@mongodb-js/connection-form 0.4.0 → 0.7.0

package/dist/utils/csfle-handler.d.ts

@@ -0,0 +1,58 @@
+import type { ConnectionOptions } from 'mongodb-data-service';
+import type { AutoEncryptionOptions, AutoEncryptionTlsOptions, Document } from 'mongodb';
+import type { KMSProviderName } from './csfle-kms-fields';
+declare type KeysOfUnion<T> = T extends T ? keyof T : never;
+export interface UpdateCsfleStoreCredentialsAction {
+    type: 'update-csfle-store-credentials';
+    value: boolean;
+}
+export interface UpdateCsfleAction {
+    type: 'update-csfle-param';
+    key: keyof AutoEncryptionOptions;
+    value?: AutoEncryptionOptions[keyof AutoEncryptionOptions];
+}
+declare type KMSProviders = NonNullable<AutoEncryptionOptions['kmsProviders']>;
+export interface UpdateCsfleKmsAction {
+    type: 'update-csfle-kms-param';
+    kmsProvider: KMSProviderName;
+    key: KeysOfUnion<KMSProviders[keyof KMSProviders]>;
+    value?: string;
+}
+export interface UpdateCsfleKmsTlsAction {
+    type: 'update-csfle-kms-tls-param';
+    kmsProvider: KMSProviderName;
+    key: keyof AutoEncryptionTlsOptions;
+    value?: string;
+}
+export declare function handleUpdateCsfleStoreCredentials({ action, connectionOptions, }: {
+    action: UpdateCsfleStoreCredentialsAction;
+    connectionOptions: ConnectionOptions;
+}): {
+    connectionOptions: ConnectionOptions;
+};
+export declare function handleUpdateCsfleParam({ action, connectionOptions, }: {
+    action: UpdateCsfleAction;
+    connectionOptions: ConnectionOptions;
+}): {
+    connectionOptions: ConnectionOptions;
+};
+export declare function handleUpdateCsfleKmsParam({ action, connectionOptions, }: {
+    action: UpdateCsfleKmsAction;
+    connectionOptions: ConnectionOptions;
+}): {
+    connectionOptions: ConnectionOptions;
+};
+export declare function handleUpdateCsfleKmsTlsParam({ action, connectionOptions, }: {
+    action: UpdateCsfleKmsTlsAction;
+    connectionOptions: ConnectionOptions;
+}): {
+    connectionOptions: ConnectionOptions;
+};
+export declare function unsetAutoEncryptionIfEmpty(o?: AutoEncryptionOptions): AutoEncryptionOptions | undefined;
+export declare function hasAnyCsfleOption(o: Readonly<AutoEncryptionOptions>): boolean;
+export declare function textToEncryptedFieldConfig(text: string): Document | undefined;
+export declare function encryptedFieldConfigToText(config: Readonly<Document> | undefined): string;
+export declare function adjustCSFLEParams(connectionOptions: Readonly<ConnectionOptions>): ConnectionOptions;
+export declare function randomLocalKey(): string;
+export {};
+//# sourceMappingURL=csfle-handler.d.ts.map

