY,uBAAW,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,GAAG,CAAC;gBACxD,GAAG,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,gBAAgB,EAAE,CAAC,CAAC;YACtD,CAAC;iBAAM,CAAC;gBACJ,MAAM,WAAW,GAAG,IAAI,uBAAW,CAAC,uBAAuB,CAAC,CAAC;gBAC7D,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,WAAW,CAAC,gBAAgB,EAAE,CAAC,CAAC;YACzD,CAAC;YAED,OAAO;QACX,CAAC;QAED,yFAAyF;QACzF,IAAI,KAAK,CAAC;QACV,IAAI,CAAC;YACD,8CAA8C;YAC9C,MAAM,WAAW,GAAG,gCAAgC,CAAC,SAAS,CAAC,GAAG,CAAC,MAAM,KAAK,MAAM,CAAC,CAAC,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC;YAC7G,IAAI,CAAC,WAAW,CAAC,OAAO,EAAE,CAAC;gBACvB,MAAM,IAAI,+BAAmB,CAAC,WAAW,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC;YAC7D,CAAC;YAED,MAAM,EAAE,KAAK,EAAE,cAAc,EAAE,QAAQ,EAAE,GAAG,WAAW,CAAC,IAAI,CAAC;YAC7D,KAAK,GAAG,WAAW,CAAC,IAAI,CAAC,KAAK,CAAC;YAE/B,kBAAkB;YAClB,IAAI,eAAe,GAAa,EAAE,CAAC;YACnC,IAAI,KAAK,KAAK,SAAS,EAAE,CAAC;gBACtB,eAAe,GAAG,KAAK,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;YACvC,CAAC;YAED,oDAAoD;YACpD,MAAM,QAAQ,CAAC,SAAS,CACpB,MAAM,EACN;gBACI,KAAK;gBACL,MAAM,EAAE,eAAe;gBACvB,WAAW,EAAE,YAAY;gBACzB,aAAa,EAAE,cAAc;gBAC7B,QAAQ,EAAE,QAAQ,CAAC,CAAC,CAAC,IAAI,GAAG,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,SAAS;aACrD,EACD,GAAG,CACN,CAAC;QACN,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACb,wDAAwD;YACxD,IAAI,KAAK,YAAY,sBAAU,EAAE,CAAC;gBAC9B,GAAG,CAAC,QAAQ,CAAC,GAAG,EAAE,mBAAmB,CAAC,YAAY,EAAE,KAAK,EAAE,KAAK,CAAC,CAAC,CAAC;YACvE,CAAC;iBAAM,CAAC;gBACJ,MAAM,WAAW,GAAG,IAAI,uBAAW,CAAC,uBAAuB,CAAC,CAAC;gBAC7D,GAAG,CAAC,QAAQ,CAAC,GAAG,EAAE,mBAAmB,CAAC,YAAY,EAAE,WAAW,EAAE,KAAK,CAAC,CAAC,CAAC;YAC7E,CAAC;QACL,CAAC;IACL,CAAC,CAAC,CAAC;IAEH,OAAO,MAAM,CAAC;AAClB,CAAC;AAED;;GAEG;AACH,SAAS,mBAAmB,CAAC,WAAmB,EAAE,KAAiB,EAAE,KAAc;IAC/E,MAAM,QAAQ,GAAG,IAAI,GAAG,CAAC,WAAW,CAAC,CAAC;IACtC,QAAQ,CAAC,YAAY,CAAC,GAAG,CAAC,OAAO,EAAE,KAAK,CAAC,SAAS,CAAC,CAAC;IACpD,QAAQ,CAAC,YAAY,CAAC,GAAG,CAAC,mBAAmB,EAAE,KAAK,CAAC,OAAO,CAAC,CAAC;IAC9D,IAAI,KAAK,CAAC,QAAQ,EAAE,CAAC;QACjB,QAAQ,CAAC,YAAY,CAAC,GAAG,CAAC,WAAW,EAAE,KAAK,CAAC,QAAQ,CAAC,CAAC;IAC3D,CAAC;IACD,IAAI,KAAK,EAAE,CAAC;QACR,QAAQ,CAAC,YAAY,CAAC,GAAG,CAAC,OAAO,EAAE,KAAK,CAAC,CAAC;IAC9C,CAAC;IACD,OAAO,QAAQ,CAAC,IAAI,CAAC;AACzB,CAAC"}

package/references/vscode-extension/dist/vendor/@modelcontextprotocol/sdk/dist/cjs/server/auth/handlers/metadata.d.ts

