Commit

node_modules/mongodb/lib/cmap/auth/auth_provider.js

@@ -0,0 +1,51 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.AuthProvider = exports.AuthContext = void 0;
+const error_1 = require("../../error");
+/**
+ * Context used during authentication
+ * @internal
+ */
+class AuthContext {
+    constructor(connection, credentials, options) {
+        /** If the context is for reauthentication. */
+        this.reauthenticating = false;
+        this.connection = connection;
+        this.credentials = credentials;
+        this.options = options;
+    }
+}
+exports.AuthContext = AuthContext;
+/**
+ * Provider used during authentication.
+ * @internal
+ */
+class AuthProvider {
+    /**
+     * Prepare the handshake document before the initial handshake.
+     *
+     * @param handshakeDoc - The document used for the initial handshake on a connection
+     * @param authContext - Context for authentication flow
+     */
+    async prepare(handshakeDoc, _authContext) {
+        return handshakeDoc;
+    }
+    /**
+     * Reauthenticate.
+     * @param context - The shared auth context.
+     */
+    async reauth(context) {
+        if (context.reauthenticating) {
+            throw new error_1.MongoRuntimeError('Reauthentication already in progress.');
+        }
+        try {
+            context.reauthenticating = true;
+            await this.auth(context);
+        }
+        finally {
+            context.reauthenticating = false;
+        }
+    }
+}
+exports.AuthProvider = AuthProvider;
+//# sourceMappingURL=auth_provider.js.map

node_modules/mongodb/lib/cmap/auth/auth_provider.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"auth_provider.js","sourceRoot":"","sources":["../../../src/cmap/auth/auth_provider.ts"],"names":[],"mappings":";;;AACA,uCAAgD;AAKhD;;;GAGG;AACH,MAAa,WAAW;IAetB,YACE,UAAsB,EACtB,WAAyC,EACzC,OAA0B;QAb5B,8CAA8C;QAC9C,qBAAgB,GAAG,KAAK,CAAC;QAcvB,IAAI,CAAC,UAAU,GAAG,UAAU,CAAC;QAC7B,IAAI,CAAC,WAAW,GAAG,WAAW,CAAC;QAC/B,IAAI,CAAC,OAAO,GAAG,OAAO,CAAC;IACzB,CAAC;CACF;AAxBD,kCAwBC;AAED;;;GAGG;AACH,MAAsB,YAAY;IAChC;;;;;OAKG;IACH,KAAK,CAAC,OAAO,CACX,YAA+B,EAC/B,YAAyB;QAEzB,OAAO,YAAY,CAAC;IACtB,CAAC;IASD;;;OAGG;IACH,KAAK,CAAC,MAAM,CAAC,OAAoB;QAC/B,IAAI,OAAO,CAAC,gBAAgB,EAAE,CAAC;YAC7B,MAAM,IAAI,yBAAiB,CAAC,uCAAuC,CAAC,CAAC;QACvE,CAAC;QACD,IAAI,CAAC;YACH,OAAO,CAAC,gBAAgB,GAAG,IAAI,CAAC;YAChC,MAAM,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;QAC3B,CAAC;gBAAS,CAAC;YACT,OAAO,CAAC,gBAAgB,GAAG,KAAK,CAAC;QACnC,CAAC;IACH,CAAC;CACF;AApCD,oCAoCC"}

node_modules/mongodb/lib/cmap/auth/aws_temporary_credentials.js

@@ -0,0 +1,102 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.AWSSDKCredentialProvider = void 0;
+const deps_1 = require("../../deps");
+const error_1 = require("../../error");
+/** @internal */
+class AWSSDKCredentialProvider {
+    /**
+     * Create the SDK credentials provider.
+     * @param credentialsProvider - The credentials provider.
+     */
+    constructor(credentialsProvider) {
+        if (credentialsProvider) {
+            this._provider = credentialsProvider;
+        }
+    }
+    static get awsSDK() {
+        AWSSDKCredentialProvider._awsSDK ??= (0, deps_1.getAwsCredentialProvider)();
+        return AWSSDKCredentialProvider._awsSDK;
+    }
+    /**
+     * The AWS SDK caches credentials automatically and handles refresh when the credentials have expired.
+     * To ensure this occurs, we need to cache the `provider` returned by the AWS sdk and re-use it when fetching credentials.
+     */
+    get provider() {
+        if ('kModuleError' in AWSSDKCredentialProvider.awsSDK) {
+            throw AWSSDKCredentialProvider.awsSDK.kModuleError;
+        }
+        if (this._provider) {
+            return this._provider;
+        }
+        let { AWS_STS_REGIONAL_ENDPOINTS = '', AWS_REGION = '' } = process.env;
+        AWS_STS_REGIONAL_ENDPOINTS = AWS_STS_REGIONAL_ENDPOINTS.toLowerCase();
+        AWS_REGION = AWS_REGION.toLowerCase();
+        /** The option setting should work only for users who have explicit settings in their environment, the driver should not encode "defaults" */
+        const awsRegionSettingsExist = AWS_REGION.length !== 0 && AWS_STS_REGIONAL_ENDPOINTS.length !== 0;
+        /**
+         * The following regions use the global AWS STS endpoint, sts.amazonaws.com, by default
+         * https://docs.aws.amazon.com/sdkref/latest/guide/feature-sts-regionalized-endpoints.html
+         */
+        const LEGACY_REGIONS = new Set([
+            'ap-northeast-1',
+            'ap-south-1',
+            'ap-southeast-1',
+            'ap-southeast-2',
+            'aws-global',
+            'ca-central-1',
+            'eu-central-1',
+            'eu-north-1',
+            'eu-west-1',
+            'eu-west-2',
+            'eu-west-3',
+            'sa-east-1',
+            'us-east-1',
+            'us-east-2',
+            'us-west-1',
+            'us-west-2'
+        ]);
+        /**
+         * If AWS_STS_REGIONAL_ENDPOINTS is set to regional, users are opting into the new behavior of respecting the region settings
+         *
+         * If AWS_STS_REGIONAL_ENDPOINTS is set to legacy, then "old" regions need to keep using the global setting.
+         * Technically the SDK gets this wrong, it reaches out to 'sts.us-east-1.amazonaws.com' when it should be 'sts.amazonaws.com'.
+         * That is not our bug to fix here. We leave that up to the SDK.
+         */
+        const useRegionalSts = AWS_STS_REGIONAL_ENDPOINTS === 'regional' ||
+            (AWS_STS_REGIONAL_ENDPOINTS === 'legacy' && !LEGACY_REGIONS.has(AWS_REGION));
+        this._provider =
+            awsRegionSettingsExist && useRegionalSts
+                ? AWSSDKCredentialProvider.awsSDK.fromNodeProviderChain({
+                    clientConfig: { region: AWS_REGION }
+                })
+                : AWSSDKCredentialProvider.awsSDK.fromNodeProviderChain();
+        return this._provider;
+    }
+    async getCredentials() {
+        /*
+         * Creates a credential provider that will attempt to find credentials from the
+         * following sources (listed in order of precedence):
+         *
+         * - Environment variables exposed via process.env
+         * - SSO credentials from token cache
+         * - Web identity token credentials
+         * - Shared credentials and config ini files
+         * - The EC2/ECS Instance Metadata Service
+         */
+        try {
+            const creds = await this.provider();
+            return {
+                AccessKeyId: creds.accessKeyId,
+                SecretAccessKey: creds.secretAccessKey,
+                Token: creds.sessionToken,
+                Expiration: creds.expiration
+            };
+        }
+        catch (error) {
+            throw new error_1.MongoAWSError(error.message, { cause: error });
+        }
+    }
+}
+exports.AWSSDKCredentialProvider = AWSSDKCredentialProvider;
+//# sourceMappingURL=aws_temporary_credentials.js.map

node_modules/mongodb/lib/cmap/auth/aws_temporary_credentials.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"aws_temporary_credentials.js","sourceRoot":"","sources":["../../../src/cmap/auth/aws_temporary_credentials.ts"],"names":[],"mappings":";;;AAAA,qCAA2E;AAC3E,uCAA4C;AAoB5C,gBAAgB;AAChB,MAAa,wBAAwB;IAInC;;;OAGG;IACH,YAAY,mBAA2C;QACrD,IAAI,mBAAmB,EAAE,CAAC;YACxB,IAAI,CAAC,SAAS,GAAG,mBAAmB,CAAC;QACvC,CAAC;IACH,CAAC;IAED,MAAM,KAAK,MAAM;QACf,wBAAwB,CAAC,OAAO,KAAK,IAAA,+BAAwB,GAAE,CAAC;QAChE,OAAO,wBAAwB,CAAC,OAAO,CAAC;IAC1C,CAAC;IAED;;;OAGG;IACH,IAAY,QAAQ;QAClB,IAAI,cAAc,IAAI,wBAAwB,CAAC,MAAM,EAAE,CAAC;YACtD,MAAM,wBAAwB,CAAC,MAAM,CAAC,YAAY,CAAC;QACrD,CAAC;QACD,IAAI,IAAI,CAAC,SAAS,EAAE,CAAC;YACnB,OAAO,IAAI,CAAC,SAAS,CAAC;QACxB,CAAC;QACD,IAAI,EAAE,0BAA0B,GAAG,EAAE,EAAE,UAAU,GAAG,EAAE,EAAE,GAAG,OAAO,CAAC,GAAG,CAAC;QACvE,0BAA0B,GAAG,0BAA0B,CAAC,WAAW,EAAE,CAAC;QACtE,UAAU,GAAG,UAAU,CAAC,WAAW,EAAE,CAAC;QAEtC,6IAA6I;QAC7I,MAAM,sBAAsB,GAC1B,UAAU,CAAC,MAAM,KAAK,CAAC,IAAI,0BAA0B,CAAC,MAAM,KAAK,CAAC,CAAC;QAErE;;;WAGG;QACH,MAAM,cAAc,GAAG,IAAI,GAAG,CAAC;YAC7B,gBAAgB;YAChB,YAAY;YACZ,gBAAgB;YAChB,gBAAgB;YAChB,YAAY;YACZ,cAAc;YACd,cAAc;YACd,YAAY;YACZ,WAAW;YACX,WAAW;YACX,WAAW;YACX,WAAW;YACX,WAAW;YACX,WAAW;YACX,WAAW;YACX,WAAW;SACZ,CAAC,CAAC;QACH;;;;;;WAMG;QACH,MAAM,cAAc,GAClB,0BAA0B,KAAK,UAAU;YACzC,CAAC,0BAA0B,KAAK,QAAQ,IAAI,CAAC,cAAc,CAAC,GAAG,CAAC,UAAU,CAAC,CAAC,CAAC;QAE/E,IAAI,CAAC,SAAS;YACZ,sBAAsB,IAAI,cAAc;gBACtC,CAAC,CAAC,wBAAwB,CAAC,MAAM,CAAC,qBAAqB,CAAC;oBACpD,YAAY,EAAE,EAAE,MAAM,EAAE,UAAU,EAAE;iBACrC,CAAC;gBACJ,CAAC,CAAC,wBAAwB,CAAC,MAAM,CAAC,qBAAqB,EAAE,CAAC;QAE9D,OAAO,IAAI,CAAC,SAAS,CAAC;IACxB,CAAC;IAED,KAAK,CAAC,cAAc;QAClB;;;;;;;;;WASG;QACH,IAAI,CAAC;YACH,MAAM,KAAK,GAAG,MAAM,IAAI,CAAC,QAAQ,EAAE,CAAC;YACpC,OAAO;gBACL,WAAW,EAAE,KAAK,CAAC,WAAW;gBAC9B,eAAe,EAAE,KAAK,CAAC,eAAe;gBACtC,KAAK,EAAE,KAAK,CAAC,YAAY;gBACzB,UAAU,EAAE,KAAK,CAAC,UAAU;aAC7B,CAAC;QACJ,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,MAAM,IAAI,qBAAa,CAAC,KAAK,CAAC,OAAO,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,CAAC,CAAC;QAC3D,CAAC;IACH,CAAC;CACF;AAxGD,4DAwGC"}

node_modules/mongodb/lib/cmap/auth/gssapi.js

@@ -0,0 +1,154 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.GSSAPI = exports.GSSAPICanonicalizationValue = void 0;
+exports.performGSSAPICanonicalizeHostName = performGSSAPICanonicalizeHostName;
+exports.resolveCname = resolveCname;
+const dns = require("dns");
+const deps_1 = require("../../deps");
+const error_1 = require("../../error");
+const utils_1 = require("../../utils");
+const auth_provider_1 = require("./auth_provider");
+/** @public */
+exports.GSSAPICanonicalizationValue = Object.freeze({
+    on: true,
+    off: false,
+    none: 'none',
+    forward: 'forward',
+    forwardAndReverse: 'forwardAndReverse'
+});
+async function externalCommand(connection, command) {
+    const response = await connection.command((0, utils_1.ns)('$external.$cmd'), command);
+    return response;
+}
+let krb;
+class GSSAPI extends auth_provider_1.AuthProvider {
+    async auth(authContext) {
+        const { connection, credentials } = authContext;
+        if (credentials == null) {
+            throw new error_1.MongoMissingCredentialsError('Credentials required for GSSAPI authentication');
+        }
+        const { username } = credentials;
+        const client = await makeKerberosClient(authContext);
+        const payload = await client.step('');
+        const saslStartResponse = await externalCommand(connection, saslStart(payload));
+        const negotiatedPayload = await negotiate(client, 10, saslStartResponse.payload);
+        const saslContinueResponse = await externalCommand(connection, saslContinue(negotiatedPayload, saslStartResponse.conversationId));
+        const finalizePayload = await finalize(client, username, saslContinueResponse.payload);
+        await externalCommand(connection, {
+            saslContinue: 1,
+            conversationId: saslContinueResponse.conversationId,
+            payload: finalizePayload
+        });
+    }
+}
+exports.GSSAPI = GSSAPI;
+async function makeKerberosClient(authContext) {
+    const { hostAddress } = authContext.options;
+    const { credentials } = authContext;
+    if (!hostAddress || typeof hostAddress.host !== 'string' || !credentials) {
+        throw new error_1.MongoInvalidArgumentError('Connection must have host and port and credentials defined.');
+    }
+    loadKrb();
+    if ('kModuleError' in krb) {
+        throw krb['kModuleError'];
+    }
+    const { initializeClient } = krb;
+    const { username, password } = credentials;
+    const mechanismProperties = credentials.mechanismProperties;
+    const serviceName = mechanismProperties.SERVICE_NAME ?? 'mongodb';
+    const host = await performGSSAPICanonicalizeHostName(hostAddress.host, mechanismProperties);
+    const initOptions = {};
+    if (password != null) {
+        // TODO(NODE-5139): These do not match the typescript options in initializeClient
+        Object.assign(initOptions, { user: username, password: password });
+    }
+    const spnHost = mechanismProperties.SERVICE_HOST ?? host;
+    let spn = `${serviceName}${process.platform === 'win32' ? '/' : '@'}${spnHost}`;
+    if ('SERVICE_REALM' in mechanismProperties) {
+        spn = `${spn}@${mechanismProperties.SERVICE_REALM}`;
+    }
+    return await initializeClient(spn, initOptions);
+}
+function saslStart(payload) {
+    return {
+        saslStart: 1,
+        mechanism: 'GSSAPI',
+        payload,
+        autoAuthorize: 1
+    };
+}
+function saslContinue(payload, conversationId) {
+    return {
+        saslContinue: 1,
+        conversationId,
+        payload
+    };
+}
+async function negotiate(client, retries, payload) {
+    try {
+        const response = await client.step(payload);
+        return response || '';
+    }
+    catch (error) {
+        if (retries === 0) {
+            // Retries exhausted, raise error
+            throw error;
+        }
+        // Adjust number of retries and call step again
+        return await negotiate(client, retries - 1, payload);
+    }
+}
+async function finalize(client, user, payload) {
+    // GSS Client Unwrap
+    const response = await client.unwrap(payload);
+    return await client.wrap(response || '', { user });
+}
+async function performGSSAPICanonicalizeHostName(host, mechanismProperties) {
+    const mode = mechanismProperties.CANONICALIZE_HOST_NAME;
+    if (!mode || mode === exports.GSSAPICanonicalizationValue.none) {
+        return host;
+    }
+    // If forward and reverse or true
+    if (mode === exports.GSSAPICanonicalizationValue.on ||
+        mode === exports.GSSAPICanonicalizationValue.forwardAndReverse) {
+        // Perform the lookup of the ip address.
+        const { address } = await dns.promises.lookup(host);
+        try {
+            // Perform a reverse ptr lookup on the ip address.
+            const results = await dns.promises.resolvePtr(address);
+            // If the ptr did not error but had no results, return the host.
+            return results.length > 0 ? results[0] : host;
+        }
+        catch {
+            // This can error as ptr records may not exist for all ips. In this case
+            // fallback to a cname lookup as dns.lookup() does not return the
+            // cname.
+            return await resolveCname(host);
+        }
+    }
+    else {
+        // The case for forward is just to resolve the cname as dns.lookup()
+        // will not return it.
+        return await resolveCname(host);
+    }
+}
+async function resolveCname(host) {
+    // Attempt to resolve the host name
+    try {
+        const results = await dns.promises.resolveCname(host);
+        // Get the first resolved host id
+        return results.length > 0 ? results[0] : host;
+    }
+    catch {
+        return host;
+    }
+}
+/**
+ * Load the Kerberos library.
+ */
+function loadKrb() {
+    if (!krb) {
+        krb = (0, deps_1.getKerberos)();
+    }
+}
+//# sourceMappingURL=gssapi.js.map

node_modules/mongodb/lib/cmap/auth/gssapi.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"gssapi.js","sourceRoot":"","sources":["../../../src/cmap/auth/gssapi.ts"],"names":[],"mappings":";;;AAoJA,8EAiCC;AAED,oCASC;AAhMD,2BAA2B;AAE3B,qCAA6E;AAC7E,uCAAsF;AACtF,uCAAiC;AAEjC,mDAAiE;AAEjE,cAAc;AACD,QAAA,2BAA2B,GAAG,MAAM,CAAC,MAAM,CAAC;IACvD,EAAE,EAAE,IAAI;IACR,GAAG,EAAE,KAAK;IACV,IAAI,EAAE,MAAM;IACZ,OAAO,EAAE,SAAS;IAClB,iBAAiB,EAAE,mBAAmB;CAC9B,CAAC,CAAC;AAaZ,KAAK,UAAU,eAAe,CAC5B,UAAsB,EACtB,OAAuE;IAEvE,MAAM,QAAQ,GAAG,MAAM,UAAU,CAAC,OAAO,CAAC,IAAA,UAAE,EAAC,gBAAgB,CAAC,EAAE,OAAO,CAAC,CAAC;IACzE,OAAO,QAAuD,CAAC;AACjE,CAAC;AAED,IAAI,GAAa,CAAC;AAElB,MAAa,MAAO,SAAQ,4BAAY;IAC7B,KAAK,CAAC,IAAI,CAAC,WAAwB;QAC1C,MAAM,EAAE,UAAU,EAAE,WAAW,EAAE,GAAG,WAAW,CAAC;QAChD,IAAI,WAAW,IAAI,IAAI,EAAE,CAAC;YACxB,MAAM,IAAI,oCAA4B,CAAC,gDAAgD,CAAC,CAAC;QAC3F,CAAC;QAED,MAAM,EAAE,QAAQ,EAAE,GAAG,WAAW,CAAC;QAEjC,MAAM,MAAM,GAAG,MAAM,kBAAkB,CAAC,WAAW,CAAC,CAAC;QAErD,MAAM,OAAO,GAAG,MAAM,MAAM,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;QAEtC,MAAM,iBAAiB,GAAG,MAAM,eAAe,CAAC,UAAU,EAAE,SAAS,CAAC,OAAO,CAAC,CAAC,CAAC;QAEhF,MAAM,iBAAiB,GAAG,MAAM,SAAS,CAAC,MAAM,EAAE,EAAE,EAAE,iBAAiB,CAAC,OAAO,CAAC,CAAC;QAEjF,MAAM,oBAAoB,GAAG,MAAM,eAAe,CAChD,UAAU,EACV,YAAY,CAAC,iBAAiB,EAAE,iBAAiB,CAAC,cAAc,CAAC,CAClE,CAAC;QAEF,MAAM,eAAe,GAAG,MAAM,QAAQ,CAAC,MAAM,EAAE,QAAQ,EAAE,oBAAoB,CAAC,OAAO,CAAC,CAAC;QAEvF,MAAM,eAAe,CAAC,UAAU,EAAE;YAChC,YAAY,EAAE,CAAC;YACf,cAAc,EAAE,oBAAoB,CAAC,cAAc;YACnD,OAAO,EAAE,eAAe;SACzB,CAAC,CAAC;IACL,CAAC;CACF;AA9BD,wBA8BC;AAED,KAAK,UAAU,kBAAkB,CAAC,WAAwB;IACxD,MAAM,EAAE,WAAW,EAAE,GAAG,WAAW,CAAC,OAAO,CAAC;IAC5C,MAAM,EAAE,WAAW,EAAE,GAAG,WAAW,CAAC;IACpC,IAAI,CAAC,WAAW,IAAI,OAAO,WAAW,CAAC,IAAI,KAAK,QAAQ,IAAI,CAAC,WAAW,EAAE,CAAC;QACzE,MAAM,IAAI,iCAAyB,CACjC,6DAA6D,CAC9D,CAAC;IACJ,CAAC;IAED,OAAO,EAAE,CAAC;IACV,IAAI,cAAc,IAAI,GAAG,EAAE,CAAC;QAC1B,MAAM,GAAG,CAAC,cAAc,CAAC,CAAC;IAC5B,CAAC;IACD,MAAM,EAAE,gBAAgB,EAAE,GAAG,GAAG,CAAC;IAEjC,MAAM,EAAE,QAAQ,EAAE,QAAQ,EAAE,GAAG,WAAW,CAAC;IAC3C,MAAM,mBAAmB,GAAG,WAAW,CAAC,mBAA0C,CAAC;IAEnF,MAAM,WAAW,GAAG,mBAAmB,CAAC,YAAY,IAAI,SAAS,CAAC;IAElE,MAAM,IAAI,GAAG,MAAM,iCAAiC,CAAC,WAAW,CAAC,IAAI,EAAE,mBAAmB,CAAC,CAAC;IAE5F,MAAM,WAAW,GAAG,EAAE,CAAC;IACvB,IAAI,QAAQ,IAAI,IAAI,EAAE,CAAC;QACrB,iFAAiF;QACjF,MAAM,CAAC,MAAM,CAAC,WAAW,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,QAAQ,EAAE,QAAQ,EAAE,CAAC,CAAC;IACrE,CAAC;IAED,MAAM,OAAO,GAAG,mBAAmB,CAAC,YAAY,IAAI,IAAI,CAAC;IACzD,IAAI,GAAG,GAAG,GAAG,WAAW,GAAG,OAAO,CAAC,QAAQ,KAAK,OAAO,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,GAAG,GAAG,OAAO,EAAE,CAAC;IAChF,IAAI,eAAe,IAAI,mBAAmB,EAAE,CAAC;QAC3C,GAAG,GAAG,GAAG,GAAG,IAAI,mBAAmB,CAAC,aAAa,EAAE,CAAC;IACtD,CAAC;IAED,OAAO,MAAM,gBAAgB,CAAC,GAAG,EAAE,WAAW,CAAC,CAAC;AAClD,CAAC;AAED,SAAS,SAAS,CAAC,OAAe;IAChC,OAAO;QACL,SAAS,EAAE,CAAC;QACZ,SAAS,EAAE,QAAQ;QACnB,OAAO;QACP,aAAa,EAAE,CAAC;KACR,CAAC;AACb,CAAC;AAED,SAAS,YAAY,CAAC,OAAe,EAAE,cAAsB;IAC3D,OAAO;QACL,YAAY,EAAE,CAAC;QACf,cAAc;QACd,OAAO;KACC,CAAC;AACb,CAAC;AAED,KAAK,UAAU,SAAS,CACtB,MAAsB,EACtB,OAAe,EACf,OAAe;IAEf,IAAI,CAAC;QACH,MAAM,QAAQ,GAAG,MAAM,MAAM,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;QAC5C,OAAO,QAAQ,IAAI,EAAE,CAAC;IACxB,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,IAAI,OAAO,KAAK,CAAC,EAAE,CAAC;YAClB,iCAAiC;YACjC,MAAM,KAAK,CAAC;QACd,CAAC;QACD,+CAA+C;QAC/C,OAAO,MAAM,SAAS,CAAC,MAAM,EAAE,OAAO,GAAG,CAAC,EAAE,OAAO,CAAC,CAAC;IACvD,CAAC;AACH,CAAC;AAED,KAAK,UAAU,QAAQ,CAAC,MAAsB,EAAE,IAAY,EAAE,OAAe;IAC3E,oBAAoB;IACpB,MAAM,QAAQ,GAAG,MAAM,MAAM,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC;IAC9C,OAAO,MAAM,MAAM,CAAC,IAAI,CAAC,QAAQ,IAAI,EAAE,EAAE,EAAE,IAAI,EAAE,CAAC,CAAC;AACrD,CAAC;AAEM,KAAK,UAAU,iCAAiC,CACrD,IAAY,EACZ,mBAAwC;IAExC,MAAM,IAAI,GAAG,mBAAmB,CAAC,sBAAsB,CAAC;IACxD,IAAI,CAAC,IAAI,IAAI,IAAI,KAAK,mCAA2B,CAAC,IAAI,EAAE,CAAC;QACvD,OAAO,IAAI,CAAC;IACd,CAAC;IAED,iCAAiC;IACjC,IACE,IAAI,KAAK,mCAA2B,CAAC,EAAE;QACvC,IAAI,KAAK,mCAA2B,CAAC,iBAAiB,EACtD,CAAC;QACD,wCAAwC;QACxC,MAAM,EAAE,OAAO,EAAE,GAAG,MAAM,GAAG,CAAC,QAAQ,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC;QAEpD,IAAI,CAAC;YACH,kDAAkD;YAClD,MAAM,OAAO,GAAG,MAAM,GAAG,CAAC,QAAQ,CAAC,UAAU,CAAC,OAAO,CAAC,CAAC;YACvD,gEAAgE;YAChE,OAAO,OAAO,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC;QAChD,CAAC;QAAC,MAAM,CAAC;YACP,wEAAwE;YACxE,iEAAiE;YACjE,SAAS;YACT,OAAO,MAAM,YAAY,CAAC,IAAI,CAAC,CAAC;QAClC,CAAC;IACH,CAAC;SAAM,CAAC;QACN,oEAAoE;QACpE,sBAAsB;QACtB,OAAO,MAAM,YAAY,CAAC,IAAI,CAAC,CAAC;IAClC,CAAC;AACH,CAAC;AAEM,KAAK,UAAU,YAAY,CAAC,IAAY;IAC7C,mCAAmC;IACnC,IAAI,CAAC;QACH,MAAM,OAAO,GAAG,MAAM,GAAG,CAAC,QAAQ,CAAC,YAAY,CAAC,IAAI,CAAC,CAAC;QACtD,iCAAiC;QACjC,OAAO,OAAO,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC;IAChD,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,IAAI,CAAC;IACd,CAAC;AACH,CAAC;AAED;;GAEG;AACH,SAAS,OAAO;IACd,IAAI,CAAC,GAAG,EAAE,CAAC;QACT,GAAG,GAAG,IAAA,kBAAW,GAAE,CAAC;IACtB,CAAC;AACH,CAAC"}

node_modules/mongodb/lib/cmap/auth/mongo_credentials.js

@@ -0,0 +1,168 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.MongoCredentials = exports.DEFAULT_ALLOWED_HOSTS = void 0;
+const error_1 = require("../../error");
+const gssapi_1 = require("./gssapi");
+const providers_1 = require("./providers");
+/**
+ * @see https://github.com/mongodb/specifications/blob/master/source/auth/auth.md
+ */
+function getDefaultAuthMechanism(hello) {
+    if (hello) {
+        // If hello contains saslSupportedMechs, use scram-sha-256
+        // if it is available, else scram-sha-1
+        if (Array.isArray(hello.saslSupportedMechs)) {
+            return hello.saslSupportedMechs.includes(providers_1.AuthMechanism.MONGODB_SCRAM_SHA256)
+                ? providers_1.AuthMechanism.MONGODB_SCRAM_SHA256
+                : providers_1.AuthMechanism.MONGODB_SCRAM_SHA1;
+        }
+    }
+    // Default auth mechanism for 4.0 and higher.
+    return providers_1.AuthMechanism.MONGODB_SCRAM_SHA256;
+}
+const ALLOWED_ENVIRONMENT_NAMES = [
+    'test',
+    'azure',
+    'gcp',
+    'k8s'
+];
+const ALLOWED_HOSTS_ERROR = 'Auth mechanism property ALLOWED_HOSTS must be an array of strings.';
+/** @internal */
+exports.DEFAULT_ALLOWED_HOSTS = [
+    '*.mongodb.net',
+    '*.mongodb-qa.net',
+    '*.mongodb-dev.net',
+    '*.mongodbgov.net',
+    'localhost',
+    '127.0.0.1',
+    '::1'
+];
+/** Error for when the token audience is missing in the environment. */
+const TOKEN_RESOURCE_MISSING_ERROR = 'TOKEN_RESOURCE must be set in the auth mechanism properties when ENVIRONMENT is azure or gcp.';
+/**
+ * A representation of the credentials used by MongoDB
+ * @public
+ */
+class MongoCredentials {
+    constructor(options) {
+        this.username = options.username ?? '';
+        this.password = options.password;
+        this.source = options.source;
+        if (!this.source && options.db) {
+            this.source = options.db;
+        }
+        this.mechanism = options.mechanism || providers_1.AuthMechanism.MONGODB_DEFAULT;
+        this.mechanismProperties = options.mechanismProperties || {};
+        if (this.mechanism === providers_1.AuthMechanism.MONGODB_OIDC && !this.mechanismProperties.ALLOWED_HOSTS) {
+            this.mechanismProperties = {
+                ...this.mechanismProperties,
+                ALLOWED_HOSTS: exports.DEFAULT_ALLOWED_HOSTS
+            };
+        }
+        Object.freeze(this.mechanismProperties);
+        Object.freeze(this);
+    }
+    /** Determines if two MongoCredentials objects are equivalent */
+    equals(other) {
+        return (this.mechanism === other.mechanism &&
+            this.username === other.username &&
+            this.password === other.password &&
+            this.source === other.source);
+    }
+    /**
+     * If the authentication mechanism is set to "default", resolves the authMechanism
+     * based on the server version and server supported sasl mechanisms.
+     *
+     * @param hello - A hello response from the server
+     */
+    resolveAuthMechanism(hello) {
+        // If the mechanism is not "default", then it does not need to be resolved
+        if (this.mechanism.match(/DEFAULT/i)) {
+            return new MongoCredentials({
+                username: this.username,
+                password: this.password,
+                source: this.source,
+                mechanism: getDefaultAuthMechanism(hello),
+                mechanismProperties: this.mechanismProperties
+            });
+        }
+        return this;
+    }
+    validate() {
+        if ((this.mechanism === providers_1.AuthMechanism.MONGODB_GSSAPI ||
+            this.mechanism === providers_1.AuthMechanism.MONGODB_PLAIN ||
+            this.mechanism === providers_1.AuthMechanism.MONGODB_SCRAM_SHA1 ||
+            this.mechanism === providers_1.AuthMechanism.MONGODB_SCRAM_SHA256) &&
+            !this.username) {
+            throw new error_1.MongoMissingCredentialsError(`Username required for mechanism '${this.mechanism}'`);
+        }
+        if (this.mechanism === providers_1.AuthMechanism.MONGODB_OIDC) {
+            if (this.username &&
+                this.mechanismProperties.ENVIRONMENT &&
+                this.mechanismProperties.ENVIRONMENT !== 'azure') {
+                throw new error_1.MongoInvalidArgumentError(`username and ENVIRONMENT '${this.mechanismProperties.ENVIRONMENT}' may not be used together for mechanism '${this.mechanism}'.`);
+            }
+            if (this.username && this.password) {
+                throw new error_1.MongoInvalidArgumentError(`No password is allowed in ENVIRONMENT '${this.mechanismProperties.ENVIRONMENT}' for '${this.mechanism}'.`);
+            }
+            if ((this.mechanismProperties.ENVIRONMENT === 'azure' ||
+                this.mechanismProperties.ENVIRONMENT === 'gcp') &&
+                !this.mechanismProperties.TOKEN_RESOURCE) {
+                throw new error_1.MongoInvalidArgumentError(TOKEN_RESOURCE_MISSING_ERROR);
+            }
+            if (this.mechanismProperties.ENVIRONMENT &&
+                !ALLOWED_ENVIRONMENT_NAMES.includes(this.mechanismProperties.ENVIRONMENT)) {
+                throw new error_1.MongoInvalidArgumentError(`Currently only a ENVIRONMENT in ${ALLOWED_ENVIRONMENT_NAMES.join(',')} is supported for mechanism '${this.mechanism}'.`);
+            }
+            if (!this.mechanismProperties.ENVIRONMENT &&
+                !this.mechanismProperties.OIDC_CALLBACK &&
+                !this.mechanismProperties.OIDC_HUMAN_CALLBACK) {
+                throw new error_1.MongoInvalidArgumentError(`Either a ENVIRONMENT, OIDC_CALLBACK, or OIDC_HUMAN_CALLBACK must be specified for mechanism '${this.mechanism}'.`);
+            }
+            if (this.mechanismProperties.ALLOWED_HOSTS) {
+                const hosts = this.mechanismProperties.ALLOWED_HOSTS;
+                if (!Array.isArray(hosts)) {
+                    throw new error_1.MongoInvalidArgumentError(ALLOWED_HOSTS_ERROR);
+                }
+                for (const host of hosts) {
+                    if (typeof host !== 'string') {
+                        throw new error_1.MongoInvalidArgumentError(ALLOWED_HOSTS_ERROR);
+                    }
+                }
+            }
+        }
+        if (providers_1.AUTH_MECHS_AUTH_SRC_EXTERNAL.has(this.mechanism)) {
+            if (this.source != null && this.source !== '$external') {
+                // TODO(NODE-3485): Replace this with a MongoAuthValidationError
+                throw new error_1.MongoAPIError(`Invalid source '${this.source}' for mechanism '${this.mechanism}' specified.`);
+            }
+        }
+        if (this.mechanism === providers_1.AuthMechanism.MONGODB_PLAIN && this.source == null) {
+            // TODO(NODE-3485): Replace this with a MongoAuthValidationError
+            throw new error_1.MongoAPIError('PLAIN Authentication Mechanism needs an auth source');
+        }
+        if (this.mechanism === providers_1.AuthMechanism.MONGODB_X509 && this.password != null) {
+            if (this.password === '') {
+                Reflect.set(this, 'password', undefined);
+                return;
+            }
+            // TODO(NODE-3485): Replace this with a MongoAuthValidationError
+            throw new error_1.MongoAPIError(`Password not allowed for mechanism MONGODB-X509`);
+        }
+        const canonicalization = this.mechanismProperties.CANONICALIZE_HOST_NAME ?? false;
+        if (!Object.values(gssapi_1.GSSAPICanonicalizationValue).includes(canonicalization)) {
+            throw new error_1.MongoAPIError(`Invalid CANONICALIZE_HOST_NAME value: ${canonicalization}`);
+        }
+    }
+    static merge(creds, options) {
+        return new MongoCredentials({
+            username: options.username ?? creds?.username ?? '',
+            password: options.password ?? creds?.password ?? '',
+            mechanism: options.mechanism ?? creds?.mechanism ?? providers_1.AuthMechanism.MONGODB_DEFAULT,
+            mechanismProperties: options.mechanismProperties ?? creds?.mechanismProperties ?? {},
+            source: options.source ?? options.db ?? creds?.source ?? 'admin'
+        });
+    }
+}
+exports.MongoCredentials = MongoCredentials;
+//# sourceMappingURL=mongo_credentials.js.map

node_modules/mongodb/lib/cmap/auth/mongodb_aws.js

@@ -0,0 +1,133 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.MongoDBAWS = void 0;
+const BSON = require("../../bson");
+const deps_1 = require("../../deps");
+const error_1 = require("../../error");
+const utils_1 = require("../../utils");
+const auth_provider_1 = require("./auth_provider");
+const aws_temporary_credentials_1 = require("./aws_temporary_credentials");
+const mongo_credentials_1 = require("./mongo_credentials");
+const providers_1 = require("./providers");
+const ASCII_N = 110;
+const bsonOptions = {
+    useBigInt64: false,
+    promoteLongs: true,
+    promoteValues: true,
+    promoteBuffers: false,
+    bsonRegExp: false
+};
+class MongoDBAWS extends auth_provider_1.AuthProvider {
+    constructor(credentialProvider) {
+        super();
+        this.credentialFetcher = new aws_temporary_credentials_1.AWSSDKCredentialProvider(credentialProvider);
+    }
+    async auth(authContext) {
+        const { connection } = authContext;
+        if (!authContext.credentials) {
+            throw new error_1.MongoMissingCredentialsError('AuthContext must provide credentials.');
+        }
+        if ('kModuleError' in deps_1.aws4) {
+            throw deps_1.aws4['kModuleError'];
+        }
+        const { sign } = deps_1.aws4;
+        if ((0, utils_1.maxWireVersion)(connection) < 9) {
+            throw new error_1.MongoCompatibilityError('MONGODB-AWS authentication requires MongoDB version 4.4 or later');
+        }
+        authContext.credentials = await makeTempCredentials(authContext.credentials, this.credentialFetcher);
+        const { credentials } = authContext;
+        const accessKeyId = credentials.username;
+        const secretAccessKey = credentials.password;
+        // Allow the user to specify an AWS session token for authentication with temporary credentials.
+        const sessionToken = credentials.mechanismProperties.AWS_SESSION_TOKEN;
+        // If all three defined, include sessionToken, else include username and pass, else no credentials
+        const awsCredentials = accessKeyId && secretAccessKey && sessionToken
+            ? { accessKeyId, secretAccessKey, sessionToken }
+            : accessKeyId && secretAccessKey
+                ? { accessKeyId, secretAccessKey }
+                : undefined;
+        const db = credentials.source;
+        const nonce = await (0, utils_1.randomBytes)(32);
+        // All messages between MongoDB clients and servers are sent as BSON objects
+        // in the payload field of saslStart and saslContinue.
+        const saslStart = {
+            saslStart: 1,
+            mechanism: 'MONGODB-AWS',
+            payload: BSON.serialize({ r: nonce, p: ASCII_N }, bsonOptions)
+        };
+        const saslStartResponse = await connection.command((0, utils_1.ns)(`${db}.$cmd`), saslStart, undefined);
+        const serverResponse = BSON.deserialize(saslStartResponse.payload.buffer, bsonOptions);
+        const host = serverResponse.h;
+        const serverNonce = serverResponse.s.buffer;
+        if (serverNonce.length !== 64) {
+            // TODO(NODE-3483)
+            throw new error_1.MongoRuntimeError(`Invalid server nonce length ${serverNonce.length}, expected 64`);
+        }
+        if (!utils_1.ByteUtils.equals(serverNonce.subarray(0, nonce.byteLength), nonce)) {
+            // throw because the serverNonce's leading 32 bytes must equal the client nonce's 32 bytes
+            // https://github.com/mongodb/specifications/blob/master/source/auth/auth.md#conversation-5
+            // TODO(NODE-3483)
+            throw new error_1.MongoRuntimeError('Server nonce does not begin with client nonce');
+        }
+        if (host.length < 1 || host.length > 255 || host.indexOf('..') !== -1) {
+            // TODO(NODE-3483)
+            throw new error_1.MongoRuntimeError(`Server returned an invalid host: "${host}"`);
+        }
+        const body = 'Action=GetCallerIdentity&Version=2011-06-15';
+        const options = sign({
+            method: 'POST',
+            host,
+            region: deriveRegion(serverResponse.h),
+            service: 'sts',
+            headers: {
+                'Content-Type': 'application/x-www-form-urlencoded',
+                'Content-Length': body.length,
+                'X-MongoDB-Server-Nonce': utils_1.ByteUtils.toBase64(serverNonce),
+                'X-MongoDB-GS2-CB-Flag': 'n'
+            },
+            path: '/',
+            body
+        }, awsCredentials);
+        const payload = {
+            a: options.headers.Authorization,
+            d: options.headers['X-Amz-Date']
+        };
+        if (sessionToken) {
+            payload.t = sessionToken;
+        }
+        const saslContinue = {
+            saslContinue: 1,
+            conversationId: saslStartResponse.conversationId,
+            payload: BSON.serialize(payload, bsonOptions)
+        };
+        await connection.command((0, utils_1.ns)(`${db}.$cmd`), saslContinue, undefined);
+    }
+}
+exports.MongoDBAWS = MongoDBAWS;
+async function makeTempCredentials(credentials, awsCredentialFetcher) {
+    function makeMongoCredentialsFromAWSTemp(creds) {
+        // The AWS session token (creds.Token) may or may not be set.
+        if (!creds.AccessKeyId || !creds.SecretAccessKey) {
+            throw new error_1.MongoMissingCredentialsError('Could not obtain temporary MONGODB-AWS credentials');
+        }
+        return new mongo_credentials_1.MongoCredentials({
+            username: creds.AccessKeyId,
+            password: creds.SecretAccessKey,
+            source: credentials.source,
+            mechanism: providers_1.AuthMechanism.MONGODB_AWS,
+            mechanismProperties: {
+                AWS_SESSION_TOKEN: creds.Token
+            }
+        });
+    }
+    const temporaryCredentials = await awsCredentialFetcher.getCredentials();
+    return makeMongoCredentialsFromAWSTemp(temporaryCredentials);
+}
+function deriveRegion(host) {
+    const parts = host.split('.');
+    if (parts.length === 1 || parts[1] === 'amazonaws') {
+        return 'us-east-1';
+    }
+    return parts[1];
+}
+//# sourceMappingURL=mongodb_aws.js.map