package/dist/utils/csfle-handler.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"csfle-handler.d.ts","sourceRoot":"","sources":["../../src/utils/csfle-handler.ts"],"names":[],"mappings":"AAEA,OAAO,KAAK,EAAE,iBAAiB,EAAE,MAAM,sBAAsB,CAAC;AAC9D,OAAO,KAAK,EACV,qBAAqB,EACrB,wBAAwB,EACxB,QAAQ,EACT,MAAM,SAAS,CAAC;AACjB,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,oBAAoB,CAAC;AAQ1D,aAAK,WAAW,CAAC,CAAC,IAAI,CAAC,SAAS,CAAC,GAAG,MAAM,CAAC,GAAG,KAAK,CAAC;AAEpD,MAAM,WAAW,iCAAiC;IAChD,IAAI,EAAE,gCAAgC,CAAC;IACvC,KAAK,EAAE,OAAO,CAAC;CAChB;AAED,MAAM,WAAW,iBAAiB;IAChC,IAAI,EAAE,oBAAoB,CAAC;IAC3B,GAAG,EAAE,MAAM,qBAAqB,CAAC;IACjC,KAAK,CAAC,EAAE,qBAAqB,CAAC,MAAM,qBAAqB,CAAC,CAAC;CAC5D;AAED,aAAK,YAAY,GAAG,WAAW,CAAC,qBAAqB,CAAC,cAAc,CAAC,CAAC,CAAC;AACvE,MAAM,WAAW,oBAAoB;IACnC,IAAI,EAAE,wBAAwB,CAAC;IAC/B,WAAW,EAAE,eAAe,CAAC;IAC7B,GAAG,EAAE,WAAW,CAAC,YAAY,CAAC,MAAM,YAAY,CAAC,CAAC,CAAC;IACnD,KAAK,CAAC,EAAE,MAAM,CAAC;CAChB;AAED,MAAM,WAAW,uBAAuB;IACtC,IAAI,EAAE,4BAA4B,CAAC;IACnC,WAAW,EAAE,eAAe,CAAC;IAC7B,GAAG,EAAE,MAAM,wBAAwB,CAAC;IACpC,KAAK,CAAC,EAAE,MAAM,CAAC;CAChB;AAED,wBAAgB,iCAAiC,CAAC,EAChD,MAAM,EACN,iBAAiB,GAClB,EAAE;IACD,MAAM,EAAE,iCAAiC,CAAC;IAC1C,iBAAiB,EAAE,iBAAiB,CAAC;CACtC,GAAG;IACF,iBAAiB,EAAE,iBAAiB,CAAC;CACtC,CAYA;AAED,wBAAgB,sBAAsB,CAAC,EACrC,MAAM,EACN,iBAAiB,GAClB,EAAE;IACD,MAAM,EAAE,iBAAiB,CAAC;IAC1B,iBAAiB,EAAE,iBAAiB,CAAC;CACtC,GAAG;IACF,iBAAiB,EAAE,iBAAiB,CAAC;CACtC,CAqBA;AAED,wBAAgB,yBAAyB,CAAC,EACxC,MAAM,EACN,iBAAiB,GAClB,EAAE;IACD,MAAM,EAAE,oBAAoB,CAAC;IAC7B,iBAAiB,EAAE,iBAAiB,CAAC;CACtC,GAAG;IACF,iBAAiB,EAAE,iBAAiB,CAAC;CACtC,CA+BA;AAED,wBAAgB,4BAA4B,CAAC,EAC3C,MAAM,EACN,iBAAiB,GAClB,EAAE;IACD,MAAM,EAAE,uBAAuB,CAAC;IAChC,iBAAiB,EAAE,iBAAiB,CAAC;CACtC,GAAG;IACF,iBAAiB,EAAE,iBAAiB,CAAC;CACtC,CA+BA;AAMD,wBAAgB,0BAA0B,CACxC,CAAC,CAAC,EAAE,qBAAqB,GACxB,qBAAqB,GAAG,SAAS,CAEnC;AAED,wBAAgB,iBAAiB,CAAC,CAAC,EAAE,QAAQ,CAAC,qBAAqB,CAAC,GAAG,OAAO,CAa7E;AAED,wBAAgB,0BAA0B,CAAC,IAAI,EAAE,MAAM,GAAG,QAAQ,GAAG,SAAS,CA8B7E;AAED,wBAAgB,0BAA0B,CACxC,MAAM,EAAE,QAAQ,CAAC,QAAQ,CAAC,GAAG,SAAS,GACrC,MAAM,CAWR;AAMD,wBAAgB,iBAAiB,CAC/B,iBAAiB,EAAE,QAAQ,CAAC,iBAAiB,CAAC,GAC7C,iBAAiB,CAcnB;AAED,wBAAgB,cAAc,IAAI,MAAM,CAEvC"}

package/dist/utils/csfle-handler.js

@@ -0,0 +1,188 @@
+"use strict";
+var __importDefault = (this && this.__importDefault) || function (mod) {
+    return (mod && mod.__esModule) ? mod : { "default": mod };
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.randomLocalKey = exports.adjustCSFLEParams = exports.encryptedFieldConfigToText = exports.textToEncryptedFieldConfig = exports.hasAnyCsfleOption = exports.unsetAutoEncryptionIfEmpty = exports.handleUpdateCsfleKmsTlsParam = exports.handleUpdateCsfleKmsParam = exports.handleUpdateCsfleParam = exports.handleUpdateCsfleStoreCredentials = void 0;
+const crypto_1 = require("crypto");
+const lodash_1 = require("lodash");
+const mongodb_query_parser_1 = __importDefault(require("mongodb-query-parser"));
+const DEFAULT_FLE_OPTIONS = {
+    storeCredentials: false,
+    autoEncryption: undefined,
+};
+function handleUpdateCsfleStoreCredentials({ action, connectionOptions, }) {