@@ -1,4 +0,0 @@
-import { RequestHandler } from 'express';
-import { OAuthMetadata, OAuthProtectedResourceMetadata } from '../../../shared/auth.js';
-export declare function metadataHandler(metadata: OAuthMetadata | OAuthProtectedResourceMetadata): RequestHandler;
-//# sourceMappingURL=metadata.d.ts.map

package/references/vscode-extension/dist/vendor/@modelcontextprotocol/sdk/dist/cjs/server/auth/handlers/metadata.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"metadata.d.ts","sourceRoot":"","sources":["../../../../../src/server/auth/handlers/metadata.ts"],"names":[],"mappings":"AAAA,OAAgB,EAAE,cAAc,EAAE,MAAM,SAAS,CAAC;AAClD,OAAO,EAAE,aAAa,EAAE,8BAA8B,EAAE,MAAM,yBAAyB,CAAC;AAIxF,wBAAgB,eAAe,CAAC,QAAQ,EAAE,aAAa,GAAG,8BAA8B,GAAG,cAAc,CAaxG"}

package/references/vscode-extension/dist/vendor/@modelcontextprotocol/sdk/dist/cjs/server/auth/handlers/metadata.js

@@ -1,21 +0,0 @@
-"use strict";
-var __importDefault = (this && this.__importDefault) || function (mod) {
-    return (mod && mod.__esModule) ? mod : { "default": mod };
-};
-Object.defineProperty(exports, "__esModule", { value: true });
-exports.metadataHandler = metadataHandler;
-const express_1 = __importDefault(require("express"));
-const cors_1 = __importDefault(require("cors"));
-const allowedMethods_js_1 = require("../middleware/allowedMethods.js");
-function metadataHandler(metadata) {
-    // Nested router so we can configure middleware and restrict HTTP method
-    const router = express_1.default.Router();
-    // Configure CORS to allow any origin, to make accessible to web-based MCP clients
-    router.use((0, cors_1.default)());
-    router.use((0, allowedMethods_js_1.allowedMethods)(['GET', 'OPTIONS']));
-    router.get('/', (req, res) => {
-        res.status(200).json(metadata);
-    });
-    return router;
-}
-//# sourceMappingURL=metadata.js.map

package/references/vscode-extension/dist/vendor/@modelcontextprotocol/sdk/dist/cjs/server/auth/handlers/metadata.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"metadata.js","sourceRoot":"","sources":["../../../../../src/server/auth/handlers/metadata.ts"],"names":[],"mappings":";;;;;AAKA,0CAaC;AAlBD,sDAAkD;AAElD,gDAAwB;AACxB,uEAAiE;AAEjE,SAAgB,eAAe,CAAC,QAAwD;IACpF,wEAAwE;IACxE,MAAM,MAAM,GAAG,iBAAO,CAAC,MAAM,EAAE,CAAC;IAEhC,kFAAkF;IAClF,MAAM,CAAC,GAAG,CAAC,IAAA,cAAI,GAAE,CAAC,CAAC;IAEnB,MAAM,CAAC,GAAG,CAAC,IAAA,kCAAc,EAAC,CAAC,KAAK,EAAE,SAAS,CAAC,CAAC,CAAC,CAAC;IAC/C,MAAM,CAAC,GAAG,CAAC,GAAG,EAAE,CAAC,GAAG,EAAE,GAAG,EAAE,EAAE;QACzB,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;IACnC,CAAC,CAAC,CAAC;IAEH,OAAO,MAAM,CAAC;AAClB,CAAC"}

package/references/vscode-extension/dist/vendor/@modelcontextprotocol/sdk/dist/cjs/server/auth/handlers/register.d.ts