node_modules/mongodb/lib/cmap/auth/mongodb_aws.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"mongodb_aws.js","sourceRoot":"","sources":["../../../src/cmap/auth/mongodb_aws.ts"],"names":[],"mappings":";;;AACA,mCAAmC;AACnC,qCAAkC;AAClC,uCAIqB;AACrB,uCAAyE;AACzE,mDAAiE;AACjE,2EAIqC;AACrC,2DAAuD;AACvD,2CAA4C;AAE5C,MAAM,OAAO,GAAG,GAAG,CAAC;AACpB,MAAM,WAAW,GAAyB;IACxC,WAAW,EAAE,KAAK;IAClB,YAAY,EAAE,IAAI;IAClB,aAAa,EAAE,IAAI;IACnB,cAAc,EAAE,KAAK;IACrB,UAAU,EAAE,KAAK;CAClB,CAAC;AAQF,MAAa,UAAW,SAAQ,4BAAY;IAG1C,YAAY,kBAA0C;QACpD,KAAK,EAAE,CAAC;QACR,IAAI,CAAC,iBAAiB,GAAG,IAAI,oDAAwB,CAAC,kBAAkB,CAAC,CAAC;IAC5E,CAAC;IAEQ,KAAK,CAAC,IAAI,CAAC,WAAwB;QAC1C,MAAM,EAAE,UAAU,EAAE,GAAG,WAAW,CAAC;QACnC,IAAI,CAAC,WAAW,CAAC,WAAW,EAAE,CAAC;YAC7B,MAAM,IAAI,oCAA4B,CAAC,uCAAuC,CAAC,CAAC;QAClF,CAAC;QAED,IAAI,cAAc,IAAI,WAAI,EAAE,CAAC;YAC3B,MAAM,WAAI,CAAC,cAAc,CAAC,CAAC;QAC7B,CAAC;QACD,MAAM,EAAE,IAAI,EAAE,GAAG,WAAI,CAAC;QAEtB,IAAI,IAAA,sBAAc,EAAC,UAAU,CAAC,GAAG,CAAC,EAAE,CAAC;YACnC,MAAM,IAAI,+BAAuB,CAC/B,kEAAkE,CACnE,CAAC;QACJ,CAAC;QAED,WAAW,CAAC,WAAW,GAAG,MAAM,mBAAmB,CACjD,WAAW,CAAC,WAAW,EACvB,IAAI,CAAC,iBAAiB,CACvB,CAAC;QAEF,MAAM,EAAE,WAAW,EAAE,GAAG,WAAW,CAAC;QAEpC,MAAM,WAAW,GAAG,WAAW,CAAC,QAAQ,CAAC;QACzC,MAAM,eAAe,GAAG,WAAW,CAAC,QAAQ,CAAC;QAC7C,gGAAgG;QAChG,MAAM,YAAY,GAAG,WAAW,CAAC,mBAAmB,CAAC,iBAAiB,CAAC;QAEvE,kGAAkG;QAClG,MAAM,cAAc,GAClB,WAAW,IAAI,eAAe,IAAI,YAAY;YAC5C,CAAC,CAAC,EAAE,WAAW,EAAE,eAAe,EAAE,YAAY,EAAE;YAChD,CAAC,CAAC,WAAW,IAAI,eAAe;gBAC9B,CAAC,CAAC,EAAE,WAAW,EAAE,eAAe,EAAE;gBAClC,CAAC,CAAC,SAAS,CAAC;QAElB,MAAM,EAAE,GAAG,WAAW,CAAC,MAAM,CAAC;QAC9B,MAAM,KAAK,GAAG,MAAM,IAAA,mBAAW,EAAC,EAAE,CAAC,CAAC;QAEpC,4EAA4E;QAC5E,sDAAsD;QACtD,MAAM,SAAS,GAAG;YAChB,SAAS,EAAE,CAAC;YACZ,SAAS,EAAE,aAAa;YACxB,OAAO,EAAE,IAAI,CAAC,SAAS,CAAC,EAAE,CAAC,EAAE,KAAK,EAAE,CAAC,EAAE,OAAO,EAAE,EAAE,WAAW,CAAC;SAC/D,CAAC;QAEF,MAAM,iBAAiB,GAAG,MAAM,UAAU,CAAC,OAAO,CAAC,IAAA,UAAE,EAAC,GAAG,EAAE,OAAO,CAAC,EAAE,SAAS,EAAE,SAAS,CAAC,CAAC;QAE3F,MAAM,cAAc,GAAG,IAAI,CAAC,WAAW,CAAC,iBAAiB,CAAC,OAAO,CAAC,MAAM,EAAE,WAAW,CAGpF,CAAC;QACF,MAAM,IAAI,GAAG,cAAc,CAAC,CAAC,CAAC;QAC9B,MAAM,WAAW,GAAG,cAAc,CAAC,CAAC,CAAC,MAAM,CAAC;QAC5C,IAAI,WAAW,CAAC,MAAM,KAAK,EAAE,EAAE,CAAC;YAC9B,kBAAkB;YAClB,MAAM,IAAI,yBAAiB,CAAC,+BAA+B,WAAW,CAAC,MAAM,eAAe,CAAC,CAAC;QAChG,CAAC;QAED,IAAI,CAAC,iBAAS,CAAC,MAAM,CAAC,WAAW,CAAC,QAAQ,CAAC,CAAC,EAAE,KAAK,CAAC,UAAU,CAAC,EAAE,KAAK,CAAC,EAAE,CAAC;YACxE,0FAA0F;YAC1F,2FAA2F;YAE3F,kBAAkB;YAClB,MAAM,IAAI,yBAAiB,CAAC,+CAA+C,CAAC,CAAC;QAC/E,CAAC;QAED,IAAI,IAAI,CAAC,MAAM,GAAG,CAAC,IAAI,IAAI,CAAC,MAAM,GAAG,GAAG,IAAI,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC;YACtE,kBAAkB;YAClB,MAAM,IAAI,yBAAiB,CAAC,qCAAqC,IAAI,GAAG,CAAC,CAAC;QAC5E,CAAC;QAED,MAAM,IAAI,GAAG,6CAA6C,CAAC;QAC3D,MAAM,OAAO,GAAG,IAAI,CAClB;YACE,MAAM,EAAE,MAAM;YACd,IAAI;YACJ,MAAM,EAAE,YAAY,CAAC,cAAc,CAAC,CAAC,CAAC;YACtC,OAAO,EAAE,KAAK;YACd,OAAO,EAAE;gBACP,cAAc,EAAE,mCAAmC;gBACnD,gBAAgB,EAAE,IAAI,CAAC,MAAM;gBAC7B,wBAAwB,EAAE,iBAAS,CAAC,QAAQ,CAAC,WAAW,CAAC;gBACzD,uBAAuB,EAAE,GAAG;aAC7B;YACD,IAAI,EAAE,GAAG;YACT,IAAI;SACL,EACD,cAAc,CACf,CAAC;QAEF,MAAM,OAAO,GAA2B;YACtC,CAAC,EAAE,OAAO,CAAC,OAAO,CAAC,aAAa;YAChC,CAAC,EAAE,OAAO,CAAC,OAAO,CAAC,YAAY,CAAC;SACjC,CAAC;QAEF,IAAI,YAAY,EAAE,CAAC;YACjB,OAAO,CAAC,CAAC,GAAG,YAAY,CAAC;QAC3B,CAAC;QAED,MAAM,YAAY,GAAG;YACnB,YAAY,EAAE,CAAC;YACf,cAAc,EAAE,iBAAiB,CAAC,cAAc;YAChD,OAAO,EAAE,IAAI,CAAC,SAAS,CAAC,OAAO,EAAE,WAAW,CAAC;SAC9C,CAAC;QAEF,MAAM,UAAU,CAAC,OAAO,CAAC,IAAA,UAAE,EAAC,GAAG,EAAE,OAAO,CAAC,EAAE,YAAY,EAAE,SAAS,CAAC,CAAC;IACtE,CAAC;CACF;AAtHD,gCAsHC;AAED,KAAK,UAAU,mBAAmB,CAChC,WAA6B,EAC7B,oBAA8C;IAE9C,SAAS,+BAA+B,CAAC,KAAyB;QAChE,6DAA6D;QAC7D,IAAI,CAAC,KAAK,CAAC,WAAW,IAAI,CAAC,KAAK,CAAC,eAAe,EAAE,CAAC;YACjD,MAAM,IAAI,oCAA4B,CAAC,oDAAoD,CAAC,CAAC;QAC/F,CAAC;QAED,OAAO,IAAI,oCAAgB,CAAC;YAC1B,QAAQ,EAAE,KAAK,CAAC,WAAW;YAC3B,QAAQ,EAAE,KAAK,CAAC,eAAe;YAC/B,MAAM,EAAE,WAAW,CAAC,MAAM;YAC1B,SAAS,EAAE,yBAAa,CAAC,WAAW;YACpC,mBAAmB,EAAE;gBACnB,iBAAiB,EAAE,KAAK,CAAC,KAAK;aAC/B;SACF,CAAC,CAAC;IACL,CAAC;IACD,MAAM,oBAAoB,GAAG,MAAM,oBAAoB,CAAC,cAAc,EAAE,CAAC;IAEzE,OAAO,+BAA+B,CAAC,oBAAoB,CAAC,CAAC;AAC/D,CAAC;AAED,SAAS,YAAY,CAAC,IAAY;IAChC,MAAM,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;IAC9B,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC,IAAI,KAAK,CAAC,CAAC,CAAC,KAAK,WAAW,EAAE,CAAC;QACnD,OAAO,WAAW,CAAC;IACrB,CAAC;IAED,OAAO,KAAK,CAAC,CAAC,CAAC,CAAC;AAClB,CAAC"}

node_modules/mongodb/lib/cmap/auth/mongodb_oidc.js

@@ -0,0 +1,73 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.MongoDBOIDC = exports.OIDC_WORKFLOWS = exports.OIDC_VERSION = void 0;
+const error_1 = require("../../error");
+const auth_provider_1 = require("./auth_provider");
+const automated_callback_workflow_1 = require("./mongodb_oidc/automated_callback_workflow");
+const azure_machine_workflow_1 = require("./mongodb_oidc/azure_machine_workflow");
+const gcp_machine_workflow_1 = require("./mongodb_oidc/gcp_machine_workflow");
+const k8s_machine_workflow_1 = require("./mongodb_oidc/k8s_machine_workflow");
+const token_cache_1 = require("./mongodb_oidc/token_cache");
+const token_machine_workflow_1 = require("./mongodb_oidc/token_machine_workflow");
+/** Error when credentials are missing. */
+const MISSING_CREDENTIALS_ERROR = 'AuthContext must provide credentials.';
+/** The current version of OIDC implementation. */
+exports.OIDC_VERSION = 1;
+/** @internal */
+exports.OIDC_WORKFLOWS = new Map();
+exports.OIDC_WORKFLOWS.set('test', () => new automated_callback_workflow_1.AutomatedCallbackWorkflow(new token_cache_1.TokenCache(), token_machine_workflow_1.callback));
+exports.OIDC_WORKFLOWS.set('azure', () => new automated_callback_workflow_1.AutomatedCallbackWorkflow(new token_cache_1.TokenCache(), azure_machine_workflow_1.callback));
+exports.OIDC_WORKFLOWS.set('gcp', () => new automated_callback_workflow_1.AutomatedCallbackWorkflow(new token_cache_1.TokenCache(), gcp_machine_workflow_1.callback));
+exports.OIDC_WORKFLOWS.set('k8s', () => new automated_callback_workflow_1.AutomatedCallbackWorkflow(new token_cache_1.TokenCache(), k8s_machine_workflow_1.callback));
+/**
+ * OIDC auth provider.
+ */
+class MongoDBOIDC extends auth_provider_1.AuthProvider {
+    /**
+     * Instantiate the auth provider.
+     */
+    constructor(workflow) {
+        super();
+        if (!workflow) {
+            throw new error_1.MongoInvalidArgumentError('No workflow provided to the OIDC auth provider.');
+        }
+        this.workflow = workflow;
+    }
+    /**
+     * Authenticate using OIDC
+     */
+    async auth(authContext) {
+        const { connection, reauthenticating, response } = authContext;
+        if (response?.speculativeAuthenticate?.done && !reauthenticating) {
+            return;
+        }
+        const credentials = getCredentials(authContext);
+        if (reauthenticating) {
+            await this.workflow.reauthenticate(connection, credentials);
+        }
+        else {
+            await this.workflow.execute(connection, credentials, response);
+        }
+    }
+    /**
+     * Add the speculative auth for the initial handshake.
+     */
+    async prepare(handshakeDoc, authContext) {
+        const { connection } = authContext;
+        const credentials = getCredentials(authContext);
+        const result = await this.workflow.speculativeAuth(connection, credentials);
+        return { ...handshakeDoc, ...result };
+    }
+}
+exports.MongoDBOIDC = MongoDBOIDC;
+/**
+ * Get credentials from the auth context, throwing if they do not exist.
+ */
+function getCredentials(authContext) {
+    const { credentials } = authContext;
+    if (!credentials) {
+        throw new error_1.MongoMissingCredentialsError(MISSING_CREDENTIALS_ERROR);
+    }
+    return credentials;
+}
+//# sourceMappingURL=mongodb_oidc.js.map

node_modules/mongodb/lib/cmap/auth/mongodb_oidc.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"mongodb_oidc.js","sourceRoot":"","sources":["../../../src/cmap/auth/mongodb_oidc.ts"],"names":[],"mappings":";;;AACA,uCAAsF;AAGtF,mDAAiE;AAEjE,4FAAuF;AACvF,kFAAkF;AAClF,8EAA8E;AAC9E,8EAA8E;AAC9E,4DAAwD;AACxD,kFAAiF;AAEjF,0CAA0C;AAC1C,MAAM,yBAAyB,GAAG,uCAAuC,CAAC;AA6E1E,kDAAkD;AACrC,QAAA,YAAY,GAAG,CAAC,CAAC;AA6B9B,gBAAgB;AACH,QAAA,cAAc,GAAyC,IAAI,GAAG,EAAE,CAAC;AAC9E,sBAAc,CAAC,GAAG,CAAC,MAAM,EAAE,GAAG,EAAE,CAAC,IAAI,uDAAyB,CAAC,IAAI,wBAAU,EAAE,EAAE,iCAAY,CAAC,CAAC,CAAC;AAChG,sBAAc,CAAC,GAAG,CAAC,OAAO,EAAE,GAAG,EAAE,CAAC,IAAI,uDAAyB,CAAC,IAAI,wBAAU,EAAE,EAAE,iCAAa,CAAC,CAAC,CAAC;AAClG,sBAAc,CAAC,GAAG,CAAC,KAAK,EAAE,GAAG,EAAE,CAAC,IAAI,uDAAyB,CAAC,IAAI,wBAAU,EAAE,EAAE,+BAAW,CAAC,CAAC,CAAC;AAC9F,sBAAc,CAAC,GAAG,CAAC,KAAK,EAAE,GAAG,EAAE,CAAC,IAAI,uDAAyB,CAAC,IAAI,wBAAU,EAAE,EAAE,+BAAW,CAAC,CAAC,CAAC;AAE9F;;GAEG;AACH,MAAa,WAAY,SAAQ,4BAAY;IAG3C;;OAEG;IACH,YAAY,QAAmB;QAC7B,KAAK,EAAE,CAAC;QACR,IAAI,CAAC,QAAQ,EAAE,CAAC;YACd,MAAM,IAAI,iCAAyB,CAAC,iDAAiD,CAAC,CAAC;QACzF,CAAC;QACD,IAAI,CAAC,QAAQ,GAAG,QAAQ,CAAC;IAC3B,CAAC;IAED;;OAEG;IACM,KAAK,CAAC,IAAI,CAAC,WAAwB;QAC1C,MAAM,EAAE,UAAU,EAAE,gBAAgB,EAAE,QAAQ,EAAE,GAAG,WAAW,CAAC;QAC/D,IAAI,QAAQ,EAAE,uBAAuB,EAAE,IAAI,IAAI,CAAC,gBAAgB,EAAE,CAAC;YACjE,OAAO;QACT,CAAC;QACD,MAAM,WAAW,GAAG,cAAc,CAAC,WAAW,CAAC,CAAC;QAChD,IAAI,gBAAgB,EAAE,CAAC;YACrB,MAAM,IAAI,CAAC,QAAQ,CAAC,cAAc,CAAC,UAAU,EAAE,WAAW,CAAC,CAAC;QAC9D,CAAC;aAAM,CAAC;YACN,MAAM,IAAI,CAAC,QAAQ,CAAC,OAAO,CAAC,UAAU,EAAE,WAAW,EAAE,QAAQ,CAAC,CAAC;QACjE,CAAC;IACH,CAAC;IAED;;OAEG;IACM,KAAK,CAAC,OAAO,CACpB,YAA+B,EAC/B,WAAwB;QAExB,MAAM,EAAE,UAAU,EAAE,GAAG,WAAW,CAAC;QACnC,MAAM,WAAW,GAAG,cAAc,CAAC,WAAW,CAAC,CAAC;QAChD,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,QAAQ,CAAC,eAAe,CAAC,UAAU,EAAE,WAAW,CAAC,CAAC;QAC5E,OAAO,EAAE,GAAG,YAAY,EAAE,GAAG,MAAM,EAAE,CAAC;IACxC,CAAC;CACF;AA1CD,kCA0CC;AAED;;GAEG;AACH,SAAS,cAAc,CAAC,WAAwB;IAC9C,MAAM,EAAE,WAAW,EAAE,GAAG,WAAW,CAAC;IACpC,IAAI,CAAC,WAAW,EAAE,CAAC;QACjB,MAAM,IAAI,oCAA4B,CAAC,yBAAyB,CAAC,CAAC;IACpE,CAAC;IACD,OAAO,WAAW,CAAC;AACrB,CAAC"}

node_modules/mongodb/lib/cmap/auth/mongodb_oidc/automated_callback_workflow.js

@@ -0,0 +1,84 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.AutomatedCallbackWorkflow = void 0;
+const error_1 = require("../../../error");
+const timeout_1 = require("../../../timeout");
+const mongodb_oidc_1 = require("../mongodb_oidc");
+const callback_workflow_1 = require("./callback_workflow");
+/**
+ * Class implementing behaviour for the non human callback workflow.
+ * @internal
+ */
+class AutomatedCallbackWorkflow extends callback_workflow_1.CallbackWorkflow {
+    /**
+     * Instantiate the human callback workflow.
+     */
+    constructor(cache, callback) {
+        super(cache, callback);
+    }
+    /**
+     * Execute the OIDC callback workflow.
+     */
+    async execute(connection, credentials) {
+        // If there is a cached access token, try to authenticate with it. If
+        // authentication fails with an Authentication error (18),
+        // invalidate the access token, fetch a new access token, and try
+        // to authenticate again.
+        // If the server fails for any other reason, do not clear the cache.
+        if (this.cache.hasAccessToken) {
+            const token = this.cache.getAccessToken();
+            if (!connection.accessToken) {
+                connection.accessToken = token;
+            }
+            try {
+                return await this.finishAuthentication(connection, credentials, token);
+            }
+            catch (error) {
+                if (error instanceof error_1.MongoError &&
+                    error.code === error_1.MONGODB_ERROR_CODES.AuthenticationFailed) {
+                    this.cache.removeAccessToken();
+                    return await this.execute(connection, credentials);
+                }
+                else {
+                    throw error;
+                }
+            }
+        }
+        const response = await this.fetchAccessToken(credentials);
+        this.cache.put(response);
+        connection.accessToken = response.accessToken;
+        await this.finishAuthentication(connection, credentials, response.accessToken);
+    }
+    /**
+     * Fetches the access token using the callback.
+     */
+    async fetchAccessToken(credentials) {
+        const controller = new AbortController();
+        const params = {
+            timeoutContext: controller.signal,
+            version: mongodb_oidc_1.OIDC_VERSION
+        };
+        if (credentials.username) {
+            params.username = credentials.username;
+        }
+        if (credentials.mechanismProperties.TOKEN_RESOURCE) {
+            params.tokenAudience = credentials.mechanismProperties.TOKEN_RESOURCE;
+        }
+        const timeout = timeout_1.Timeout.expires(callback_workflow_1.AUTOMATED_TIMEOUT_MS);
+        try {
+            return await Promise.race([this.executeAndValidateCallback(params), timeout]);
+        }
+        catch (error) {
+            if (timeout_1.TimeoutError.is(error)) {
+                controller.abort();
+                throw new error_1.MongoOIDCError(`OIDC callback timed out after ${callback_workflow_1.AUTOMATED_TIMEOUT_MS}ms.`);
+            }
+            throw error;
+        }
+        finally {
+            timeout.clear();
+        }
+    }
+}
+exports.AutomatedCallbackWorkflow = AutomatedCallbackWorkflow;
+//# sourceMappingURL=automated_callback_workflow.js.map

node_modules/mongodb/lib/cmap/auth/mongodb_oidc/automated_callback_workflow.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"automated_callback_workflow.js","sourceRoot":"","sources":["../../../../src/cmap/auth/mongodb_oidc/automated_callback_workflow.ts"],"names":[],"mappings":";;;AAAA,0CAAiF;AACjF,8CAAyD;AAGzD,kDAKyB;AACzB,2DAA6E;AAG7E;;;GAGG;AACH,MAAa,yBAA0B,SAAQ,oCAAgB;IAC7D;;OAEG;IACH,YAAY,KAAiB,EAAE,QAA8B;QAC3D,KAAK,CAAC,KAAK,EAAE,QAAQ,CAAC,CAAC;IACzB,CAAC;IAED;;OAEG;IACH,KAAK,CAAC,OAAO,CAAC,UAAsB,EAAE,WAA6B;QACjE,qEAAqE;QACrE,0DAA0D;QAC1D,iEAAiE;QACjE,yBAAyB;QACzB,oEAAoE;QACpE,IAAI,IAAI,CAAC,KAAK,CAAC,cAAc,EAAE,CAAC;YAC9B,MAAM,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC,cAAc,EAAE,CAAC;YAC1C,IAAI,CAAC,UAAU,CAAC,WAAW,EAAE,CAAC;gBAC5B,UAAU,CAAC,WAAW,GAAG,KAAK,CAAC;YACjC,CAAC;YACD,IAAI,CAAC;gBACH,OAAO,MAAM,IAAI,CAAC,oBAAoB,CAAC,UAAU,EAAE,WAAW,EAAE,KAAK,CAAC,CAAC;YACzE,CAAC;YAAC,OAAO,KAAK,EAAE,CAAC;gBACf,IACE,KAAK,YAAY,kBAAU;oBAC3B,KAAK,CAAC,IAAI,KAAK,2BAAmB,CAAC,oBAAoB,EACvD,CAAC;oBACD,IAAI,CAAC,KAAK,CAAC,iBAAiB,EAAE,CAAC;oBAC/B,OAAO,MAAM,IAAI,CAAC,OAAO,CAAC,UAAU,EAAE,WAAW,CAAC,CAAC;gBACrD,CAAC;qBAAM,CAAC;oBACN,MAAM,KAAK,CAAC;gBACd,CAAC;YACH,CAAC;QACH,CAAC;QACD,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,gBAAgB,CAAC,WAAW,CAAC,CAAC;QAC1D,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC;QACzB,UAAU,CAAC,WAAW,GAAG,QAAQ,CAAC,WAAW,CAAC;QAC9C,MAAM,IAAI,CAAC,oBAAoB,CAAC,UAAU,EAAE,WAAW,EAAE,QAAQ,CAAC,WAAW,CAAC,CAAC;IACjF,CAAC;IAED;;OAEG;IACO,KAAK,CAAC,gBAAgB,CAAC,WAA6B;QAC5D,MAAM,UAAU,GAAG,IAAI,eAAe,EAAE,CAAC;QACzC,MAAM,MAAM,GAAuB;YACjC,cAAc,EAAE,UAAU,CAAC,MAAM;YACjC,OAAO,EAAE,2BAAY;SACtB,CAAC;QACF,IAAI,WAAW,CAAC,QAAQ,EAAE,CAAC;YACzB,MAAM,CAAC,QAAQ,GAAG,WAAW,CAAC,QAAQ,CAAC;QACzC,CAAC;QACD,IAAI,WAAW,CAAC,mBAAmB,CAAC,cAAc,EAAE,CAAC;YACnD,MAAM,CAAC,aAAa,GAAG,WAAW,CAAC,mBAAmB,CAAC,cAAc,CAAC;QACxE,CAAC;QACD,MAAM,OAAO,GAAG,iBAAO,CAAC,OAAO,CAAC,wCAAoB,CAAC,CAAC;QACtD,IAAI,CAAC;YACH,OAAO,MAAM,OAAO,CAAC,IAAI,CAAC,CAAC,IAAI,CAAC,0BAA0B,CAAC,MAAM,CAAC,EAAE,OAAO,CAAC,CAAC,CAAC;QAChF,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,IAAI,sBAAY,CAAC,EAAE,CAAC,KAAK,CAAC,EAAE,CAAC;gBAC3B,UAAU,CAAC,KAAK,EAAE,CAAC;gBACnB,MAAM,IAAI,sBAAc,CAAC,iCAAiC,wCAAoB,KAAK,CAAC,CAAC;YACvF,CAAC;YACD,MAAM,KAAK,CAAC;QACd,CAAC;gBAAS,CAAC;YACT,OAAO,CAAC,KAAK,EAAE,CAAC;QAClB,CAAC;IACH,CAAC;CACF;AAtED,8DAsEC"}

node_modules/mongodb/lib/cmap/auth/mongodb_oidc/azure_machine_workflow.js

@@ -0,0 +1,62 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.callback = void 0;
+const azure_1 = require("../../../client-side-encryption/providers/azure");
+const error_1 = require("../../../error");
+const utils_1 = require("../../../utils");
+/** Azure request headers. */
+const AZURE_HEADERS = Object.freeze({ Metadata: 'true', Accept: 'application/json' });
+/** Invalid endpoint result error. */
+const ENDPOINT_RESULT_ERROR = 'Azure endpoint did not return a value with only access_token and expires_in properties';
+/** Error for when the token audience is missing in the environment. */
+const TOKEN_RESOURCE_MISSING_ERROR = 'TOKEN_RESOURCE must be set in the auth mechanism properties when ENVIRONMENT is azure.';
+/**
+ * The callback function to be used in the automated callback workflow.
+ * @param params - The OIDC callback parameters.
+ * @returns The OIDC response.
+ */
+const callback = async (params) => {
+    const tokenAudience = params.tokenAudience;
+    const username = params.username;
+    if (!tokenAudience) {
+        throw new error_1.MongoAzureError(TOKEN_RESOURCE_MISSING_ERROR);
+    }
+    const response = await getAzureTokenData(tokenAudience, username);
+    if (!isEndpointResultValid(response)) {
+        throw new error_1.MongoAzureError(ENDPOINT_RESULT_ERROR);
+    }
+    return response;
+};
+exports.callback = callback;
+/**
+ * Hit the Azure endpoint to get the token data.
+ */
+async function getAzureTokenData(tokenAudience, username) {
+    const url = new URL(azure_1.AZURE_BASE_URL);
+    (0, azure_1.addAzureParams)(url, tokenAudience, username);
+    const response = await (0, utils_1.get)(url, {
+        headers: AZURE_HEADERS
+    });
+    if (response.status !== 200) {
+        throw new error_1.MongoAzureError(`Status code ${response.status} returned from the Azure endpoint. Response body: ${response.body}`);
+    }
+    const result = JSON.parse(response.body);
+    return {
+        accessToken: result.access_token,
+        expiresInSeconds: Number(result.expires_in)
+    };
+}
+/**
+ * Determines if a result returned from the endpoint is valid.
+ * This means the result is not nullish, contains the access_token required field
+ * and the expires_in required field.
+ */
+function isEndpointResultValid(token) {
+    if (token == null || typeof token !== 'object')
+        return false;
+    return ('accessToken' in token &&
+        typeof token.accessToken === 'string' &&
+        'expiresInSeconds' in token &&
+        typeof token.expiresInSeconds === 'number');
+}
+//# sourceMappingURL=azure_machine_workflow.js.map

node_modules/mongodb/lib/cmap/auth/mongodb_oidc/azure_machine_workflow.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"azure_machine_workflow.js","sourceRoot":"","sources":["../../../../src/cmap/auth/mongodb_oidc/azure_machine_workflow.ts"],"names":[],"mappings":";;;AAAA,2EAAiG;AACjG,0CAAiD;AACjD,0CAAqC;AAGrC,6BAA6B;AAC7B,MAAM,aAAa,GAAG,MAAM,CAAC,MAAM,CAAC,EAAE,QAAQ,EAAE,MAAM,EAAE,MAAM,EAAE,kBAAkB,EAAE,CAAC,CAAC;AAEtF,qCAAqC;AACrC,MAAM,qBAAqB,GACzB,wFAAwF,CAAC;AAE3F,uEAAuE;AACvE,MAAM,4BAA4B,GAChC,wFAAwF,CAAC;AAE3F;;;;GAIG;AACI,MAAM,QAAQ,GAAyB,KAAK,EACjD,MAA0B,EACH,EAAE;IACzB,MAAM,aAAa,GAAG,MAAM,CAAC,aAAa,CAAC;IAC3C,MAAM,QAAQ,GAAG,MAAM,CAAC,QAAQ,CAAC;IACjC,IAAI,CAAC,aAAa,EAAE,CAAC;QACnB,MAAM,IAAI,uBAAe,CAAC,4BAA4B,CAAC,CAAC;IAC1D,CAAC;IACD,MAAM,QAAQ,GAAG,MAAM,iBAAiB,CAAC,aAAa,EAAE,QAAQ,CAAC,CAAC;IAClE,IAAI,CAAC,qBAAqB,CAAC,QAAQ,CAAC,EAAE,CAAC;QACrC,MAAM,IAAI,uBAAe,CAAC,qBAAqB,CAAC,CAAC;IACnD,CAAC;IACD,OAAO,QAAQ,CAAC;AAClB,CAAC,CAAC;AAbW,QAAA,QAAQ,YAanB;AAEF;;GAEG;AACH,KAAK,UAAU,iBAAiB,CAAC,aAAqB,EAAE,QAAiB;IACvE,MAAM,GAAG,GAAG,IAAI,GAAG,CAAC,sBAAc,CAAC,CAAC;IACpC,IAAA,sBAAc,EAAC,GAAG,EAAE,aAAa,EAAE,QAAQ,CAAC,CAAC;IAC7C,MAAM,QAAQ,GAAG,MAAM,IAAA,WAAG,EAAC,GAAG,EAAE;QAC9B,OAAO,EAAE,aAAa;KACvB,CAAC,CAAC;IACH,IAAI,QAAQ,CAAC,MAAM,KAAK,GAAG,EAAE,CAAC;QAC5B,MAAM,IAAI,uBAAe,CACvB,eAAe,QAAQ,CAAC,MAAM,qDAAqD,QAAQ,CAAC,IAAI,EAAE,CACnG,CAAC;IACJ,CAAC;IACD,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC;IACzC,OAAO;QACL,WAAW,EAAE,MAAM,CAAC,YAAY;QAChC,gBAAgB,EAAE,MAAM,CAAC,MAAM,CAAC,UAAU,CAAC;KAC5C,CAAC;AACJ,CAAC;AAED;;;;GAIG;AACH,SAAS,qBAAqB,CAC5B,KAAc;IAEd,IAAI,KAAK,IAAI,IAAI,IAAI,OAAO,KAAK,KAAK,QAAQ;QAAE,OAAO,KAAK,CAAC;IAC7D,OAAO,CACL,aAAa,IAAI,KAAK;QACtB,OAAO,KAAK,CAAC,WAAW,KAAK,QAAQ;QACrC,kBAAkB,IAAI,KAAK;QAC3B,OAAO,KAAK,CAAC,gBAAgB,KAAK,QAAQ,CAC3C,CAAC;AACJ,CAAC"}

node_modules/mongodb/lib/cmap/auth/mongodb_oidc/callback_workflow.js

@@ -0,0 +1,141 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.CallbackWorkflow = exports.AUTOMATED_TIMEOUT_MS = exports.HUMAN_TIMEOUT_MS = void 0;
+const promises_1 = require("timers/promises");
+const error_1 = require("../../../error");
+const utils_1 = require("../../../utils");
+const command_builders_1 = require("./command_builders");
+/** 5 minutes in milliseconds */
+exports.HUMAN_TIMEOUT_MS = 300000;
+/** 1 minute in milliseconds */
+exports.AUTOMATED_TIMEOUT_MS = 60000;
+/** Properties allowed on results of callbacks. */
+const RESULT_PROPERTIES = ['accessToken', 'expiresInSeconds', 'refreshToken'];
+/** Error message when the callback result is invalid. */
+const CALLBACK_RESULT_ERROR = 'User provided OIDC callbacks must return a valid object with an accessToken.';
+/** The time to throttle callback calls. */
+const THROTTLE_MS = 100;
+/**
+ * OIDC implementation of a callback based workflow.
+ * @internal
+ */
+class CallbackWorkflow {
+    /**
+     * Instantiate the callback workflow.
+     */
+    constructor(cache, callback) {
+        this.cache = cache;
+        this.callback = this.withLock(callback);
+        this.lastExecutionTime = Date.now() - THROTTLE_MS;
+    }
+    /**
+     * Get the document to add for speculative authentication. This also needs
+     * to add a db field from the credentials source.
+     */
+    async speculativeAuth(connection, credentials) {
+        // Check if the Client Cache has an access token.
+        // If it does, cache the access token in the Connection Cache and send a JwtStepRequest
+        // with the cached access token in the speculative authentication SASL payload.
+        if (this.cache.hasAccessToken) {
+            const accessToken = this.cache.getAccessToken();
+            connection.accessToken = accessToken;
+            const document = (0, command_builders_1.finishCommandDocument)(accessToken);
+            document.db = credentials.source;
+            return { speculativeAuthenticate: document };
+        }
+        return {};
+    }
+    /**
+     * Reauthenticate the callback workflow. For this we invalidated the access token
+     * in the cache and run the authentication steps again. No initial handshake needs
+     * to be sent.
+     */
+    async reauthenticate(connection, credentials) {
+        if (this.cache.hasAccessToken) {
+            // Reauthentication implies the token has expired.
+            if (connection.accessToken === this.cache.getAccessToken()) {
+                // If connection's access token is the same as the cache's, remove
+                // the token from the cache and connection.
+                this.cache.removeAccessToken();
+                delete connection.accessToken;
+            }
+            else {
+                // If the connection's access token is different from the cache's, set
+                // the cache's token on the connection and do not remove from the
+                // cache.
+                connection.accessToken = this.cache.getAccessToken();
+            }
+        }
+        await this.execute(connection, credentials);
+    }
+    /**
+     * Starts the callback authentication process. If there is a speculative
+     * authentication document from the initial handshake, then we will use that
+     * value to get the issuer, otherwise we will send the saslStart command.
+     */
+    async startAuthentication(connection, credentials, response) {
+        let result;
+        if (response?.speculativeAuthenticate) {
+            result = response.speculativeAuthenticate;
+        }
+        else {
+            result = await connection.command((0, utils_1.ns)(credentials.source), (0, command_builders_1.startCommandDocument)(credentials), undefined);
+        }
+        return result;
+    }
+    /**
+     * Finishes the callback authentication process.
+     */
+    async finishAuthentication(connection, credentials, token, conversationId) {
+        await connection.command((0, utils_1.ns)(credentials.source), (0, command_builders_1.finishCommandDocument)(token, conversationId), undefined);
+    }
+    /**
+     * Executes the callback and validates the output.
+     */
+    async executeAndValidateCallback(params) {
+        const result = await this.callback(params);
+        // Validate that the result returned by the callback is acceptable. If it is not
+        // we must clear the token result from the cache.
+        if (isCallbackResultInvalid(result)) {
+            throw new error_1.MongoMissingCredentialsError(CALLBACK_RESULT_ERROR);
+        }
+        return result;
+    }
+    /**
+     * Ensure the callback is only executed one at a time and throttles the calls
+     * to every 100ms.
+     */
+    withLock(callback) {
+        let lock = Promise.resolve();
+        return async (params) => {
+            // We do this to ensure that we would never return the result of the
+            // previous lock, only the current callback's value would get returned.
+            await lock;
+            lock = lock
+                .catch(() => null)
+                .then(async () => {
+                const difference = Date.now() - this.lastExecutionTime;
+                if (difference <= THROTTLE_MS) {
+                    await (0, promises_1.setTimeout)(THROTTLE_MS - difference, { signal: params.timeoutContext });
+                }
+                this.lastExecutionTime = Date.now();
+                return await callback(params);
+            });
+            return await lock;
+        };
+    }
+}
+exports.CallbackWorkflow = CallbackWorkflow;
+/**
+ * Determines if a result returned from a request or refresh callback
+ * function is invalid. This means the result is nullish, doesn't contain
+ * the accessToken required field, and does not contain extra fields.
+ */
+function isCallbackResultInvalid(tokenResult) {
+    if (tokenResult == null || typeof tokenResult !== 'object')
+        return true;
+    if (!('accessToken' in tokenResult))
+        return true;
+    return !Object.getOwnPropertyNames(tokenResult).every(prop => RESULT_PROPERTIES.includes(prop));
+}
+//# sourceMappingURL=callback_workflow.js.map