+    connectionOptions = (0, lodash_1.cloneDeep)(connectionOptions);
+    return {
+        connectionOptions: {
+            ...connectionOptions,
+            fleOptions: {
+                ...DEFAULT_FLE_OPTIONS,
+                ...connectionOptions.fleOptions,
+                storeCredentials: action.value,
+            },
+        },
+    };
+}
+exports.handleUpdateCsfleStoreCredentials = handleUpdateCsfleStoreCredentials;
+function handleUpdateCsfleParam({ action, connectionOptions, }) {
+    var _a;
+    connectionOptions = (0, lodash_1.cloneDeep)(connectionOptions);
+    const autoEncryption = {
+        ...(_a = connectionOptions.fleOptions) === null || _a === void 0 ? void 0 : _a.autoEncryption,
+    };
+    if (!action.value) {
+        delete autoEncryption[action.key];
+    }
+    else {
+        autoEncryption[action.key] = action.value;
+    }
+    return {
+        connectionOptions: {
+            ...connectionOptions,
+            fleOptions: {
+                ...DEFAULT_FLE_OPTIONS,
+                ...connectionOptions.fleOptions,
+                autoEncryption: unsetAutoEncryptionIfEmpty(autoEncryption),
+            },
+        },
+    };
+}
+exports.handleUpdateCsfleParam = handleUpdateCsfleParam;
+function handleUpdateCsfleKmsParam({ action, connectionOptions, }) {
+    var _a, _b, _c, _d, _e;
+    connectionOptions = (0, lodash_1.cloneDeep)(connectionOptions);
+    const autoEncryption = (_b = (_a = connectionOptions.fleOptions) === null || _a === void 0 ? void 0 : _a.autoEncryption) !== null && _b !== void 0 ? _b : {};
+    const kms = {
+        ...((_d = (_c = autoEncryption.kmsProviders) === null || _c === void 0 ? void 0 : _c[action.kmsProvider]) !== null && _d !== void 0 ? _d : {}),
+    };
+    if (!action.value) {
+        delete kms[action.key];
+    }
+    else {
+        kms[action.key] = action.value;
+    }
+    const kmsProviders = (_e = autoEncryption.kmsProviders) !== null && _e !== void 0 ? _e : {};
+    if (Object.keys(kms).length === 0) {
+        delete kmsProviders[action.kmsProvider];
+    }
+    else {
+        kmsProviders[action.kmsProvider] = kms;
+    }
+    return {
+        connectionOptions: {
+            ...connectionOptions,
+            fleOptions: {
+                ...DEFAULT_FLE_OPTIONS,
+                ...connectionOptions.fleOptions,
+                autoEncryption: unsetAutoEncryptionIfEmpty({
+                    ...autoEncryption,
+                    kmsProviders,
+                }),
+            },
+        },
+    };
+}
+exports.handleUpdateCsfleKmsParam = handleUpdateCsfleKmsParam;
+function handleUpdateCsfleKmsTlsParam({ action, connectionOptions, }) {
+    var _a, _b, _c, _d, _e;
+    connectionOptions = (0, lodash_1.cloneDeep)(connectionOptions);
+    const autoEncryption = (_b = (_a = connectionOptions.fleOptions) === null || _a === void 0 ? void 0 : _a.autoEncryption) !== null && _b !== void 0 ? _b : {};