@@ -1,29 +0,0 @@
-import { RequestHandler } from 'express';
-import { OAuthRegisteredClientsStore } from '../clients.js';
-import { Options as RateLimitOptions } from 'express-rate-limit';
-export type ClientRegistrationHandlerOptions = {
-    /**
-     * A store used to save information about dynamically registered OAuth clients.
-     */
-    clientsStore: OAuthRegisteredClientsStore;
-    /**
-     * The number of seconds after which to expire issued client secrets, or 0 to prevent expiration of client secrets (not recommended).
-     *
-     * If not set, defaults to 30 days.
-     */
-    clientSecretExpirySeconds?: number;
-    /**
-     * Rate limiting configuration for the client registration endpoint.
-     * Set to false to disable rate limiting for this endpoint.
-     * Registration endpoints are particularly sensitive to abuse and should be rate limited.
-     */
-    rateLimit?: Partial<RateLimitOptions> | false;
-    /**
-     * Whether to generate a client ID before calling the client registration endpoint.
-     *
-     * If not set, defaults to true.
-     */
-    clientIdGeneration?: boolean;
-};
-export declare function clientRegistrationHandler({ clientsStore, clientSecretExpirySeconds, rateLimit: rateLimitConfig, clientIdGeneration }: ClientRegistrationHandlerOptions): RequestHandler;
-//# sourceMappingURL=register.d.ts.map

package/references/vscode-extension/dist/vendor/@modelcontextprotocol/sdk/dist/cjs/server/auth/handlers/register.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"register.d.ts","sourceRoot":"","sources":["../../../../../src/server/auth/handlers/register.ts"],"names":[],"mappings":"AAAA,OAAgB,EAAE,cAAc,EAAE,MAAM,SAAS,CAAC;AAIlD,OAAO,EAAE,2BAA2B,EAAE,MAAM,eAAe,CAAC;AAC5D,OAAO,EAAa,OAAO,IAAI,gBAAgB,EAAE,MAAM,oBAAoB,CAAC;AAI5E,MAAM,MAAM,gCAAgC,GAAG;IAC3C;;OAEG;IACH,YAAY,EAAE,2BAA2B,CAAC;IAE1C;;;;OAIG;IACH,yBAAyB,CAAC,EAAE,MAAM,CAAC;IAEnC;;;;OAIG;IACH,SAAS,CAAC,EAAE,OAAO,CAAC,gBAAgB,CAAC,GAAG,KAAK,CAAC;IAE9C;;;;OAIG;IACH,kBAAkB,CAAC,EAAE,OAAO,CAAC;CAChC,CAAC;AAIF,wBAAgB,yBAAyB,CAAC,EACtC,YAAY,EACZ,yBAAgE,EAChE,SAAS,EAAE,eAAe,EAC1B,kBAAyB,EAC5B,EAAE,gCAAgC,GAAG,cAAc,CA0EnD"}

package/references/vscode-extension/dist/vendor/@modelcontextprotocol/sdk/dist/cjs/server/auth/handlers/register.js