node_modules/mongodb/lib/cmap/auth/mongodb_oidc/callback_workflow.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"callback_workflow.js","sourceRoot":"","sources":["../../../../src/cmap/auth/mongodb_oidc/callback_workflow.ts"],"names":[],"mappings":";;;AAAA,8CAA6C;AAG7C,0CAA8D;AAC9D,0CAAoC;AASpC,yDAAiF;AAGjF,gCAAgC;AACnB,QAAA,gBAAgB,GAAG,MAAM,CAAC;AACvC,+BAA+B;AAClB,QAAA,oBAAoB,GAAG,KAAK,CAAC;AAE1C,kDAAkD;AAClD,MAAM,iBAAiB,GAAG,CAAC,aAAa,EAAE,kBAAkB,EAAE,cAAc,CAAC,CAAC;AAE9E,yDAAyD;AACzD,MAAM,qBAAqB,GACzB,8EAA8E,CAAC;AAEjF,2CAA2C;AAC3C,MAAM,WAAW,GAAG,GAAG,CAAC;AAExB;;;GAGG;AACH,MAAsB,gBAAgB;IAKpC;;OAEG;IACH,YAAY,KAAiB,EAAE,QAA8B;QAC3D,IAAI,CAAC,KAAK,GAAG,KAAK,CAAC;QACnB,IAAI,CAAC,QAAQ,GAAG,IAAI,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC;QACxC,IAAI,CAAC,iBAAiB,GAAG,IAAI,CAAC,GAAG,EAAE,GAAG,WAAW,CAAC;IACpD,CAAC;IAED;;;OAGG;IACH,KAAK,CAAC,eAAe,CAAC,UAAsB,EAAE,WAA6B;QACzE,iDAAiD;QACjD,uFAAuF;QACvF,+EAA+E;QAC/E,IAAI,IAAI,CAAC,KAAK,CAAC,cAAc,EAAE,CAAC;YAC9B,MAAM,WAAW,GAAG,IAAI,CAAC,KAAK,CAAC,cAAc,EAAE,CAAC;YAChD,UAAU,CAAC,WAAW,GAAG,WAAW,CAAC;YACrC,MAAM,QAAQ,GAAG,IAAA,wCAAqB,EAAC,WAAW,CAAC,CAAC;YACpD,QAAQ,CAAC,EAAE,GAAG,WAAW,CAAC,MAAM,CAAC;YACjC,OAAO,EAAE,uBAAuB,EAAE,QAAQ,EAAE,CAAC;QAC/C,CAAC;QACD,OAAO,EAAE,CAAC;IACZ,CAAC;IAED;;;;OAIG;IACH,KAAK,CAAC,cAAc,CAAC,UAAsB,EAAE,WAA6B;QACxE,IAAI,IAAI,CAAC,KAAK,CAAC,cAAc,EAAE,CAAC;YAC9B,kDAAkD;YAClD,IAAI,UAAU,CAAC,WAAW,KAAK,IAAI,CAAC,KAAK,CAAC,cAAc,EAAE,EAAE,CAAC;gBAC3D,kEAAkE;gBAClE,2CAA2C;gBAC3C,IAAI,CAAC,KAAK,CAAC,iBAAiB,EAAE,CAAC;gBAC/B,OAAO,UAAU,CAAC,WAAW,CAAC;YAChC,CAAC;iBAAM,CAAC;gBACN,sEAAsE;gBACtE,iEAAiE;gBACjE,SAAS;gBACT,UAAU,CAAC,WAAW,GAAG,IAAI,CAAC,KAAK,CAAC,cAAc,EAAE,CAAC;YACvD,CAAC;QACH,CAAC;QACD,MAAM,IAAI,CAAC,OAAO,CAAC,UAAU,EAAE,WAAW,CAAC,CAAC;IAC9C,CAAC;IAWD;;;;OAIG;IACO,KAAK,CAAC,mBAAmB,CACjC,UAAsB,EACtB,WAA6B,EAC7B,QAAmB;QAEnB,IAAI,MAAM,CAAC;QACX,IAAI,QAAQ,EAAE,uBAAuB,EAAE,CAAC;YACtC,MAAM,GAAG,QAAQ,CAAC,uBAAuB,CAAC;QAC5C,CAAC;aAAM,CAAC;YACN,MAAM,GAAG,MAAM,UAAU,CAAC,OAAO,CAC/B,IAAA,UAAE,EAAC,WAAW,CAAC,MAAM,CAAC,EACtB,IAAA,uCAAoB,EAAC,WAAW,CAAC,EACjC,SAAS,CACV,CAAC;QACJ,CAAC;QACD,OAAO,MAAM,CAAC;IAChB,CAAC;IAED;;OAEG;IACO,KAAK,CAAC,oBAAoB,CAClC,UAAsB,EACtB,WAA6B,EAC7B,KAAa,EACb,cAAuB;QAEvB,MAAM,UAAU,CAAC,OAAO,CACtB,IAAA,UAAE,EAAC,WAAW,CAAC,MAAM,CAAC,EACtB,IAAA,wCAAqB,EAAC,KAAK,EAAE,cAAc,CAAC,EAC5C,SAAS,CACV,CAAC;IACJ,CAAC;IAED;;OAEG;IACO,KAAK,CAAC,0BAA0B,CAAC,MAA0B;QACnE,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC;QAC3C,gFAAgF;QAChF,iDAAiD;QACjD,IAAI,uBAAuB,CAAC,MAAM,CAAC,EAAE,CAAC;YACpC,MAAM,IAAI,oCAA4B,CAAC,qBAAqB,CAAC,CAAC;QAChE,CAAC;QACD,OAAO,MAAM,CAAC;IAChB,CAAC;IAED;;;OAGG;IACO,QAAQ,CAAC,QAA8B;QAC/C,IAAI,IAAI,GAAiB,OAAO,CAAC,OAAO,EAAE,CAAC;QAC3C,OAAO,KAAK,EAAE,MAA0B,EAAyB,EAAE;YACjE,oEAAoE;YACpE,uEAAuE;YACvE,MAAM,IAAI,CAAC;YACX,IAAI,GAAG,IAAI;iBAER,KAAK,CAAC,GAAG,EAAE,CAAC,IAAI,CAAC;iBAEjB,IAAI,CAAC,KAAK,IAAI,EAAE;gBACf,MAAM,UAAU,GAAG,IAAI,CAAC,GAAG,EAAE,GAAG,IAAI,CAAC,iBAAiB,CAAC;gBACvD,IAAI,UAAU,IAAI,WAAW,EAAE,CAAC;oBAC9B,MAAM,IAAA,qBAAU,EAAC,WAAW,GAAG,UAAU,EAAE,EAAE,MAAM,EAAE,MAAM,CAAC,cAAc,EAAE,CAAC,CAAC;gBAChF,CAAC;gBACD,IAAI,CAAC,iBAAiB,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;gBACpC,OAAO,MAAM,QAAQ,CAAC,MAAM,CAAC,CAAC;YAChC,CAAC,CAAC,CAAC;YACL,OAAO,MAAM,IAAI,CAAC;QACpB,CAAC,CAAC;IACJ,CAAC;CACF;AA7ID,4CA6IC;AAED;;;;GAIG;AACH,SAAS,uBAAuB,CAAC,WAAoB;IACnD,IAAI,WAAW,IAAI,IAAI,IAAI,OAAO,WAAW,KAAK,QAAQ;QAAE,OAAO,IAAI,CAAC;IACxE,IAAI,CAAC,CAAC,aAAa,IAAI,WAAW,CAAC;QAAE,OAAO,IAAI,CAAC;IACjD,OAAO,CAAC,MAAM,CAAC,mBAAmB,CAAC,WAAW,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC,iBAAiB,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC;AAClG,CAAC"}

node_modules/mongodb/lib/cmap/auth/mongodb_oidc/command_builders.js

@@ -0,0 +1,44 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.finishCommandDocument = finishCommandDocument;
+exports.startCommandDocument = startCommandDocument;
+const bson_1 = require("../../../bson");
+const providers_1 = require("../providers");
+/**
+ * Generate the finishing command document for authentication. Will be a
+ * saslStart or saslContinue depending on the presence of a conversation id.
+ */
+function finishCommandDocument(token, conversationId) {
+    if (conversationId != null) {
+        return {
+            saslContinue: 1,
+            conversationId: conversationId,
+            payload: new bson_1.Binary(bson_1.BSON.serialize({ jwt: token }))
+        };
+    }
+    // saslContinue requires a conversationId in the command to be valid so in this
+    // case the server allows "step two" to actually be a saslStart with the token
+    // as the jwt since the use of the cached value has no correlating conversating
+    // on the particular connection.
+    return {
+        saslStart: 1,
+        mechanism: providers_1.AuthMechanism.MONGODB_OIDC,
+        payload: new bson_1.Binary(bson_1.BSON.serialize({ jwt: token }))
+    };
+}
+/**
+ * Generate the saslStart command document.
+ */
+function startCommandDocument(credentials) {
+    const payload = {};
+    if (credentials.username) {
+        payload.n = credentials.username;
+    }
+    return {
+        saslStart: 1,
+        autoAuthorize: 1,
+        mechanism: providers_1.AuthMechanism.MONGODB_OIDC,
+        payload: new bson_1.Binary(bson_1.BSON.serialize(payload))
+    };
+}
+//# sourceMappingURL=command_builders.js.map

node_modules/mongodb/lib/cmap/auth/mongodb_oidc/command_builders.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"command_builders.js","sourceRoot":"","sources":["../../../../src/cmap/auth/mongodb_oidc/command_builders.ts"],"names":[],"mappings":";;AAmBA,sDAiBC;AAKD,oDAWC;AApDD,wCAA4D;AAE5D,4CAA6C;AAa7C;;;GAGG;AACH,SAAgB,qBAAqB,CAAC,KAAa,EAAE,cAAuB;IAC1E,IAAI,cAAc,IAAI,IAAI,EAAE,CAAC;QAC3B,OAAO;YACL,YAAY,EAAE,CAAC;YACf,cAAc,EAAE,cAAc;YAC9B,OAAO,EAAE,IAAI,aAAM,CAAC,WAAI,CAAC,SAAS,CAAC,EAAE,GAAG,EAAE,KAAK,EAAE,CAAC,CAAC;SACpD,CAAC;IACJ,CAAC;IACD,+EAA+E;IAC/E,8EAA8E;IAC9E,+EAA+E;IAC/E,gCAAgC;IAChC,OAAO;QACL,SAAS,EAAE,CAAC;QACZ,SAAS,EAAE,yBAAa,CAAC,YAAY;QACrC,OAAO,EAAE,IAAI,aAAM,CAAC,WAAI,CAAC,SAAS,CAAC,EAAE,GAAG,EAAE,KAAK,EAAE,CAAC,CAAC;KACpD,CAAC;AACJ,CAAC;AAED;;GAEG;AACH,SAAgB,oBAAoB,CAAC,WAA6B;IAChE,MAAM,OAAO,GAAa,EAAE,CAAC;IAC7B,IAAI,WAAW,CAAC,QAAQ,EAAE,CAAC;QACzB,OAAO,CAAC,CAAC,GAAG,WAAW,CAAC,QAAQ,CAAC;IACnC,CAAC;IACD,OAAO;QACL,SAAS,EAAE,CAAC;QACZ,aAAa,EAAE,CAAC;QAChB,SAAS,EAAE,yBAAa,CAAC,YAAY;QACrC,OAAO,EAAE,IAAI,aAAM,CAAC,WAAI,CAAC,SAAS,CAAC,OAAO,CAAC,CAAC;KAC7C,CAAC;AACJ,CAAC"}

node_modules/mongodb/lib/cmap/auth/mongodb_oidc/gcp_machine_workflow.js

@@ -0,0 +1,39 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.callback = void 0;
+const error_1 = require("../../../error");
+const utils_1 = require("../../../utils");
+/** GCP base URL. */
+const GCP_BASE_URL = 'http://metadata/computeMetadata/v1/instance/service-accounts/default/identity';
+/** GCP request headers. */
+const GCP_HEADERS = Object.freeze({ 'Metadata-Flavor': 'Google' });
+/** Error for when the token audience is missing in the environment. */
+const TOKEN_RESOURCE_MISSING_ERROR = 'TOKEN_RESOURCE must be set in the auth mechanism properties when ENVIRONMENT is gcp.';
+/**
+ * The callback function to be used in the automated callback workflow.
+ * @param params - The OIDC callback parameters.
+ * @returns The OIDC response.
+ */
+const callback = async (params) => {
+    const tokenAudience = params.tokenAudience;
+    if (!tokenAudience) {
+        throw new error_1.MongoGCPError(TOKEN_RESOURCE_MISSING_ERROR);
+    }
+    return await getGcpTokenData(tokenAudience);
+};
+exports.callback = callback;
+/**
+ * Hit the GCP endpoint to get the token data.
+ */
+async function getGcpTokenData(tokenAudience) {
+    const url = new URL(GCP_BASE_URL);
+    url.searchParams.append('audience', tokenAudience);
+    const response = await (0, utils_1.get)(url, {
+        headers: GCP_HEADERS
+    });
+    if (response.status !== 200) {
+        throw new error_1.MongoGCPError(`Status code ${response.status} returned from the GCP endpoint. Response body: ${response.body}`);
+    }
+    return { accessToken: response.body };
+}
+//# sourceMappingURL=gcp_machine_workflow.js.map

node_modules/mongodb/lib/cmap/auth/mongodb_oidc/gcp_machine_workflow.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"gcp_machine_workflow.js","sourceRoot":"","sources":["../../../../src/cmap/auth/mongodb_oidc/gcp_machine_workflow.ts"],"names":[],"mappings":";;;AAAA,0CAA+C;AAC/C,0CAAqC;AAGrC,oBAAoB;AACpB,MAAM,YAAY,GAChB,+EAA+E,CAAC;AAElF,2BAA2B;AAC3B,MAAM,WAAW,GAAG,MAAM,CAAC,MAAM,CAAC,EAAE,iBAAiB,EAAE,QAAQ,EAAE,CAAC,CAAC;AAEnE,uEAAuE;AACvE,MAAM,4BAA4B,GAChC,sFAAsF,CAAC;AAEzF;;;;GAIG;AACI,MAAM,QAAQ,GAAyB,KAAK,EACjD,MAA0B,EACH,EAAE;IACzB,MAAM,aAAa,GAAG,MAAM,CAAC,aAAa,CAAC;IAC3C,IAAI,CAAC,aAAa,EAAE,CAAC;QACnB,MAAM,IAAI,qBAAa,CAAC,4BAA4B,CAAC,CAAC;IACxD,CAAC;IACD,OAAO,MAAM,eAAe,CAAC,aAAa,CAAC,CAAC;AAC9C,CAAC,CAAC;AARW,QAAA,QAAQ,YAQnB;AAEF;;GAEG;AACH,KAAK,UAAU,eAAe,CAAC,aAAqB;IAClD,MAAM,GAAG,GAAG,IAAI,GAAG,CAAC,YAAY,CAAC,CAAC;IAClC,GAAG,CAAC,YAAY,CAAC,MAAM,CAAC,UAAU,EAAE,aAAa,CAAC,CAAC;IACnD,MAAM,QAAQ,GAAG,MAAM,IAAA,WAAG,EAAC,GAAG,EAAE;QAC9B,OAAO,EAAE,WAAW;KACrB,CAAC,CAAC;IACH,IAAI,QAAQ,CAAC,MAAM,KAAK,GAAG,EAAE,CAAC;QAC5B,MAAM,IAAI,qBAAa,CACrB,eAAe,QAAQ,CAAC,MAAM,mDAAmD,QAAQ,CAAC,IAAI,EAAE,CACjG,CAAC;IACJ,CAAC;IACD,OAAO,EAAE,WAAW,EAAE,QAAQ,CAAC,IAAI,EAAE,CAAC;AACxC,CAAC"}

node_modules/mongodb/lib/cmap/auth/mongodb_oidc/human_callback_workflow.js

@@ -0,0 +1,122 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.HumanCallbackWorkflow = void 0;
+const bson_1 = require("../../../bson");
+const error_1 = require("../../../error");
+const timeout_1 = require("../../../timeout");
+const mongodb_oidc_1 = require("../mongodb_oidc");
+const callback_workflow_1 = require("./callback_workflow");
+/**
+ * Class implementing behaviour for the non human callback workflow.
+ * @internal
+ */
+class HumanCallbackWorkflow extends callback_workflow_1.CallbackWorkflow {
+    /**
+     * Instantiate the human callback workflow.
+     */
+    constructor(cache, callback) {
+        super(cache, callback);
+    }
+    /**
+     * Execute the OIDC human callback workflow.
+     */
+    async execute(connection, credentials) {
+        // Check if the Client Cache has an access token.
+        // If it does, cache the access token in the Connection Cache and perform a One-Step SASL conversation
+        // using the access token. If the server returns an Authentication error (18),
+        // invalidate the access token token from the Client Cache, clear the Connection Cache,
+        // and restart the authentication flow. Raise any other errors to the user. On success, exit the algorithm.
+        if (this.cache.hasAccessToken) {
+            const token = this.cache.getAccessToken();
+            connection.accessToken = token;
+            try {
+                return await this.finishAuthentication(connection, credentials, token);
+            }
+            catch (error) {
+                if (error instanceof error_1.MongoError &&
+                    error.code === error_1.MONGODB_ERROR_CODES.AuthenticationFailed) {
+                    this.cache.removeAccessToken();
+                    delete connection.accessToken;
+                    return await this.execute(connection, credentials);
+                }
+                else {
+                    throw error;
+                }
+            }
+        }
+        // Check if the Client Cache has a refresh token.
+        // If it does, call the OIDC Human Callback with the cached refresh token and IdpInfo to get a
+        // new access token. Cache the new access token in the Client Cache and Connection Cache.
+        // Perform a One-Step SASL conversation using the new access token. If the the server returns
+        // an Authentication error (18), clear the refresh token, invalidate the access token from the
+        // Client Cache, clear the Connection Cache, and restart the authentication flow. Raise any other
+        // errors to the user. On success, exit the algorithm.
+        if (this.cache.hasRefreshToken) {
+            const refreshToken = this.cache.getRefreshToken();
+            const result = await this.fetchAccessToken(this.cache.getIdpInfo(), credentials, refreshToken);
+            this.cache.put(result);
+            connection.accessToken = result.accessToken;
+            try {
+                return await this.finishAuthentication(connection, credentials, result.accessToken);
+            }
+            catch (error) {
+                if (error instanceof error_1.MongoError &&
+                    error.code === error_1.MONGODB_ERROR_CODES.AuthenticationFailed) {
+                    this.cache.removeRefreshToken();
+                    delete connection.accessToken;
+                    return await this.execute(connection, credentials);
+                }
+                else {
+                    throw error;
+                }
+            }
+        }
+        // Start a new Two-Step SASL conversation.
+        // Run a PrincipalStepRequest to get the IdpInfo.
+        // Call the OIDC Human Callback with the new IdpInfo to get a new access token and optional refresh
+        // token. Drivers MUST NOT pass a cached refresh token to the callback when performing
+        // a new Two-Step conversation. Cache the new IdpInfo and refresh token in the Client Cache and the
+        // new access token in the Client Cache and Connection Cache.
+        // Attempt to authenticate using a JwtStepRequest with the new access token. Raise any errors to the user.
+        const startResponse = await this.startAuthentication(connection, credentials);
+        const conversationId = startResponse.conversationId;
+        const idpInfo = bson_1.BSON.deserialize(startResponse.payload.buffer);
+        const callbackResponse = await this.fetchAccessToken(idpInfo, credentials);
+        this.cache.put(callbackResponse, idpInfo);
+        connection.accessToken = callbackResponse.accessToken;
+        return await this.finishAuthentication(connection, credentials, callbackResponse.accessToken, conversationId);
+    }
+    /**
+     * Fetches an access token using the callback.
+     */
+    async fetchAccessToken(idpInfo, credentials, refreshToken) {
+        const controller = new AbortController();
+        const params = {
+            timeoutContext: controller.signal,
+            version: mongodb_oidc_1.OIDC_VERSION,
+            idpInfo: idpInfo
+        };
+        if (credentials.username) {
+            params.username = credentials.username;
+        }
+        if (refreshToken) {
+            params.refreshToken = refreshToken;
+        }
+        const timeout = timeout_1.Timeout.expires(callback_workflow_1.HUMAN_TIMEOUT_MS);
+        try {
+            return await Promise.race([this.executeAndValidateCallback(params), timeout]);
+        }
+        catch (error) {
+            if (timeout_1.TimeoutError.is(error)) {
+                controller.abort();
+                throw new error_1.MongoOIDCError(`OIDC callback timed out after ${callback_workflow_1.HUMAN_TIMEOUT_MS}ms.`);
+            }
+            throw error;
+        }
+        finally {
+            timeout.clear();
+        }
+    }
+}
+exports.HumanCallbackWorkflow = HumanCallbackWorkflow;
+//# sourceMappingURL=human_callback_workflow.js.map

node_modules/mongodb/lib/cmap/auth/mongodb_oidc/human_callback_workflow.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"human_callback_workflow.js","sourceRoot":"","sources":["../../../../src/cmap/auth/mongodb_oidc/human_callback_workflow.ts"],"names":[],"mappings":";;;AAAA,wCAAqC;AACrC,0CAAiF;AACjF,8CAAyD;AAGzD,kDAMyB;AACzB,2DAAyE;AAGzE;;;GAGG;AACH,MAAa,qBAAsB,SAAQ,oCAAgB;IACzD;;OAEG;IACH,YAAY,KAAiB,EAAE,QAA8B;QAC3D,KAAK,CAAC,KAAK,EAAE,QAAQ,CAAC,CAAC;IACzB,CAAC;IAED;;OAEG;IACH,KAAK,CAAC,OAAO,CAAC,UAAsB,EAAE,WAA6B;QACjE,iDAAiD;QACjD,sGAAsG;QACtG,8EAA8E;QAC9E,uFAAuF;QACvF,2GAA2G;QAC3G,IAAI,IAAI,CAAC,KAAK,CAAC,cAAc,EAAE,CAAC;YAC9B,MAAM,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC,cAAc,EAAE,CAAC;YAC1C,UAAU,CAAC,WAAW,GAAG,KAAK,CAAC;YAC/B,IAAI,CAAC;gBACH,OAAO,MAAM,IAAI,CAAC,oBAAoB,CAAC,UAAU,EAAE,WAAW,EAAE,KAAK,CAAC,CAAC;YACzE,CAAC;YAAC,OAAO,KAAK,EAAE,CAAC;gBACf,IACE,KAAK,YAAY,kBAAU;oBAC3B,KAAK,CAAC,IAAI,KAAK,2BAAmB,CAAC,oBAAoB,EACvD,CAAC;oBACD,IAAI,CAAC,KAAK,CAAC,iBAAiB,EAAE,CAAC;oBAC/B,OAAO,UAAU,CAAC,WAAW,CAAC;oBAC9B,OAAO,MAAM,IAAI,CAAC,OAAO,CAAC,UAAU,EAAE,WAAW,CAAC,CAAC;gBACrD,CAAC;qBAAM,CAAC;oBACN,MAAM,KAAK,CAAC;gBACd,CAAC;YACH,CAAC;QACH,CAAC;QACD,iDAAiD;QACjD,8FAA8F;QAC9F,yFAAyF;QACzF,6FAA6F;QAC7F,8FAA8F;QAC9F,iGAAiG;QACjG,sDAAsD;QACtD,IAAI,IAAI,CAAC,KAAK,CAAC,eAAe,EAAE,CAAC;YAC/B,MAAM,YAAY,GAAG,IAAI,CAAC,KAAK,CAAC,eAAe,EAAE,CAAC;YAClD,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,gBAAgB,CACxC,IAAI,CAAC,KAAK,CAAC,UAAU,EAAE,EACvB,WAAW,EACX,YAAY,CACb,CAAC;YACF,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC;YACvB,UAAU,CAAC,WAAW,GAAG,MAAM,CAAC,WAAW,CAAC;YAC5C,IAAI,CAAC;gBACH,OAAO,MAAM,IAAI,CAAC,oBAAoB,CAAC,UAAU,EAAE,WAAW,EAAE,MAAM,CAAC,WAAW,CAAC,CAAC;YACtF,CAAC;YAAC,OAAO,KAAK,EAAE,CAAC;gBACf,IACE,KAAK,YAAY,kBAAU;oBAC3B,KAAK,CAAC,IAAI,KAAK,2BAAmB,CAAC,oBAAoB,EACvD,CAAC;oBACD,IAAI,CAAC,KAAK,CAAC,kBAAkB,EAAE,CAAC;oBAChC,OAAO,UAAU,CAAC,WAAW,CAAC;oBAC9B,OAAO,MAAM,IAAI,CAAC,OAAO,CAAC,UAAU,EAAE,WAAW,CAAC,CAAC;gBACrD,CAAC;qBAAM,CAAC;oBACN,MAAM,KAAK,CAAC;gBACd,CAAC;YACH,CAAC;QACH,CAAC;QAED,0CAA0C;QAC1C,iDAAiD;QACjD,mGAAmG;QACnG,sFAAsF;QACtF,mGAAmG;QACnG,6DAA6D;QAC7D,0GAA0G;QAC1G,MAAM,aAAa,GAAG,MAAM,IAAI,CAAC,mBAAmB,CAAC,UAAU,EAAE,WAAW,CAAC,CAAC;QAC9E,MAAM,cAAc,GAAG,aAAa,CAAC,cAAc,CAAC;QACpD,MAAM,OAAO,GAAG,WAAI,CAAC,WAAW,CAAC,aAAa,CAAC,OAAO,CAAC,MAAM,CAAY,CAAC;QAC1E,MAAM,gBAAgB,GAAG,MAAM,IAAI,CAAC,gBAAgB,CAAC,OAAO,EAAE,WAAW,CAAC,CAAC;QAC3E,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,gBAAgB,EAAE,OAAO,CAAC,CAAC;QAC1C,UAAU,CAAC,WAAW,GAAG,gBAAgB,CAAC,WAAW,CAAC;QACtD,OAAO,MAAM,IAAI,CAAC,oBAAoB,CACpC,UAAU,EACV,WAAW,EACX,gBAAgB,CAAC,WAAW,EAC5B,cAAc,CACf,CAAC;IACJ,CAAC;IAED;;OAEG;IACK,KAAK,CAAC,gBAAgB,CAC5B,OAAgB,EAChB,WAA6B,EAC7B,YAAqB;QAErB,MAAM,UAAU,GAAG,IAAI,eAAe,EAAE,CAAC;QACzC,MAAM,MAAM,GAAuB;YACjC,cAAc,EAAE,UAAU,CAAC,MAAM;YACjC,OAAO,EAAE,2BAAY;YACrB,OAAO,EAAE,OAAO;SACjB,CAAC;QACF,IAAI,WAAW,CAAC,QAAQ,EAAE,CAAC;YACzB,MAAM,CAAC,QAAQ,GAAG,WAAW,CAAC,QAAQ,CAAC;QACzC,CAAC;QACD,IAAI,YAAY,EAAE,CAAC;YACjB,MAAM,CAAC,YAAY,GAAG,YAAY,CAAC;QACrC,CAAC;QACD,MAAM,OAAO,GAAG,iBAAO,CAAC,OAAO,CAAC,oCAAgB,CAAC,CAAC;QAClD,IAAI,CAAC;YACH,OAAO,MAAM,OAAO,CAAC,IAAI,CAAC,CAAC,IAAI,CAAC,0BAA0B,CAAC,MAAM,CAAC,EAAE,OAAO,CAAC,CAAC,CAAC;QAChF,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,IAAI,sBAAY,CAAC,EAAE,CAAC,KAAK,CAAC,EAAE,CAAC;gBAC3B,UAAU,CAAC,KAAK,EAAE,CAAC;gBACnB,MAAM,IAAI,sBAAc,CAAC,iCAAiC,oCAAgB,KAAK,CAAC,CAAC;YACnF,CAAC;YACD,MAAM,KAAK,CAAC;QACd,CAAC;gBAAS,CAAC;YACT,OAAO,CAAC,KAAK,EAAE,CAAC;QAClB,CAAC;IACH,CAAC;CACF;AAzHD,sDAyHC"}

node_modules/mongodb/lib/cmap/auth/mongodb_oidc/k8s_machine_workflow.js

@@ -0,0 +1,31 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.callback = void 0;
+const promises_1 = require("fs/promises");
+/** The fallback file name */
+const FALLBACK_FILENAME = '/var/run/secrets/kubernetes.io/serviceaccount/token';
+/** The azure environment variable for the file name. */
+const AZURE_FILENAME = 'AZURE_FEDERATED_TOKEN_FILE';
+/** The AWS environment variable for the file name. */
+const AWS_FILENAME = 'AWS_WEB_IDENTITY_TOKEN_FILE';
+/**
+ * The callback function to be used in the automated callback workflow.
+ * @param params - The OIDC callback parameters.
+ * @returns The OIDC response.
+ */
+const callback = async () => {
+    let filename;
+    if (process.env[AZURE_FILENAME]) {
+        filename = process.env[AZURE_FILENAME];
+    }
+    else if (process.env[AWS_FILENAME]) {
+        filename = process.env[AWS_FILENAME];
+    }
+    else {
+        filename = FALLBACK_FILENAME;
+    }
+    const token = await (0, promises_1.readFile)(filename, 'utf8');
+    return { accessToken: token };
+};
+exports.callback = callback;
+//# sourceMappingURL=k8s_machine_workflow.js.map

node_modules/mongodb/lib/cmap/auth/mongodb_oidc/k8s_machine_workflow.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"k8s_machine_workflow.js","sourceRoot":"","sources":["../../../../src/cmap/auth/mongodb_oidc/k8s_machine_workflow.ts"],"names":[],"mappings":";;;AAAA,0CAAuC;AAIvC,6BAA6B;AAC7B,MAAM,iBAAiB,GAAG,qDAAqD,CAAC;AAEhF,wDAAwD;AACxD,MAAM,cAAc,GAAG,4BAA4B,CAAC;AAEpD,sDAAsD;AACtD,MAAM,YAAY,GAAG,6BAA6B,CAAC;AAEnD;;;;GAIG;AACI,MAAM,QAAQ,GAAyB,KAAK,IAA2B,EAAE;IAC9E,IAAI,QAAgB,CAAC;IACrB,IAAI,OAAO,CAAC,GAAG,CAAC,cAAc,CAAC,EAAE,CAAC;QAChC,QAAQ,GAAG,OAAO,CAAC,GAAG,CAAC,cAAc,CAAC,CAAC;IACzC,CAAC;SAAM,IAAI,OAAO,CAAC,GAAG,CAAC,YAAY,CAAC,EAAE,CAAC;QACrC,QAAQ,GAAG,OAAO,CAAC,GAAG,CAAC,YAAY,CAAC,CAAC;IACvC,CAAC;SAAM,CAAC;QACN,QAAQ,GAAG,iBAAiB,CAAC;IAC/B,CAAC;IACD,MAAM,KAAK,GAAG,MAAM,IAAA,mBAAQ,EAAC,QAAQ,EAAE,MAAM,CAAC,CAAC;IAC/C,OAAO,EAAE,WAAW,EAAE,KAAK,EAAE,CAAC;AAChC,CAAC,CAAC;AAXW,QAAA,QAAQ,YAWnB"}

node_modules/mongodb/lib/cmap/auth/mongodb_oidc/token_cache.js

@@ -0,0 +1,52 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.TokenCache = void 0;
+const error_1 = require("../../../error");
+class MongoOIDCError extends error_1.MongoDriverError {
+}
+/** @internal */
+class TokenCache {
+    get hasAccessToken() {
+        return !!this.accessToken;
+    }
+    get hasRefreshToken() {
+        return !!this.refreshToken;
+    }
+    get hasIdpInfo() {
+        return !!this.idpInfo;
+    }
+    getAccessToken() {
+        if (!this.accessToken) {
+            throw new MongoOIDCError('Attempted to get an access token when none exists.');
+        }
+        return this.accessToken;
+    }
+    getRefreshToken() {
+        if (!this.refreshToken) {
+            throw new MongoOIDCError('Attempted to get a refresh token when none exists.');
+        }
+        return this.refreshToken;
+    }
+    getIdpInfo() {
+        if (!this.idpInfo) {
+            throw new MongoOIDCError('Attempted to get IDP information when none exists.');
+        }
+        return this.idpInfo;
+    }
+    put(response, idpInfo) {
+        this.accessToken = response.accessToken;
+        this.refreshToken = response.refreshToken;
+        this.expiresInSeconds = response.expiresInSeconds;
+        if (idpInfo) {
+            this.idpInfo = idpInfo;
+        }
+    }
+    removeAccessToken() {
+        this.accessToken = undefined;
+    }
+    removeRefreshToken() {
+        this.refreshToken = undefined;
+    }
+}
+exports.TokenCache = TokenCache;
+//# sourceMappingURL=token_cache.js.map

node_modules/mongodb/lib/cmap/auth/mongodb_oidc/token_cache.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"token_cache.js","sourceRoot":"","sources":["../../../../src/cmap/auth/mongodb_oidc/token_cache.ts"],"names":[],"mappings":";;;AAAA,0CAAkD;AAGlD,MAAM,cAAe,SAAQ,wBAAgB;CAAG;AAEhD,gBAAgB;AAChB,MAAa,UAAU;IAMrB,IAAI,cAAc;QAChB,OAAO,CAAC,CAAC,IAAI,CAAC,WAAW,CAAC;IAC5B,CAAC;IAED,IAAI,eAAe;QACjB,OAAO,CAAC,CAAC,IAAI,CAAC,YAAY,CAAC;IAC7B,CAAC;IAED,IAAI,UAAU;QACZ,OAAO,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC;IACxB,CAAC;IAED,cAAc;QACZ,IAAI,CAAC,IAAI,CAAC,WAAW,EAAE,CAAC;YACtB,MAAM,IAAI,cAAc,CAAC,oDAAoD,CAAC,CAAC;QACjF,CAAC;QACD,OAAO,IAAI,CAAC,WAAW,CAAC;IAC1B,CAAC;IAED,eAAe;QACb,IAAI,CAAC,IAAI,CAAC,YAAY,EAAE,CAAC;YACvB,MAAM,IAAI,cAAc,CAAC,oDAAoD,CAAC,CAAC;QACjF,CAAC;QACD,OAAO,IAAI,CAAC,YAAY,CAAC;IAC3B,CAAC;IAED,UAAU;QACR,IAAI,CAAC,IAAI,CAAC,OAAO,EAAE,CAAC;YAClB,MAAM,IAAI,cAAc,CAAC,oDAAoD,CAAC,CAAC;QACjF,CAAC;QACD,OAAO,IAAI,CAAC,OAAO,CAAC;IACtB,CAAC;IAED,GAAG,CAAC,QAAsB,EAAE,OAAiB;QAC3C,IAAI,CAAC,WAAW,GAAG,QAAQ,CAAC,WAAW,CAAC;QACxC,IAAI,CAAC,YAAY,GAAG,QAAQ,CAAC,YAAY,CAAC;QAC1C,IAAI,CAAC,gBAAgB,GAAG,QAAQ,CAAC,gBAAgB,CAAC;QAClD,IAAI,OAAO,EAAE,CAAC;YACZ,IAAI,CAAC,OAAO,GAAG,OAAO,CAAC;QACzB,CAAC;IACH,CAAC;IAED,iBAAiB;QACf,IAAI,CAAC,WAAW,GAAG,SAAS,CAAC;IAC/B,CAAC;IAED,kBAAkB;QAChB,IAAI,CAAC,YAAY,GAAG,SAAS,CAAC;IAChC,CAAC;CACF;AAvDD,gCAuDC"}

node_modules/mongodb/lib/cmap/auth/mongodb_oidc/token_machine_workflow.js

@@ -0,0 +1,22 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.callback = void 0;
+const fs = require("fs");
+const error_1 = require("../../../error");
+/** Error for when the token is missing in the environment. */
+const TOKEN_MISSING_ERROR = 'OIDC_TOKEN_FILE must be set in the environment.';
+/**
+ * The callback function to be used in the automated callback workflow.
+ * @param params - The OIDC callback parameters.
+ * @returns The OIDC response.
+ */
+const callback = async () => {
+    const tokenFile = process.env.OIDC_TOKEN_FILE;
+    if (!tokenFile) {
+        throw new error_1.MongoAWSError(TOKEN_MISSING_ERROR);
+    }
+    const token = await fs.promises.readFile(tokenFile, 'utf8');
+    return { accessToken: token };
+};
+exports.callback = callback;
+//# sourceMappingURL=token_machine_workflow.js.map

node_modules/mongodb/lib/cmap/auth/mongodb_oidc/token_machine_workflow.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"token_machine_workflow.js","sourceRoot":"","sources":["../../../../src/cmap/auth/mongodb_oidc/token_machine_workflow.ts"],"names":[],"mappings":";;;AAAA,yBAAyB;AAEzB,0CAA+C;AAG/C,8DAA8D;AAC9D,MAAM,mBAAmB,GAAG,iDAAiD,CAAC;AAE9E;;;;GAIG;AACI,MAAM,QAAQ,GAAyB,KAAK,IAA2B,EAAE;IAC9E,MAAM,SAAS,GAAG,OAAO,CAAC,GAAG,CAAC,eAAe,CAAC;IAC9C,IAAI,CAAC,SAAS,EAAE,CAAC;QACf,MAAM,IAAI,qBAAa,CAAC,mBAAmB,CAAC,CAAC;IAC/C,CAAC;IACD,MAAM,KAAK,GAAG,MAAM,EAAE,CAAC,QAAQ,CAAC,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC,CAAC;IAC5D,OAAO,EAAE,WAAW,EAAE,KAAK,EAAE,CAAC;AAChC,CAAC,CAAC;AAPW,QAAA,QAAQ,YAOnB"}

node_modules/mongodb/lib/cmap/auth/plain.js

@@ -0,0 +1,26 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.Plain = void 0;
+const bson_1 = require("../../bson");
+const error_1 = require("../../error");
+const utils_1 = require("../../utils");
+const auth_provider_1 = require("./auth_provider");
+class Plain extends auth_provider_1.AuthProvider {
+    async auth(authContext) {
+        const { connection, credentials } = authContext;
+        if (!credentials) {
+            throw new error_1.MongoMissingCredentialsError('AuthContext must provide credentials.');
+        }
+        const { username, password } = credentials;
+        const payload = new bson_1.Binary(Buffer.from(`\x00${username}\x00${password}`));
+        const command = {
+            saslStart: 1,
+            mechanism: 'PLAIN',
+            payload: payload,
+            autoAuthorize: 1
+        };
+        await connection.command((0, utils_1.ns)('$external.$cmd'), command, undefined);
+    }
+}
+exports.Plain = Plain;
+//# sourceMappingURL=plain.js.map

node_modules/mongodb/lib/cmap/auth/plain.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"plain.js","sourceRoot":"","sources":["../../../src/cmap/auth/plain.ts"],"names":[],"mappings":";;;AAAA,qCAAoC;AACpC,uCAA2D;AAC3D,uCAAiC;AACjC,mDAAiE;AAEjE,MAAa,KAAM,SAAQ,4BAAY;IAC5B,KAAK,CAAC,IAAI,CAAC,WAAwB;QAC1C,MAAM,EAAE,UAAU,EAAE,WAAW,EAAE,GAAG,WAAW,CAAC;QAChD,IAAI,CAAC,WAAW,EAAE,CAAC;YACjB,MAAM,IAAI,oCAA4B,CAAC,uCAAuC,CAAC,CAAC;QAClF,CAAC;QAED,MAAM,EAAE,QAAQ,EAAE,QAAQ,EAAE,GAAG,WAAW,CAAC;QAE3C,MAAM,OAAO,GAAG,IAAI,aAAM,CAAC,MAAM,CAAC,IAAI,CAAC,OAAO,QAAQ,OAAO,QAAQ,EAAE,CAAC,CAAC,CAAC;QAC1E,MAAM,OAAO,GAAG;YACd,SAAS,EAAE,CAAC;YACZ,SAAS,EAAE,OAAO;YAClB,OAAO,EAAE,OAAO;YAChB,aAAa,EAAE,CAAC;SACjB,CAAC;QAEF,MAAM,UAAU,CAAC,OAAO,CAAC,IAAA,UAAE,EAAC,gBAAgB,CAAC,EAAE,OAAO,EAAE,SAAS,CAAC,CAAC;IACrE,CAAC;CACF;AAnBD,sBAmBC"}

node_modules/mongodb/lib/cmap/auth/providers.js

@@ -0,0 +1,22 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.AUTH_MECHS_AUTH_SRC_EXTERNAL = exports.AuthMechanism = void 0;
+/** @public */
+exports.AuthMechanism = Object.freeze({
+    MONGODB_AWS: 'MONGODB-AWS',
+    MONGODB_DEFAULT: 'DEFAULT',
+    MONGODB_GSSAPI: 'GSSAPI',
+    MONGODB_PLAIN: 'PLAIN',
+    MONGODB_SCRAM_SHA1: 'SCRAM-SHA-1',
+    MONGODB_SCRAM_SHA256: 'SCRAM-SHA-256',
+    MONGODB_X509: 'MONGODB-X509',
+    MONGODB_OIDC: 'MONGODB-OIDC'
+});
+/** @internal */
+exports.AUTH_MECHS_AUTH_SRC_EXTERNAL = new Set([
+    exports.AuthMechanism.MONGODB_GSSAPI,
+    exports.AuthMechanism.MONGODB_AWS,
+    exports.AuthMechanism.MONGODB_OIDC,
+    exports.AuthMechanism.MONGODB_X509
+]);
+//# sourceMappingURL=providers.js.map

node_modules/mongodb/lib/cmap/auth/providers.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"providers.js","sourceRoot":"","sources":["../../../src/cmap/auth/providers.ts"],"names":[],"mappings":";;;AAAA,cAAc;AACD,QAAA,aAAa,GAAG,MAAM,CAAC,MAAM,CAAC;IACzC,WAAW,EAAE,aAAa;IAC1B,eAAe,EAAE,SAAS;IAC1B,cAAc,EAAE,QAAQ;IACxB,aAAa,EAAE,OAAO;IACtB,kBAAkB,EAAE,aAAa;IACjC,oBAAoB,EAAE,eAAe;IACrC,YAAY,EAAE,cAAc;IAC5B,YAAY,EAAE,cAAc;CACpB,CAAC,CAAC;AAKZ,gBAAgB;AACH,QAAA,4BAA4B,GAAG,IAAI,GAAG,CAAgB;IACjE,qBAAa,CAAC,cAAc;IAC5B,qBAAa,CAAC,WAAW;IACzB,qBAAa,CAAC,YAAY;IAC1B,qBAAa,CAAC,YAAY;CAC3B,CAAC,CAAC"}