+    const tls = {
+        ...((_d = (_c = autoEncryption.tlsOptions) === null || _c === void 0 ? void 0 : _c[action.kmsProvider]) !== null && _d !== void 0 ? _d : {}),
+    };
+    if (!action.value) {
+        delete tls[action.key];
+    }
+    else {
+        tls[action.key] = action.value;
+    }
+    const tlsOptions = (_e = autoEncryption.tlsOptions) !== null && _e !== void 0 ? _e : {};
+    if (Object.keys(tls).length === 0) {
+        delete tlsOptions[action.kmsProvider];
+    }
+    else {
+        tlsOptions[action.kmsProvider] = tls;
+    }
+    return {
+        connectionOptions: {
+            ...connectionOptions,
+            fleOptions: {
+                ...DEFAULT_FLE_OPTIONS,
+                ...connectionOptions.fleOptions,
+                autoEncryption: unsetAutoEncryptionIfEmpty({
+                    ...autoEncryption,
+                    tlsOptions,
+                }),
+            },
+        },
+    };
+}
+exports.handleUpdateCsfleKmsTlsParam = handleUpdateCsfleKmsTlsParam;
+function unsetAutoEncryptionIfEmpty(o) {
+    return o && hasAnyCsfleOption(o) ? o : undefined;
+}
+exports.unsetAutoEncryptionIfEmpty = unsetAutoEncryptionIfEmpty;
+function hasAnyCsfleOption(o) {
+    var _a, _b;
+    return !!(o.bypassAutoEncryption ||
+        o.keyVaultNamespace ||
+        o.schemaMap ||
+        o.encryptedFieldsMap ||
+        [
+            ...Object.values((_a = o.tlsOptions) !== null && _a !== void 0 ? _a : {}),
+            ...Object.values((_b = o.kmsProviders) !== null && _b !== void 0 ? _b : {}),
+        ]
+            .flatMap((o) => Object.values(o !== null && o !== void 0 ? o : {}))
+            .filter(Boolean).length > 0);
+}
+exports.hasAnyCsfleOption = hasAnyCsfleOption;
+function textToEncryptedFieldConfig(text) {
+    if (!text.trim()) {
+        return undefined;
+    }
+    let parsed = {};
+    try {
+        parsed = (0, mongodb_query_parser_1.default)(text);
+        if (!parsed || typeof parsed !== 'object') {
+            parsed = {};
+            throw new Error('Field contained invalid input');
+        }
+        parsed['$compass.error'] = null;
+    }
+    catch (err) {
+        parsed['$compass.error'] = err.message;
+    }
+    parsed['$compass.rawText'] = text;
+    return parsed;
+}
+exports.textToEncryptedFieldConfig = textToEncryptedFieldConfig;
+function encryptedFieldConfigToText(config) {
+    if (!config) {
+        return '';
+    }
+    if (config['$compass.rawText']) {
+        return config['$compass.rawText'];
+    }
+    const withoutCompassKeys = Object.fromEntries(Object.entries(config).filter(([key]) => !key.startsWith('$compass.')));
+    return mongodb_query_parser_1.default.toJSString(withoutCompassKeys);
+}
+exports.encryptedFieldConfigToText = encryptedFieldConfigToText;