@@ -1,77 +0,0 @@
-"use strict";
-var __importDefault = (this && this.__importDefault) || function (mod) {
-    return (mod && mod.__esModule) ? mod : { "default": mod };
-};
-Object.defineProperty(exports, "__esModule", { value: true });
-exports.clientRegistrationHandler = clientRegistrationHandler;
-const express_1 = __importDefault(require("express"));
-const auth_js_1 = require("../../../shared/auth.js");
-const node_crypto_1 = __importDefault(require("node:crypto"));
-const cors_1 = __importDefault(require("cors"));
-const express_rate_limit_1 = require("express-rate-limit");
-const allowedMethods_js_1 = require("../middleware/allowedMethods.js");
-const errors_js_1 = require("../errors.js");
-const DEFAULT_CLIENT_SECRET_EXPIRY_SECONDS = 30 * 24 * 60 * 60; // 30 days
-function clientRegistrationHandler({ clientsStore, clientSecretExpirySeconds = DEFAULT_CLIENT_SECRET_EXPIRY_SECONDS, rateLimit: rateLimitConfig, clientIdGeneration = true }) {
-    if (!clientsStore.registerClient) {
-        throw new Error('Client registration store does not support registering clients');
-    }
-    // Nested router so we can configure middleware and restrict HTTP method
-    const router = express_1.default.Router();
-    // Configure CORS to allow any origin, to make accessible to web-based MCP clients
-    router.use((0, cors_1.default)());
-    router.use((0, allowedMethods_js_1.allowedMethods)(['POST']));
-    router.use(express_1.default.json());
-    // Apply rate limiting unless explicitly disabled - stricter limits for registration
-    if (rateLimitConfig !== false) {
-        router.use((0, express_rate_limit_1.rateLimit)({
-            windowMs: 60 * 60 * 1000, // 1 hour
-            max: 20, // 20 requests per hour - stricter as registration is sensitive
-            standardHeaders: true,
-            legacyHeaders: false,
-            message: new errors_js_1.TooManyRequestsError('You have exceeded the rate limit for client registration requests').toResponseObject(),
-            ...rateLimitConfig
-        }));
-    }
-    router.post('/', async (req, res) => {
-        res.setHeader('Cache-Control', 'no-store');
-        try {
-            const parseResult = auth_js_1.OAuthClientMetadataSchema.safeParse(req.body);
-            if (!parseResult.success) {
-                throw new errors_js_1.InvalidClientMetadataError(parseResult.error.message);
-            }
-            const clientMetadata = parseResult.data;
-            const isPublicClient = clientMetadata.token_endpoint_auth_method === 'none';
-            // Generate client credentials
-            const clientSecret = isPublicClient ? undefined : node_crypto_1.default.randomBytes(32).toString('hex');
-            const clientIdIssuedAt = Math.floor(Date.now() / 1000);
-            // Calculate client secret expiry time
-            const clientsDoExpire = clientSecretExpirySeconds > 0;
-            const secretExpiryTime = clientsDoExpire ? clientIdIssuedAt + clientSecretExpirySeconds : 0;
-            const clientSecretExpiresAt = isPublicClient ? undefined : secretExpiryTime;
-            let clientInfo = {
-                ...clientMetadata,
-                client_secret: clientSecret,
-                client_secret_expires_at: clientSecretExpiresAt
-            };
-            if (clientIdGeneration) {
-                clientInfo.client_id = node_crypto_1.default.randomUUID();
-                clientInfo.client_id_issued_at = clientIdIssuedAt;
-            }
-            clientInfo = await clientsStore.registerClient(clientInfo);
-            res.status(201).json(clientInfo);
-        }
-        catch (error) {
-            if (error instanceof errors_js_1.OAuthError) {
-                const status = error instanceof errors_js_1.ServerError ? 500 : 400;
-                res.status(status).json(error.toResponseObject());
-            }
-            else {
-                const serverError = new errors_js_1.ServerError('Internal Server Error');
-                res.status(500).json(serverError.toResponseObject());
-            }
-        }
-    });
-    return router;
-}
-//# sourceMappingURL=register.js.map