node_modules/mongodb/lib/cmap/auth/scram.js

@@ -0,0 +1,254 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.ScramSHA256 = exports.ScramSHA1 = void 0;
+const saslprep_1 = require("@mongodb-js/saslprep");
+const crypto = require("crypto");
+const bson_1 = require("../../bson");
+const error_1 = require("../../error");
+const utils_1 = require("../../utils");
+const auth_provider_1 = require("./auth_provider");
+const providers_1 = require("./providers");
+class ScramSHA extends auth_provider_1.AuthProvider {
+    constructor(cryptoMethod) {
+        super();
+        this.cryptoMethod = cryptoMethod || 'sha1';
+    }
+    async prepare(handshakeDoc, authContext) {
+        const cryptoMethod = this.cryptoMethod;
+        const credentials = authContext.credentials;
+        if (!credentials) {
+            throw new error_1.MongoMissingCredentialsError('AuthContext must provide credentials.');
+        }
+        const nonce = await (0, utils_1.randomBytes)(24);
+        // store the nonce for later use
+        authContext.nonce = nonce;
+        const request = {
+            ...handshakeDoc,
+            speculativeAuthenticate: {
+                ...makeFirstMessage(cryptoMethod, credentials, nonce),
+                db: credentials.source
+            }
+        };
+        return request;
+    }
+    async auth(authContext) {
+        const { reauthenticating, response } = authContext;
+        if (response?.speculativeAuthenticate && !reauthenticating) {
+            return await continueScramConversation(this.cryptoMethod, response.speculativeAuthenticate, authContext);
+        }
+        return await executeScram(this.cryptoMethod, authContext);
+    }
+}
+function cleanUsername(username) {
+    return username.replace('=', '=3D').replace(',', '=2C');
+}
+function clientFirstMessageBare(username, nonce) {
+    // NOTE: This is done b/c Javascript uses UTF-16, but the server is hashing in UTF-8.
+    // Since the username is not sasl-prep-d, we need to do this here.
+    return Buffer.concat([
+        Buffer.from('n=', 'utf8'),
+        Buffer.from(username, 'utf8'),
+        Buffer.from(',r=', 'utf8'),
+        Buffer.from(nonce.toString('base64'), 'utf8')
+    ]);
+}
+function makeFirstMessage(cryptoMethod, credentials, nonce) {
+    const username = cleanUsername(credentials.username);
+    const mechanism = cryptoMethod === 'sha1' ? providers_1.AuthMechanism.MONGODB_SCRAM_SHA1 : providers_1.AuthMechanism.MONGODB_SCRAM_SHA256;
+    // NOTE: This is done b/c Javascript uses UTF-16, but the server is hashing in UTF-8.
+    // Since the username is not sasl-prep-d, we need to do this here.
+    return {
+        saslStart: 1,
+        mechanism,
+        payload: new bson_1.Binary(Buffer.concat([Buffer.from('n,,', 'utf8'), clientFirstMessageBare(username, nonce)])),
+        autoAuthorize: 1,
+        options: { skipEmptyExchange: true }
+    };
+}
+async function executeScram(cryptoMethod, authContext) {
+    const { connection, credentials } = authContext;
+    if (!credentials) {
+        throw new error_1.MongoMissingCredentialsError('AuthContext must provide credentials.');
+    }
+    if (!authContext.nonce) {
+        throw new error_1.MongoInvalidArgumentError('AuthContext must contain a valid nonce property');
+    }
+    const nonce = authContext.nonce;
+    const db = credentials.source;
+    const saslStartCmd = makeFirstMessage(cryptoMethod, credentials, nonce);
+    const response = await connection.command((0, utils_1.ns)(`${db}.$cmd`), saslStartCmd, undefined);
+    await continueScramConversation(cryptoMethod, response, authContext);
+}
+async function continueScramConversation(cryptoMethod, response, authContext) {
+    const connection = authContext.connection;
+    const credentials = authContext.credentials;
+    if (!credentials) {
+        throw new error_1.MongoMissingCredentialsError('AuthContext must provide credentials.');
+    }
+    if (!authContext.nonce) {
+        throw new error_1.MongoInvalidArgumentError('Unable to continue SCRAM without valid nonce');
+    }
+    const nonce = authContext.nonce;
+    const db = credentials.source;
+    const username = cleanUsername(credentials.username);
+    const password = credentials.password;
+    const processedPassword = cryptoMethod === 'sha256' ? (0, saslprep_1.saslprep)(password) : passwordDigest(username, password);
+    const payload = Buffer.isBuffer(response.payload)
+        ? new bson_1.Binary(response.payload)
+        : response.payload;
+    const dict = parsePayload(payload);
+    const iterations = parseInt(dict.i, 10);
+    if (iterations && iterations < 4096) {
+        // TODO(NODE-3483)
+        throw new error_1.MongoRuntimeError(`Server returned an invalid iteration count ${iterations}`);
+    }
+    const salt = dict.s;
+    const rnonce = dict.r;
+    if (rnonce.startsWith('nonce')) {
+        // TODO(NODE-3483)
+        throw new error_1.MongoRuntimeError(`Server returned an invalid nonce: ${rnonce}`);
+    }
+    // Set up start of proof
+    const withoutProof = `c=biws,r=${rnonce}`;
+    const saltedPassword = HI(processedPassword, Buffer.from(salt, 'base64'), iterations, cryptoMethod);
+    const clientKey = HMAC(cryptoMethod, saltedPassword, 'Client Key');
+    const serverKey = HMAC(cryptoMethod, saltedPassword, 'Server Key');
+    const storedKey = H(cryptoMethod, clientKey);
+    const authMessage = [
+        clientFirstMessageBare(username, nonce),
+        payload.toString('utf8'),
+        withoutProof
+    ].join(',');
+    const clientSignature = HMAC(cryptoMethod, storedKey, authMessage);
+    const clientProof = `p=${xor(clientKey, clientSignature)}`;
+    const clientFinal = [withoutProof, clientProof].join(',');
+    const serverSignature = HMAC(cryptoMethod, serverKey, authMessage);
+    const saslContinueCmd = {
+        saslContinue: 1,
+        conversationId: response.conversationId,
+        payload: new bson_1.Binary(Buffer.from(clientFinal))
+    };
+    const r = await connection.command((0, utils_1.ns)(`${db}.$cmd`), saslContinueCmd, undefined);
+    const parsedResponse = parsePayload(r.payload);
+    if (!compareDigest(Buffer.from(parsedResponse.v, 'base64'), serverSignature)) {
+        throw new error_1.MongoRuntimeError('Server returned an invalid signature');
+    }
+    if (r.done !== false) {
+        // If the server sends r.done === true we can save one RTT
+        return;
+    }
+    const retrySaslContinueCmd = {
+        saslContinue: 1,
+        conversationId: r.conversationId,
+        payload: Buffer.alloc(0)
+    };
+    await connection.command((0, utils_1.ns)(`${db}.$cmd`), retrySaslContinueCmd, undefined);
+}
+function parsePayload(payload) {
+    const payloadStr = payload.toString('utf8');
+    const dict = {};
+    const parts = payloadStr.split(',');
+    for (let i = 0; i < parts.length; i++) {
+        const valueParts = (parts[i].match(/^([^=]*)=(.*)$/) ?? []).slice(1);
+        dict[valueParts[0]] = valueParts[1];
+    }
+    return dict;
+}
+function passwordDigest(username, password) {
+    if (typeof username !== 'string') {
+        throw new error_1.MongoInvalidArgumentError('Username must be a string');
+    }
+    if (typeof password !== 'string') {
+        throw new error_1.MongoInvalidArgumentError('Password must be a string');
+    }
+    if (password.length === 0) {
+        throw new error_1.MongoInvalidArgumentError('Password cannot be empty');
+    }
+    let md5;
+    try {
+        md5 = crypto.createHash('md5');
+    }
+    catch (err) {
+        if (crypto.getFips()) {
+            // This error is (slightly) more helpful than what comes from OpenSSL directly, e.g.
+            // 'Error: error:060800C8:digital envelope routines:EVP_DigestInit_ex:disabled for FIPS'
+            throw new Error('Auth mechanism SCRAM-SHA-1 is not supported in FIPS mode');
+        }
+        throw err;
+    }
+    md5.update(`${username}:mongo:${password}`, 'utf8');
+    return md5.digest('hex');
+}
+// XOR two buffers
+function xor(a, b) {
+    if (!Buffer.isBuffer(a)) {
+        a = Buffer.from(a);
+    }
+    if (!Buffer.isBuffer(b)) {
+        b = Buffer.from(b);
+    }
+    const length = Math.max(a.length, b.length);
+    const res = [];
+    for (let i = 0; i < length; i += 1) {
+        res.push(a[i] ^ b[i]);
+    }
+    return Buffer.from(res).toString('base64');
+}
+function H(method, text) {
+    return crypto.createHash(method).update(text).digest();
+}
+function HMAC(method, key, text) {
+    return crypto.createHmac(method, key).update(text).digest();
+}
+let _hiCache = {};
+let _hiCacheCount = 0;
+function _hiCachePurge() {
+    _hiCache = {};
+    _hiCacheCount = 0;
+}
+const hiLengthMap = {
+    sha256: 32,
+    sha1: 20
+};
+function HI(data, salt, iterations, cryptoMethod) {
+    // omit the work if already generated
+    const key = [data, salt.toString('base64'), iterations].join('_');
+    if (_hiCache[key] != null) {
+        return _hiCache[key];
+    }
+    // generate the salt
+    const saltedData = crypto.pbkdf2Sync(data, salt, iterations, hiLengthMap[cryptoMethod], cryptoMethod);
+    // cache a copy to speed up the next lookup, but prevent unbounded cache growth
+    if (_hiCacheCount >= 200) {
+        _hiCachePurge();
+    }
+    _hiCache[key] = saltedData;
+    _hiCacheCount += 1;
+    return saltedData;
+}
+function compareDigest(lhs, rhs) {
+    if (lhs.length !== rhs.length) {
+        return false;
+    }
+    if (typeof crypto.timingSafeEqual === 'function') {
+        return crypto.timingSafeEqual(lhs, rhs);
+    }
+    let result = 0;
+    for (let i = 0; i < lhs.length; i++) {
+        result |= lhs[i] ^ rhs[i];
+    }
+    return result === 0;
+}
+class ScramSHA1 extends ScramSHA {
+    constructor() {
+        super('sha1');
+    }
+}
+exports.ScramSHA1 = ScramSHA1;
+class ScramSHA256 extends ScramSHA {
+    constructor() {
+        super('sha256');
+    }
+}
+exports.ScramSHA256 = ScramSHA256;
+//# sourceMappingURL=scram.js.map

node_modules/mongodb/lib/cmap/auth/x509.js

@@ -0,0 +1,36 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.X509 = void 0;
+const error_1 = require("../../error");
+const utils_1 = require("../../utils");
+const auth_provider_1 = require("./auth_provider");
+class X509 extends auth_provider_1.AuthProvider {
+    async prepare(handshakeDoc, authContext) {
+        const { credentials } = authContext;
+        if (!credentials) {
+            throw new error_1.MongoMissingCredentialsError('AuthContext must provide credentials.');
+        }
+        return { ...handshakeDoc, speculativeAuthenticate: x509AuthenticateCommand(credentials) };
+    }
+    async auth(authContext) {
+        const connection = authContext.connection;
+        const credentials = authContext.credentials;
+        if (!credentials) {
+            throw new error_1.MongoMissingCredentialsError('AuthContext must provide credentials.');
+        }
+        const response = authContext.response;
+        if (response?.speculativeAuthenticate) {
+            return;
+        }
+        await connection.command((0, utils_1.ns)('$external.$cmd'), x509AuthenticateCommand(credentials), undefined);
+    }
+}
+exports.X509 = X509;
+function x509AuthenticateCommand(credentials) {
+    const command = { authenticate: 1, mechanism: 'MONGODB-X509' };
+    if (credentials.username) {
+        command.user = credentials.username;
+    }
+    return command;
+}
+//# sourceMappingURL=x509.js.map

node_modules/mongodb/lib/cmap/auth/x509.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"x509.js","sourceRoot":"","sources":["../../../src/cmap/auth/x509.ts"],"names":[],"mappings":";;;AACA,uCAA2D;AAC3D,uCAAiC;AAEjC,mDAAiE;AAGjE,MAAa,IAAK,SAAQ,4BAAY;IAC3B,KAAK,CAAC,OAAO,CACpB,YAA+B,EAC/B,WAAwB;QAExB,MAAM,EAAE,WAAW,EAAE,GAAG,WAAW,CAAC;QACpC,IAAI,CAAC,WAAW,EAAE,CAAC;YACjB,MAAM,IAAI,oCAA4B,CAAC,uCAAuC,CAAC,CAAC;QAClF,CAAC;QACD,OAAO,EAAE,GAAG,YAAY,EAAE,uBAAuB,EAAE,uBAAuB,CAAC,WAAW,CAAC,EAAE,CAAC;IAC5F,CAAC;IAEQ,KAAK,CAAC,IAAI,CAAC,WAAwB;QAC1C,MAAM,UAAU,GAAG,WAAW,CAAC,UAAU,CAAC;QAC1C,MAAM,WAAW,GAAG,WAAW,CAAC,WAAW,CAAC;QAC5C,IAAI,CAAC,WAAW,EAAE,CAAC;YACjB,MAAM,IAAI,oCAA4B,CAAC,uCAAuC,CAAC,CAAC;QAClF,CAAC;QACD,MAAM,QAAQ,GAAG,WAAW,CAAC,QAAQ,CAAC;QAEtC,IAAI,QAAQ,EAAE,uBAAuB,EAAE,CAAC;YACtC,OAAO;QACT,CAAC;QAED,MAAM,UAAU,CAAC,OAAO,CAAC,IAAA,UAAE,EAAC,gBAAgB,CAAC,EAAE,uBAAuB,CAAC,WAAW,CAAC,EAAE,SAAS,CAAC,CAAC;IAClG,CAAC;CACF;AA1BD,oBA0BC;AAED,SAAS,uBAAuB,CAAC,WAA6B;IAC5D,MAAM,OAAO,GAAa,EAAE,YAAY,EAAE,CAAC,EAAE,SAAS,EAAE,cAAc,EAAE,CAAC;IACzE,IAAI,WAAW,CAAC,QAAQ,EAAE,CAAC;QACzB,OAAO,CAAC,IAAI,GAAG,WAAW,CAAC,QAAQ,CAAC;IACtC,CAAC;IAED,OAAO,OAAO,CAAC;AACjB,CAAC"}

node_modules/mongodb/lib/cmap/command_monitoring_events.js

@@ -0,0 +1,223 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.SENSITIVE_COMMANDS = exports.CommandFailedEvent = exports.CommandSucceededEvent = exports.CommandStartedEvent = void 0;
+const constants_1 = require("../constants");
+const utils_1 = require("../utils");
+const commands_1 = require("./commands");
+/**
+ * An event indicating the start of a given command
+ * @public
+ * @category Event
+ */
+class CommandStartedEvent {
+    /**
+     * Create a started event
+     *
+     * @internal
+     * @param pool - the pool that originated the command
+     * @param command - the command
+     */
+    constructor(connection, command, serverConnectionId) {
+        /** @internal */
+        this.name = constants_1.COMMAND_STARTED;
+        const cmd = extractCommand(command);
+        const commandName = extractCommandName(cmd);
+        const { address, connectionId, serviceId } = extractConnectionDetails(connection);
+        // TODO: remove in major revision, this is not spec behavior
+        if (exports.SENSITIVE_COMMANDS.has(commandName)) {
+            this.commandObj = {};
+            this.commandObj[commandName] = true;
+        }
+        this.address = address;
+        this.connectionId = connectionId;
+        this.serviceId = serviceId;
+        this.requestId = command.requestId;
+        this.databaseName = command.databaseName;
+        this.commandName = commandName;
+        this.command = maybeRedact(commandName, cmd, cmd);
+        this.serverConnectionId = serverConnectionId;
+    }
+    /* @internal */
+    get hasServiceId() {
+        return !!this.serviceId;
+    }
+}
+exports.CommandStartedEvent = CommandStartedEvent;
+/**
+ * An event indicating the success of a given command
+ * @public
+ * @category Event
+ */
+class CommandSucceededEvent {
+    /**
+     * Create a succeeded event
+     *
+     * @internal
+     * @param pool - the pool that originated the command
+     * @param command - the command
+     * @param reply - the reply for this command from the server
+     * @param started - a high resolution tuple timestamp of when the command was first sent, to calculate duration
+     */
+    constructor(connection, command, reply, started, serverConnectionId) {
+        /** @internal */
+        this.name = constants_1.COMMAND_SUCCEEDED;
+        const cmd = extractCommand(command);
+        const commandName = extractCommandName(cmd);
+        const { address, connectionId, serviceId } = extractConnectionDetails(connection);
+        this.address = address;
+        this.connectionId = connectionId;
+        this.serviceId = serviceId;
+        this.requestId = command.requestId;
+        this.commandName = commandName;
+        this.duration = (0, utils_1.calculateDurationInMs)(started);
+        this.reply = maybeRedact(commandName, cmd, extractReply(reply));
+        this.serverConnectionId = serverConnectionId;
+        this.databaseName = command.databaseName;
+    }
+    /* @internal */
+    get hasServiceId() {
+        return !!this.serviceId;
+    }
+}
+exports.CommandSucceededEvent = CommandSucceededEvent;
+/**
+ * An event indicating the failure of a given command
+ * @public
+ * @category Event
+ */
+class CommandFailedEvent {
+    /**
+     * Create a failure event
+     *
+     * @internal
+     * @param pool - the pool that originated the command
+     * @param command - the command
+     * @param error - the generated error or a server error response
+     * @param started - a high resolution tuple timestamp of when the command was first sent, to calculate duration
+     */
+    constructor(connection, command, error, started, serverConnectionId) {
+        /** @internal */
+        this.name = constants_1.COMMAND_FAILED;
+        const cmd = extractCommand(command);
+        const commandName = extractCommandName(cmd);
+        const { address, connectionId, serviceId } = extractConnectionDetails(connection);
+        this.address = address;
+        this.connectionId = connectionId;
+        this.serviceId = serviceId;
+        this.requestId = command.requestId;
+        this.commandName = commandName;
+        this.duration = (0, utils_1.calculateDurationInMs)(started);
+        this.failure = maybeRedact(commandName, cmd, error);
+        this.serverConnectionId = serverConnectionId;
+        this.databaseName = command.databaseName;
+    }
+    /* @internal */
+    get hasServiceId() {
+        return !!this.serviceId;
+    }
+}
+exports.CommandFailedEvent = CommandFailedEvent;
+/**
+ * Commands that we want to redact because of the sensitive nature of their contents
+ * @internal
+ */
+exports.SENSITIVE_COMMANDS = new Set([
+    'authenticate',
+    'saslStart',
+    'saslContinue',
+    'getnonce',
+    'createUser',
+    'updateUser',
+    'copydbgetnonce',
+    'copydbsaslstart',
+    'copydb'
+]);
+const HELLO_COMMANDS = new Set(['hello', constants_1.LEGACY_HELLO_COMMAND, constants_1.LEGACY_HELLO_COMMAND_CAMEL_CASE]);
+// helper methods
+const extractCommandName = (commandDoc) => Object.keys(commandDoc)[0];
+const collectionName = (command) => command.ns.split('.')[1];
+const maybeRedact = (commandName, commandDoc, result) => exports.SENSITIVE_COMMANDS.has(commandName) ||
+    (HELLO_COMMANDS.has(commandName) && commandDoc.speculativeAuthenticate)
+    ? {}
+    : result;
+const LEGACY_FIND_QUERY_MAP = {
+    $query: 'filter',
+    $orderby: 'sort',
+    $hint: 'hint',
+    $comment: 'comment',
+    $maxScan: 'maxScan',
+    $max: 'max',
+    $min: 'min',
+    $returnKey: 'returnKey',
+    $showDiskLoc: 'showRecordId',
+    $maxTimeMS: 'maxTimeMS',
+    $snapshot: 'snapshot'
+};
+const LEGACY_FIND_OPTIONS_MAP = {
+    numberToSkip: 'skip',
+    numberToReturn: 'batchSize',
+    returnFieldSelector: 'projection'
+};
+/** Extract the actual command from the query, possibly up-converting if it's a legacy format */
+function extractCommand(command) {
+    if (command instanceof commands_1.OpMsgRequest) {
+        const cmd = { ...command.command };
+        // For OP_MSG with payload type 1 we need to pull the documents
+        // array out of the document sequence for monitoring.
+        if (cmd.ops instanceof commands_1.DocumentSequence) {
+            cmd.ops = cmd.ops.documents;
+        }
+        if (cmd.nsInfo instanceof commands_1.DocumentSequence) {
+            cmd.nsInfo = cmd.nsInfo.documents;
+        }
+        return cmd;
+    }
+    if (command.query?.$query) {
+        let result;
+        if (command.ns === 'admin.$cmd') {
+            // up-convert legacy command
+            result = Object.assign({}, command.query.$query);
+        }
+        else {
+            // up-convert legacy find command
+            result = { find: collectionName(command) };
+            Object.keys(LEGACY_FIND_QUERY_MAP).forEach(key => {
+                if (command.query[key] != null) {
+                    result[LEGACY_FIND_QUERY_MAP[key]] = { ...command.query[key] };
+                }
+            });
+        }
+        Object.keys(LEGACY_FIND_OPTIONS_MAP).forEach(key => {
+            const legacyKey = key;
+            if (command[legacyKey] != null) {
+                result[LEGACY_FIND_OPTIONS_MAP[legacyKey]] = command[legacyKey];
+            }
+        });
+        return result;
+    }
+    let clonedQuery = {};
+    const clonedCommand = { ...command };
+    if (command.query) {
+        clonedQuery = { ...command.query };
+        clonedCommand.query = clonedQuery;
+    }
+    return command.query ? clonedQuery : clonedCommand;
+}
+function extractReply(reply) {
+    if (!reply) {
+        return reply;
+    }
+    return reply.result ? reply.result : reply;
+}
+function extractConnectionDetails(connection) {
+    let connectionId;
+    if ('id' in connection) {
+        connectionId = connection.id;
+    }
+    return {
+        address: connection.address,
+        serviceId: connection.serviceId,
+        connectionId
+    };
+}
+//# sourceMappingURL=command_monitoring_events.js.map

node_modules/mongodb/lib/cmap/commands.js

@@ -0,0 +1,535 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.OpCompressedRequest = exports.OpMsgResponse = exports.OpMsgRequest = exports.DocumentSequence = exports.OpReply = exports.OpQueryRequest = void 0;
+const BSON = require("../bson");
+const error_1 = require("../error");
+const compression_1 = require("./wire_protocol/compression");
+const constants_1 = require("./wire_protocol/constants");
+// Incrementing request id
+let _requestId = 0;
+// Query flags
+const OPTS_TAILABLE_CURSOR = 2;
+const OPTS_SECONDARY = 4;
+const OPTS_OPLOG_REPLAY = 8;
+const OPTS_NO_CURSOR_TIMEOUT = 16;
+const OPTS_AWAIT_DATA = 32;
+const OPTS_EXHAUST = 64;
+const OPTS_PARTIAL = 128;
+// Response flags
+const CURSOR_NOT_FOUND = 1;
+const QUERY_FAILURE = 2;
+const SHARD_CONFIG_STALE = 4;
+const AWAIT_CAPABLE = 8;
+const encodeUTF8Into = BSON.BSON.onDemand.ByteUtils.encodeUTF8Into;
+/** @internal */
+class OpQueryRequest {
+    constructor(databaseName, query, options) {
+        /** moreToCome is an OP_MSG only concept */
+        this.moreToCome = false;
+        // Basic options needed to be passed in
+        // TODO(NODE-3483): Replace with MongoCommandError
+        const ns = `${databaseName}.$cmd`;
+        if (typeof databaseName !== 'string') {
+            throw new error_1.MongoRuntimeError('Database name must be a string for a query');
+        }
+        // TODO(NODE-3483): Replace with MongoCommandError
+        if (query == null)
+            throw new error_1.MongoRuntimeError('A query document must be specified for query');
+        // Validate that we are not passing 0x00 in the collection name
+        if (ns.indexOf('\x00') !== -1) {
+            // TODO(NODE-3483): Use MongoNamespace static method
+            throw new error_1.MongoRuntimeError('Namespace cannot contain a null character');
+        }
+        // Basic optionsa
+        this.databaseName = databaseName;
+        this.query = query;
+        this.ns = ns;
+        // Additional options
+        this.numberToSkip = options.numberToSkip || 0;
+        this.numberToReturn = options.numberToReturn || 0;
+        this.returnFieldSelector = options.returnFieldSelector || undefined;
+        this.requestId = options.requestId ?? OpQueryRequest.getRequestId();
+        // special case for pre-3.2 find commands, delete ASAP
+        this.pre32Limit = options.pre32Limit;
+        // Serialization option
+        this.serializeFunctions =
+            typeof options.serializeFunctions === 'boolean' ? options.serializeFunctions : false;
+        this.ignoreUndefined =
+            typeof options.ignoreUndefined === 'boolean' ? options.ignoreUndefined : false;
+        this.maxBsonSize = options.maxBsonSize || 1024 * 1024 * 16;
+        this.checkKeys = typeof options.checkKeys === 'boolean' ? options.checkKeys : false;
+        this.batchSize = this.numberToReturn;
+        // Flags
+        this.tailable = false;
+        this.secondaryOk = typeof options.secondaryOk === 'boolean' ? options.secondaryOk : false;
+        this.oplogReplay = false;
+        this.noCursorTimeout = false;
+        this.awaitData = false;
+        this.exhaust = false;
+        this.partial = false;
+    }
+    /** Assign next request Id. */
+    incRequestId() {
+        this.requestId = _requestId++;
+    }
+    /** Peek next request Id. */
+    nextRequestId() {
+        return _requestId + 1;
+    }
+    /** Increment then return next request Id. */
+    static getRequestId() {
+        return ++_requestId;
+    }
+    // Uses a single allocated buffer for the process, avoiding multiple memory allocations
+    toBin() {
+        const buffers = [];
+        let projection = null;
+        // Set up the flags
+        let flags = 0;
+        if (this.tailable) {
+            flags |= OPTS_TAILABLE_CURSOR;
+        }
+        if (this.secondaryOk) {
+            flags |= OPTS_SECONDARY;
+        }
+        if (this.oplogReplay) {
+            flags |= OPTS_OPLOG_REPLAY;
+        }
+        if (this.noCursorTimeout) {
+            flags |= OPTS_NO_CURSOR_TIMEOUT;
+        }
+        if (this.awaitData) {
+            flags |= OPTS_AWAIT_DATA;
+        }
+        if (this.exhaust) {
+            flags |= OPTS_EXHAUST;
+        }
+        if (this.partial) {
+            flags |= OPTS_PARTIAL;
+        }
+        // If batchSize is different to this.numberToReturn
+        if (this.batchSize !== this.numberToReturn)
+            this.numberToReturn = this.batchSize;
+        // Allocate write protocol header buffer
+        const header = Buffer.alloc(4 * 4 + // Header
+            4 + // Flags
+            Buffer.byteLength(this.ns) +
+            1 + // namespace
+            4 + // numberToSkip
+            4 // numberToReturn
+        );
+        // Add header to buffers
+        buffers.push(header);
+        // Serialize the query
+        const query = BSON.serialize(this.query, {
+            checkKeys: this.checkKeys,
+            serializeFunctions: this.serializeFunctions,
+            ignoreUndefined: this.ignoreUndefined
+        });
+        // Add query document
+        buffers.push(query);
+        if (this.returnFieldSelector && Object.keys(this.returnFieldSelector).length > 0) {
+            // Serialize the projection document
+            projection = BSON.serialize(this.returnFieldSelector, {
+                checkKeys: this.checkKeys,
+                serializeFunctions: this.serializeFunctions,
+                ignoreUndefined: this.ignoreUndefined
+            });
+            // Add projection document
+            buffers.push(projection);
+        }
+        // Total message size
+        const totalLength = header.length + query.length + (projection ? projection.length : 0);
+        // Set up the index
+        let index = 4;
+        // Write total document length
+        header[3] = (totalLength >> 24) & 0xff;
+        header[2] = (totalLength >> 16) & 0xff;
+        header[1] = (totalLength >> 8) & 0xff;
+        header[0] = totalLength & 0xff;
+        // Write header information requestId
+        header[index + 3] = (this.requestId >> 24) & 0xff;
+        header[index + 2] = (this.requestId >> 16) & 0xff;
+        header[index + 1] = (this.requestId >> 8) & 0xff;
+        header[index] = this.requestId & 0xff;
+        index = index + 4;
+        // Write header information responseTo
+        header[index + 3] = (0 >> 24) & 0xff;
+        header[index + 2] = (0 >> 16) & 0xff;
+        header[index + 1] = (0 >> 8) & 0xff;
+        header[index] = 0 & 0xff;
+        index = index + 4;
+        // Write header information OP_QUERY
+        header[index + 3] = (constants_1.OP_QUERY >> 24) & 0xff;
+        header[index + 2] = (constants_1.OP_QUERY >> 16) & 0xff;
+        header[index + 1] = (constants_1.OP_QUERY >> 8) & 0xff;
+        header[index] = constants_1.OP_QUERY & 0xff;
+        index = index + 4;
+        // Write header information flags
+        header[index + 3] = (flags >> 24) & 0xff;
+        header[index + 2] = (flags >> 16) & 0xff;
+        header[index + 1] = (flags >> 8) & 0xff;
+        header[index] = flags & 0xff;
+        index = index + 4;
+        // Write collection name
+        index = index + header.write(this.ns, index, 'utf8') + 1;
+        header[index - 1] = 0;
+        // Write header information flags numberToSkip
+        header[index + 3] = (this.numberToSkip >> 24) & 0xff;
+        header[index + 2] = (this.numberToSkip >> 16) & 0xff;
+        header[index + 1] = (this.numberToSkip >> 8) & 0xff;
+        header[index] = this.numberToSkip & 0xff;
+        index = index + 4;
+        // Write header information flags numberToReturn
+        header[index + 3] = (this.numberToReturn >> 24) & 0xff;
+        header[index + 2] = (this.numberToReturn >> 16) & 0xff;
+        header[index + 1] = (this.numberToReturn >> 8) & 0xff;
+        header[index] = this.numberToReturn & 0xff;
+        index = index + 4;
+        // Return the buffers
+        return buffers;
+    }
+}
+exports.OpQueryRequest = OpQueryRequest;
+/** @internal */
+class OpReply {
+    constructor(message, msgHeader, msgBody, opts) {
+        this.index = 0;
+        this.sections = [];
+        /** moreToCome is an OP_MSG only concept */
+        this.moreToCome = false;
+        this.parsed = false;
+        this.raw = message;
+        this.data = msgBody;
+        this.opts = opts ?? {
+            useBigInt64: false,
+            promoteLongs: true,
+            promoteValues: true,
+            promoteBuffers: false,
+            bsonRegExp: false
+        };
+        // Read the message header
+        this.length = msgHeader.length;
+        this.requestId = msgHeader.requestId;
+        this.responseTo = msgHeader.responseTo;
+        this.opCode = msgHeader.opCode;
+        this.fromCompressed = msgHeader.fromCompressed;
+        // Flag values
+        this.useBigInt64 = typeof this.opts.useBigInt64 === 'boolean' ? this.opts.useBigInt64 : false;
+        this.promoteLongs = typeof this.opts.promoteLongs === 'boolean' ? this.opts.promoteLongs : true;
+        this.promoteValues =
+            typeof this.opts.promoteValues === 'boolean' ? this.opts.promoteValues : true;
+        this.promoteBuffers =
+            typeof this.opts.promoteBuffers === 'boolean' ? this.opts.promoteBuffers : false;
+        this.bsonRegExp = typeof this.opts.bsonRegExp === 'boolean' ? this.opts.bsonRegExp : false;
+    }
+    isParsed() {
+        return this.parsed;
+    }
+    parse() {
+        // Don't parse again if not needed
+        if (this.parsed)
+            return this.sections[0];
+        // Position within OP_REPLY at which documents start
+        // (See https://www.mongodb.com/docs/manual/reference/mongodb-wire-protocol/#wire-op-reply)
+        this.index = 20;
+        // Read the message body
+        this.responseFlags = this.data.readInt32LE(0);
+        this.cursorId = new BSON.Long(this.data.readInt32LE(4), this.data.readInt32LE(8));
+        this.startingFrom = this.data.readInt32LE(12);
+        this.numberReturned = this.data.readInt32LE(16);
+        if (this.numberReturned < 0 || this.numberReturned > 2 ** 32 - 1) {
+            throw new RangeError(`OP_REPLY numberReturned is an invalid array length ${this.numberReturned}`);
+        }
+        this.cursorNotFound = (this.responseFlags & CURSOR_NOT_FOUND) !== 0;
+        this.queryFailure = (this.responseFlags & QUERY_FAILURE) !== 0;
+        this.shardConfigStale = (this.responseFlags & SHARD_CONFIG_STALE) !== 0;
+        this.awaitCapable = (this.responseFlags & AWAIT_CAPABLE) !== 0;
+        // Parse Body
+        for (let i = 0; i < this.numberReturned; i++) {
+            const bsonSize = this.data[this.index] |
+                (this.data[this.index + 1] << 8) |
+                (this.data[this.index + 2] << 16) |
+                (this.data[this.index + 3] << 24);
+            const section = this.data.subarray(this.index, this.index + bsonSize);
+            this.sections.push(section);
+            // Adjust the index
+            this.index = this.index + bsonSize;
+        }
+        // Set parsed
+        this.parsed = true;
+        return this.sections[0];
+    }
+}
+exports.OpReply = OpReply;
+// Msg Flags
+const OPTS_CHECKSUM_PRESENT = 1;
+const OPTS_MORE_TO_COME = 2;
+const OPTS_EXHAUST_ALLOWED = 1 << 16;
+/** @internal */
+class DocumentSequence {
+    /**
+     * Create a new document sequence for the provided field.
+     * @param field - The field it will replace.
+     */
+    constructor(field, documents) {
+        this.field = field;
+        this.documents = [];
+        this.chunks = [];
+        this.serializedDocumentsLength = 0;
+        // Document sequences starts with type 1 at the first byte.
+        // Field strings must always be UTF-8.
+        const buffer = Buffer.allocUnsafe(1 + 4 + this.field.length + 1);
+        buffer[0] = 1;
+        // Third part is the field name at offset 5 with trailing null byte.
+        encodeUTF8Into(buffer, `${this.field}\0`, 5);
+        this.chunks.push(buffer);
+        this.header = buffer;
+        if (documents) {
+            for (const doc of documents) {
+                this.push(doc, BSON.serialize(doc));
+            }
+        }
+    }
+    /**
+     * Push a document to the document sequence. Will serialize the document
+     * as well and return the current serialized length of all documents.
+     * @param document - The document to add.
+     * @param buffer - The serialized document in raw BSON.
+     * @returns The new total document sequence length.
+     */
+    push(document, buffer) {
+        this.serializedDocumentsLength += buffer.length;
+        // Push the document.
+        this.documents.push(document);
+        // Push the document raw bson.
+        this.chunks.push(buffer);
+        // Write the new length.
+        this.header?.writeInt32LE(4 + this.field.length + 1 + this.serializedDocumentsLength, 1);
+        return this.serializedDocumentsLength + this.header.length;
+    }
+    /**
+     * Get the fully serialized bytes for the document sequence section.
+     * @returns The section bytes.
+     */
+    toBin() {
+        return Buffer.concat(this.chunks);
+    }
+}
+exports.DocumentSequence = DocumentSequence;
+/** @internal */
+class OpMsgRequest {
+    constructor(databaseName, command, options) {
+        // Basic options needed to be passed in
+        if (command == null)
+            throw new error_1.MongoInvalidArgumentError('Query document must be specified for query');
+        // Basic optionsa
+        this.databaseName = databaseName;
+        this.command = command;
+        this.command.$db = databaseName;
+        // Ensure empty options
+        this.options = options ?? {};
+        // Additional options
+        this.requestId = options.requestId ? options.requestId : OpMsgRequest.getRequestId();
+        // Serialization option
+        this.serializeFunctions =
+            typeof options.serializeFunctions === 'boolean' ? options.serializeFunctions : false;
+        this.ignoreUndefined =
+            typeof options.ignoreUndefined === 'boolean' ? options.ignoreUndefined : false;
+        this.checkKeys = typeof options.checkKeys === 'boolean' ? options.checkKeys : false;
+        this.maxBsonSize = options.maxBsonSize || 1024 * 1024 * 16;
+        // flags
+        this.checksumPresent = false;
+        this.moreToCome = options.moreToCome ?? command.writeConcern?.w === 0;
+        this.exhaustAllowed =
+            typeof options.exhaustAllowed === 'boolean' ? options.exhaustAllowed : false;
+    }
+    toBin() {
+        const buffers = [];
+        let flags = 0;
+        if (this.checksumPresent) {
+            flags |= OPTS_CHECKSUM_PRESENT;
+        }
+        if (this.moreToCome) {
+            flags |= OPTS_MORE_TO_COME;
+        }
+        if (this.exhaustAllowed) {
+            flags |= OPTS_EXHAUST_ALLOWED;
+        }
+        const header = Buffer.alloc(4 * 4 + // Header
+            4 // Flags
+        );
+        buffers.push(header);
+        let totalLength = header.length;
+        const command = this.command;
+        totalLength += this.makeSections(buffers, command);
+        header.writeInt32LE(totalLength, 0); // messageLength
+        header.writeInt32LE(this.requestId, 4); // requestID
+        header.writeInt32LE(0, 8); // responseTo
+        header.writeInt32LE(constants_1.OP_MSG, 12); // opCode
+        header.writeUInt32LE(flags, 16); // flags
+        return buffers;
+    }
+    /**
+     * Add the sections to the OP_MSG request's buffers and returns the length.
+     */
+    makeSections(buffers, document) {
+        const sequencesBuffer = this.extractDocumentSequences(document);
+        const payloadTypeBuffer = Buffer.allocUnsafe(1);
+        payloadTypeBuffer[0] = 0;
+        const documentBuffer = this.serializeBson(document);
+        // First section, type 0
+        buffers.push(payloadTypeBuffer);
+        buffers.push(documentBuffer);
+        // Subsequent sections, type 1
+        buffers.push(sequencesBuffer);
+        return payloadTypeBuffer.length + documentBuffer.length + sequencesBuffer.length;
+    }
+    /**
+     * Extracts the document sequences from the command document and returns
+     * a buffer to be added as multiple sections after the initial type 0
+     * section in the message.
+     */
+    extractDocumentSequences(document) {
+        // Pull out any field in the command document that's value is a document sequence.
+        const chunks = [];
+        for (const [key, value] of Object.entries(document)) {
+            if (value instanceof DocumentSequence) {
+                chunks.push(value.toBin());
+                // Why are we removing the field from the command? This is because it needs to be
+                // removed in the OP_MSG request first section, and DocumentSequence is not a
+                // BSON type and is specific to the MongoDB wire protocol so there's nothing
+                // our BSON serializer can do about this. Since DocumentSequence is not exposed
+                // in the public API and only used internally, we are never mutating an original
+                // command provided by the user, just our own, and it's cheaper to delete from
+                // our own command than copying it.
+                delete document[key];
+            }
+        }
+        if (chunks.length > 0) {
+            return Buffer.concat(chunks);
+        }
+        // If we have no document sequences we return an empty buffer for nothing to add
+        // to the payload.
+        return Buffer.alloc(0);
+    }
+    serializeBson(document) {
+        return BSON.serialize(document, {
+            checkKeys: this.checkKeys,
+            serializeFunctions: this.serializeFunctions,
+            ignoreUndefined: this.ignoreUndefined
+        });
+    }
+    static getRequestId() {
+        _requestId = (_requestId + 1) & 0x7fffffff;
+        return _requestId;
+    }
+}
+exports.OpMsgRequest = OpMsgRequest;
+/** @internal */
+class OpMsgResponse {
+    constructor(message, msgHeader, msgBody, opts) {
+        this.index = 0;
+        this.sections = [];
+        this.parsed = false;
+        this.raw = message;
+        this.data = msgBody;
+        this.opts = opts ?? {
+            useBigInt64: false,
+            promoteLongs: true,
+            promoteValues: true,
+            promoteBuffers: false,
+            bsonRegExp: false
+        };
+        // Read the message header
+        this.length = msgHeader.length;
+        this.requestId = msgHeader.requestId;
+        this.responseTo = msgHeader.responseTo;
+        this.opCode = msgHeader.opCode;
+        this.fromCompressed = msgHeader.fromCompressed;
+        // Read response flags
+        this.responseFlags = msgBody.readInt32LE(0);
+        this.checksumPresent = (this.responseFlags & OPTS_CHECKSUM_PRESENT) !== 0;
+        this.moreToCome = (this.responseFlags & OPTS_MORE_TO_COME) !== 0;
+        this.exhaustAllowed = (this.responseFlags & OPTS_EXHAUST_ALLOWED) !== 0;
+        this.useBigInt64 = typeof this.opts.useBigInt64 === 'boolean' ? this.opts.useBigInt64 : false;
+        this.promoteLongs = typeof this.opts.promoteLongs === 'boolean' ? this.opts.promoteLongs : true;
+        this.promoteValues =
+            typeof this.opts.promoteValues === 'boolean' ? this.opts.promoteValues : true;
+        this.promoteBuffers =
+            typeof this.opts.promoteBuffers === 'boolean' ? this.opts.promoteBuffers : false;
+        this.bsonRegExp = typeof this.opts.bsonRegExp === 'boolean' ? this.opts.bsonRegExp : false;
+    }
+    isParsed() {
+        return this.parsed;
+    }
+    parse() {
+        // Don't parse again if not needed
+        if (this.parsed)
+            return this.sections[0];
+        this.index = 4;
+        while (this.index < this.data.length) {
+            const payloadType = this.data.readUInt8(this.index++);
+            if (payloadType === 0) {
+                const bsonSize = this.data.readUInt32LE(this.index);
+                const bin = this.data.subarray(this.index, this.index + bsonSize);
+                this.sections.push(bin);
+                this.index += bsonSize;
+            }
+            else if (payloadType === 1) {
+                // It was decided that no driver makes use of payload type 1
+                // TODO(NODE-3483): Replace with MongoDeprecationError
+                throw new error_1.MongoRuntimeError('OP_MSG Payload Type 1 detected unsupported protocol');
+            }
+        }
+        this.parsed = true;
+        return this.sections[0];
+    }
+}
+exports.OpMsgResponse = OpMsgResponse;
+const MESSAGE_HEADER_SIZE = 16;
+const COMPRESSION_DETAILS_SIZE = 9; // originalOpcode + uncompressedSize, compressorID
+/**
+ * @internal
+ *
+ * An OP_COMPRESSED request wraps either an OP_QUERY or OP_MSG message.
+ */
+class OpCompressedRequest {
+    constructor(command, options) {
+        this.command = command;
+        this.options = {
+            zlibCompressionLevel: options.zlibCompressionLevel,
+            agreedCompressor: options.agreedCompressor
+        };
+    }
+    // Return whether a command contains an uncompressible command term
+    // Will return true if command contains no uncompressible command terms
+    static canCompress(command) {
+        const commandDoc = command instanceof OpMsgRequest ? command.command : command.query;
+        const commandName = Object.keys(commandDoc)[0];
+        return !compression_1.uncompressibleCommands.has(commandName);
+    }
+    async toBin() {
+        const concatenatedOriginalCommandBuffer = Buffer.concat(this.command.toBin());
+        // otherwise, compress the message
+        const messageToBeCompressed = concatenatedOriginalCommandBuffer.slice(MESSAGE_HEADER_SIZE);
+        // Extract information needed for OP_COMPRESSED from the uncompressed message
+        const originalCommandOpCode = concatenatedOriginalCommandBuffer.readInt32LE(12);
+        // Compress the message body
+        const compressedMessage = await (0, compression_1.compress)(this.options, messageToBeCompressed);
+        // Create the msgHeader of OP_COMPRESSED
+        const msgHeader = Buffer.alloc(MESSAGE_HEADER_SIZE);
+        msgHeader.writeInt32LE(MESSAGE_HEADER_SIZE + COMPRESSION_DETAILS_SIZE + compressedMessage.length, 0); // messageLength
+        msgHeader.writeInt32LE(this.command.requestId, 4); // requestID
+        msgHeader.writeInt32LE(0, 8); // responseTo (zero)
+        msgHeader.writeInt32LE(constants_1.OP_COMPRESSED, 12); // opCode
+        // Create the compression details of OP_COMPRESSED
+        const compressionDetails = Buffer.alloc(COMPRESSION_DETAILS_SIZE);
+        compressionDetails.writeInt32LE(originalCommandOpCode, 0); // originalOpcode
+        compressionDetails.writeInt32LE(messageToBeCompressed.length, 4); // Size of the uncompressed compressedMessage, excluding the MsgHeader
+        compressionDetails.writeUInt8(compression_1.Compressor[this.options.agreedCompressor], 8); // compressorID
+        return [msgHeader, compressionDetails, compressedMessage];
+    }
+}
+exports.OpCompressedRequest = OpCompressedRequest;
+//# sourceMappingURL=commands.js.map