package/references/vscode-extension/dist/vendor/@modelcontextprotocol/sdk/dist/cjs/server/auth/handlers/register.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"register.js","sourceRoot":"","sources":["../../../../../src/server/auth/handlers/register.ts"],"names":[],"mappings":";;;;;AAuCA,8DA+EC;AAtHD,sDAAkD;AAClD,qDAAgG;AAChG,8DAAiC;AACjC,gDAAwB;AAExB,2DAA4E;AAC5E,uEAAiE;AACjE,4CAAyG;AA8BzG,MAAM,oCAAoC,GAAG,EAAE,GAAG,EAAE,GAAG,EAAE,GAAG,EAAE,CAAC,CAAC,UAAU;AAE1E,SAAgB,yBAAyB,CAAC,EACtC,YAAY,EACZ,yBAAyB,GAAG,oCAAoC,EAChE,SAAS,EAAE,eAAe,EAC1B,kBAAkB,GAAG,IAAI,EACM;IAC/B,IAAI,CAAC,YAAY,CAAC,cAAc,EAAE,CAAC;QAC/B,MAAM,IAAI,KAAK,CAAC,gEAAgE,CAAC,CAAC;IACtF,CAAC;IAED,wEAAwE;IACxE,MAAM,MAAM,GAAG,iBAAO,CAAC,MAAM,EAAE,CAAC;IAEhC,kFAAkF;IAClF,MAAM,CAAC,GAAG,CAAC,IAAA,cAAI,GAAE,CAAC,CAAC;IAEnB,MAAM,CAAC,GAAG,CAAC,IAAA,kCAAc,EAAC,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC;IACrC,MAAM,CAAC,GAAG,CAAC,iBAAO,CAAC,IAAI,EAAE,CAAC,CAAC;IAE3B,oFAAoF;IACpF,IAAI,eAAe,KAAK,KAAK,EAAE,CAAC;QAC5B,MAAM,CAAC,GAAG,CACN,IAAA,8BAAS,EAAC;YACN,QAAQ,EAAE,EAAE,GAAG,EAAE,GAAG,IAAI,EAAE,SAAS;YACnC,GAAG,EAAE,EAAE,EAAE,+DAA+D;YACxE,eAAe,EAAE,IAAI;YACrB,aAAa,EAAE,KAAK;YACpB,OAAO,EAAE,IAAI,gCAAoB,CAAC,mEAAmE,CAAC,CAAC,gBAAgB,EAAE;YACzH,GAAG,eAAe;SACrB,CAAC,CACL,CAAC;IACN,CAAC;IAED,MAAM,CAAC,IAAI,CAAC,GAAG,EAAE,KAAK,EAAE,GAAG,EAAE,GAAG,EAAE,EAAE;QAChC,GAAG,CAAC,SAAS,CAAC,eAAe,EAAE,UAAU,CAAC,CAAC;QAE3C,IAAI,CAAC;YACD,MAAM,WAAW,GAAG,mCAAyB,CAAC,SAAS,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;YAClE,IAAI,CAAC,WAAW,CAAC,OAAO,EAAE,CAAC;gBACvB,MAAM,IAAI,sCAA0B,CAAC,WAAW,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC;YACpE,CAAC;YAED,MAAM,cAAc,GAAG,WAAW,CAAC,IAAI,CAAC;YACxC,MAAM,cAAc,GAAG,cAAc,CAAC,0BAA0B,KAAK,MAAM,CAAC;YAE5E,8BAA8B;YAC9B,MAAM,YAAY,GAAG,cAAc,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,qBAAM,CAAC,WAAW,CAAC,EAAE,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC;YACzF,MAAM,gBAAgB,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,IAAI,CAAC,CAAC;YAEvD,sCAAsC;YACtC,MAAM,eAAe,GAAG,yBAAyB,GAAG,CAAC,CAAC;YACtD,MAAM,gBAAgB,GAAG,eAAe,CAAC,CAAC,CAAC,gBAAgB,GAAG,yBAAyB,CAAC,CAAC,CAAC,CAAC,CAAC;YAC5F,MAAM,qBAAqB,GAAG,cAAc,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,gBAAgB,CAAC;YAE5E,IAAI,UAAU,GAA2E;gBACrF,GAAG,cAAc;gBACjB,aAAa,EAAE,YAAY;gBAC3B,wBAAwB,EAAE,qBAAqB;aAClD,CAAC;YAEF,IAAI,kBAAkB,EAAE,CAAC;gBACrB,UAAU,CAAC,SAAS,GAAG,qBAAM,CAAC,UAAU,EAAE,CAAC;gBAC3C,UAAU,CAAC,mBAAmB,GAAG,gBAAgB,CAAC;YACtD,CAAC;YAED,UAAU,GAAG,MAAM,YAAY,CAAC,cAAe,CAAC,UAAU,CAAC,CAAC;YAC5D,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC;QACrC,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACb,IAAI,KAAK,YAAY,sBAAU,EAAE,CAAC;gBAC9B,MAAM,MAAM,GAAG,KAAK,YAAY,uBAAW,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,GAAG,CAAC;gBACxD,GAAG,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,gBAAgB,EAAE,CAAC,CAAC;YACtD,CAAC;iBAAM,CAAC;gBACJ,MAAM,WAAW,GAAG,IAAI,uBAAW,CAAC,uBAAuB,CAAC,CAAC;gBAC7D,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,WAAW,CAAC,gBAAgB,EAAE,CAAC,CAAC;YACzD,CAAC;QACL,CAAC;IACL,CAAC,CAAC,CAAC;IAEH,OAAO,MAAM,CAAC;AAClB,CAAC"}

package/references/vscode-extension/dist/vendor/@modelcontextprotocol/sdk/dist/cjs/server/auth/handlers/revoke.d.ts