node_modules/mongodb/lib/cmap/connect.js

@@ -0,0 +1,366 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.LEGAL_TCP_SOCKET_OPTIONS = exports.LEGAL_TLS_SOCKET_OPTIONS = void 0;
+exports.connect = connect;
+exports.makeConnection = makeConnection;
+exports.performInitialHandshake = performInitialHandshake;
+exports.prepareHandshakeDocument = prepareHandshakeDocument;
+exports.makeSocket = makeSocket;
+const net = require("net");
+const tls = require("tls");
+const constants_1 = require("../constants");
+const deps_1 = require("../deps");
+const error_1 = require("../error");
+const utils_1 = require("../utils");
+const auth_provider_1 = require("./auth/auth_provider");
+const providers_1 = require("./auth/providers");
+const connection_1 = require("./connection");
+const constants_2 = require("./wire_protocol/constants");
+async function connect(options) {
+    let connection = null;
+    try {
+        const socket = await makeSocket(options);
+        connection = makeConnection(options, socket);
+        await performInitialHandshake(connection, options);
+        return connection;
+    }
+    catch (error) {
+        connection?.destroy();
+        throw error;
+    }
+}
+function makeConnection(options, socket) {
+    let ConnectionType = options.connectionType ?? connection_1.Connection;
+    if (options.autoEncrypter) {
+        ConnectionType = connection_1.CryptoConnection;
+    }
+    return new ConnectionType(socket, options);
+}
+function checkSupportedServer(hello, options) {
+    const maxWireVersion = Number(hello.maxWireVersion);
+    const minWireVersion = Number(hello.minWireVersion);
+    const serverVersionHighEnough = !Number.isNaN(maxWireVersion) && maxWireVersion >= constants_2.MIN_SUPPORTED_WIRE_VERSION;
+    const serverVersionLowEnough = !Number.isNaN(minWireVersion) && minWireVersion <= constants_2.MAX_SUPPORTED_WIRE_VERSION;
+    if (serverVersionHighEnough) {
+        if (serverVersionLowEnough) {
+            return null;
+        }
+        const message = `Server at ${options.hostAddress} reports minimum wire version ${JSON.stringify(hello.minWireVersion)}, but this version of the Node.js Driver requires at most ${constants_2.MAX_SUPPORTED_WIRE_VERSION} (MongoDB ${constants_2.MAX_SUPPORTED_SERVER_VERSION})`;
+        return new error_1.MongoCompatibilityError(message);
+    }
+    const message = `Server at ${options.hostAddress} reports maximum wire version ${JSON.stringify(hello.maxWireVersion) ?? 0}, but this version of the Node.js Driver requires at least ${constants_2.MIN_SUPPORTED_WIRE_VERSION} (MongoDB ${constants_2.MIN_SUPPORTED_SERVER_VERSION})`;
+    return new error_1.MongoCompatibilityError(message);
+}
+async function performInitialHandshake(conn, options) {
+    const credentials = options.credentials;
+    if (credentials) {
+        if (!(credentials.mechanism === providers_1.AuthMechanism.MONGODB_DEFAULT) &&
+            !options.authProviders.getOrCreateProvider(credentials.mechanism, credentials.mechanismProperties)) {
+            throw new error_1.MongoInvalidArgumentError(`AuthMechanism '${credentials.mechanism}' not supported`);
+        }
+    }
+    const authContext = new auth_provider_1.AuthContext(conn, credentials, options);
+    conn.authContext = authContext;
+    const handshakeDoc = await prepareHandshakeDocument(authContext);
+    // @ts-expect-error: TODO(NODE-5141): The options need to be filtered properly, Connection options differ from Command options
+    const handshakeOptions = { ...options, raw: false };
+    if (typeof options.connectTimeoutMS === 'number') {
+        // The handshake technically is a monitoring check, so its socket timeout should be connectTimeoutMS
+        handshakeOptions.socketTimeoutMS = options.connectTimeoutMS;
+    }
+    const start = new Date().getTime();
+    const response = await executeHandshake(handshakeDoc, handshakeOptions);
+    if (!('isWritablePrimary' in response)) {
+        // Provide hello-style response document.
+        response.isWritablePrimary = response[constants_1.LEGACY_HELLO_COMMAND];
+    }
+    if (response.helloOk) {
+        conn.helloOk = true;
+    }
+    const supportedServerErr = checkSupportedServer(response, options);
+    if (supportedServerErr) {
+        throw supportedServerErr;
+    }
+    if (options.loadBalanced) {
+        if (!response.serviceId) {
+            throw new error_1.MongoCompatibilityError('Driver attempted to initialize in load balancing mode, ' +
+                'but the server does not support this mode.');
+        }
+    }
+    // NOTE: This is metadata attached to the connection while porting away from
+    //       handshake being done in the `Server` class. Likely, it should be
+    //       relocated, or at very least restructured.
+    conn.hello = response;
+    conn.lastHelloMS = new Date().getTime() - start;
+    if (!response.arbiterOnly && credentials) {
+        // store the response on auth context
+        authContext.response = response;
+        const resolvedCredentials = credentials.resolveAuthMechanism(response);
+        const provider = options.authProviders.getOrCreateProvider(resolvedCredentials.mechanism, resolvedCredentials.mechanismProperties);
+        if (!provider) {
+            throw new error_1.MongoInvalidArgumentError(`No AuthProvider for ${resolvedCredentials.mechanism} defined.`);
+        }
+        try {
+            await provider.auth(authContext);
+        }
+        catch (error) {
+            if (error instanceof error_1.MongoError) {
+                error.addErrorLabel(error_1.MongoErrorLabel.HandshakeError);
+                if ((0, error_1.needsRetryableWriteLabel)(error, response.maxWireVersion, conn.description.type)) {
+                    error.addErrorLabel(error_1.MongoErrorLabel.RetryableWriteError);
+                }
+            }
+            throw error;
+        }
+    }
+    // Connection establishment is socket creation (tcp handshake, tls handshake, MongoDB handshake (saslStart, saslContinue))
+    // Once connection is established, command logging can log events (if enabled)
+    conn.established = true;
+    async function executeHandshake(handshakeDoc, handshakeOptions) {
+        try {
+            const handshakeResponse = await conn.command((0, utils_1.ns)('admin.$cmd'), handshakeDoc, handshakeOptions);
+            return handshakeResponse;
+        }
+        catch (error) {
+            if (error instanceof error_1.MongoError) {
+                error.addErrorLabel(error_1.MongoErrorLabel.HandshakeError);
+            }
+            throw error;
+        }
+    }
+}
+/**
+ * @internal
+ *
+ * This function is only exposed for testing purposes.
+ */
+async function prepareHandshakeDocument(authContext) {
+    const options = authContext.options;
+    const compressors = options.compressors ? options.compressors : [];
+    const { serverApi } = authContext.connection;
+    const clientMetadata = await options.metadata;
+    const handshakeDoc = {
+        [serverApi?.version || options.loadBalanced === true ? 'hello' : constants_1.LEGACY_HELLO_COMMAND]: 1,
+        helloOk: true,
+        client: clientMetadata,
+        compression: compressors
+    };
+    if (options.loadBalanced === true) {
+        handshakeDoc.loadBalanced = true;
+    }
+    const credentials = authContext.credentials;
+    if (credentials) {
+        if (credentials.mechanism === providers_1.AuthMechanism.MONGODB_DEFAULT && credentials.username) {
+            handshakeDoc.saslSupportedMechs = `${credentials.source}.${credentials.username}`;
+            const provider = authContext.options.authProviders.getOrCreateProvider(providers_1.AuthMechanism.MONGODB_SCRAM_SHA256, credentials.mechanismProperties);
+            if (!provider) {
+                // This auth mechanism is always present.
+                throw new error_1.MongoInvalidArgumentError(`No AuthProvider for ${providers_1.AuthMechanism.MONGODB_SCRAM_SHA256} defined.`);
+            }
+            return await provider.prepare(handshakeDoc, authContext);
+        }
+        const provider = authContext.options.authProviders.getOrCreateProvider(credentials.mechanism, credentials.mechanismProperties);
+        if (!provider) {
+            throw new error_1.MongoInvalidArgumentError(`No AuthProvider for ${credentials.mechanism} defined.`);
+        }
+        return await provider.prepare(handshakeDoc, authContext);
+    }
+    return handshakeDoc;
+}
+/** @public */
+exports.LEGAL_TLS_SOCKET_OPTIONS = [
+    'allowPartialTrustChain',
+    'ALPNProtocols',
+    'ca',
+    'cert',
+    'checkServerIdentity',
+    'ciphers',
+    'crl',
+    'ecdhCurve',
+    'key',
+    'minDHSize',
+    'passphrase',
+    'pfx',
+    'rejectUnauthorized',
+    'secureContext',
+    'secureProtocol',
+    'servername',
+    'session'
+];
+/** @public */
+exports.LEGAL_TCP_SOCKET_OPTIONS = [
+    'autoSelectFamily',
+    'autoSelectFamilyAttemptTimeout',
+    'keepAliveInitialDelay',
+    'family',
+    'hints',
+    'localAddress',
+    'localPort',
+    'lookup'
+];
+function parseConnectOptions(options) {
+    const hostAddress = options.hostAddress;
+    if (!hostAddress)
+        throw new error_1.MongoInvalidArgumentError('Option "hostAddress" is required');
+    const result = {};
+    for (const name of exports.LEGAL_TCP_SOCKET_OPTIONS) {
+        if (options[name] != null) {
+            result[name] = options[name];
+        }
+    }
+    result.keepAliveInitialDelay ??= 120000;
+    result.keepAlive = true;
+    result.noDelay = options.noDelay ?? true;
+    if (typeof hostAddress.socketPath === 'string') {
+        result.path = hostAddress.socketPath;
+        return result;
+    }
+    else if (typeof hostAddress.host === 'string') {
+        result.host = hostAddress.host;
+        result.port = hostAddress.port;
+        return result;
+    }
+    else {
+        // This should never happen since we set up HostAddresses
+        // But if we don't throw here the socket could hang until timeout
+        // TODO(NODE-3483)
+        throw new error_1.MongoRuntimeError(`Unexpected HostAddress ${JSON.stringify(hostAddress)}`);
+    }
+}
+function parseSslOptions(options) {
+    const result = parseConnectOptions(options);
+    // Merge in valid SSL options
+    for (const name of exports.LEGAL_TLS_SOCKET_OPTIONS) {
+        if (options[name] != null) {
+            result[name] = options[name];
+        }
+    }
+    if (options.existingSocket) {
+        result.socket = options.existingSocket;
+    }
+    // Set default sni servername to be the same as host
+    if (result.servername == null && result.host && !net.isIP(result.host)) {
+        result.servername = result.host;
+    }
+    return result;
+}
+async function makeSocket(options) {
+    const useTLS = options.tls ?? false;
+    const connectTimeoutMS = options.connectTimeoutMS ?? 30000;
+    const existingSocket = options.existingSocket;
+    let socket;
+    if (options.proxyHost != null) {
+        // Currently, only Socks5 is supported.
+        return await makeSocks5Connection({
+            ...options,
+            connectTimeoutMS // Should always be present for Socks5
+        });
+    }
+    if (useTLS) {
+        const tlsSocket = tls.connect(parseSslOptions(options));
+        if (typeof tlsSocket.disableRenegotiation === 'function') {
+            tlsSocket.disableRenegotiation();
+        }
+        socket = tlsSocket;
+    }
+    else if (existingSocket) {
+        // In the TLS case, parseSslOptions() sets options.socket to existingSocket,
+        // so we only need to handle the non-TLS case here (where existingSocket
+        // gives us all we need out of the box).
+        socket = existingSocket;
+    }
+    else {
+        socket = net.createConnection(parseConnectOptions(options));
+    }
+    socket.setTimeout(connectTimeoutMS);
+    let cancellationHandler = null;
+    const { promise: connectedSocket, resolve, reject } = (0, utils_1.promiseWithResolvers)();
+    if (existingSocket) {
+        resolve(socket);
+    }
+    else {
+        const start = performance.now();
+        const connectEvent = useTLS ? 'secureConnect' : 'connect';
+        socket
+            .once(connectEvent, () => resolve(socket))
+            .once('error', cause => reject(new error_1.MongoNetworkError(error_1.MongoError.buildErrorMessage(cause), { cause })))
+            .once('timeout', () => {
+            reject(new error_1.MongoNetworkTimeoutError(`Socket '${connectEvent}' timed out after ${(performance.now() - start) | 0}ms (connectTimeoutMS: ${connectTimeoutMS})`));
+        })
+            .once('close', () => reject(new error_1.MongoNetworkError(`Socket closed after ${(performance.now() - start) | 0} during connection establishment`)));
+        if (options.cancellationToken != null) {
+            cancellationHandler = () => reject(new error_1.MongoNetworkError(`Socket connection establishment was cancelled after ${(performance.now() - start) | 0}`));
+            options.cancellationToken.once('cancel', cancellationHandler);
+        }
+    }
+    try {
+        socket = await connectedSocket;
+        return socket;
+    }
+    catch (error) {
+        socket.destroy();
+        throw error;
+    }
+    finally {
+        socket.setTimeout(0);
+        if (cancellationHandler != null) {
+            options.cancellationToken?.removeListener('cancel', cancellationHandler);
+        }
+    }
+}
+let socks = null;
+function loadSocks() {
+    if (socks == null) {
+        const socksImport = (0, deps_1.getSocks)();
+        if ('kModuleError' in socksImport) {
+            throw socksImport.kModuleError;
+        }
+        socks = socksImport;
+    }
+    return socks;
+}
+async function makeSocks5Connection(options) {
+    const hostAddress = utils_1.HostAddress.fromHostPort(options.proxyHost ?? '', // proxyHost is guaranteed to set here
+    options.proxyPort ?? 1080);
+    // First, connect to the proxy server itself:
+    const rawSocket = await makeSocket({
+        ...options,
+        hostAddress,
+        tls: false,
+        proxyHost: undefined
+    });
+    const destination = parseConnectOptions(options);
+    if (typeof destination.host !== 'string' || typeof destination.port !== 'number') {
+        throw new error_1.MongoInvalidArgumentError('Can only make Socks5 connections to TCP hosts');
+    }
+    socks ??= loadSocks();
+    let existingSocket;
+    try {
+        // Then, establish the Socks5 proxy connection:
+        const connection = await socks.SocksClient.createConnection({
+            existing_socket: rawSocket,
+            timeout: options.connectTimeoutMS,
+            command: 'connect',
+            destination: {
+                host: destination.host,
+                port: destination.port
+            },
+            proxy: {
+                // host and port are ignored because we pass existing_socket
+                host: 'iLoveJavaScript',
+                port: 0,
+                type: 5,
+                userId: options.proxyUsername || undefined,
+                password: options.proxyPassword || undefined
+            }
+        });
+        existingSocket = connection.socket;
+    }
+    catch (cause) {
+        throw new error_1.MongoNetworkError(error_1.MongoError.buildErrorMessage(cause), { cause });
+    }
+    // Finally, now treat the resulting duplex stream as the
+    // socket over which we send and receive wire protocol messages:
+    return await makeSocket({ ...options, existingSocket, proxyHost: undefined });
+}
+//# sourceMappingURL=connect.js.map

node_modules/mongodb/lib/cmap/connection.js

@@ -0,0 +1,571 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.CryptoConnection = exports.SizedMessageTransform = exports.Connection = void 0;
+exports.hasSessionSupport = hasSessionSupport;
+const stream_1 = require("stream");
+const timers_1 = require("timers");
+const bson_1 = require("../bson");
+const constants_1 = require("../constants");
+const error_1 = require("../error");
+const mongo_logger_1 = require("../mongo_logger");
+const mongo_types_1 = require("../mongo_types");
+const read_preference_1 = require("../read_preference");
+const common_1 = require("../sdam/common");
+const sessions_1 = require("../sessions");
+const timeout_1 = require("../timeout");
+const utils_1 = require("../utils");
+const command_monitoring_events_1 = require("./command_monitoring_events");
+const commands_1 = require("./commands");
+const stream_description_1 = require("./stream_description");
+const compression_1 = require("./wire_protocol/compression");
+const on_data_1 = require("./wire_protocol/on_data");
+const responses_1 = require("./wire_protocol/responses");
+const shared_1 = require("./wire_protocol/shared");
+/** @internal */
+function hasSessionSupport(conn) {
+    const description = conn.description;
+    return description.logicalSessionTimeoutMinutes != null;
+}
+function streamIdentifier(stream, options) {
+    if (options.proxyHost) {
+        // If proxy options are specified, the properties of `stream` itself
+        // will not accurately reflect what endpoint this is connected to.
+        return options.hostAddress.toString();
+    }
+    const { remoteAddress, remotePort } = stream;
+    if (typeof remoteAddress === 'string' && typeof remotePort === 'number') {
+        return utils_1.HostAddress.fromHostPort(remoteAddress, remotePort).toString();
+    }
+    return (0, utils_1.uuidV4)().toString('hex');
+}
+/** @internal */
+class Connection extends mongo_types_1.TypedEventEmitter {
+    /** @event */
+    static { this.COMMAND_STARTED = constants_1.COMMAND_STARTED; }
+    /** @event */
+    static { this.COMMAND_SUCCEEDED = constants_1.COMMAND_SUCCEEDED; }
+    /** @event */
+    static { this.COMMAND_FAILED = constants_1.COMMAND_FAILED; }
+    /** @event */
+    static { this.CLUSTER_TIME_RECEIVED = constants_1.CLUSTER_TIME_RECEIVED; }
+    /** @event */
+    static { this.CLOSE = constants_1.CLOSE; }
+    /** @event */
+    static { this.PINNED = constants_1.PINNED; }
+    /** @event */
+    static { this.UNPINNED = constants_1.UNPINNED; }
+    constructor(stream, options) {
+        super();
+        this.lastHelloMS = -1;
+        this.helloOk = false;
+        this.delayedTimeoutId = null;
+        /** Indicates that the connection (including underlying TCP socket) has been closed. */
+        this.closed = false;
+        this.clusterTime = null;
+        this.error = null;
+        this.dataEvents = null;
+        this.on('error', utils_1.noop);
+        this.socket = stream;
+        this.id = options.id;
+        this.address = streamIdentifier(stream, options);
+        this.socketTimeoutMS = options.socketTimeoutMS ?? 0;
+        this.monitorCommands = options.monitorCommands;
+        this.serverApi = options.serverApi;
+        this.mongoLogger = options.mongoLogger;
+        this.established = false;
+        this.description = new stream_description_1.StreamDescription(this.address, options);
+        this.generation = options.generation;
+        this.lastUseTime = (0, utils_1.now)();
+        this.messageStream = this.socket
+            .on('error', this.onSocketError.bind(this))
+            .pipe(new SizedMessageTransform({ connection: this }))
+            .on('error', this.onTransformError.bind(this));
+        this.socket.on('close', this.onClose.bind(this));
+        this.socket.on('timeout', this.onTimeout.bind(this));
+        this.messageStream.pause();
+    }
+    get hello() {
+        return this.description.hello;
+    }
+    // the `connect` method stores the result of the handshake hello on the connection
+    set hello(response) {
+        this.description.receiveResponse(response);
+        Object.freeze(this.description);
+    }
+    get serviceId() {
+        return this.hello?.serviceId;
+    }
+    get loadBalanced() {
+        return this.description.loadBalanced;
+    }
+    get idleTime() {
+        return (0, utils_1.calculateDurationInMs)(this.lastUseTime);
+    }
+    get hasSessionSupport() {
+        return this.description.logicalSessionTimeoutMinutes != null;
+    }
+    get supportsOpMsg() {
+        return (this.description != null &&
+            // TODO(NODE-6672,NODE-6287): This guard is primarily for maxWireVersion = 0
+            (0, utils_1.maxWireVersion)(this) >= 6 &&
+            !this.description.__nodejs_mock_server__);
+    }
+    get shouldEmitAndLogCommand() {
+        return ((this.monitorCommands ||
+            (this.established &&
+                !this.authContext?.reauthenticating &&
+                this.mongoLogger?.willLog(mongo_logger_1.MongoLoggableComponent.COMMAND, mongo_logger_1.SeverityLevel.DEBUG))) ??
+            false);
+    }
+    markAvailable() {
+        this.lastUseTime = (0, utils_1.now)();
+    }
+    onSocketError(cause) {
+        this.onError(new error_1.MongoNetworkError(cause.message, { cause }));
+    }
+    onTransformError(error) {
+        this.onError(error);
+    }
+    onError(error) {
+        this.cleanup(error);
+    }
+    onClose() {
+        const message = `connection ${this.id} to ${this.address} closed`;
+        this.cleanup(new error_1.MongoNetworkError(message));
+    }
+    onTimeout() {
+        this.delayedTimeoutId = (0, timers_1.setTimeout)(() => {
+            const message = `connection ${this.id} to ${this.address} timed out`;
+            const beforeHandshake = this.hello == null;
+            this.cleanup(new error_1.MongoNetworkTimeoutError(message, { beforeHandshake }));
+        }, 1).unref(); // No need for this timer to hold the event loop open
+    }
+    destroy() {
+        if (this.closed) {
+            return;
+        }
+        // load balanced mode requires that these listeners remain on the connection
+        // after cleanup on timeouts, errors or close so we remove them before calling
+        // cleanup.
+        this.removeAllListeners(Connection.PINNED);
+        this.removeAllListeners(Connection.UNPINNED);
+        const message = `connection ${this.id} to ${this.address} closed`;
+        this.cleanup(new error_1.MongoNetworkError(message));
+    }
+    /**
+     * A method that cleans up the connection.  When `force` is true, this method
+     * forcibly destroys the socket.
+     *
+     * If an error is provided, any in-flight operations will be closed with the error.
+     *
+     * This method does nothing if the connection is already closed.
+     */
+    cleanup(error) {
+        if (this.closed) {
+            return;
+        }
+        this.socket.destroy();
+        this.error = error;
+        this.dataEvents?.throw(error).then(undefined, utils_1.squashError);
+        this.closed = true;
+        this.emit(Connection.CLOSE);
+    }
+    prepareCommand(db, command, options) {
+        let cmd = { ...command };
+        const readPreference = (0, shared_1.getReadPreference)(options);
+        const session = options?.session;
+        let clusterTime = this.clusterTime;
+        if (this.serverApi) {
+            const { version, strict, deprecationErrors } = this.serverApi;
+            cmd.apiVersion = version;
+            if (strict != null)
+                cmd.apiStrict = strict;
+            if (deprecationErrors != null)
+                cmd.apiDeprecationErrors = deprecationErrors;
+        }
+        if (this.hasSessionSupport && session) {
+            if (session.clusterTime &&
+                clusterTime &&
+                session.clusterTime.clusterTime.greaterThan(clusterTime.clusterTime)) {
+                clusterTime = session.clusterTime;
+            }
+            const sessionError = (0, sessions_1.applySession)(session, cmd, options);
+            if (sessionError)
+                throw sessionError;
+        }
+        else if (session?.explicit) {
+            throw new error_1.MongoCompatibilityError('Current topology does not support sessions');
+        }
+        // if we have a known cluster time, gossip it
+        if (clusterTime) {
+            cmd.$clusterTime = clusterTime;
+        }
+        // For standalone, drivers MUST NOT set $readPreference.
+        if (this.description.type !== common_1.ServerType.Standalone) {
+            if (!(0, shared_1.isSharded)(this) &&
+                !this.description.loadBalanced &&
+                this.supportsOpMsg &&
+                options.directConnection === true &&
+                readPreference?.mode === 'primary') {
+                // For mongos and load balancers with 'primary' mode, drivers MUST NOT set $readPreference.
+                // For all other types with a direct connection, if the read preference is 'primary'
+                // (driver sets 'primary' as default if no read preference is configured),
+                // the $readPreference MUST be set to 'primaryPreferred'
+                // to ensure that any server type can handle the request.
+                cmd.$readPreference = read_preference_1.ReadPreference.primaryPreferred.toJSON();
+            }
+            else if ((0, shared_1.isSharded)(this) && !this.supportsOpMsg && readPreference?.mode !== 'primary') {
+                // When sending a read operation via OP_QUERY and the $readPreference modifier,
+                // the query MUST be provided using the $query modifier.
+                cmd = {
+                    $query: cmd,
+                    $readPreference: readPreference.toJSON()
+                };
+            }
+            else if (readPreference?.mode !== 'primary') {
+                // For mode 'primary', drivers MUST NOT set $readPreference.
+                // For all other read preference modes (i.e. 'secondary', 'primaryPreferred', ...),
+                // drivers MUST set $readPreference
+                cmd.$readPreference = readPreference.toJSON();
+            }
+        }
+        const commandOptions = {
+            numberToSkip: 0,
+            numberToReturn: -1,
+            checkKeys: false,
+            // This value is not overridable
+            secondaryOk: readPreference.secondaryOk(),
+            ...options
+        };
+        options.timeoutContext?.addMaxTimeMSToCommand(cmd, options);
+        const message = this.supportsOpMsg
+            ? new commands_1.OpMsgRequest(db, cmd, commandOptions)
+            : new commands_1.OpQueryRequest(db, cmd, commandOptions);
+        return message;
+    }
+    async *sendWire(message, options, responseType) {
+        this.throwIfAborted();
+        const timeout = options.socketTimeoutMS ??
+            options?.timeoutContext?.getSocketTimeoutMS() ??
+            this.socketTimeoutMS;
+        this.socket.setTimeout(timeout);
+        try {
+            await this.writeCommand(message, {
+                agreedCompressor: this.description.compressor ?? 'none',
+                zlibCompressionLevel: this.description.zlibCompressionLevel,
+                timeoutContext: options.timeoutContext,
+                signal: options.signal
+            });
+            if (message.moreToCome) {
+                yield responses_1.MongoDBResponse.empty;
+                return;
+            }
+            this.throwIfAborted();
+            if (options.timeoutContext?.csotEnabled() &&
+                options.timeoutContext.minRoundTripTime != null &&
+                options.timeoutContext.remainingTimeMS < options.timeoutContext.minRoundTripTime) {
+                throw new error_1.MongoOperationTimeoutError('Server roundtrip time is greater than the time remaining');
+            }
+            for await (const response of this.readMany(options)) {
+                this.socket.setTimeout(0);
+                const bson = response.parse();
+                const document = (responseType ?? responses_1.MongoDBResponse).make(bson);
+                yield document;
+                this.throwIfAborted();
+                this.socket.setTimeout(timeout);
+            }
+        }
+        finally {
+            this.socket.setTimeout(0);
+        }
+    }
+    async *sendCommand(ns, command, options, responseType) {
+        options?.signal?.throwIfAborted();
+        const message = this.prepareCommand(ns.db, command, options);
+        let started = 0;
+        if (this.shouldEmitAndLogCommand) {
+            started = (0, utils_1.now)();
+            this.emitAndLogCommand(this.monitorCommands, Connection.COMMAND_STARTED, message.databaseName, this.established, new command_monitoring_events_1.CommandStartedEvent(this, message, this.description.serverConnectionId));
+        }
+        // If `documentsReturnedIn` not set or raw is not enabled, use input bson options
+        // Otherwise, support raw flag. Raw only works for cursors that hardcode firstBatch/nextBatch fields
+        const bsonOptions = options.documentsReturnedIn == null || !options.raw
+            ? options
+            : {
+                ...options,
+                raw: false,
+                fieldsAsRaw: { [options.documentsReturnedIn]: true }
+            };
+        /** MongoDBResponse instance or subclass */
+        let document = undefined;
+        /** Cached result of a toObject call */
+        let object = undefined;
+        try {
+            this.throwIfAborted();
+            for await (document of this.sendWire(message, options, responseType)) {
+                object = undefined;
+                if (options.session != null) {
+                    (0, sessions_1.updateSessionFromResponse)(options.session, document);
+                }
+                if (document.$clusterTime) {
+                    this.clusterTime = document.$clusterTime;
+                    this.emit(Connection.CLUSTER_TIME_RECEIVED, document.$clusterTime);
+                }
+                if (document.ok === 0) {
+                    if (options.timeoutContext?.csotEnabled() && document.isMaxTimeExpiredError) {
+                        throw new error_1.MongoOperationTimeoutError('Server reported a timeout error', {
+                            cause: new error_1.MongoServerError((object ??= document.toObject(bsonOptions)))
+                        });
+                    }
+                    throw new error_1.MongoServerError((object ??= document.toObject(bsonOptions)));
+                }
+                if (this.shouldEmitAndLogCommand) {
+                    this.emitAndLogCommand(this.monitorCommands, Connection.COMMAND_SUCCEEDED, message.databaseName, this.established, new command_monitoring_events_1.CommandSucceededEvent(this, message, message.moreToCome ? { ok: 1 } : (object ??= document.toObject(bsonOptions)), started, this.description.serverConnectionId));
+                }
+                if (responseType == null) {
+                    yield (object ??= document.toObject(bsonOptions));
+                }
+                else {
+                    yield document;
+                }
+                this.throwIfAborted();
+            }
+        }
+        catch (error) {
+            if (this.shouldEmitAndLogCommand) {
+                this.emitAndLogCommand(this.monitorCommands, Connection.COMMAND_FAILED, message.databaseName, this.established, new command_monitoring_events_1.CommandFailedEvent(this, message, error, started, this.description.serverConnectionId));
+            }
+            throw error;
+        }
+    }
+    async command(ns, command, options = {}, responseType) {
+        this.throwIfAborted();
+        options.signal?.throwIfAborted();
+        for await (const document of this.sendCommand(ns, command, options, responseType)) {
+            if (options.timeoutContext?.csotEnabled()) {
+                if (responses_1.MongoDBResponse.is(document)) {
+                    if (document.isMaxTimeExpiredError) {
+                        throw new error_1.MongoOperationTimeoutError('Server reported a timeout error', {
+                            cause: new error_1.MongoServerError(document.toObject())
+                        });
+                    }
+                }
+                else {
+                    if ((Array.isArray(document?.writeErrors) &&
+                        document.writeErrors.some(error => error?.code === error_1.MONGODB_ERROR_CODES.MaxTimeMSExpired)) ||
+                        document?.writeConcernError?.code === error_1.MONGODB_ERROR_CODES.MaxTimeMSExpired) {
+                        throw new error_1.MongoOperationTimeoutError('Server reported a timeout error', {
+                            cause: new error_1.MongoServerError(document)
+                        });
+                    }
+                }
+            }
+            return document;
+        }
+        throw new error_1.MongoUnexpectedServerResponseError('Unable to get response from server');
+    }
+    exhaustCommand(ns, command, options, replyListener) {
+        const exhaustLoop = async () => {
+            this.throwIfAborted();
+            for await (const reply of this.sendCommand(ns, command, options)) {
+                replyListener(undefined, reply);
+                this.throwIfAborted();
+            }
+            throw new error_1.MongoUnexpectedServerResponseError('Server ended moreToCome unexpectedly');
+        };
+        exhaustLoop().then(undefined, replyListener);
+    }
+    throwIfAborted() {
+        if (this.error)
+            throw this.error;
+    }
+    /**
+     * @internal
+     *
+     * Writes an OP_MSG or OP_QUERY request to the socket, optionally compressing the command. This method
+     * waits until the socket's buffer has emptied (the Nodejs socket `drain` event has fired).
+     */
+    async writeCommand(command, options) {
+        const finalCommand = options.agreedCompressor === 'none' || !commands_1.OpCompressedRequest.canCompress(command)
+            ? command
+            : new commands_1.OpCompressedRequest(command, {
+                agreedCompressor: options.agreedCompressor ?? 'none',
+                zlibCompressionLevel: options.zlibCompressionLevel ?? 0
+            });
+        const buffer = Buffer.concat(await finalCommand.toBin());
+        if (options.timeoutContext?.csotEnabled()) {
+            if (options.timeoutContext.minRoundTripTime != null &&
+                options.timeoutContext.remainingTimeMS < options.timeoutContext.minRoundTripTime) {
+                throw new error_1.MongoOperationTimeoutError('Server roundtrip time is greater than the time remaining');
+            }
+        }
+        try {
+            if (this.socket.write(buffer))
+                return;
+        }
+        catch (writeError) {
+            const networkError = new error_1.MongoNetworkError('unexpected error writing to socket', {
+                cause: writeError
+            });
+            this.onError(networkError);
+            throw networkError;
+        }
+        const drainEvent = (0, utils_1.once)(this.socket, 'drain', options);
+        const timeout = options?.timeoutContext?.timeoutForSocketWrite;
+        const drained = timeout ? Promise.race([drainEvent, timeout]) : drainEvent;
+        try {
+            return await drained;
+        }
+        catch (writeError) {
+            if (timeout_1.TimeoutError.is(writeError)) {
+                const timeoutError = new error_1.MongoOperationTimeoutError('Timed out at socket write');
+                this.onError(timeoutError);
+                throw timeoutError;
+            }
+            else if (writeError === options.signal?.reason) {
+                this.onError(writeError);
+            }
+            throw writeError;
+        }
+        finally {
+            timeout?.clear();
+        }
+    }
+    /**
+     * @internal
+     *
+     * Returns an async generator that yields full wire protocol messages from the underlying socket.  This function
+     * yields messages until `moreToCome` is false or not present in a response, or the caller cancels the request
+     * by calling `return` on the generator.
+     *
+     * Note that `for-await` loops call `return` automatically when the loop is exited.
+     */
+    async *readMany(options) {
+        try {
+            this.dataEvents = (0, on_data_1.onData)(this.messageStream, options);
+            this.messageStream.resume();
+            for await (const message of this.dataEvents) {
+                const response = await (0, compression_1.decompressResponse)(message);
+                yield response;
+                if (!response.moreToCome) {
+                    return;
+                }
+            }
+        }
+        catch (readError) {
+            if (timeout_1.TimeoutError.is(readError)) {
+                const timeoutError = new error_1.MongoOperationTimeoutError(`Timed out during socket read (${readError.duration}ms)`);
+                this.dataEvents = null;
+                this.onError(timeoutError);
+                throw timeoutError;
+            }
+            else if (readError === options.signal?.reason) {
+                this.onError(readError);
+            }
+            throw readError;
+        }
+        finally {
+            this.dataEvents = null;
+            this.messageStream.pause();
+        }
+    }
+}
+exports.Connection = Connection;
+/** @internal */
+class SizedMessageTransform extends stream_1.Transform {
+    constructor({ connection }) {
+        super({ writableObjectMode: false, readableObjectMode: true });
+        this.bufferPool = new utils_1.BufferPool();
+        this.connection = connection;
+    }
+    _transform(chunk, encoding, callback) {
+        if (this.connection.delayedTimeoutId != null) {
+            (0, timers_1.clearTimeout)(this.connection.delayedTimeoutId);
+            this.connection.delayedTimeoutId = null;
+        }
+        this.bufferPool.append(chunk);
+        while (this.bufferPool.length) {
+            // While there are any bytes in the buffer
+            // Try to fetch a size from the top 4 bytes
+            const sizeOfMessage = this.bufferPool.getInt32();
+            if (sizeOfMessage == null) {
+                // Not even an int32 worth of data. Stop the loop, we need more chunks.
+                break;
+            }
+            if (sizeOfMessage < 0) {
+                // The size in the message has a negative value, this is probably corruption, throw:
+                return callback(new error_1.MongoParseError(`Message size cannot be negative: ${sizeOfMessage}`));
+            }
+            if (sizeOfMessage > this.bufferPool.length) {
+                // We do not have enough bytes to make a sizeOfMessage chunk
+                break;
+            }
+            // Add a message to the stream
+            const message = this.bufferPool.read(sizeOfMessage);
+            if (!this.push(message)) {
+                // We only subscribe to data events so we should never get backpressure
+                // if we do, we do not have the handling for it.
+                return callback(new error_1.MongoRuntimeError(`SizedMessageTransform does not support backpressure`));
+            }
+        }
+        callback();
+    }
+}
+exports.SizedMessageTransform = SizedMessageTransform;
+/** @internal */
+class CryptoConnection extends Connection {
+    constructor(stream, options) {
+        super(stream, options);
+        this.autoEncrypter = options.autoEncrypter;
+    }
+    async command(ns, cmd, options, responseType) {
+        const { autoEncrypter } = this;
+        if (!autoEncrypter) {
+            throw new error_1.MongoRuntimeError('No AutoEncrypter available for encryption');
+        }
+        const serverWireVersion = (0, utils_1.maxWireVersion)(this);
+        if (serverWireVersion === 0) {
+            // This means the initial handshake hasn't happened yet
+            return await super.command(ns, cmd, options, responseType);
+        }
+        // Save sort or indexKeys based on the command being run
+        // the encrypt API serializes our JS objects to BSON to pass to the native code layer
+        // and then deserializes the encrypted result, the protocol level components
+        // of the command (ex. sort) are then converted to JS objects potentially losing
+        // import key order information. These fields are never encrypted so we can save the values
+        // from before the encryption and replace them after encryption has been performed
+        const sort = cmd.find || cmd.findAndModify ? cmd.sort : null;
+        const indexKeys = cmd.createIndexes
+            ? cmd.indexes.map((index) => index.key)
+            : null;
+        const encrypted = await autoEncrypter.encrypt(ns.toString(), cmd, options);
+        // Replace the saved values
+        if (sort != null && (cmd.find || cmd.findAndModify)) {
+            encrypted.sort = sort;
+        }
+        if (indexKeys != null && cmd.createIndexes) {
+            for (const [offset, index] of indexKeys.entries()) {
+                // @ts-expect-error `encrypted` is a generic "command", but we've narrowed for only `createIndexes` commands here
+                encrypted.indexes[offset].key = index;
+            }
+        }
+        const encryptedResponse = await super.command(ns, encrypted, options, 
+        // Eventually we want to require `responseType` which means we would satisfy `T` as the return type.
+        // In the meantime, we want encryptedResponse to always be _at least_ a MongoDBResponse if not a more specific subclass
+        // So that we can ensure we have access to the on-demand APIs for decorate response
+        responseType ?? responses_1.MongoDBResponse);
+        const result = await autoEncrypter.decrypt(encryptedResponse.toBytes(), options);
+        const decryptedResponse = responseType?.make(result) ?? (0, bson_1.deserialize)(result, options);
+        if (autoEncrypter[constants_1.kDecorateResult]) {
+            if (responseType == null) {
+                (0, utils_1.decorateDecryptionResult)(decryptedResponse, encryptedResponse.toObject(), true);
+            }
+            else if (decryptedResponse instanceof responses_1.CursorResponse) {
+                decryptedResponse.encryptedResponse = encryptedResponse;
+            }
+        }
+        return decryptedResponse;
+    }
+}
+exports.CryptoConnection = CryptoConnection;
+//# sourceMappingURL=connection.js.map