@@ -1,13 +0,0 @@
-import { OAuthServerProvider } from '../provider.js';
-import { RequestHandler } from 'express';
-import { Options as RateLimitOptions } from 'express-rate-limit';
-export type RevocationHandlerOptions = {
-    provider: OAuthServerProvider;
-    /**
-     * Rate limiting configuration for the token revocation endpoint.
-     * Set to false to disable rate limiting for this endpoint.
-     */
-    rateLimit?: Partial<RateLimitOptions> | false;
-};
-export declare function revocationHandler({ provider, rateLimit: rateLimitConfig }: RevocationHandlerOptions): RequestHandler;
-//# sourceMappingURL=revoke.d.ts.map

package/references/vscode-extension/dist/vendor/@modelcontextprotocol/sdk/dist/cjs/server/auth/handlers/revoke.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"revoke.d.ts","sourceRoot":"","sources":["../../../../../src/server/auth/handlers/revoke.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,mBAAmB,EAAE,MAAM,gBAAgB,CAAC;AACrD,OAAgB,EAAE,cAAc,EAAE,MAAM,SAAS,CAAC;AAIlD,OAAO,EAAa,OAAO,IAAI,gBAAgB,EAAE,MAAM,oBAAoB,CAAC;AAI5E,MAAM,MAAM,wBAAwB,GAAG;IACnC,QAAQ,EAAE,mBAAmB,CAAC;IAC9B;;;OAGG;IACH,SAAS,CAAC,EAAE,OAAO,CAAC,gBAAgB,CAAC,GAAG,KAAK,CAAC;CACjD,CAAC;AAEF,wBAAgB,iBAAiB,CAAC,EAAE,QAAQ,EAAE,SAAS,EAAE,eAAe,EAAE,EAAE,wBAAwB,GAAG,cAAc,CA4DpH"}

package/references/vscode-extension/dist/vendor/@modelcontextprotocol/sdk/dist/cjs/server/auth/handlers/revoke.js

@@ -1,65 +0,0 @@
-"use strict";
-var __importDefault = (this && this.__importDefault) || function (mod) {
-    return (mod && mod.__esModule) ? mod : { "default": mod };
-};
-Object.defineProperty(exports, "__esModule", { value: true });
-exports.revocationHandler = revocationHandler;
-const express_1 = __importDefault(require("express"));
-const cors_1 = __importDefault(require("cors"));
-const clientAuth_js_1 = require("../middleware/clientAuth.js");
-const auth_js_1 = require("../../../shared/auth.js");
-const express_rate_limit_1 = require("express-rate-limit");
-const allowedMethods_js_1 = require("../middleware/allowedMethods.js");
-const errors_js_1 = require("../errors.js");
-function revocationHandler({ provider, rateLimit: rateLimitConfig }) {
-    if (!provider.revokeToken) {
-        throw new Error('Auth provider does not support revoking tokens');
-    }
-    // Nested router so we can configure middleware and restrict HTTP method
-    const router = express_1.default.Router();
-    // Configure CORS to allow any origin, to make accessible to web-based MCP clients
-    router.use((0, cors_1.default)());
-    router.use((0, allowedMethods_js_1.allowedMethods)(['POST']));
-    router.use(express_1.default.urlencoded({ extended: false }));
-    // Apply rate limiting unless explicitly disabled
-    if (rateLimitConfig !== false) {
-        router.use((0, express_rate_limit_1.rateLimit)({
-            windowMs: 15 * 60 * 1000, // 15 minutes
-            max: 50, // 50 requests per windowMs
-            standardHeaders: true,
-            legacyHeaders: false,
-            message: new errors_js_1.TooManyRequestsError('You have exceeded the rate limit for token revocation requests').toResponseObject(),
-            ...rateLimitConfig
-        }));
-    }
-    // Authenticate and extract client details
-    router.use((0, clientAuth_js_1.authenticateClient)({ clientsStore: provider.clientsStore }));
-    router.post('/', async (req, res) => {
-        res.setHeader('Cache-Control', 'no-store');
-        try {
-            const parseResult = auth_js_1.OAuthTokenRevocationRequestSchema.safeParse(req.body);
-            if (!parseResult.success) {
-                throw new errors_js_1.InvalidRequestError(parseResult.error.message);
-            }
-            const client = req.client;
-            if (!client) {
-                // This should never happen
-                throw new errors_js_1.ServerError('Internal Server Error');
-            }
-            await provider.revokeToken(client, parseResult.data);
-            res.status(200).json({});
-        }
-        catch (error) {
-            if (error instanceof errors_js_1.OAuthError) {
-                const status = error instanceof errors_js_1.ServerError ? 500 : 400;
-                res.status(status).json(error.toResponseObject());
-            }
-            else {
-                const serverError = new errors_js_1.ServerError('Internal Server Error');
-                res.status(500).json(serverError.toResponseObject());
-            }
-        }
-    });
-    return router;
-}
-//# sourceMappingURL=revoke.js.map