node_modules/mongodb/lib/cmap/connection_pool.js

@@ -0,0 +1,558 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.ConnectionPool = exports.PoolState = void 0;
+const timers_1 = require("timers");
+const constants_1 = require("../constants");
+const error_1 = require("../error");
+const mongo_types_1 = require("../mongo_types");
+const timeout_1 = require("../timeout");
+const utils_1 = require("../utils");
+const connect_1 = require("./connect");
+const connection_1 = require("./connection");
+const connection_pool_events_1 = require("./connection_pool_events");
+const errors_1 = require("./errors");
+const metrics_1 = require("./metrics");
+/** @internal */
+exports.PoolState = Object.freeze({
+    paused: 'paused',
+    ready: 'ready',
+    closed: 'closed'
+});
+/**
+ * A pool of connections which dynamically resizes, and emit events related to pool activity
+ * @internal
+ */
+class ConnectionPool extends mongo_types_1.TypedEventEmitter {
+    /**
+     * Emitted when the connection pool is created.
+     * @event
+     */
+    static { this.CONNECTION_POOL_CREATED = constants_1.CONNECTION_POOL_CREATED; }
+    /**
+     * Emitted once when the connection pool is closed
+     * @event
+     */
+    static { this.CONNECTION_POOL_CLOSED = constants_1.CONNECTION_POOL_CLOSED; }
+    /**
+     * Emitted each time the connection pool is cleared and it's generation incremented
+     * @event
+     */
+    static { this.CONNECTION_POOL_CLEARED = constants_1.CONNECTION_POOL_CLEARED; }
+    /**
+     * Emitted each time the connection pool is marked ready
+     * @event
+     */
+    static { this.CONNECTION_POOL_READY = constants_1.CONNECTION_POOL_READY; }
+    /**
+     * Emitted when a connection is created.
+     * @event
+     */
+    static { this.CONNECTION_CREATED = constants_1.CONNECTION_CREATED; }
+    /**
+     * Emitted when a connection becomes established, and is ready to use
+     * @event
+     */
+    static { this.CONNECTION_READY = constants_1.CONNECTION_READY; }
+    /**
+     * Emitted when a connection is closed
+     * @event
+     */
+    static { this.CONNECTION_CLOSED = constants_1.CONNECTION_CLOSED; }
+    /**
+     * Emitted when an attempt to check out a connection begins
+     * @event
+     */
+    static { this.CONNECTION_CHECK_OUT_STARTED = constants_1.CONNECTION_CHECK_OUT_STARTED; }
+    /**
+     * Emitted when an attempt to check out a connection fails
+     * @event
+     */
+    static { this.CONNECTION_CHECK_OUT_FAILED = constants_1.CONNECTION_CHECK_OUT_FAILED; }
+    /**
+     * Emitted each time a connection is successfully checked out of the connection pool
+     * @event
+     */
+    static { this.CONNECTION_CHECKED_OUT = constants_1.CONNECTION_CHECKED_OUT; }
+    /**
+     * Emitted each time a connection is successfully checked into the connection pool
+     * @event
+     */
+    static { this.CONNECTION_CHECKED_IN = constants_1.CONNECTION_CHECKED_IN; }
+    constructor(server, options) {
+        super();
+        this.on('error', utils_1.noop);
+        this.options = Object.freeze({
+            connectionType: connection_1.Connection,
+            ...options,
+            maxPoolSize: options.maxPoolSize ?? 100,
+            minPoolSize: options.minPoolSize ?? 0,
+            maxConnecting: options.maxConnecting ?? 2,
+            maxIdleTimeMS: options.maxIdleTimeMS ?? 0,
+            waitQueueTimeoutMS: options.waitQueueTimeoutMS ?? 0,
+            minPoolSizeCheckFrequencyMS: options.minPoolSizeCheckFrequencyMS ?? 100,
+            autoEncrypter: options.autoEncrypter
+        });
+        if (this.options.minPoolSize > this.options.maxPoolSize) {
+            throw new error_1.MongoInvalidArgumentError('Connection pool minimum size must not be greater than maximum pool size');
+        }
+        this.poolState = exports.PoolState.paused;
+        this.server = server;
+        this.connections = new utils_1.List();
+        this.pending = 0;
+        this.checkedOut = new Set();
+        this.minPoolSizeTimer = undefined;
+        this.generation = 0;
+        this.serviceGenerations = new Map();
+        this.connectionCounter = (0, utils_1.makeCounter)(1);
+        this.cancellationToken = new mongo_types_1.CancellationToken();
+        this.cancellationToken.setMaxListeners(Infinity);
+        this.waitQueue = new utils_1.List();
+        this.metrics = new metrics_1.ConnectionPoolMetrics();
+        this.processingWaitQueue = false;
+        this.mongoLogger = this.server.topology.client?.mongoLogger;
+        this.component = 'connection';
+        process.nextTick(() => {
+            this.emitAndLog(ConnectionPool.CONNECTION_POOL_CREATED, new connection_pool_events_1.ConnectionPoolCreatedEvent(this));
+        });
+    }
+    /** The address of the endpoint the pool is connected to */
+    get address() {
+        return this.options.hostAddress.toString();
+    }
+    /**
+     * Check if the pool has been closed
+     *
+     * TODO(NODE-3263): We can remove this property once shell no longer needs it
+     */
+    get closed() {
+        return this.poolState === exports.PoolState.closed;
+    }
+    /** An integer expressing how many total connections (available + pending + in use) the pool currently has */
+    get totalConnectionCount() {
+        return (this.availableConnectionCount + this.pendingConnectionCount + this.currentCheckedOutCount);
+    }
+    /** An integer expressing how many connections are currently available in the pool. */
+    get availableConnectionCount() {
+        return this.connections.length;
+    }
+    get pendingConnectionCount() {
+        return this.pending;
+    }
+    get currentCheckedOutCount() {
+        return this.checkedOut.size;
+    }
+    get waitQueueSize() {
+        return this.waitQueue.length;
+    }
+    get loadBalanced() {
+        return this.options.loadBalanced;
+    }
+    get serverError() {
+        return this.server.description.error;
+    }
+    /**
+     * This is exposed ONLY for use in mongosh, to enable
+     * killing all connections if a user quits the shell with
+     * operations in progress.
+     *
+     * This property may be removed as a part of NODE-3263.
+     */
+    get checkedOutConnections() {
+        return this.checkedOut;
+    }
+    /**
+     * Get the metrics information for the pool when a wait queue timeout occurs.
+     */
+    waitQueueErrorMetrics() {
+        return this.metrics.info(this.options.maxPoolSize);
+    }
+    /**
+     * Set the pool state to "ready"
+     */
+    ready() {
+        if (this.poolState !== exports.PoolState.paused) {
+            return;
+        }
+        this.poolState = exports.PoolState.ready;
+        this.emitAndLog(ConnectionPool.CONNECTION_POOL_READY, new connection_pool_events_1.ConnectionPoolReadyEvent(this));
+        (0, timers_1.clearTimeout)(this.minPoolSizeTimer);
+        this.ensureMinPoolSize();
+    }
+    /**
+     * Check a connection out of this pool. The connection will continue to be tracked, but no reference to it
+     * will be held by the pool. This means that if a connection is checked out it MUST be checked back in or
+     * explicitly destroyed by the new owner.
+     */
+    async checkOut(options) {
+        const checkoutTime = (0, utils_1.now)();
+        this.emitAndLog(ConnectionPool.CONNECTION_CHECK_OUT_STARTED, new connection_pool_events_1.ConnectionCheckOutStartedEvent(this));
+        const { promise, resolve, reject } = (0, utils_1.promiseWithResolvers)();
+        const timeout = options.timeoutContext.connectionCheckoutTimeout;
+        const waitQueueMember = {
+            resolve,
+            reject,
+            cancelled: false,
+            checkoutTime
+        };
+        const abortListener = (0, utils_1.addAbortListener)(options.signal, function () {
+            waitQueueMember.cancelled = true;
+            reject(this.reason);
+        });
+        this.waitQueue.push(waitQueueMember);
+        process.nextTick(() => this.processWaitQueue());
+        try {
+            timeout?.throwIfExpired();
+            return await (timeout ? Promise.race([promise, timeout]) : promise);
+        }
+        catch (error) {
+            if (timeout_1.TimeoutError.is(error)) {
+                timeout?.clear();
+                waitQueueMember.cancelled = true;
+                this.emitAndLog(ConnectionPool.CONNECTION_CHECK_OUT_FAILED, new connection_pool_events_1.ConnectionCheckOutFailedEvent(this, 'timeout', waitQueueMember.checkoutTime));
+                const timeoutError = new errors_1.WaitQueueTimeoutError(this.loadBalanced
+                    ? this.waitQueueErrorMetrics()
+                    : 'Timed out while checking out a connection from connection pool', this.address);
+                if (options.timeoutContext.csotEnabled()) {
+                    throw new error_1.MongoOperationTimeoutError('Timed out during connection checkout', {
+                        cause: timeoutError
+                    });
+                }
+                throw timeoutError;
+            }
+            throw error;
+        }
+        finally {
+            abortListener?.[utils_1.kDispose]();
+            timeout?.clear();
+        }
+    }
+    /**
+     * Check a connection into the pool.
+     *
+     * @param connection - The connection to check in
+     */
+    checkIn(connection) {
+        if (!this.checkedOut.has(connection)) {
+            return;
+        }
+        const poolClosed = this.closed;
+        const stale = this.connectionIsStale(connection);
+        const willDestroy = !!(poolClosed || stale || connection.closed);
+        if (!willDestroy) {
+            connection.markAvailable();
+            this.connections.unshift(connection);
+        }
+        this.checkedOut.delete(connection);
+        this.emitAndLog(ConnectionPool.CONNECTION_CHECKED_IN, new connection_pool_events_1.ConnectionCheckedInEvent(this, connection));
+        if (willDestroy) {
+            const reason = connection.closed ? 'error' : poolClosed ? 'poolClosed' : 'stale';
+            this.destroyConnection(connection, reason);
+        }
+        process.nextTick(() => this.processWaitQueue());
+    }
+    /**
+     * Clear the pool
+     *
+     * Pool reset is handled by incrementing the pool's generation count. Any existing connection of a
+     * previous generation will eventually be pruned during subsequent checkouts.
+     */
+    clear(options = {}) {
+        if (this.closed) {
+            return;
+        }
+        // handle load balanced case
+        if (this.loadBalanced) {
+            const { serviceId } = options;
+            if (!serviceId) {
+                throw new error_1.MongoRuntimeError('ConnectionPool.clear() called in load balanced mode with no serviceId.');
+            }
+            const sid = serviceId.toHexString();
+            const generation = this.serviceGenerations.get(sid);
+            // Only need to worry if the generation exists, since it should
+            // always be there but typescript needs the check.
+            if (generation == null) {
+                throw new error_1.MongoRuntimeError('Service generations are required in load balancer mode.');
+            }
+            else {
+                // Increment the generation for the service id.
+                this.serviceGenerations.set(sid, generation + 1);
+            }
+            this.emitAndLog(ConnectionPool.CONNECTION_POOL_CLEARED, new connection_pool_events_1.ConnectionPoolClearedEvent(this, { serviceId }));
+            return;
+        }
+        // handle non load-balanced case
+        const interruptInUseConnections = options.interruptInUseConnections ?? false;
+        const oldGeneration = this.generation;
+        this.generation += 1;
+        const alreadyPaused = this.poolState === exports.PoolState.paused;
+        this.poolState = exports.PoolState.paused;
+        this.clearMinPoolSizeTimer();
+        if (!alreadyPaused) {
+            this.emitAndLog(ConnectionPool.CONNECTION_POOL_CLEARED, new connection_pool_events_1.ConnectionPoolClearedEvent(this, {
+                interruptInUseConnections
+            }));
+        }
+        if (interruptInUseConnections) {
+            process.nextTick(() => this.interruptInUseConnections(oldGeneration));
+        }
+        this.processWaitQueue();
+    }
+    /**
+     * Closes all stale in-use connections in the pool with a resumable PoolClearedOnNetworkError.
+     *
+     * Only connections where `connection.generation <= minGeneration` are killed.
+     */
+    interruptInUseConnections(minGeneration) {
+        for (const connection of this.checkedOut) {
+            if (connection.generation <= minGeneration) {
+                connection.onError(new errors_1.PoolClearedOnNetworkError(this));
+            }
+        }
+    }
+    /** For MongoClient.close() procedures */
+    closeCheckedOutConnections() {
+        for (const conn of this.checkedOut) {
+            conn.onError(new error_1.MongoClientClosedError());
+        }
+    }
+    /** Close the pool */
+    close() {
+        if (this.closed) {
+            return;
+        }
+        // immediately cancel any in-flight connections
+        this.cancellationToken.emit('cancel');
+        // end the connection counter
+        if (typeof this.connectionCounter.return === 'function') {
+            this.connectionCounter.return(undefined);
+        }
+        this.poolState = exports.PoolState.closed;
+        this.clearMinPoolSizeTimer();
+        this.processWaitQueue();
+        for (const conn of this.connections) {
+            this.emitAndLog(ConnectionPool.CONNECTION_CLOSED, new connection_pool_events_1.ConnectionClosedEvent(this, conn, 'poolClosed'));
+            conn.destroy();
+        }
+        this.connections.clear();
+        this.emitAndLog(ConnectionPool.CONNECTION_POOL_CLOSED, new connection_pool_events_1.ConnectionPoolClosedEvent(this));
+    }
+    /**
+     * @internal
+     * Reauthenticate a connection
+     */
+    async reauthenticate(connection) {
+        const authContext = connection.authContext;
+        if (!authContext) {
+            throw new error_1.MongoRuntimeError('No auth context found on connection.');
+        }
+        const credentials = authContext.credentials;
+        if (!credentials) {
+            throw new error_1.MongoMissingCredentialsError('Connection is missing credentials when asked to reauthenticate');
+        }
+        const resolvedCredentials = credentials.resolveAuthMechanism(connection.hello);
+        const provider = this.server.topology.client.s.authProviders.getOrCreateProvider(resolvedCredentials.mechanism, resolvedCredentials.mechanismProperties);
+        if (!provider) {
+            throw new error_1.MongoMissingCredentialsError(`Reauthenticate failed due to no auth provider for ${credentials.mechanism}`);
+        }
+        await provider.reauth(authContext);
+        return;
+    }
+    /** Clear the min pool size timer */
+    clearMinPoolSizeTimer() {
+        const minPoolSizeTimer = this.minPoolSizeTimer;
+        if (minPoolSizeTimer) {
+            (0, timers_1.clearTimeout)(minPoolSizeTimer);
+        }
+    }
+    destroyConnection(connection, reason) {
+        this.emitAndLog(ConnectionPool.CONNECTION_CLOSED, new connection_pool_events_1.ConnectionClosedEvent(this, connection, reason));
+        // destroy the connection
+        connection.destroy();
+    }
+    connectionIsStale(connection) {
+        const serviceId = connection.serviceId;
+        if (this.loadBalanced && serviceId) {
+            const sid = serviceId.toHexString();
+            const generation = this.serviceGenerations.get(sid);
+            return connection.generation !== generation;
+        }
+        return connection.generation !== this.generation;
+    }
+    connectionIsIdle(connection) {
+        return !!(this.options.maxIdleTimeMS && connection.idleTime > this.options.maxIdleTimeMS);
+    }
+    /**
+     * Destroys a connection if the connection is perished.
+     *
+     * @returns `true` if the connection was destroyed, `false` otherwise.
+     */
+    destroyConnectionIfPerished(connection) {
+        const isStale = this.connectionIsStale(connection);
+        const isIdle = this.connectionIsIdle(connection);
+        if (!isStale && !isIdle && !connection.closed) {
+            return false;
+        }
+        const reason = connection.closed ? 'error' : isStale ? 'stale' : 'idle';
+        this.destroyConnection(connection, reason);
+        return true;
+    }
+    createConnection(callback) {
+        // Note that metadata may have changed on the client but have
+        // been frozen here, so we pull the metadata promise always from the client
+        // no matter what options were set at the construction of the pool.
+        const connectOptions = {
+            ...this.options,
+            id: this.connectionCounter.next().value,
+            generation: this.generation,
+            cancellationToken: this.cancellationToken,
+            mongoLogger: this.mongoLogger,
+            authProviders: this.server.topology.client.s.authProviders,
+            metadata: this.server.topology.client.options.metadata
+        };
+        this.pending++;
+        // This is our version of a "virtual" no-I/O connection as the spec requires
+        const connectionCreatedTime = (0, utils_1.now)();
+        this.emitAndLog(ConnectionPool.CONNECTION_CREATED, new connection_pool_events_1.ConnectionCreatedEvent(this, { id: connectOptions.id }));
+        (0, connect_1.connect)(connectOptions).then(connection => {
+            // The pool might have closed since we started trying to create a connection
+            if (this.poolState !== exports.PoolState.ready) {
+                this.pending--;
+                connection.destroy();
+                callback(this.closed ? new errors_1.PoolClosedError(this) : new errors_1.PoolClearedError(this));
+                return;
+            }
+            // forward all events from the connection to the pool
+            for (const event of [...constants_1.APM_EVENTS, connection_1.Connection.CLUSTER_TIME_RECEIVED]) {
+                connection.on(event, (e) => this.emit(event, e));
+            }
+            if (this.loadBalanced) {
+                connection.on(connection_1.Connection.PINNED, pinType => this.metrics.markPinned(pinType));
+                connection.on(connection_1.Connection.UNPINNED, pinType => this.metrics.markUnpinned(pinType));
+                const serviceId = connection.serviceId;
+                if (serviceId) {
+                    let generation;
+                    const sid = serviceId.toHexString();
+                    if ((generation = this.serviceGenerations.get(sid))) {
+                        connection.generation = generation;
+                    }
+                    else {
+                        this.serviceGenerations.set(sid, 0);
+                        connection.generation = 0;
+                    }
+                }
+            }
+            connection.markAvailable();
+            this.emitAndLog(ConnectionPool.CONNECTION_READY, new connection_pool_events_1.ConnectionReadyEvent(this, connection, connectionCreatedTime));
+            this.pending--;
+            callback(undefined, connection);
+        }, error => {
+            this.pending--;
+            this.server.handleError(error);
+            this.emitAndLog(ConnectionPool.CONNECTION_CLOSED, new connection_pool_events_1.ConnectionClosedEvent(this, { id: connectOptions.id, serviceId: undefined }, 'error', 
+            // TODO(NODE-5192): Remove this cast
+            error));
+            if (error instanceof error_1.MongoNetworkError || error instanceof error_1.MongoServerError) {
+                error.connectionGeneration = connectOptions.generation;
+            }
+            callback(error ?? new error_1.MongoRuntimeError('Connection creation failed without error'));
+        });
+    }
+    ensureMinPoolSize() {
+        const minPoolSize = this.options.minPoolSize;
+        if (this.poolState !== exports.PoolState.ready) {
+            return;
+        }
+        this.connections.prune(connection => this.destroyConnectionIfPerished(connection));
+        if (this.totalConnectionCount < minPoolSize &&
+            this.pendingConnectionCount < this.options.maxConnecting) {
+            // NOTE: ensureMinPoolSize should not try to get all the pending
+            // connection permits because that potentially delays the availability of
+            // the connection to a checkout request
+            this.createConnection((err, connection) => {
+                if (!err && connection) {
+                    this.connections.push(connection);
+                    process.nextTick(() => this.processWaitQueue());
+                }
+                if (this.poolState === exports.PoolState.ready) {
+                    (0, timers_1.clearTimeout)(this.minPoolSizeTimer);
+                    this.minPoolSizeTimer = (0, timers_1.setTimeout)(() => this.ensureMinPoolSize(), this.options.minPoolSizeCheckFrequencyMS);
+                }
+            });
+        }
+        else {
+            (0, timers_1.clearTimeout)(this.minPoolSizeTimer);
+            this.minPoolSizeTimer = (0, timers_1.setTimeout)(() => this.ensureMinPoolSize(), this.options.minPoolSizeCheckFrequencyMS);
+        }
+    }
+    processWaitQueue() {
+        if (this.processingWaitQueue) {
+            return;
+        }
+        this.processingWaitQueue = true;
+        while (this.waitQueueSize) {
+            const waitQueueMember = this.waitQueue.first();
+            if (!waitQueueMember) {
+                this.waitQueue.shift();
+                continue;
+            }
+            if (waitQueueMember.cancelled) {
+                this.waitQueue.shift();
+                continue;
+            }
+            if (this.poolState !== exports.PoolState.ready) {
+                const reason = this.closed ? 'poolClosed' : 'connectionError';
+                const error = this.closed ? new errors_1.PoolClosedError(this) : new errors_1.PoolClearedError(this);
+                this.emitAndLog(ConnectionPool.CONNECTION_CHECK_OUT_FAILED, new connection_pool_events_1.ConnectionCheckOutFailedEvent(this, reason, waitQueueMember.checkoutTime, error));
+                this.waitQueue.shift();
+                waitQueueMember.reject(error);
+                continue;
+            }
+            if (!this.availableConnectionCount) {
+                break;
+            }
+            const connection = this.connections.shift();
+            if (!connection) {
+                break;
+            }
+            if (!this.destroyConnectionIfPerished(connection)) {
+                this.checkedOut.add(connection);
+                this.emitAndLog(ConnectionPool.CONNECTION_CHECKED_OUT, new connection_pool_events_1.ConnectionCheckedOutEvent(this, connection, waitQueueMember.checkoutTime));
+                this.waitQueue.shift();
+                waitQueueMember.resolve(connection);
+            }
+        }
+        const { maxPoolSize, maxConnecting } = this.options;
+        while (this.waitQueueSize > 0 &&
+            this.pendingConnectionCount < maxConnecting &&
+            (maxPoolSize === 0 || this.totalConnectionCount < maxPoolSize)) {
+            const waitQueueMember = this.waitQueue.shift();
+            if (!waitQueueMember || waitQueueMember.cancelled) {
+                continue;
+            }
+            this.createConnection((err, connection) => {
+                if (waitQueueMember.cancelled) {
+                    if (!err && connection) {
+                        this.connections.push(connection);
+                    }
+                }
+                else {
+                    if (err) {
+                        this.emitAndLog(ConnectionPool.CONNECTION_CHECK_OUT_FAILED, 
+                        // TODO(NODE-5192): Remove this cast
+                        new connection_pool_events_1.ConnectionCheckOutFailedEvent(this, 'connectionError', waitQueueMember.checkoutTime, err));
+                        waitQueueMember.reject(err);
+                    }
+                    else if (connection) {
+                        this.checkedOut.add(connection);
+                        this.emitAndLog(ConnectionPool.CONNECTION_CHECKED_OUT, new connection_pool_events_1.ConnectionCheckedOutEvent(this, connection, waitQueueMember.checkoutTime));
+                        waitQueueMember.resolve(connection);
+                    }
+                }
+                process.nextTick(() => this.processWaitQueue());
+            });
+        }
+        this.processingWaitQueue = false;
+    }
+}
+exports.ConnectionPool = ConnectionPool;
+//# sourceMappingURL=connection_pool.js.map

node_modules/mongodb/lib/cmap/connection_pool_events.js

@@ -0,0 +1,190 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.ConnectionPoolClearedEvent = exports.ConnectionCheckedInEvent = exports.ConnectionCheckedOutEvent = exports.ConnectionCheckOutFailedEvent = exports.ConnectionCheckOutStartedEvent = exports.ConnectionClosedEvent = exports.ConnectionReadyEvent = exports.ConnectionCreatedEvent = exports.ConnectionPoolClosedEvent = exports.ConnectionPoolReadyEvent = exports.ConnectionPoolCreatedEvent = exports.ConnectionPoolMonitoringEvent = void 0;
+const constants_1 = require("../constants");
+const utils_1 = require("../utils");
+/**
+ * The base export class for all monitoring events published from the connection pool
+ * @public
+ * @category Event
+ */
+class ConnectionPoolMonitoringEvent {
+    /** @internal */
+    constructor(pool) {
+        this.time = new Date();
+        this.address = pool.address;
+    }
+}
+exports.ConnectionPoolMonitoringEvent = ConnectionPoolMonitoringEvent;
+/**
+ * An event published when a connection pool is created
+ * @public
+ * @category Event
+ */
+class ConnectionPoolCreatedEvent extends ConnectionPoolMonitoringEvent {
+    /** @internal */
+    constructor(pool) {
+        super(pool);
+        /** @internal */
+        this.name = constants_1.CONNECTION_POOL_CREATED;
+        const { maxConnecting, maxPoolSize, minPoolSize, maxIdleTimeMS, waitQueueTimeoutMS } = pool.options;
+        this.options = { maxConnecting, maxPoolSize, minPoolSize, maxIdleTimeMS, waitQueueTimeoutMS };
+    }
+}
+exports.ConnectionPoolCreatedEvent = ConnectionPoolCreatedEvent;
+/**
+ * An event published when a connection pool is ready
+ * @public
+ * @category Event
+ */
+class ConnectionPoolReadyEvent extends ConnectionPoolMonitoringEvent {
+    /** @internal */
+    constructor(pool) {
+        super(pool);
+        /** @internal */
+        this.name = constants_1.CONNECTION_POOL_READY;
+    }
+}
+exports.ConnectionPoolReadyEvent = ConnectionPoolReadyEvent;
+/**
+ * An event published when a connection pool is closed
+ * @public
+ * @category Event
+ */
+class ConnectionPoolClosedEvent extends ConnectionPoolMonitoringEvent {
+    /** @internal */
+    constructor(pool) {
+        super(pool);
+        /** @internal */
+        this.name = constants_1.CONNECTION_POOL_CLOSED;
+    }
+}
+exports.ConnectionPoolClosedEvent = ConnectionPoolClosedEvent;
+/**
+ * An event published when a connection pool creates a new connection
+ * @public
+ * @category Event
+ */
+class ConnectionCreatedEvent extends ConnectionPoolMonitoringEvent {
+    /** @internal */
+    constructor(pool, connection) {
+        super(pool);
+        /** @internal */
+        this.name = constants_1.CONNECTION_CREATED;
+        this.connectionId = connection.id;
+    }
+}
+exports.ConnectionCreatedEvent = ConnectionCreatedEvent;
+/**
+ * An event published when a connection is ready for use
+ * @public
+ * @category Event
+ */
+class ConnectionReadyEvent extends ConnectionPoolMonitoringEvent {
+    /** @internal */
+    constructor(pool, connection, connectionCreatedEventTime) {
+        super(pool);
+        /** @internal */
+        this.name = constants_1.CONNECTION_READY;
+        this.durationMS = (0, utils_1.now)() - connectionCreatedEventTime;
+        this.connectionId = connection.id;
+    }
+}
+exports.ConnectionReadyEvent = ConnectionReadyEvent;
+/**
+ * An event published when a connection is closed
+ * @public
+ * @category Event
+ */
+class ConnectionClosedEvent extends ConnectionPoolMonitoringEvent {
+    /** @internal */
+    constructor(pool, connection, reason, error) {
+        super(pool);
+        /** @internal */
+        this.name = constants_1.CONNECTION_CLOSED;
+        this.connectionId = connection.id;
+        this.reason = reason;
+        this.serviceId = connection.serviceId;
+        this.error = error ?? null;
+    }
+}
+exports.ConnectionClosedEvent = ConnectionClosedEvent;
+/**
+ * An event published when a request to check a connection out begins
+ * @public
+ * @category Event
+ */
+class ConnectionCheckOutStartedEvent extends ConnectionPoolMonitoringEvent {
+    /** @internal */
+    constructor(pool) {
+        super(pool);
+        /** @internal */
+        this.name = constants_1.CONNECTION_CHECK_OUT_STARTED;
+    }
+}
+exports.ConnectionCheckOutStartedEvent = ConnectionCheckOutStartedEvent;
+/**
+ * An event published when a request to check a connection out fails
+ * @public
+ * @category Event
+ */
+class ConnectionCheckOutFailedEvent extends ConnectionPoolMonitoringEvent {
+    /** @internal */
+    constructor(pool, reason, checkoutTime, error) {
+        super(pool);
+        /** @internal */
+        this.name = constants_1.CONNECTION_CHECK_OUT_FAILED;
+        this.durationMS = (0, utils_1.now)() - checkoutTime;
+        this.reason = reason;
+        this.error = error;
+    }
+}
+exports.ConnectionCheckOutFailedEvent = ConnectionCheckOutFailedEvent;
+/**
+ * An event published when a connection is checked out of the connection pool
+ * @public
+ * @category Event
+ */
+class ConnectionCheckedOutEvent extends ConnectionPoolMonitoringEvent {
+    /** @internal */
+    constructor(pool, connection, checkoutTime) {
+        super(pool);
+        /** @internal */
+        this.name = constants_1.CONNECTION_CHECKED_OUT;
+        this.durationMS = (0, utils_1.now)() - checkoutTime;
+        this.connectionId = connection.id;
+    }
+}
+exports.ConnectionCheckedOutEvent = ConnectionCheckedOutEvent;
+/**
+ * An event published when a connection is checked into the connection pool
+ * @public
+ * @category Event
+ */
+class ConnectionCheckedInEvent extends ConnectionPoolMonitoringEvent {
+    /** @internal */
+    constructor(pool, connection) {
+        super(pool);
+        /** @internal */
+        this.name = constants_1.CONNECTION_CHECKED_IN;
+        this.connectionId = connection.id;
+    }
+}
+exports.ConnectionCheckedInEvent = ConnectionCheckedInEvent;
+/**
+ * An event published when a connection pool is cleared
+ * @public
+ * @category Event
+ */
+class ConnectionPoolClearedEvent extends ConnectionPoolMonitoringEvent {
+    /** @internal */
+    constructor(pool, options = {}) {
+        super(pool);
+        /** @internal */
+        this.name = constants_1.CONNECTION_POOL_CLEARED;
+        this.serviceId = options.serviceId;
+        this.interruptInUseConnections = options.interruptInUseConnections;
+    }
+}
+exports.ConnectionPoolClearedEvent = ConnectionPoolClearedEvent;
+//# sourceMappingURL=connection_pool_events.js.map

node_modules/mongodb/lib/cmap/connection_pool_events.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"connection_pool_events.js","sourceRoot":"","sources":["../../src/cmap/connection_pool_events.ts"],"names":[],"mappings":";;;AACA,4CAYsB;AAEtB,oCAA+B;AAI/B;;;;GAIG;AACH,MAAsB,6BAA6B;IAmBjD,gBAAgB;IAChB,YAAY,IAAoB;QAC9B,IAAI,CAAC,IAAI,GAAG,IAAI,IAAI,EAAE,CAAC;QACvB,IAAI,CAAC,OAAO,GAAG,IAAI,CAAC,OAAO,CAAC;IAC9B,CAAC;CACF;AAxBD,sEAwBC;AAED;;;;GAIG;AACH,MAAa,0BAA2B,SAAQ,6BAA6B;IAS3E,gBAAgB;IAChB,YAAY,IAAoB;QAC9B,KAAK,CAAC,IAAI,CAAC,CAAC;QALd,gBAAgB;QAChB,SAAI,GAAG,mCAAuB,CAAC;QAK7B,MAAM,EAAE,aAAa,EAAE,WAAW,EAAE,WAAW,EAAE,aAAa,EAAE,kBAAkB,EAAE,GAClF,IAAI,CAAC,OAAO,CAAC;QACf,IAAI,CAAC,OAAO,GAAG,EAAE,aAAa,EAAE,WAAW,EAAE,WAAW,EAAE,aAAa,EAAE,kBAAkB,EAAE,CAAC;IAChG,CAAC;CACF;AAhBD,gEAgBC;AAED;;;;GAIG;AACH,MAAa,wBAAyB,SAAQ,6BAA6B;IAIzE,gBAAgB;IAChB,YAAY,IAAoB;QAC9B,KAAK,CAAC,IAAI,CAAC,CAAC;QALd,gBAAgB;QAChB,SAAI,GAAG,iCAAqB,CAAC;IAK7B,CAAC;CACF;AARD,4DAQC;AAED;;;;GAIG;AACH,MAAa,yBAA0B,SAAQ,6BAA6B;IAI1E,gBAAgB;IAChB,YAAY,IAAoB;QAC9B,KAAK,CAAC,IAAI,CAAC,CAAC;QALd,gBAAgB;QAChB,SAAI,GAAG,kCAAsB,CAAC;IAK9B,CAAC;CACF;AARD,8DAQC;AAED;;;;GAIG;AACH,MAAa,sBAAuB,SAAQ,6BAA6B;IAMvE,gBAAgB;IAChB,YAAY,IAAoB,EAAE,UAAwC;QACxE,KAAK,CAAC,IAAI,CAAC,CAAC;QALd,gBAAgB;QAChB,SAAI,GAAG,8BAAkB,CAAC;QAKxB,IAAI,CAAC,YAAY,GAAG,UAAU,CAAC,EAAE,CAAC;IACpC,CAAC;CACF;AAXD,wDAWC;AAED;;;;GAIG;AACH,MAAa,oBAAqB,SAAQ,6BAA6B;IAkBrE,gBAAgB;IAChB,YAAY,IAAoB,EAAE,UAAsB,EAAE,0BAAkC;QAC1F,KAAK,CAAC,IAAI,CAAC,CAAC;QALd,gBAAgB;QAChB,SAAI,GAAG,4BAAgB,CAAC;QAKtB,IAAI,CAAC,UAAU,GAAG,IAAA,WAAG,GAAE,GAAG,0BAA0B,CAAC;QACrD,IAAI,CAAC,YAAY,GAAG,UAAU,CAAC,EAAE,CAAC;IACpC,CAAC;CACF;AAxBD,oDAwBC;AAED;;;;GAIG;AACH,MAAa,qBAAsB,SAAQ,6BAA6B;IAWtE,gBAAgB;IAChB,YACE,IAAoB,EACpB,UAAgD,EAChD,MAAiD,EACjD,KAAkB;QAElB,KAAK,CAAC,IAAI,CAAC,CAAC;QAZd,gBAAgB;QAChB,SAAI,GAAG,6BAAiB,CAAC;QAYvB,IAAI,CAAC,YAAY,GAAG,UAAU,CAAC,EAAE,CAAC;QAClC,IAAI,CAAC,MAAM,GAAG,MAAM,CAAC;QACrB,IAAI,CAAC,SAAS,GAAG,UAAU,CAAC,SAAS,CAAC;QACtC,IAAI,CAAC,KAAK,GAAG,KAAK,IAAI,IAAI,CAAC;IAC7B,CAAC;CACF;AAxBD,sDAwBC;AAED;;;;GAIG;AACH,MAAa,8BAA+B,SAAQ,6BAA6B;IAI/E,gBAAgB;IAChB,YAAY,IAAoB;QAC9B,KAAK,CAAC,IAAI,CAAC,CAAC;QALd,gBAAgB;QAChB,SAAI,GAAG,wCAA4B,CAAC;IAKpC,CAAC;CACF;AARD,wEAQC;AAED;;;;GAIG;AACH,MAAa,6BAA8B,SAAQ,6BAA6B;IAe9E,gBAAgB;IAChB,YACE,IAAoB,EACpB,MAAoD,EACpD,YAAoB,EACpB,KAAkB;QAElB,KAAK,CAAC,IAAI,CAAC,CAAC;QAjBd,gBAAgB;QAChB,SAAI,GAAG,uCAA2B,CAAC;QAiBjC,IAAI,CAAC,UAAU,GAAG,IAAA,WAAG,GAAE,GAAG,YAAY,CAAC;QACvC,IAAI,CAAC,MAAM,GAAG,MAAM,CAAC;QACrB,IAAI,CAAC,KAAK,GAAG,KAAK,CAAC;IACrB,CAAC;CACF;AA3BD,sEA2BC;AAED;;;;GAIG;AACH,MAAa,yBAA0B,SAAQ,6BAA6B;IAc1E,gBAAgB;IAChB,YAAY,IAAoB,EAAE,UAAsB,EAAE,YAAoB;QAC5E,KAAK,CAAC,IAAI,CAAC,CAAC;QAbd,gBAAgB;QAChB,SAAI,GAAG,kCAAsB,CAAC;QAa5B,IAAI,CAAC,UAAU,GAAG,IAAA,WAAG,GAAE,GAAG,YAAY,CAAC;QACvC,IAAI,CAAC,YAAY,GAAG,UAAU,CAAC,EAAE,CAAC;IACpC,CAAC;CACF;AApBD,8DAoBC;AAED;;;;GAIG;AACH,MAAa,wBAAyB,SAAQ,6BAA6B;IAMzE,gBAAgB;IAChB,YAAY,IAAoB,EAAE,UAAsB;QACtD,KAAK,CAAC,IAAI,CAAC,CAAC;QALd,gBAAgB;QAChB,SAAI,GAAG,iCAAqB,CAAC;QAK3B,IAAI,CAAC,YAAY,GAAG,UAAU,CAAC,EAAE,CAAC;IACpC,CAAC;CACF;AAXD,4DAWC;AAED;;;;GAIG;AACH,MAAa,0BAA2B,SAAQ,6BAA6B;IAQ3E,gBAAgB;IAChB,YACE,IAAoB,EACpB,UAAyE,EAAE;QAE3E,KAAK,CAAC,IAAI,CAAC,CAAC;QARd,gBAAgB;QAChB,SAAI,GAAG,mCAAuB,CAAC;QAQ7B,IAAI,CAAC,SAAS,GAAG,OAAO,CAAC,SAAS,CAAC;QACnC,IAAI,CAAC,yBAAyB,GAAG,OAAO,CAAC,yBAAyB,CAAC;IACrE,CAAC;CACF;AAjBD,gEAiBC"}

node_modules/mongodb/lib/cmap/errors.js

@@ -0,0 +1,108 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.WaitQueueTimeoutError = exports.PoolClearedOnNetworkError = exports.PoolClearedError = exports.PoolClosedError = void 0;
+const error_1 = require("../error");
+/**
+ * An error indicating a connection pool is closed
+ * @category Error
+ */
+class PoolClosedError extends error_1.MongoDriverError {
+    /**
+     * **Do not use this constructor!**
+     *
+     * Meant for internal use only.
+     *
+     * @remarks
+     * This class is only meant to be constructed within the driver. This constructor is
+     * not subject to semantic versioning compatibility guarantees and may change at any time.
+     *
+     * @public
+     **/
+    constructor(pool) {
+        super('Attempted to check out a connection from closed connection pool');
+        this.address = pool.address;
+    }
+    get name() {
+        return 'MongoPoolClosedError';
+    }
+}
+exports.PoolClosedError = PoolClosedError;
+/**
+ * An error indicating a connection pool is currently paused
+ * @category Error
+ */
+class PoolClearedError extends error_1.MongoNetworkError {
+    /**
+     * **Do not use this constructor!**
+     *
+     * Meant for internal use only.
+     *
+     * @remarks
+     * This class is only meant to be constructed within the driver. This constructor is
+     * not subject to semantic versioning compatibility guarantees and may change at any time.
+     *
+     * @public
+     **/
+    constructor(pool, message) {
+        const errorMessage = message
+            ? message
+            : `Connection pool for ${pool.address} was cleared because another operation failed with: "${pool.serverError?.message}"`;
+        super(errorMessage, pool.serverError ? { cause: pool.serverError } : undefined);
+        this.address = pool.address;
+        this.addErrorLabel(error_1.MongoErrorLabel.PoolRequestedRetry);
+    }
+    get name() {
+        return 'MongoPoolClearedError';
+    }
+}
+exports.PoolClearedError = PoolClearedError;
+/**
+ * An error indicating that a connection pool has been cleared after the monitor for that server timed out.
+ * @category Error
+ */
+class PoolClearedOnNetworkError extends PoolClearedError {
+    /**
+     * **Do not use this constructor!**
+     *
+     * Meant for internal use only.
+     *
+     * @remarks
+     * This class is only meant to be constructed within the driver. This constructor is
+     * not subject to semantic versioning compatibility guarantees and may change at any time.
+     *
+     * @public
+     **/
+    constructor(pool) {
+        super(pool, `Connection to ${pool.address} interrupted due to server monitor timeout`);
+    }
+    get name() {
+        return 'PoolClearedOnNetworkError';
+    }
+}
+exports.PoolClearedOnNetworkError = PoolClearedOnNetworkError;
+/**
+ * An error thrown when a request to check out a connection times out
+ * @category Error
+ */
+class WaitQueueTimeoutError extends error_1.MongoDriverError {
+    /**
+     * **Do not use this constructor!**
+     *
+     * Meant for internal use only.
+     *
+     * @remarks
+     * This class is only meant to be constructed within the driver. This constructor is
+     * not subject to semantic versioning compatibility guarantees and may change at any time.
+     *
+     * @public
+     **/
+    constructor(message, address) {
+        super(message);
+        this.address = address;
+    }
+    get name() {
+        return 'MongoWaitQueueTimeoutError';
+    }
+}
+exports.WaitQueueTimeoutError = WaitQueueTimeoutError;
+//# sourceMappingURL=errors.js.map

node_modules/mongodb/lib/cmap/errors.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"errors.js","sourceRoot":"","sources":["../../src/cmap/errors.ts"],"names":[],"mappings":";;;AAAA,oCAAgF;AAGhF;;;GAGG;AACH,MAAa,eAAgB,SAAQ,wBAAgB;IAInD;;;;;;;;;;QAUI;IACJ,YAAY,IAAoB;QAC9B,KAAK,CAAC,iEAAiE,CAAC,CAAC;QACzE,IAAI,CAAC,OAAO,GAAG,IAAI,CAAC,OAAO,CAAC;IAC9B,CAAC;IAED,IAAa,IAAI;QACf,OAAO,sBAAsB,CAAC;IAChC,CAAC;CACF;AAvBD,0CAuBC;AAED;;;GAGG;AACH,MAAa,gBAAiB,SAAQ,yBAAiB;IAIrD;;;;;;;;;;QAUI;IACJ,YAAY,IAAoB,EAAE,OAAgB;QAChD,MAAM,YAAY,GAAG,OAAO;YAC1B,CAAC,CAAC,OAAO;YACT,CAAC,CAAC,uBAAuB,IAAI,CAAC,OAAO,wDAAwD,IAAI,CAAC,WAAW,EAAE,OAAO,GAAG,CAAC;QAC5H,KAAK,CAAC,YAAY,EAAE,IAAI,CAAC,WAAW,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,IAAI,CAAC,WAAW,EAAE,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC;QAChF,IAAI,CAAC,OAAO,GAAG,IAAI,CAAC,OAAO,CAAC;QAE5B,IAAI,CAAC,aAAa,CAAC,uBAAe,CAAC,kBAAkB,CAAC,CAAC;IACzD,CAAC;IAED,IAAa,IAAI;QACf,OAAO,uBAAuB,CAAC;IACjC,CAAC;CACF;AA5BD,4CA4BC;AAED;;;GAGG;AACH,MAAa,yBAA0B,SAAQ,gBAAgB;IAC7D;;;;;;;;;;QAUI;IACJ,YAAY,IAAoB;QAC9B,KAAK,CAAC,IAAI,EAAE,iBAAiB,IAAI,CAAC,OAAO,4CAA4C,CAAC,CAAC;IACzF,CAAC;IAED,IAAa,IAAI;QACf,OAAO,2BAA2B,CAAC;IACrC,CAAC;CACF;AAnBD,8DAmBC;AAED;;;GAGG;AACH,MAAa,qBAAsB,SAAQ,wBAAgB;IAIzD;;;;;;;;;;QAUI;IACJ,YAAY,OAAe,EAAE,OAAe;QAC1C,KAAK,CAAC,OAAO,CAAC,CAAC;QACf,IAAI,CAAC,OAAO,GAAG,OAAO,CAAC;IACzB,CAAC;IAED,IAAa,IAAI;QACf,OAAO,4BAA4B,CAAC;IACtC,CAAC;CACF;AAvBD,sDAuBC"}

node_modules/mongodb/lib/cmap/handshake/client_metadata.js

@@ -0,0 +1,241 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.LimitedSizeDocument = void 0;
+exports.isDriverInfoEqual = isDriverInfoEqual;
+exports.makeClientMetadata = makeClientMetadata;
+exports.getFAASEnv = getFAASEnv;
+const os = require("os");
+const process = require("process");
+const bson_1 = require("../../bson");
+const error_1 = require("../../error");
+const utils_1 = require("../../utils");
+// eslint-disable-next-line @typescript-eslint/no-require-imports
+const NODE_DRIVER_VERSION = require('../../../package.json').version;
+/** @internal */
+function isDriverInfoEqual(info1, info2) {
+    /** for equality comparison, we consider "" as unset */
+    const nonEmptyCmp = (s1, s2) => {
+        s1 ||= undefined;
+        s2 ||= undefined;
+        return s1 === s2;
+    };
+    return (nonEmptyCmp(info1.name, info2.name) &&
+        nonEmptyCmp(info1.platform, info2.platform) &&
+        nonEmptyCmp(info1.version, info2.version));
+}
+/** @internal */
+class LimitedSizeDocument {
+    constructor(maxSize) {
+        this.document = new Map();
+        /** BSON overhead: Int32 + Null byte */
+        this.documentSize = 5;
+        this.maxSize = maxSize;
+    }
+    /** Only adds key/value if the bsonByteLength is less than MAX_SIZE */
+    ifItFitsItSits(key, value) {
+        // The BSON byteLength of the new element is the same as serializing it to its own document
+        // subtracting the document size int32 and the null terminator.
+        const newElementSize = bson_1.BSON.serialize(new Map().set(key, value)).byteLength - 5;
+        if (newElementSize + this.documentSize > this.maxSize) {
+            return false;
+        }
+        this.documentSize += newElementSize;
+        this.document.set(key, value);
+        return true;
+    }
+    toObject() {
+        return bson_1.BSON.deserialize(bson_1.BSON.serialize(this.document), {
+            promoteLongs: false,
+            promoteBuffers: false,
+            promoteValues: false,
+            useBigInt64: false
+        });
+    }
+}
+exports.LimitedSizeDocument = LimitedSizeDocument;
+/**
+ * From the specs:
+ * Implementors SHOULD cumulatively update fields in the following order until the document is under the size limit:
+ * 1. Omit fields from `env` except `env.name`.
+ * 2. Omit fields from `os` except `os.type`.
+ * 3. Omit the `env` document entirely.
+ * 4. Truncate `platform`. -- special we do not truncate this field
+ */
+async function makeClientMetadata(driverInfoList, { appName = '' }) {
+    const metadataDocument = new LimitedSizeDocument(512);
+    // Add app name first, it must be sent
+    if (appName.length > 0) {
+        const name = Buffer.byteLength(appName, 'utf8') <= 128
+            ? appName
+            : Buffer.from(appName, 'utf8').subarray(0, 128).toString('utf8');
+        metadataDocument.ifItFitsItSits('application', { name });
+    }
+    const driverInfo = {
+        name: 'nodejs',
+        version: NODE_DRIVER_VERSION
+    };
+    // This is where we handle additional driver info added after client construction.
+    for (const { name: n = '', version: v = '' } of driverInfoList) {
+        if (n.length > 0) {
+            driverInfo.name = `${driverInfo.name}|${n}`;
+        }
+        if (v.length > 0) {
+            driverInfo.version = `${driverInfo.version}|${v}`;
+        }
+    }
+    if (!metadataDocument.ifItFitsItSits('driver', driverInfo)) {
+        throw new error_1.MongoInvalidArgumentError('Unable to include driverInfo name and version, metadata cannot exceed 512 bytes');
+    }
+    let runtimeInfo = getRuntimeInfo();
+    // This is where we handle additional driver info added after client construction.
+    for (const { platform = '' } of driverInfoList) {
+        if (platform.length > 0) {
+            runtimeInfo = `${runtimeInfo}|${platform}`;
+        }
+    }
+    if (!metadataDocument.ifItFitsItSits('platform', runtimeInfo)) {
+        throw new error_1.MongoInvalidArgumentError('Unable to include driverInfo platform, metadata cannot exceed 512 bytes');
+    }
+    // Note: order matters, os.type is last so it will be removed last if we're at maxSize
+    const osInfo = new Map()
+        .set('name', process.platform)
+        .set('architecture', process.arch)
+        .set('version', os.release())
+        .set('type', os.type());
+    if (!metadataDocument.ifItFitsItSits('os', osInfo)) {
+        for (const key of osInfo.keys()) {
+            osInfo.delete(key);
+            if (osInfo.size === 0)
+                break;
+            if (metadataDocument.ifItFitsItSits('os', osInfo))
+                break;
+        }
+    }
+    const faasEnv = getFAASEnv();
+    if (faasEnv != null) {
+        if (!metadataDocument.ifItFitsItSits('env', faasEnv)) {
+            for (const key of faasEnv.keys()) {
+                faasEnv.delete(key);
+                if (faasEnv.size === 0)
+                    break;
+                if (metadataDocument.ifItFitsItSits('env', faasEnv))
+                    break;
+            }
+        }
+    }
+    return await addContainerMetadata(metadataDocument.toObject());
+}
+let dockerPromise;
+/** @internal */
+async function getContainerMetadata() {
+    dockerPromise ??= (0, utils_1.fileIsAccessible)('/.dockerenv');
+    const isDocker = await dockerPromise;
+    const { KUBERNETES_SERVICE_HOST = '' } = process.env;
+    const isKubernetes = KUBERNETES_SERVICE_HOST.length > 0 ? true : false;
+    const containerMetadata = {};
+    if (isDocker)
+        containerMetadata.runtime = 'docker';
+    if (isKubernetes)
+        containerMetadata.orchestrator = 'kubernetes';
+    return containerMetadata;
+}
+/**
+ * @internal
+ * Re-add each metadata value.
+ * Attempt to add new env container metadata, but keep old data if it does not fit.
+ */
+async function addContainerMetadata(originalMetadata) {
+    const containerMetadata = await getContainerMetadata();
+    if (Object.keys(containerMetadata).length === 0)
+        return originalMetadata;
+    const extendedMetadata = new LimitedSizeDocument(512);
+    const extendedEnvMetadata = {
+        ...originalMetadata?.env,
+        container: containerMetadata
+    };
+    for (const [key, val] of Object.entries(originalMetadata)) {
+        if (key !== 'env') {
+            extendedMetadata.ifItFitsItSits(key, val);
+        }
+        else {
+            if (!extendedMetadata.ifItFitsItSits('env', extendedEnvMetadata)) {
+                // add in old data if newer / extended metadata does not fit
+                extendedMetadata.ifItFitsItSits('env', val);
+            }
+        }
+    }
+    if (!('env' in originalMetadata)) {
+        extendedMetadata.ifItFitsItSits('env', extendedEnvMetadata);
+    }
+    return extendedMetadata.toObject();
+}
+/**
+ * Collects FaaS metadata.
+ * - `name` MUST be the last key in the Map returned.
+ */
+function getFAASEnv() {
+    const { AWS_EXECUTION_ENV = '', AWS_LAMBDA_RUNTIME_API = '', FUNCTIONS_WORKER_RUNTIME = '', K_SERVICE = '', FUNCTION_NAME = '', VERCEL = '', AWS_LAMBDA_FUNCTION_MEMORY_SIZE = '', AWS_REGION = '', FUNCTION_MEMORY_MB = '', FUNCTION_REGION = '', FUNCTION_TIMEOUT_SEC = '', VERCEL_REGION = '' } = process.env;
+    const isAWSFaaS = AWS_EXECUTION_ENV.startsWith('AWS_Lambda_') || AWS_LAMBDA_RUNTIME_API.length > 0;
+    const isAzureFaaS = FUNCTIONS_WORKER_RUNTIME.length > 0;
+    const isGCPFaaS = K_SERVICE.length > 0 || FUNCTION_NAME.length > 0;
+    const isVercelFaaS = VERCEL.length > 0;
+    // Note: order matters, name must always be the last key
+    const faasEnv = new Map();
+    // When isVercelFaaS is true so is isAWSFaaS; Vercel inherits the AWS env
+    if (isVercelFaaS && !(isAzureFaaS || isGCPFaaS)) {
+        if (VERCEL_REGION.length > 0) {
+            faasEnv.set('region', VERCEL_REGION);
+        }
+        faasEnv.set('name', 'vercel');
+        return faasEnv;
+    }
+    if (isAWSFaaS && !(isAzureFaaS || isGCPFaaS || isVercelFaaS)) {
+        if (AWS_REGION.length > 0) {
+            faasEnv.set('region', AWS_REGION);
+        }
+        if (AWS_LAMBDA_FUNCTION_MEMORY_SIZE.length > 0 &&
+            Number.isInteger(+AWS_LAMBDA_FUNCTION_MEMORY_SIZE)) {
+            faasEnv.set('memory_mb', new bson_1.Int32(AWS_LAMBDA_FUNCTION_MEMORY_SIZE));
+        }
+        faasEnv.set('name', 'aws.lambda');
+        return faasEnv;
+    }
+    if (isAzureFaaS && !(isGCPFaaS || isAWSFaaS || isVercelFaaS)) {
+        faasEnv.set('name', 'azure.func');
+        return faasEnv;
+    }
+    if (isGCPFaaS && !(isAzureFaaS || isAWSFaaS || isVercelFaaS)) {
+        if (FUNCTION_REGION.length > 0) {
+            faasEnv.set('region', FUNCTION_REGION);
+        }
+        if (FUNCTION_MEMORY_MB.length > 0 && Number.isInteger(+FUNCTION_MEMORY_MB)) {
+            faasEnv.set('memory_mb', new bson_1.Int32(FUNCTION_MEMORY_MB));
+        }
+        if (FUNCTION_TIMEOUT_SEC.length > 0 && Number.isInteger(+FUNCTION_TIMEOUT_SEC)) {
+            faasEnv.set('timeout_sec', new bson_1.Int32(FUNCTION_TIMEOUT_SEC));
+        }
+        faasEnv.set('name', 'gcp.func');
+        return faasEnv;
+    }
+    return null;
+}
+/**
+ * @internal
+ * Get current JavaScript runtime platform
+ *
+ * NOTE: The version information fetching is intentionally written defensively
+ * to avoid having a released driver version that becomes incompatible
+ * with a future change to these global objects.
+ */
+function getRuntimeInfo() {
+    if ('Deno' in globalThis) {
+        const version = typeof Deno?.version?.deno === 'string' ? Deno?.version?.deno : '0.0.0-unknown';
+        return `Deno v${version}, ${os.endianness()}`;
+    }
+    if ('Bun' in globalThis) {
+        const version = typeof Bun?.version === 'string' ? Bun?.version : '0.0.0-unknown';
+        return `Bun v${version}, ${os.endianness()}`;
+    }
+    return `Node.js ${process.version}, ${os.endianness()}`;
+}
+//# sourceMappingURL=client_metadata.js.map

node_modules/mongodb/lib/cmap/metrics.js

@@ -0,0 +1,62 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.ConnectionPoolMetrics = void 0;
+/** @internal */
+class ConnectionPoolMetrics {
+    constructor() {
+        this.txnConnections = 0;
+        this.cursorConnections = 0;
+        this.otherConnections = 0;
+    }
+    static { this.TXN = 'txn'; }
+    static { this.CURSOR = 'cursor'; }
+    static { this.OTHER = 'other'; }
+    /**
+     * Mark a connection as pinned for a specific operation.
+     */
+    markPinned(pinType) {
+        if (pinType === ConnectionPoolMetrics.TXN) {
+            this.txnConnections += 1;
+        }
+        else if (pinType === ConnectionPoolMetrics.CURSOR) {
+            this.cursorConnections += 1;
+        }
+        else {
+            this.otherConnections += 1;
+        }
+    }
+    /**
+     * Unmark a connection as pinned for an operation.
+     */
+    markUnpinned(pinType) {
+        if (pinType === ConnectionPoolMetrics.TXN) {
+            this.txnConnections -= 1;
+        }
+        else if (pinType === ConnectionPoolMetrics.CURSOR) {
+            this.cursorConnections -= 1;
+        }
+        else {
+            this.otherConnections -= 1;
+        }
+    }
+    /**
+     * Return information about the cmap metrics as a string.
+     */
+    info(maxPoolSize) {
+        return ('Timed out while checking out a connection from connection pool: ' +
+            `maxPoolSize: ${maxPoolSize}, ` +
+            `connections in use by cursors: ${this.cursorConnections}, ` +
+            `connections in use by transactions: ${this.txnConnections}, ` +
+            `connections in use by other operations: ${this.otherConnections}`);
+    }
+    /**
+     * Reset the metrics to the initial values.
+     */
+    reset() {
+        this.txnConnections = 0;
+        this.cursorConnections = 0;
+        this.otherConnections = 0;
+    }
+}
+exports.ConnectionPoolMetrics = ConnectionPoolMetrics;
+//# sourceMappingURL=metrics.js.map

node_modules/mongodb/lib/cmap/metrics.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"metrics.js","sourceRoot":"","sources":["../../src/cmap/metrics.ts"],"names":[],"mappings":";;;AAAA,gBAAgB;AAChB,MAAa,qBAAqB;IAAlC;QAKE,mBAAc,GAAG,CAAC,CAAC;QACnB,sBAAiB,GAAG,CAAC,CAAC;QACtB,qBAAgB,GAAG,CAAC,CAAC;IAiDvB,CAAC;aAvDiB,QAAG,GAAG,KAAc,AAAjB,CAAkB;aACrB,WAAM,GAAG,QAAiB,AAApB,CAAqB;aAC3B,UAAK,GAAG,OAAgB,AAAnB,CAAoB;IAMzC;;OAEG;IACH,UAAU,CAAC,OAAe;QACxB,IAAI,OAAO,KAAK,qBAAqB,CAAC,GAAG,EAAE,CAAC;YAC1C,IAAI,CAAC,cAAc,IAAI,CAAC,CAAC;QAC3B,CAAC;aAAM,IAAI,OAAO,KAAK,qBAAqB,CAAC,MAAM,EAAE,CAAC;YACpD,IAAI,CAAC,iBAAiB,IAAI,CAAC,CAAC;QAC9B,CAAC;aAAM,CAAC;YACN,IAAI,CAAC,gBAAgB,IAAI,CAAC,CAAC;QAC7B,CAAC;IACH,CAAC;IAED;;OAEG;IACH,YAAY,CAAC,OAAe;QAC1B,IAAI,OAAO,KAAK,qBAAqB,CAAC,GAAG,EAAE,CAAC;YAC1C,IAAI,CAAC,cAAc,IAAI,CAAC,CAAC;QAC3B,CAAC;aAAM,IAAI,OAAO,KAAK,qBAAqB,CAAC,MAAM,EAAE,CAAC;YACpD,IAAI,CAAC,iBAAiB,IAAI,CAAC,CAAC;QAC9B,CAAC;aAAM,CAAC;YACN,IAAI,CAAC,gBAAgB,IAAI,CAAC,CAAC;QAC7B,CAAC;IACH,CAAC;IAED;;OAEG;IACH,IAAI,CAAC,WAAmB;QACtB,OAAO,CACL,kEAAkE;YAClE,gBAAgB,WAAW,IAAI;YAC/B,kCAAkC,IAAI,CAAC,iBAAiB,IAAI;YAC5D,uCAAuC,IAAI,CAAC,cAAc,IAAI;YAC9D,2CAA2C,IAAI,CAAC,gBAAgB,EAAE,CACnE,CAAC;IACJ,CAAC;IAED;;OAEG;IACH,KAAK;QACH,IAAI,CAAC,cAAc,GAAG,CAAC,CAAC;QACxB,IAAI,CAAC,iBAAiB,GAAG,CAAC,CAAC;QAC3B,IAAI,CAAC,gBAAgB,GAAG,CAAC,CAAC;IAC5B,CAAC;;AAvDH,sDAwDC"}

node_modules/mongodb/lib/cmap/stream_description.js

@@ -0,0 +1,70 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.StreamDescription = void 0;
+const bson_1 = require("../bson");
+const common_1 = require("../sdam/common");
+const server_description_1 = require("../sdam/server_description");
+const RESPONSE_FIELDS = [
+    'minWireVersion',
+    'maxWireVersion',
+    'maxBsonObjectSize',
+    'maxMessageSizeBytes',
+    'maxWriteBatchSize',
+    'logicalSessionTimeoutMinutes'
+];
+/** @public */
+class StreamDescription {
+    constructor(address, options) {
+        this.hello = null;
+        this.address = address;
+        this.type = common_1.ServerType.Unknown;
+        this.minWireVersion = undefined;
+        this.maxWireVersion = undefined;
+        this.maxBsonObjectSize = 16777216;
+        this.maxMessageSizeBytes = 48000000;
+        this.maxWriteBatchSize = 100000;
+        this.logicalSessionTimeoutMinutes = options?.logicalSessionTimeoutMinutes;
+        this.loadBalanced = !!options?.loadBalanced;
+        this.compressors =
+            options && options.compressors && Array.isArray(options.compressors)
+                ? options.compressors
+                : [];
+        this.serverConnectionId = null;
+    }
+    receiveResponse(response) {
+        if (response == null) {
+            return;
+        }
+        this.hello = response;
+        this.type = (0, server_description_1.parseServerType)(response);
+        if ('connectionId' in response) {
+            this.serverConnectionId = this.parseServerConnectionID(response.connectionId);
+        }
+        else {
+            this.serverConnectionId = null;
+        }
+        for (const field of RESPONSE_FIELDS) {
+            if (response[field] != null) {
+                this[field] = response[field];
+            }
+            // testing case
+            if ('__nodejs_mock_server__' in response) {
+                this.__nodejs_mock_server__ = response['__nodejs_mock_server__'];
+            }
+        }
+        if (response.compression) {
+            this.compressor = this.compressors.filter(c => response.compression?.includes(c))[0];
+        }
+    }
+    /* @internal */
+    parseServerConnectionID(serverConnectionId) {
+        // Connection ids are always integral, so it's safe to coerce doubles as well as
+        // any integral type.
+        return bson_1.Long.isLong(serverConnectionId)
+            ? serverConnectionId.toBigInt()
+            : // @ts-expect-error: Doubles are coercible to number
+                BigInt(serverConnectionId);
+    }
+}
+exports.StreamDescription = StreamDescription;
+//# sourceMappingURL=stream_description.js.map

node_modules/mongodb/lib/cmap/stream_description.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"stream_description.js","sourceRoot":"","sources":["../../src/cmap/stream_description.ts"],"names":[],"mappings":";;;AAAA,kCAA2D;AAC3D,2CAA4C;AAC5C,mEAA6D;AAG7D,MAAM,eAAe,GAAG;IACtB,gBAAgB;IAChB,gBAAgB;IAChB,mBAAmB;IACnB,qBAAqB;IACrB,mBAAmB;IACnB,8BAA8B;CACtB,CAAC;AASX,cAAc;AACd,MAAa,iBAAiB;IAoB5B,YAAY,OAAe,EAAE,OAAkC;QAFxD,UAAK,GAAoB,IAAI,CAAC;QAGnC,IAAI,CAAC,OAAO,GAAG,OAAO,CAAC;QACvB,IAAI,CAAC,IAAI,GAAG,mBAAU,CAAC,OAAO,CAAC;QAC/B,IAAI,CAAC,cAAc,GAAG,SAAS,CAAC;QAChC,IAAI,CAAC,cAAc,GAAG,SAAS,CAAC;QAChC,IAAI,CAAC,iBAAiB,GAAG,QAAQ,CAAC;QAClC,IAAI,CAAC,mBAAmB,GAAG,QAAQ,CAAC;QACpC,IAAI,CAAC,iBAAiB,GAAG,MAAM,CAAC;QAChC,IAAI,CAAC,4BAA4B,GAAG,OAAO,EAAE,4BAA4B,CAAC;QAC1E,IAAI,CAAC,YAAY,GAAG,CAAC,CAAC,OAAO,EAAE,YAAY,CAAC;QAC5C,IAAI,CAAC,WAAW;YACd,OAAO,IAAI,OAAO,CAAC,WAAW,IAAI,KAAK,CAAC,OAAO,CAAC,OAAO,CAAC,WAAW,CAAC;gBAClE,CAAC,CAAC,OAAO,CAAC,WAAW;gBACrB,CAAC,CAAC,EAAE,CAAC;QACT,IAAI,CAAC,kBAAkB,GAAG,IAAI,CAAC;IACjC,CAAC;IAED,eAAe,CAAC,QAAyB;QACvC,IAAI,QAAQ,IAAI,IAAI,EAAE,CAAC;YACrB,OAAO;QACT,CAAC;QACD,IAAI,CAAC,KAAK,GAAG,QAAQ,CAAC;QACtB,IAAI,CAAC,IAAI,GAAG,IAAA,oCAAe,EAAC,QAAQ,CAAC,CAAC;QACtC,IAAI,cAAc,IAAI,QAAQ,EAAE,CAAC;YAC/B,IAAI,CAAC,kBAAkB,GAAG,IAAI,CAAC,uBAAuB,CAAC,QAAQ,CAAC,YAAY,CAAC,CAAC;QAChF,CAAC;aAAM,CAAC;YACN,IAAI,CAAC,kBAAkB,GAAG,IAAI,CAAC;QACjC,CAAC;QACD,KAAK,MAAM,KAAK,IAAI,eAAe,EAAE,CAAC;YACpC,IAAI,QAAQ,CAAC,KAAK,CAAC,IAAI,IAAI,EAAE,CAAC;gBAC5B,IAAI,CAAC,KAAK,CAAC,GAAG,QAAQ,CAAC,KAAK,CAAC,CAAC;YAChC,CAAC;YAED,eAAe;YACf,IAAI,wBAAwB,IAAI,QAAQ,EAAE,CAAC;gBACzC,IAAI,CAAC,sBAAsB,GAAG,QAAQ,CAAC,wBAAwB,CAAC,CAAC;YACnE,CAAC;QACH,CAAC;QAED,IAAI,QAAQ,CAAC,WAAW,EAAE,CAAC;YACzB,IAAI,CAAC,UAAU,GAAG,IAAI,CAAC,WAAW,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,QAAQ,CAAC,WAAW,EAAE,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;QACvF,CAAC;IACH,CAAC;IAED,eAAe;IACf,uBAAuB,CAAC,kBAAmD;QACzE,gFAAgF;QAChF,qBAAqB;QACrB,OAAO,WAAI,CAAC,MAAM,CAAC,kBAAkB,CAAC;YACpC,CAAC,CAAC,kBAAkB,CAAC,QAAQ,EAAE;YAC/B,CAAC,CAAC,oDAAoD;gBACpD,MAAM,CAAC,kBAAkB,CAAC,CAAC;IACjC,CAAC;CACF;AAzED,8CAyEC"}

node_modules/mongodb/lib/cmap/wire_protocol/compression.js

@@ -0,0 +1,163 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.uncompressibleCommands = exports.Compressor = void 0;
+exports.compress = compress;
+exports.decompress = decompress;
+exports.compressCommand = compressCommand;
+exports.decompressResponse = decompressResponse;
+const util_1 = require("util");
+const zlib = require("zlib");
+const constants_1 = require("../../constants");
+const deps_1 = require("../../deps");
+const error_1 = require("../../error");
+const commands_1 = require("../commands");
+const constants_2 = require("./constants");
+/** @public */
+exports.Compressor = Object.freeze({
+    none: 0,
+    snappy: 1,
+    zlib: 2,
+    zstd: 3
+});
+exports.uncompressibleCommands = new Set([
+    constants_1.LEGACY_HELLO_COMMAND,
+    'saslStart',
+    'saslContinue',
+    'getnonce',
+    'authenticate',
+    'createUser',
+    'updateUser',
+    'copydbSaslStart',
+    'copydbgetnonce',
+    'copydb'
+]);
+const ZSTD_COMPRESSION_LEVEL = 3;
+const zlibInflate = (0, util_1.promisify)(zlib.inflate.bind(zlib));
+const zlibDeflate = (0, util_1.promisify)(zlib.deflate.bind(zlib));
+let zstd;
+let Snappy = null;
+function loadSnappy() {
+    if (Snappy == null) {
+        const snappyImport = (0, deps_1.getSnappy)();
+        if ('kModuleError' in snappyImport) {
+            throw snappyImport.kModuleError;
+        }
+        Snappy = snappyImport;
+    }
+    return Snappy;
+}
+// Facilitate compressing a message using an agreed compressor
+async function compress(options, dataToBeCompressed) {
+    const zlibOptions = {};
+    switch (options.agreedCompressor) {
+        case 'snappy': {
+            Snappy ??= loadSnappy();
+            return await Snappy.compress(dataToBeCompressed);
+        }
+        case 'zstd': {
+            loadZstd();
+            if ('kModuleError' in zstd) {
+                throw zstd['kModuleError'];
+            }
+            return await zstd.compress(dataToBeCompressed, ZSTD_COMPRESSION_LEVEL);
+        }
+        case 'zlib': {
+            if (options.zlibCompressionLevel) {
+                zlibOptions.level = options.zlibCompressionLevel;
+            }
+            return await zlibDeflate(dataToBeCompressed, zlibOptions);
+        }
+        default: {
+            throw new error_1.MongoInvalidArgumentError(`Unknown compressor ${options.agreedCompressor} failed to compress`);
+        }
+    }
+}
+// Decompress a message using the given compressor
+async function decompress(compressorID, compressedData) {
+    if (compressorID !== exports.Compressor.snappy &&
+        compressorID !== exports.Compressor.zstd &&
+        compressorID !== exports.Compressor.zlib &&
+        compressorID !== exports.Compressor.none) {
+        throw new error_1.MongoDecompressionError(`Server sent message compressed using an unsupported compressor. (Received compressor ID ${compressorID})`);
+    }
+    switch (compressorID) {
+        case exports.Compressor.snappy: {
+            Snappy ??= loadSnappy();
+            return await Snappy.uncompress(compressedData, { asBuffer: true });
+        }
+        case exports.Compressor.zstd: {
+            loadZstd();
+            if ('kModuleError' in zstd) {
+                throw zstd['kModuleError'];
+            }
+            return await zstd.decompress(compressedData);
+        }
+        case exports.Compressor.zlib: {
+            return await zlibInflate(compressedData);
+        }
+        default: {
+            return compressedData;
+        }
+    }
+}
+/**
+ * Load ZStandard if it is not already set.
+ */
+function loadZstd() {
+    if (!zstd) {
+        zstd = (0, deps_1.getZstdLibrary)();
+    }
+}
+const MESSAGE_HEADER_SIZE = 16;
+/**
+ * @internal
+ *
+ * Compresses an OP_MSG or OP_QUERY message, if compression is configured.  This method
+ * also serializes the command to BSON.
+ */
+async function compressCommand(command, description) {
+    const finalCommand = description.agreedCompressor === 'none' || !commands_1.OpCompressedRequest.canCompress(command)
+        ? command
+        : new commands_1.OpCompressedRequest(command, {
+            agreedCompressor: description.agreedCompressor ?? 'none',
+            zlibCompressionLevel: description.zlibCompressionLevel ?? 0
+        });
+    const data = await finalCommand.toBin();
+    return Buffer.concat(data);
+}
+/**
+ * @internal
+ *
+ * Decompresses an OP_MSG or OP_QUERY response from the server, if compression is configured.
+ *
+ * This method does not parse the response's BSON.
+ */
+async function decompressResponse(message) {
+    const messageHeader = {
+        length: message.readInt32LE(0),
+        requestId: message.readInt32LE(4),
+        responseTo: message.readInt32LE(8),
+        opCode: message.readInt32LE(12)
+    };
+    if (messageHeader.opCode !== constants_2.OP_COMPRESSED) {
+        const ResponseType = messageHeader.opCode === constants_2.OP_MSG ? commands_1.OpMsgResponse : commands_1.OpReply;
+        const messageBody = message.subarray(MESSAGE_HEADER_SIZE);
+        return new ResponseType(message, messageHeader, messageBody);
+    }
+    const header = {
+        ...messageHeader,
+        fromCompressed: true,
+        opCode: message.readInt32LE(MESSAGE_HEADER_SIZE),
+        length: message.readInt32LE(MESSAGE_HEADER_SIZE + 4)
+    };
+    const compressorID = message[MESSAGE_HEADER_SIZE + 8];
+    const compressedBuffer = message.slice(MESSAGE_HEADER_SIZE + 9);
+    // recalculate based on wrapped opcode
+    const ResponseType = header.opCode === constants_2.OP_MSG ? commands_1.OpMsgResponse : commands_1.OpReply;
+    const messageBody = await decompress(compressorID, compressedBuffer);
+    if (messageBody.length !== header.length) {
+        throw new error_1.MongoDecompressionError('Message body and message header must be the same length');
+    }
+    return new ResponseType(message, header, messageBody);
+}
+//# sourceMappingURL=compression.js.map

node_modules/mongodb/lib/cmap/wire_protocol/compression.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"compression.js","sourceRoot":"","sources":["../../../src/cmap/wire_protocol/compression.ts"],"names":[],"mappings":";;;AA8DA,4BA6BC;AAGD,gCA+BC;AAmBD,0CAaC;AASD,gDA8BC;AApMD,+BAAiC;AACjC,6BAA6B;AAE7B,+CAAuD;AACvD,qCAAuF;AACvF,uCAAiF;AACjF,0CAOqB;AACrB,2CAAoD;AAEpD,cAAc;AACD,QAAA,UAAU,GAAG,MAAM,CAAC,MAAM,CAAC;IACtC,IAAI,EAAE,CAAC;IACP,MAAM,EAAE,CAAC;IACT,IAAI,EAAE,CAAC;IACP,IAAI,EAAE,CAAC;CACC,CAAC,CAAC;AAQC,QAAA,sBAAsB,GAAG,IAAI,GAAG,CAAC;IAC5C,gCAAoB;IACpB,WAAW;IACX,cAAc;IACd,UAAU;IACV,cAAc;IACd,YAAY;IACZ,YAAY;IACZ,iBAAiB;IACjB,gBAAgB;IAChB,QAAQ;CACT,CAAC,CAAC;AAEH,MAAM,sBAAsB,GAAG,CAAC,CAAC;AAEjC,MAAM,WAAW,GAAG,IAAA,gBAAS,EAAC,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC;AACvD,MAAM,WAAW,GAAG,IAAA,gBAAS,EAAC,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC;AAEvD,IAAI,IAAe,CAAC;AACpB,IAAI,MAAM,GAAqB,IAAI,CAAC;AACpC,SAAS,UAAU;IACjB,IAAI,MAAM,IAAI,IAAI,EAAE,CAAC;QACnB,MAAM,YAAY,GAAG,IAAA,gBAAS,GAAE,CAAC;QACjC,IAAI,cAAc,IAAI,YAAY,EAAE,CAAC;YACnC,MAAM,YAAY,CAAC,YAAY,CAAC;QAClC,CAAC;QACD,MAAM,GAAG,YAAY,CAAC;IACxB,CAAC;IACD,OAAO,MAAM,CAAC;AAChB,CAAC;AAED,8DAA8D;AACvD,KAAK,UAAU,QAAQ,CAC5B,OAAmC,EACnC,kBAA0B;IAE1B,MAAM,WAAW,GAAG,EAAsB,CAAC;IAC3C,QAAQ,OAAO,CAAC,gBAAgB,EAAE,CAAC;QACjC,KAAK,QAAQ,CAAC,CAAC,CAAC;YACd,MAAM,KAAK,UAAU,EAAE,CAAC;YACxB,OAAO,MAAM,MAAM,CAAC,QAAQ,CAAC,kBAAkB,CAAC,CAAC;QACnD,CAAC;QACD,KAAK,MAAM,CAAC,CAAC,CAAC;YACZ,QAAQ,EAAE,CAAC;YACX,IAAI,cAAc,IAAI,IAAI,EAAE,CAAC;gBAC3B,MAAM,IAAI,CAAC,cAAc,CAAC,CAAC;YAC7B,CAAC;YACD,OAAO,MAAM,IAAI,CAAC,QAAQ,CAAC,kBAAkB,EAAE,sBAAsB,CAAC,CAAC;QACzE,CAAC;QACD,KAAK,MAAM,CAAC,CAAC,CAAC;YACZ,IAAI,OAAO,CAAC,oBAAoB,EAAE,CAAC;gBACjC,WAAW,CAAC,KAAK,GAAG,OAAO,CAAC,oBAAoB,CAAC;YACnD,CAAC;YACD,OAAO,MAAM,WAAW,CAAC,kBAAkB,EAAE,WAAW,CAAC,CAAC;QAC5D,CAAC;QACD,OAAO,CAAC,CAAC,CAAC;YACR,MAAM,IAAI,iCAAyB,CACjC,sBAAsB,OAAO,CAAC,gBAAgB,qBAAqB,CACpE,CAAC;QACJ,CAAC;IACH,CAAC;AACH,CAAC;AAED,kDAAkD;AAC3C,KAAK,UAAU,UAAU,CAAC,YAAoB,EAAE,cAAsB;IAC3E,IACE,YAAY,KAAK,kBAAU,CAAC,MAAM;QAClC,YAAY,KAAK,kBAAU,CAAC,IAAI;QAChC,YAAY,KAAK,kBAAU,CAAC,IAAI;QAChC,YAAY,KAAK,kBAAU,CAAC,IAAI,EAChC,CAAC;QACD,MAAM,IAAI,+BAAuB,CAC/B,2FAA2F,YAAY,GAAG,CAC3G,CAAC;IACJ,CAAC;IAED,QAAQ,YAAY,EAAE,CAAC;QACrB,KAAK,kBAAU,CAAC,MAAM,CAAC,CAAC,CAAC;YACvB,MAAM,KAAK,UAAU,EAAE,CAAC;YACxB,OAAO,MAAM,MAAM,CAAC,UAAU,CAAC,cAAc,EAAE,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAC,CAAC;QACrE,CAAC;QACD,KAAK,kBAAU,CAAC,IAAI,CAAC,CAAC,CAAC;YACrB,QAAQ,EAAE,CAAC;YACX,IAAI,cAAc,IAAI,IAAI,EAAE,CAAC;gBAC3B,MAAM,IAAI,CAAC,cAAc,CAAC,CAAC;YAC7B,CAAC;YACD,OAAO,MAAM,IAAI,CAAC,UAAU,CAAC,cAAc,CAAC,CAAC;QAC/C,CAAC;QACD,KAAK,kBAAU,CAAC,IAAI,CAAC,CAAC,CAAC;YACrB,OAAO,MAAM,WAAW,CAAC,cAAc,CAAC,CAAC;QAC3C,CAAC;QACD,OAAO,CAAC,CAAC,CAAC;YACR,OAAO,cAAc,CAAC;QACxB,CAAC;IACH,CAAC;AACH,CAAC;AAED;;GAEG;AACH,SAAS,QAAQ;IACf,IAAI,CAAC,IAAI,EAAE,CAAC;QACV,IAAI,GAAG,IAAA,qBAAc,GAAE,CAAC;IAC1B,CAAC;AACH,CAAC;AAED,MAAM,mBAAmB,GAAG,EAAE,CAAC;AAE/B;;;;;GAKG;AACI,KAAK,UAAU,eAAe,CACnC,OAAiC,EACjC,WAAiF;IAEjF,MAAM,YAAY,GAChB,WAAW,CAAC,gBAAgB,KAAK,MAAM,IAAI,CAAC,8BAAmB,CAAC,WAAW,CAAC,OAAO,CAAC;QAClF,CAAC,CAAC,OAAO;QACT,CAAC,CAAC,IAAI,8BAAmB,CAAC,OAAO,EAAE;YAC/B,gBAAgB,EAAE,WAAW,CAAC,gBAAgB,IAAI,MAAM;YACxD,oBAAoB,EAAE,WAAW,CAAC,oBAAoB,IAAI,CAAC;SAC5D,CAAC,CAAC;IACT,MAAM,IAAI,GAAG,MAAM,YAAY,CAAC,KAAK,EAAE,CAAC;IACxC,OAAO,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC;AAC7B,CAAC;AAED;;;;;;GAMG;AACI,KAAK,UAAU,kBAAkB,CAAC,OAAe;IACtD,MAAM,aAAa,GAAkB;QACnC,MAAM,EAAE,OAAO,CAAC,WAAW,CAAC,CAAC,CAAC;QAC9B,SAAS,EAAE,OAAO,CAAC,WAAW,CAAC,CAAC,CAAC;QACjC,UAAU,EAAE,OAAO,CAAC,WAAW,CAAC,CAAC,CAAC;QAClC,MAAM,EAAE,OAAO,CAAC,WAAW,CAAC,EAAE,CAAC;KAChC,CAAC;IAEF,IAAI,aAAa,CAAC,MAAM,KAAK,yBAAa,EAAE,CAAC;QAC3C,MAAM,YAAY,GAAG,aAAa,CAAC,MAAM,KAAK,kBAAM,CAAC,CAAC,CAAC,wBAAa,CAAC,CAAC,CAAC,kBAAO,CAAC;QAC/E,MAAM,WAAW,GAAG,OAAO,CAAC,QAAQ,CAAC,mBAAmB,CAAC,CAAC;QAC1D,OAAO,IAAI,YAAY,CAAC,OAAO,EAAE,aAAa,EAAE,WAAW,CAAC,CAAC;IAC/D,CAAC;IAED,MAAM,MAAM,GAAkB;QAC5B,GAAG,aAAa;QAChB,cAAc,EAAE,IAAI;QACpB,MAAM,EAAE,OAAO,CAAC,WAAW,CAAC,mBAAmB,CAAC;QAChD,MAAM,EAAE,OAAO,CAAC,WAAW,CAAC,mBAAmB,GAAG,CAAC,CAAC;KACrD,CAAC;IACF,MAAM,YAAY,GAAG,OAAO,CAAC,mBAAmB,GAAG,CAAC,CAAC,CAAC;IACtD,MAAM,gBAAgB,GAAG,OAAO,CAAC,KAAK,CAAC,mBAAmB,GAAG,CAAC,CAAC,CAAC;IAEhE,sCAAsC;IACtC,MAAM,YAAY,GAAG,MAAM,CAAC,MAAM,KAAK,kBAAM,CAAC,CAAC,CAAC,wBAAa,CAAC,CAAC,CAAC,kBAAO,CAAC;IACxE,MAAM,WAAW,GAAG,MAAM,UAAU,CAAC,YAAY,EAAE,gBAAgB,CAAC,CAAC;IACrE,IAAI,WAAW,CAAC,MAAM,KAAK,MAAM,CAAC,MAAM,EAAE,CAAC;QACzC,MAAM,IAAI,+BAAuB,CAAC,yDAAyD,CAAC,CAAC;IAC/F,CAAC;IACD,OAAO,IAAI,YAAY,CAAC,OAAO,EAAE,MAAM,EAAE,WAAW,CAAC,CAAC;AACxD,CAAC"}

node_modules/mongodb/lib/cmap/wire_protocol/constants.js

@@ -0,0 +1,21 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.OP_MSG = exports.OP_COMPRESSED = exports.OP_DELETE = exports.OP_QUERY = exports.OP_INSERT = exports.OP_UPDATE = exports.OP_REPLY = exports.MIN_SUPPORTED_RAW_DATA_SERVER_VERSION = exports.MIN_SUPPORTED_RAW_DATA_WIRE_VERSION = exports.MIN_SUPPORTED_QE_SERVER_VERSION = exports.MIN_SUPPORTED_QE_WIRE_VERSION = exports.MAX_SUPPORTED_WIRE_VERSION = exports.MIN_SUPPORTED_WIRE_VERSION = exports.MIN_SUPPORTED_SNAPSHOT_READS_SERVER_VERSION = exports.MIN_SUPPORTED_SNAPSHOT_READS_WIRE_VERSION = exports.MAX_SUPPORTED_SERVER_VERSION = exports.MIN_SUPPORTED_SERVER_VERSION = void 0;
+exports.MIN_SUPPORTED_SERVER_VERSION = '4.2';
+exports.MAX_SUPPORTED_SERVER_VERSION = '8.2';
+exports.MIN_SUPPORTED_SNAPSHOT_READS_WIRE_VERSION = 13;
+exports.MIN_SUPPORTED_SNAPSHOT_READS_SERVER_VERSION = '5.0';
+exports.MIN_SUPPORTED_WIRE_VERSION = 8;
+exports.MAX_SUPPORTED_WIRE_VERSION = 27;
+exports.MIN_SUPPORTED_QE_WIRE_VERSION = 21;
+exports.MIN_SUPPORTED_QE_SERVER_VERSION = '7.0';
+exports.MIN_SUPPORTED_RAW_DATA_WIRE_VERSION = 27;
+exports.MIN_SUPPORTED_RAW_DATA_SERVER_VERSION = '8.2';
+exports.OP_REPLY = 1;
+exports.OP_UPDATE = 2001;
+exports.OP_INSERT = 2002;
+exports.OP_QUERY = 2004;
+exports.OP_DELETE = 2006;
+exports.OP_COMPRESSED = 2012;
+exports.OP_MSG = 2013;
+//# sourceMappingURL=constants.js.map

node_modules/mongodb/lib/cmap/wire_protocol/constants.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"constants.js","sourceRoot":"","sources":["../../../src/cmap/wire_protocol/constants.ts"],"names":[],"mappings":";;;AAAa,QAAA,4BAA4B,GAAG,KAAK,CAAC;AACrC,QAAA,4BAA4B,GAAG,KAAK,CAAC;AACrC,QAAA,yCAAyC,GAAG,EAAE,CAAC;AAC/C,QAAA,2CAA2C,GAAG,KAAK,CAAC;AACpD,QAAA,0BAA0B,GAAG,CAAC,CAAC;AAC/B,QAAA,0BAA0B,GAAG,EAAE,CAAC;AAChC,QAAA,6BAA6B,GAAG,EAAE,CAAC;AACnC,QAAA,+BAA+B,GAAG,KAAK,CAAC;AACxC,QAAA,mCAAmC,GAAG,EAAE,CAAC;AACzC,QAAA,qCAAqC,GAAG,KAAK,CAAC;AAC9C,QAAA,QAAQ,GAAG,CAAC,CAAC;AACb,QAAA,SAAS,GAAG,IAAI,CAAC;AACjB,QAAA,SAAS,GAAG,IAAI,CAAC;AACjB,QAAA,QAAQ,GAAG,IAAI,CAAC;AAChB,QAAA,SAAS,GAAG,IAAI,CAAC;AACjB,QAAA,aAAa,GAAG,IAAI,CAAC;AACrB,QAAA,MAAM,GAAG,IAAI,CAAC"}

node_modules/mongodb/lib/cmap/wire_protocol/on_data.js

@@ -0,0 +1,111 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.onData = onData;
+const utils_1 = require("../../utils");
+/**
+ * onData is adapted from Node.js' events.on helper
+ * https://nodejs.org/api/events.html#eventsonemitter-eventname-options
+ *
+ * Returns an AsyncIterator that iterates each 'data' event emitted from emitter.
+ * It will reject upon an error event.
+ */
+function onData(emitter, { timeoutContext, signal }) {
+    signal?.throwIfAborted();
+    // Setup pending events and pending promise lists
+    /**
+     * When the caller has not yet called .next(), we store the
+     * value from the event in this list. Next time they call .next()
+     * we pull the first value out of this list and resolve a promise with it.
+     */
+    const unconsumedEvents = new utils_1.List();
+    /**
+     * When there has not yet been an event, a new promise will be created
+     * and implicitly stored in this list. When an event occurs we take the first
+     * promise in this list and resolve it.
+     */
+    const unconsumedPromises = new utils_1.List();
+    /**
+     * Stored an error created by an error event.
+     * This error will turn into a rejection for the subsequent .next() call
+     */
+    let error = null;
+    /** Set to true only after event listeners have been removed. */
+    let finished = false;
+    const iterator = {
+        next() {
+            // First, we consume all unread events
+            const value = unconsumedEvents.shift();
+            if (value != null) {
+                return Promise.resolve({ value, done: false });
+            }
+            // Then we error, if an error happened
+            // This happens one time if at all, because after 'error'
+            // we stop listening
+            if (error != null) {
+                const p = Promise.reject(error);
+                // Only the first element errors
+                error = null;
+                return p;
+            }
+            // If the iterator is finished, resolve to done
+            if (finished)
+                return closeHandler();
+            // Wait until an event happens
+            const { promise, resolve, reject } = (0, utils_1.promiseWithResolvers)();
+            unconsumedPromises.push({ resolve, reject });
+            return promise;
+        },
+        return() {
+            return closeHandler();
+        },
+        throw(err) {
+            errorHandler(err);
+            return Promise.resolve({ value: undefined, done: true });
+        },
+        [Symbol.asyncIterator]() {
+            return this;
+        },
+        async [Symbol.asyncDispose]() {
+            await closeHandler();
+        }
+    };
+    // Adding event handlers
+    emitter.on('data', eventHandler);
+    emitter.on('error', errorHandler);
+    const abortListener = (0, utils_1.addAbortListener)(signal, function () {
+        errorHandler(this.reason);
+    });
+    const timeoutForSocketRead = timeoutContext?.timeoutForSocketRead;
+    timeoutForSocketRead?.throwIfExpired();
+    timeoutForSocketRead?.then(undefined, errorHandler);
+    return iterator;
+    function eventHandler(value) {
+        const promise = unconsumedPromises.shift();
+        if (promise != null)
+            promise.resolve({ value, done: false });
+        else
+            unconsumedEvents.push(value);
+    }
+    function errorHandler(err) {
+        const promise = unconsumedPromises.shift();
+        if (promise != null)
+            promise.reject(err);
+        else
+            error = err;
+        void closeHandler();
+    }
+    function closeHandler() {
+        // Adding event handlers
+        emitter.off('data', eventHandler);
+        emitter.off('error', errorHandler);
+        abortListener?.[utils_1.kDispose]();
+        finished = true;
+        timeoutForSocketRead?.clear();
+        const doneResult = { value: undefined, done: finished };
+        for (const promise of unconsumedPromises) {
+            promise.resolve(doneResult);
+        }
+        return Promise.resolve(doneResult);
+    }
+}
+//# sourceMappingURL=on_data.js.map

node_modules/mongodb/lib/cmap/wire_protocol/on_data.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"on_data.js","sourceRoot":"","sources":["../../../src/cmap/wire_protocol/on_data.ts"],"names":[],"mappings":";;AAsBA,wBAoHC;AAtID,uCAAqF;AAWrF;;;;;;GAMG;AACH,SAAgB,MAAM,CACpB,OAAqB,EACrB,EAAE,cAAc,EAAE,MAAM,EAAmD;IAE3E,MAAM,EAAE,cAAc,EAAE,CAAC;IAEzB,iDAAiD;IACjD;;;;OAIG;IACH,MAAM,gBAAgB,GAAG,IAAI,YAAI,EAAU,CAAC;IAC5C;;;;OAIG;IACH,MAAM,kBAAkB,GAAG,IAAI,YAAI,EAAmB,CAAC;IAEvD;;;OAGG;IACH,IAAI,KAAK,GAAiB,IAAI,CAAC;IAE/B,gEAAgE;IAChE,IAAI,QAAQ,GAAG,KAAK,CAAC;IAErB,MAAM,QAAQ,GAA6C;QACzD,IAAI;YACF,sCAAsC;YACtC,MAAM,KAAK,GAAG,gBAAgB,CAAC,KAAK,EAAE,CAAC;YACvC,IAAI,KAAK,IAAI,IAAI,EAAE,CAAC;gBAClB,OAAO,OAAO,CAAC,OAAO,CAAC,EAAE,KAAK,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC;YACjD,CAAC;YAED,sCAAsC;YACtC,yDAAyD;YACzD,oBAAoB;YACpB,IAAI,KAAK,IAAI,IAAI,EAAE,CAAC;gBAClB,MAAM,CAAC,GAAG,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;gBAChC,gCAAgC;gBAChC,KAAK,GAAG,IAAI,CAAC;gBACb,OAAO,CAAC,CAAC;YACX,CAAC;YAED,+CAA+C;YAC/C,IAAI,QAAQ;gBAAE,OAAO,YAAY,EAAE,CAAC;YAEpC,8BAA8B;YAC9B,MAAM,EAAE,OAAO,EAAE,OAAO,EAAE,MAAM,EAAE,GAAG,IAAA,4BAAoB,GAA0B,CAAC;YACpF,kBAAkB,CAAC,IAAI,CAAC,EAAE,OAAO,EAAE,MAAM,EAAE,CAAC,CAAC;YAC7C,OAAO,OAAO,CAAC;QACjB,CAAC;QAED,MAAM;YACJ,OAAO,YAAY,EAAE,CAAC;QACxB,CAAC;QAED,KAAK,CAAC,GAAU;YACd,YAAY,CAAC,GAAG,CAAC,CAAC;YAClB,OAAO,OAAO,CAAC,OAAO,CAAC,EAAE,KAAK,EAAE,SAAS,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC,CAAC;QAC3D,CAAC;QAED,CAAC,MAAM,CAAC,aAAa,CAAC;YACpB,OAAO,IAAI,CAAC;QACd,CAAC;QAED,KAAK,CAAC,CAAC,MAAM,CAAC,YAAY,CAAC;YACzB,MAAM,YAAY,EAAE,CAAC;QACvB,CAAC;KACF,CAAC;IAEF,wBAAwB;IACxB,OAAO,CAAC,EAAE,CAAC,MAAM,EAAE,YAAY,CAAC,CAAC;IACjC,OAAO,CAAC,EAAE,CAAC,OAAO,EAAE,YAAY,CAAC,CAAC;IAClC,MAAM,aAAa,GAAG,IAAA,wBAAgB,EAAC,MAAM,EAAE;QAC7C,YAAY,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;IAC5B,CAAC,CAAC,CAAC;IAEH,MAAM,oBAAoB,GAAG,cAAc,EAAE,oBAAoB,CAAC;IAClE,oBAAoB,EAAE,cAAc,EAAE,CAAC;IACvC,oBAAoB,EAAE,IAAI,CAAC,SAAS,EAAE,YAAY,CAAC,CAAC;IAEpD,OAAO,QAAQ,CAAC;IAEhB,SAAS,YAAY,CAAC,KAAa;QACjC,MAAM,OAAO,GAAG,kBAAkB,CAAC,KAAK,EAAE,CAAC;QAC3C,IAAI,OAAO,IAAI,IAAI;YAAE,OAAO,CAAC,OAAO,CAAC,EAAE,KAAK,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC;;YACxD,gBAAgB,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;IACpC,CAAC;IAED,SAAS,YAAY,CAAC,GAAU;QAC9B,MAAM,OAAO,GAAG,kBAAkB,CAAC,KAAK,EAAE,CAAC;QAE3C,IAAI,OAAO,IAAI,IAAI;YAAE,OAAO,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;;YACpC,KAAK,GAAG,GAAG,CAAC;QACjB,KAAK,YAAY,EAAE,CAAC;IACtB,CAAC;IAED,SAAS,YAAY;QACnB,wBAAwB;QACxB,OAAO,CAAC,GAAG,CAAC,MAAM,EAAE,YAAY,CAAC,CAAC;QAClC,OAAO,CAAC,GAAG,CAAC,OAAO,EAAE,YAAY,CAAC,CAAC;QACnC,aAAa,EAAE,CAAC,gBAAQ,CAAC,EAAE,CAAC;QAC5B,QAAQ,GAAG,IAAI,CAAC;QAChB,oBAAoB,EAAE,KAAK,EAAE,CAAC;QAC9B,MAAM,UAAU,GAAG,EAAE,KAAK,EAAE,SAAS,EAAE,IAAI,EAAE,QAAQ,EAAW,CAAC;QAEjE,KAAK,MAAM,OAAO,IAAI,kBAAkB,EAAE,CAAC;YACzC,OAAO,CAAC,OAAO,CAAC,UAAU,CAAC,CAAC;QAC9B,CAAC;QAED,OAAO,OAAO,CAAC,OAAO,CAAC,UAAU,CAAC,CAAC;IACrC,CAAC;AACH,CAAC"}

node_modules/mongodb/lib/cmap/wire_protocol/on_demand/document.js

@@ -0,0 +1,222 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.OnDemandDocument = void 0;
+const bson_1 = require("../../../bson");
+const BSONElementOffset = {
+    type: 0,
+    nameOffset: 1,
+    nameLength: 2,
+    offset: 3,
+    length: 4
+};
+/** @internal */
+class OnDemandDocument {
+    constructor(bson, offset = 0, isArray = false, 
+    /** If elements was already calculated */
+    elements) {
+        /**
+         * Maps JS strings to elements and jsValues for speeding up subsequent lookups.
+         * - If `false` then name does not exist in the BSON document
+         * - If `CachedBSONElement` instance name exists
+         * - If `cache[name].value == null` jsValue has not yet been parsed
+         *   - Null/Undefined values do not get cached because they are zero-length values.
+         */
+        this.cache = Object.create(null);
+        /** Caches the index of elements that have been named */
+        this.indexFound = Object.create(null);
+        this.bson = bson;
+        this.offset = offset;
+        this.isArray = isArray;
+        this.elements = elements ?? (0, bson_1.parseToElementsToArray)(this.bson, offset);
+    }
+    /** Only supports basic latin strings */
+    isElementName(name, element) {
+        const nameLength = element[BSONElementOffset.nameLength];
+        const nameOffset = element[BSONElementOffset.nameOffset];
+        if (name.length !== nameLength)
+            return false;
+        const nameEnd = nameOffset + nameLength;
+        for (let byteIndex = nameOffset, charIndex = 0; charIndex < name.length && byteIndex < nameEnd; charIndex++, byteIndex++) {
+            if (this.bson[byteIndex] !== name.charCodeAt(charIndex))
+                return false;
+        }
+        return true;
+    }
+    /**
+     * Seeks into the elements array for an element matching the given name.
+     *
+     * @remarks
+     * Caching:
+     * - Caches the existence of a property making subsequent look ups for non-existent properties return immediately
+     * - Caches names mapped to elements to avoid reiterating the array and comparing the name again
+     * - Caches the index at which an element has been found to prevent rechecking against elements already determined to belong to another name
+     *
+     * @param name - a basic latin string name of a BSON element
+     * @returns
+     */
+    getElement(name) {
+        const cachedElement = this.cache[name];
+        if (cachedElement === false)
+            return null;
+        if (cachedElement != null) {
+            return cachedElement;
+        }
+        if (typeof name === 'number') {
+            if (this.isArray) {
+                if (name < this.elements.length) {
+                    const element = this.elements[name];
+                    const cachedElement = { element, value: undefined };
+                    this.cache[name] = cachedElement;
+                    this.indexFound[name] = true;
+                    return cachedElement;
+                }
+                else {
+                    return null;
+                }
+            }
+            else {
+                return null;
+            }
+        }
+        for (let index = 0; index < this.elements.length; index++) {
+            const element = this.elements[index];
+            // skip this element if it has already been associated with a name
+            if (!(index in this.indexFound) && this.isElementName(name, element)) {
+                const cachedElement = { element, value: undefined };
+                this.cache[name] = cachedElement;
+                this.indexFound[index] = true;
+                return cachedElement;
+            }
+        }
+        this.cache[name] = false;
+        return null;
+    }
+    toJSValue(element, as) {
+        const type = element[BSONElementOffset.type];
+        const offset = element[BSONElementOffset.offset];
+        const length = element[BSONElementOffset.length];
+        if (as !== type) {
+            return null;
+        }
+        switch (as) {
+            case bson_1.BSONType.null:
+            case bson_1.BSONType.undefined:
+                return null;
+            case bson_1.BSONType.double:
+                return (0, bson_1.getFloat64LE)(this.bson, offset);
+            case bson_1.BSONType.int:
+                return (0, bson_1.getInt32LE)(this.bson, offset);
+            case bson_1.BSONType.long:
+                return (0, bson_1.getBigInt64LE)(this.bson, offset);
+            case bson_1.BSONType.bool:
+                return Boolean(this.bson[offset]);
+            case bson_1.BSONType.objectId:
+                return new bson_1.ObjectId(this.bson.subarray(offset, offset + 12));
+            case bson_1.BSONType.timestamp:
+                return new bson_1.Timestamp((0, bson_1.getBigInt64LE)(this.bson, offset));
+            case bson_1.BSONType.string:
+                return (0, bson_1.toUTF8)(this.bson, offset + 4, offset + length - 1, false);
+            case bson_1.BSONType.binData: {
+                const totalBinarySize = (0, bson_1.getInt32LE)(this.bson, offset);
+                const subType = this.bson[offset + 4];
+                if (subType === 2) {
+                    const subType2BinarySize = (0, bson_1.getInt32LE)(this.bson, offset + 1 + 4);
+                    if (subType2BinarySize < 0)
+                        throw new bson_1.BSONError('Negative binary type element size found for subtype 0x02');
+                    if (subType2BinarySize > totalBinarySize - 4)
+                        throw new bson_1.BSONError('Binary type with subtype 0x02 contains too long binary size');
+                    if (subType2BinarySize < totalBinarySize - 4)
+                        throw new bson_1.BSONError('Binary type with subtype 0x02 contains too short binary size');
+                    return new bson_1.Binary(this.bson.subarray(offset + 1 + 4 + 4, offset + 1 + 4 + 4 + subType2BinarySize), 2);
+                }
+                return new bson_1.Binary(this.bson.subarray(offset + 1 + 4, offset + 1 + 4 + totalBinarySize), subType);
+            }
+            case bson_1.BSONType.date:
+                // Pretend this is correct.
+                return new Date(Number((0, bson_1.getBigInt64LE)(this.bson, offset)));
+            case bson_1.BSONType.object:
+                return new OnDemandDocument(this.bson, offset);
+            case bson_1.BSONType.array:
+                return new OnDemandDocument(this.bson, offset, true);
+            default:
+                throw new bson_1.BSONError(`Unsupported BSON type: ${as}`);
+        }
+    }
+    /**
+     * Returns the number of elements in this BSON document
+     */
+    size() {
+        return this.elements.length;
+    }
+    /**
+     * Checks for the existence of an element by name.
+     *
+     * @remarks
+     * Uses `getElement` with the expectation that will populate caches such that a `has` call
+     * followed by a `getElement` call will not repeat the cost paid by the first look up.
+     *
+     * @param name - element name
+     */
+    has(name) {
+        const cachedElement = this.cache[name];
+        if (cachedElement === false)
+            return false;
+        if (cachedElement != null)
+            return true;
+        return this.getElement(name) != null;
+    }
+    get(name, as, required) {
+        const element = this.getElement(name);
+        if (element == null) {
+            if (required === true) {
+                throw new bson_1.BSONError(`BSON element "${name}" is missing`);
+            }
+            else {
+                return null;
+            }
+        }
+        if (element.value == null) {
+            const value = this.toJSValue(element.element, as);
+            if (value == null) {
+                if (required === true) {
+                    throw new bson_1.BSONError(`BSON element "${name}" is missing`);
+                }
+                else {
+                    return null;
+                }
+            }
+            // It is important to never store null
+            element.value = value;
+        }
+        return element.value;
+    }
+    getNumber(name, required) {
+        const maybeBool = this.get(name, bson_1.BSONType.bool);
+        const bool = maybeBool == null ? null : maybeBool ? 1 : 0;
+        const maybeLong = this.get(name, bson_1.BSONType.long);
+        const long = maybeLong == null ? null : Number(maybeLong);
+        const result = bool ?? long ?? this.get(name, bson_1.BSONType.int) ?? this.get(name, bson_1.BSONType.double);
+        if (required === true && result == null) {
+            throw new bson_1.BSONError(`BSON element "${name}" is missing`);
+        }
+        return result;
+    }
+    /**
+     * Deserialize this object, DOES NOT cache result so avoid multiple invocations
+     * @param options - BSON deserialization options
+     */
+    toObject(options) {
+        return (0, bson_1.deserialize)(this.bson, {
+            ...options,
+            index: this.offset,
+            allowObjectSmallerThanBufferSize: true
+        });
+    }
+    /** Returns this document's bytes only */
+    toBytes() {
+        const size = (0, bson_1.getInt32LE)(this.bson, this.offset);
+        return this.bson.subarray(this.offset, this.offset + size);
+    }
+}
+exports.OnDemandDocument = OnDemandDocument;
+//# sourceMappingURL=document.js.map

node_modules/mongodb/lib/cmap/wire_protocol/responses.js

@@ -0,0 +1,315 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.ClientBulkWriteCursorResponse = exports.ExplainedCursorResponse = exports.CursorResponse = exports.MongoDBResponse = void 0;
+exports.isErrorResponse = isErrorResponse;
+const bson_1 = require("../../bson");
+const error_1 = require("../../error");
+const utils_1 = require("../../utils");
+const document_1 = require("./on_demand/document");
+const BSONElementOffset = {
+    type: 0,
+    nameOffset: 1,
+    nameLength: 2,
+    offset: 3,
+    length: 4
+};
+/**
+ * Accepts a BSON payload and checks for na "ok: 0" element.
+ * This utility is intended to prevent calling response class constructors
+ * that expect the result to be a success and demand certain properties to exist.
+ *
+ * For example, a cursor response always expects a cursor embedded document.
+ * In order to write the class such that the properties reflect that assertion (non-null)
+ * we cannot invoke the subclass constructor if the BSON represents an error.
+ *
+ * @param bytes - BSON document returned from the server
+ */
+function isErrorResponse(bson, elements) {
+    for (let eIdx = 0; eIdx < elements.length; eIdx++) {
+        const element = elements[eIdx];
+        if (element[BSONElementOffset.nameLength] === 2) {
+            const nameOffset = element[BSONElementOffset.nameOffset];
+            // 111 == "o", 107 == "k"
+            if (bson[nameOffset] === 111 && bson[nameOffset + 1] === 107) {
+                const valueOffset = element[BSONElementOffset.offset];
+                const valueLength = element[BSONElementOffset.length];
+                // If any byte in the length of the ok number (works for any type) is non zero,
+                // then it is considered "ok: 1"
+                for (let i = valueOffset; i < valueOffset + valueLength; i++) {
+                    if (bson[i] !== 0x00)
+                        return false;
+                }
+                return true;
+            }
+        }
+    }
+    return true;
+}
+/** @internal */
+class MongoDBResponse extends document_1.OnDemandDocument {
+    get(name, as, required) {
+        try {
+            return super.get(name, as, required);
+        }
+        catch (cause) {
+            throw new error_1.MongoUnexpectedServerResponseError(cause.message, { cause });
+        }
+    }
+    static is(value) {
+        return value instanceof MongoDBResponse;
+    }
+    static make(bson) {
+        const elements = (0, bson_1.parseToElementsToArray)(bson, 0);
+        const isError = isErrorResponse(bson, elements);
+        return isError
+            ? new MongoDBResponse(bson, 0, false, elements)
+            : new this(bson, 0, false, elements);
+    }
+    // {ok:1}
+    static { this.empty = new MongoDBResponse(new Uint8Array([13, 0, 0, 0, 16, 111, 107, 0, 1, 0, 0, 0, 0])); }
+    /**
+     * Returns true iff:
+     * - ok is 0 and the top-level code === 50
+     * - ok is 1 and the writeErrors array contains a code === 50
+     * - ok is 1 and the writeConcern object contains a code === 50
+     */
+    get isMaxTimeExpiredError() {
+        // {ok: 0, code: 50 ... }
+        const isTopLevel = this.ok === 0 && this.code === error_1.MONGODB_ERROR_CODES.MaxTimeMSExpired;
+        if (isTopLevel)
+            return true;
+        if (this.ok === 0)
+            return false;
+        // {ok: 1, writeConcernError: {code: 50 ... }}
+        const isWriteConcern = this.get('writeConcernError', bson_1.BSONType.object)?.getNumber('code') ===
+            error_1.MONGODB_ERROR_CODES.MaxTimeMSExpired;
+        if (isWriteConcern)
+            return true;
+        const writeErrors = this.get('writeErrors', bson_1.BSONType.array);
+        if (writeErrors?.size()) {
+            for (let i = 0; i < writeErrors.size(); i++) {
+                const isWriteError = writeErrors.get(i, bson_1.BSONType.object)?.getNumber('code') ===
+                    error_1.MONGODB_ERROR_CODES.MaxTimeMSExpired;
+                // {ok: 1, writeErrors: [{code: 50 ... }]}
+                if (isWriteError)
+                    return true;
+            }
+        }
+        return false;
+    }
+    /**
+     * Drivers can safely assume that the `recoveryToken` field is always a BSON document but drivers MUST NOT modify the
+     * contents of the document.
+     */
+    get recoveryToken() {
+        return (this.get('recoveryToken', bson_1.BSONType.object)?.toObject({
+            promoteValues: false,
+            promoteLongs: false,
+            promoteBuffers: false,
+            validation: { utf8: true }
+        }) ?? null);
+    }
+    /**
+     * The server creates a cursor in response to a snapshot find/aggregate command and reports atClusterTime within the cursor field in the response.
+     * For the distinct command the server adds a top-level atClusterTime field to the response.
+     * The atClusterTime field represents the timestamp of the read and is guaranteed to be majority committed.
+     */
+    get atClusterTime() {
+        return (this.get('cursor', bson_1.BSONType.object)?.get('atClusterTime', bson_1.BSONType.timestamp) ??
+            this.get('atClusterTime', bson_1.BSONType.timestamp));
+    }
+    get operationTime() {
+        return this.get('operationTime', bson_1.BSONType.timestamp);
+    }
+    /** Normalizes whatever BSON value is "ok" to a JS number 1 or 0. */
+    get ok() {
+        return this.getNumber('ok') ? 1 : 0;
+    }
+    get $err() {
+        return this.get('$err', bson_1.BSONType.string);
+    }
+    get errmsg() {
+        return this.get('errmsg', bson_1.BSONType.string);
+    }
+    get code() {
+        return this.getNumber('code');
+    }
+    get $clusterTime() {
+        if (!('clusterTime' in this)) {
+            const clusterTimeDoc = this.get('$clusterTime', bson_1.BSONType.object);
+            if (clusterTimeDoc == null) {
+                this.clusterTime = null;
+                return null;
+            }
+            const clusterTime = clusterTimeDoc.get('clusterTime', bson_1.BSONType.timestamp, true);
+            const signature = clusterTimeDoc.get('signature', bson_1.BSONType.object)?.toObject();
+            // @ts-expect-error: `signature` is incorrectly typed. It is public API.
+            this.clusterTime = { clusterTime, signature };
+        }
+        return this.clusterTime ?? null;
+    }
+    toObject(options) {
+        const exactBSONOptions = {
+            ...(0, bson_1.pluckBSONSerializeOptions)(options ?? {}),
+            validation: (0, bson_1.parseUtf8ValidationOption)(options)
+        };
+        return super.toObject(exactBSONOptions);
+    }
+}
+exports.MongoDBResponse = MongoDBResponse;
+/** @internal */
+class CursorResponse extends MongoDBResponse {
+    constructor() {
+        super(...arguments);
+        this._batch = null;
+        this.iterated = 0;
+        this._encryptedBatch = null;
+    }
+    /**
+     * This supports a feature of the FindCursor.
+     * It is an optimization to avoid an extra getMore when the limit has been reached
+     */
+    static get emptyGetMore() {
+        return new CursorResponse((0, bson_1.serialize)({ ok: 1, cursor: { id: 0n, nextBatch: [] } }));
+    }
+    static is(value) {
+        return value instanceof CursorResponse || value === CursorResponse.emptyGetMore;
+    }
+    get cursor() {
+        return this.get('cursor', bson_1.BSONType.object, true);
+    }
+    get id() {
+        try {
+            return bson_1.Long.fromBigInt(this.cursor.get('id', bson_1.BSONType.long, true));
+        }
+        catch (cause) {
+            throw new error_1.MongoUnexpectedServerResponseError(cause.message, { cause });
+        }
+    }
+    get ns() {
+        const namespace = this.cursor.get('ns', bson_1.BSONType.string);
+        if (namespace != null)
+            return (0, utils_1.ns)(namespace);
+        return null;
+    }
+    get length() {
+        return Math.max(this.batchSize - this.iterated, 0);
+    }
+    get encryptedBatch() {
+        if (this.encryptedResponse == null)
+            return null;
+        if (this._encryptedBatch != null)
+            return this._encryptedBatch;
+        const cursor = this.encryptedResponse?.get('cursor', bson_1.BSONType.object);
+        if (cursor?.has('firstBatch'))
+            this._encryptedBatch = cursor.get('firstBatch', bson_1.BSONType.array, true);
+        else if (cursor?.has('nextBatch'))
+            this._encryptedBatch = cursor.get('nextBatch', bson_1.BSONType.array, true);
+        else
+            throw new error_1.MongoUnexpectedServerResponseError('Cursor document did not contain a batch');
+        return this._encryptedBatch;
+    }
+    get batch() {
+        if (this._batch != null)
+            return this._batch;
+        const cursor = this.cursor;
+        if (cursor.has('firstBatch'))
+            this._batch = cursor.get('firstBatch', bson_1.BSONType.array, true);
+        else if (cursor.has('nextBatch'))
+            this._batch = cursor.get('nextBatch', bson_1.BSONType.array, true);
+        else
+            throw new error_1.MongoUnexpectedServerResponseError('Cursor document did not contain a batch');
+        return this._batch;
+    }
+    get batchSize() {
+        return this.batch?.size();
+    }
+    get postBatchResumeToken() {
+        return (this.cursor.get('postBatchResumeToken', bson_1.BSONType.object)?.toObject({
+            promoteValues: false,
+            promoteLongs: false,
+            promoteBuffers: false,
+            validation: { utf8: true }
+        }) ?? null);
+    }
+    shift(options) {
+        if (this.iterated >= this.batchSize) {
+            return null;
+        }
+        const result = this.batch.get(this.iterated, bson_1.BSONType.object, true) ?? null;
+        const encryptedResult = this.encryptedBatch?.get(this.iterated, bson_1.BSONType.object, true) ?? null;
+        this.iterated += 1;
+        if (options?.raw) {
+            return result.toBytes();
+        }
+        else {
+            const object = result.toObject(options);
+            if (encryptedResult) {
+                (0, utils_1.decorateDecryptionResult)(object, encryptedResult.toObject(options), true);
+            }
+            return object;
+        }
+    }
+    clear() {
+        this.iterated = this.batchSize;
+    }
+}
+exports.CursorResponse = CursorResponse;
+/**
+ * Explain responses have nothing to do with cursor responses
+ * This class serves to temporarily avoid refactoring how cursors handle
+ * explain responses which is to detect that the response is not cursor-like and return the explain
+ * result as the "first and only" document in the "batch" and end the "cursor"
+ */
+class ExplainedCursorResponse extends CursorResponse {
+    constructor() {
+        super(...arguments);
+        this.isExplain = true;
+        this._length = 1;
+    }
+    get id() {
+        return bson_1.Long.fromBigInt(0n);
+    }
+    get batchSize() {
+        return 0;
+    }
+    get ns() {
+        return null;
+    }
+    get length() {
+        return this._length;
+    }
+    shift(options) {
+        if (this._length === 0)
+            return null;
+        this._length -= 1;
+        return this.toObject(options);
+    }
+}
+exports.ExplainedCursorResponse = ExplainedCursorResponse;
+/**
+ * Client bulk writes have some extra metadata at the top level that needs to be
+ * included in the result returned to the user.
+ */
+class ClientBulkWriteCursorResponse extends CursorResponse {
+    get insertedCount() {
+        return this.get('nInserted', bson_1.BSONType.int, true);
+    }
+    get upsertedCount() {
+        return this.get('nUpserted', bson_1.BSONType.int, true);
+    }
+    get matchedCount() {
+        return this.get('nMatched', bson_1.BSONType.int, true);
+    }
+    get modifiedCount() {
+        return this.get('nModified', bson_1.BSONType.int, true);
+    }
+    get deletedCount() {
+        return this.get('nDeleted', bson_1.BSONType.int, true);
+    }
+    get writeConcernError() {
+        return this.get('writeConcernError', bson_1.BSONType.object, false);
+    }
+}
+exports.ClientBulkWriteCursorResponse = ClientBulkWriteCursorResponse;
+//# sourceMappingURL=responses.js.map

node_modules/mongodb/lib/cmap/wire_protocol/shared.js

@@ -0,0 +1,35 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.getReadPreference = getReadPreference;
+exports.isSharded = isSharded;
+const error_1 = require("../../error");
+const read_preference_1 = require("../../read_preference");
+const common_1 = require("../../sdam/common");
+const topology_description_1 = require("../../sdam/topology_description");
+function getReadPreference(options) {
+    // Default to command version of the readPreference.
+    let readPreference = options?.readPreference ?? read_preference_1.ReadPreference.primary;
+    if (typeof readPreference === 'string') {
+        readPreference = read_preference_1.ReadPreference.fromString(readPreference);
+    }
+    if (!(readPreference instanceof read_preference_1.ReadPreference)) {
+        throw new error_1.MongoInvalidArgumentError('Option "readPreference" must be a ReadPreference instance');
+    }
+    return readPreference;
+}
+function isSharded(topologyOrServer) {
+    if (topologyOrServer == null) {
+        return false;
+    }
+    if (topologyOrServer.description && topologyOrServer.description.type === common_1.ServerType.Mongos) {
+        return true;
+    }
+    // NOTE: This is incredibly inefficient, and should be removed once command construction
+    // happens based on `Server` not `Topology`.
+    if (topologyOrServer.description && topologyOrServer.description instanceof topology_description_1.TopologyDescription) {
+        const servers = Array.from(topologyOrServer.description.servers.values());
+        return servers.some((server) => server.type === common_1.ServerType.Mongos);
+    }
+    return false;
+}
+//# sourceMappingURL=shared.js.map

node_modules/mongodb/lib/cmap/wire_protocol/shared.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"shared.js","sourceRoot":"","sources":["../../../src/cmap/wire_protocol/shared.ts"],"names":[],"mappings":";;AAaA,8CAeC;AAED,8BAiBC;AA/CD,uCAAwD;AACxD,2DAAgF;AAChF,8CAA+C;AAI/C,0EAAsE;AAOtE,SAAgB,iBAAiB,CAAC,OAA8B;IAC9D,oDAAoD;IACpD,IAAI,cAAc,GAAG,OAAO,EAAE,cAAc,IAAI,gCAAc,CAAC,OAAO,CAAC;IAEvE,IAAI,OAAO,cAAc,KAAK,QAAQ,EAAE,CAAC;QACvC,cAAc,GAAG,gCAAc,CAAC,UAAU,CAAC,cAAc,CAAC,CAAC;IAC7D,CAAC;IAED,IAAI,CAAC,CAAC,cAAc,YAAY,gCAAc,CAAC,EAAE,CAAC;QAChD,MAAM,IAAI,iCAAyB,CACjC,2DAA2D,CAC5D,CAAC;IACJ,CAAC;IAED,OAAO,cAAc,CAAC;AACxB,CAAC;AAED,SAAgB,SAAS,CAAC,gBAAiD;IACzE,IAAI,gBAAgB,IAAI,IAAI,EAAE,CAAC;QAC7B,OAAO,KAAK,CAAC;IACf,CAAC;IAED,IAAI,gBAAgB,CAAC,WAAW,IAAI,gBAAgB,CAAC,WAAW,CAAC,IAAI,KAAK,mBAAU,CAAC,MAAM,EAAE,CAAC;QAC5F,OAAO,IAAI,CAAC;IACd,CAAC;IAED,wFAAwF;IACxF,4CAA4C;IAC5C,IAAI,gBAAgB,CAAC,WAAW,IAAI,gBAAgB,CAAC,WAAW,YAAY,0CAAmB,EAAE,CAAC;QAChG,MAAM,OAAO,GAAwB,KAAK,CAAC,IAAI,CAAC,gBAAgB,CAAC,WAAW,CAAC,OAAO,CAAC,MAAM,EAAE,CAAC,CAAC;QAC/F,OAAO,OAAO,CAAC,IAAI,CAAC,CAAC,MAAyB,EAAE,EAAE,CAAC,MAAM,CAAC,IAAI,KAAK,mBAAU,CAAC,MAAM,CAAC,CAAC;IACxF,CAAC;IAED,OAAO,KAAK,CAAC;AACf,CAAC"}