+function adjustCSFLEParams(connectionOptions) {
+    var _a, _b, _c;
+    connectionOptions = (0, lodash_1.cloneDeep)(connectionOptions);
+    const autoEncryptionOptions = (_a = connectionOptions.fleOptions) === null || _a === void 0 ? void 0 : _a.autoEncryption;
+    if (((_b = autoEncryptionOptions === null || autoEncryptionOptions === void 0 ? void 0 : autoEncryptionOptions.schemaMap) === null || _b === void 0 ? void 0 : _b['$compass.error']) === null) {
+        autoEncryptionOptions.schemaMap = textToEncryptedFieldConfig(autoEncryptionOptions.schemaMap['$compass.rawText']);
+    }
+    if (((_c = autoEncryptionOptions === null || autoEncryptionOptions === void 0 ? void 0 : autoEncryptionOptions.encryptedFieldsMap) === null || _c === void 0 ? void 0 : _c['$compass.error']) === null) {
+        autoEncryptionOptions.encryptedFieldsMap = textToEncryptedFieldConfig(autoEncryptionOptions.encryptedFieldsMap['$compass.rawText']);
+    }
+    return connectionOptions;
+}
+exports.adjustCSFLEParams = adjustCSFLEParams;
+function randomLocalKey() {
+    return (0, crypto_1.randomBytes)(96).toString('base64');
+}
+exports.randomLocalKey = randomLocalKey;
+//# sourceMappingURL=csfle-handler.js.map

package/dist/utils/csfle-handler.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"csfle-handler.js","sourceRoot":"","sources":["../../src/utils/csfle-handler.ts"],"names":[],"mappings":";;;;;;AAAA,mCAAqC;AACrC,mCAAmC;AAQnC,gFAA+C;AAE/C,MAAM,mBAAmB,GAAiD;IACxE,gBAAgB,EAAE,KAAK;IACvB,cAAc,EAAE,SAAS;CAC1B,CAAC;AA8BF,SAAgB,iCAAiC,CAAC,EAChD,MAAM,EACN,iBAAiB,GAIlB;IAGC,iBAAiB,GAAG,IAAA,kBAAS,EAAC,iBAAiB,CAAC,CAAC;IACjD,OAAO;QACL,iBAAiB,EAAE;YACjB,GAAG,iBAAiB;YACpB,UAAU,EAAE;gBACV,GAAG,mBAAmB;gBACtB,GAAG,iBAAiB,CAAC,UAAU;gBAC/B,gBAAgB,EAAE,MAAM,CAAC,KAAK;aAC/B;SACF;KACF,CAAC;AACJ,CAAC;AApBD,8EAoBC;AAED,SAAgB,sBAAsB,CAAC,EACrC,MAAM,EACN,iBAAiB,GAIlB;;IAGC,iBAAiB,GAAG,IAAA,kBAAS,EAAC,iBAAiB,CAAC,CAAC;IAEjD,MAAM,cAAc,GAAQ;QAC1B,GAAG,MAAA,iBAAiB,CAAC,UAAU,0CAAE,cAAc;KAChD,CAAC;IACF,IAAI,CAAC,MAAM,CAAC,KAAK,EAAE;QACjB,OAAO,cAAc,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;KACnC;SAAM;QACL,cAAc,CAAC,MAAM,CAAC,GAAG,CAAC,GAAG,MAAM,CAAC,KAAK,CAAC;KAC3C;IACD,OAAO;QACL,iBAAiB,EAAE;YACjB,GAAG,iBAAiB;YACpB,UAAU,EAAE;gBACV,GAAG,mBAAmB;gBACtB,GAAG,iBAAiB,CAAC,UAAU;gBAC/B,cAAc,EAAE,0BAA0B,CAAC,cAAc,CAAC;aAC3D;SACF;KACF,CAAC;AACJ,CAAC;AA7BD,wDA6BC;AAED,SAAgB,yBAAyB,CAAC,EACxC,MAAM,EACN,iBAAiB,GAIlB;;IAGC,iBAAiB,GAAG,IAAA,kBAAS,EAAC,iBAAiB,CAAC,CAAC;IACjD,MAAM,cAAc,GAAG,MAAA,MAAA,iBAAiB,CAAC,UAAU,0CAAE,cAAc,mCAAI,EAAE,CAAC;IAE1E,MAAM,GAAG,GAAQ;QACf,GAAG,CAAC,MAAA,MAAA,cAAc,CAAC,YAAY,0CAAG,MAAM,CAAC,WAAW,CAAC,mCAAI,EAAE,CAAC;KAC7D,CAAC;IACF,IAAI,CAAC,MAAM,CAAC,KAAK,EAAE;QACjB,OAAO,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;KACxB;SAAM;QACL,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,GAAG,MAAM,CAAC,KAAK,CAAC;KAChC;IACD,MAAM,YAAY,GAAG,MAAA,cAAc,CAAC,YAAY,mCAAI,EAAE,CAAC;IACvD,IAAI,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,MAAM,KAAK,CAAC,EAAE;QACjC,OAAO,YAAY,CAAC,MAAM,CAAC,WAAW,CAAC,CAAC;KACzC;SAAM;QACL,YAAY,CAAC,MAAM,CAAC,WAAW,CAAC,GAAG,GAAG,CAAC;KACxC;IACD,OAAO;QACL,iBAAiB,EAAE;YACjB,GAAG,iBAAiB;YACpB,UAAU,EAAE;gBACV,GAAG,mBAAmB;gBACtB,GAAG,iBAAiB,CAAC,UAAU;gBAC/B,cAAc,EAAE,0BAA0B,CAAC;oBACzC,GAAG,cAAc;oBACjB,YAAY;iBACb,CAAC;aACH;SACF;KACF,CAAC;AACJ,CAAC;AAvCD,8DAuCC;AAED,SAAgB,4BAA4B,CAAC,EAC3C,MAAM,EACN,iBAAiB,GAIlB;;IAGC,iBAAiB,GAAG,IAAA,kBAAS,EAAC,iBAAiB,CAAC,CAAC;IACjD,MAAM,cAAc,GAAG,MAAA,MAAA,iBAAiB,CAAC,UAAU,0CAAE,cAAc,mCAAI,EAAE,CAAC;IAE1E,MAAM,GAAG,GAAQ;QACf,GAAG,CAAC,MAAA,MAAA,cAAc,CAAC,UAAU,0CAAG,MAAM,CAAC,WAAW,CAAC,mCAAI,EAAE,CAAC;KAC3D,CAAC;IACF,IAAI,CAAC,MAAM,CAAC,KAAK,EAAE;QACjB,OAAO,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;KACxB;SAAM;QACL,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,GAAG,MAAM,CAAC,KAAK,CAAC;KAChC;IACD,MAAM,UAAU,GAAG,MAAA,cAAc,CAAC,UAAU,mCAAI,EAAE,CAAC;IACnD,IAAI,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,MAAM,KAAK,CAAC,EAAE;QACjC,OAAO,UAAU,CAAC,MAAM,CAAC,WAAW,CAAC,CAAC;KACvC;SAAM;QACL,UAAU,CAAC,MAAM,CAAC,WAAW,CAAC,GAAG,GAAG,CAAC;KACtC;IACD,OAAO;QACL,iBAAiB,EAAE;YACjB,GAAG,iBAAiB;YACpB,UAAU,EAAE;gBACV,GAAG,mBAAmB;gBACtB,GAAG,iBAAiB,CAAC,UAAU;gBAC/B,cAAc,EAAE,0BAA0B,CAAC;oBACzC,GAAG,cAAc;oBACjB,UAAU;iBACX,CAAC;aACH;SACF;KACF,CAAC;AACJ,CAAC;AAvCD,oEAuCC;AAMD,SAAgB,0BAA0B,CACxC,CAAyB;IAEzB,OAAO,CAAC,IAAI,iBAAiB,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;AACnD,CAAC;AAJD,gEAIC;AAED,SAAgB,iBAAiB,CAAC,CAAkC;;IAClE,OAAO,CAAC,CAAC,CACP,CAAC,CAAC,oBAAoB;QACtB,CAAC,CAAC,iBAAiB;QACnB,CAAC,CAAC,SAAS;QACX,CAAC,CAAC,kBAAkB;QACpB;YACE,GAAG,MAAM,CAAC,MAAM,CAAC,MAAA,CAAC,CAAC,UAAU,mCAAI,EAAE,CAAC;YACpC,GAAG,MAAM,CAAC,MAAM,CAAC,MAAA,CAAC,CAAC,YAAY,mCAAI,EAAE,CAAC;SACvC;aACE,OAAO,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,aAAD,CAAC,cAAD,CAAC,GAAI,EAAE,CAAC,CAAC;aACtC,MAAM,CAAC,OAAO,CAAC,CAAC,MAAM,GAAG,CAAC,CAC9B,CAAC;AACJ,CAAC;AAbD,8CAaC;AAED,SAAgB,0BAA0B,CAAC,IAAY;IACrD,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,EAAE;QAChB,OAAO,SAAS,CAAC;KAClB;IAMD,IAAI,MAAM,GAAa,EAAE,CAAC;IAC1B,IAAI;QACF,MAAM,GAAG,IAAA,8BAAW,EAAC,IAAI,CAAC,CAAC;QAC3B,IAAI,CAAC,MAAM,IAAI,OAAO,MAAM,KAAK,QAAQ,EAAE;YAQzC,MAAM,GAAG,EAAE,CAAC;YACZ,MAAM,IAAI,KAAK,CAAC,+BAA+B,CAAC,CAAC;SAClD;QACD,MAAM,CAAC,gBAAgB,CAAC,GAAG,IAAI,CAAC;KACjC;IAAC,OAAO,GAAY,EAAE;QACrB,MAAM,CAAC,gBAAgB,CAAC,GAAI,GAAa,CAAC,OAAO,CAAC;KACnD;IAED,MAAM,CAAC,kBAAkB,CAAC,GAAG,IAAI,CAAC;IAClC,OAAO,MAAM,CAAC;AAChB,CAAC;AA9BD,gEA8BC;AAED,SAAgB,0BAA0B,CACxC,MAAsC;IAEtC,IAAI,CAAC,MAAM,EAAE;QACX,OAAO,EAAE,CAAC;KACX;IACD,IAAI,MAAM,CAAC,kBAAkB,CAAC,EAAE;QAC9B,OAAO,MAAM,CAAC,kBAAkB,CAAC,CAAC;KACnC;IACD,MAAM,kBAAkB,GAAG,MAAM,CAAC,WAAW,CAC3C,MAAM,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,GAAG,CAAC,EAAE,EAAE,CAAC,CAAC,GAAG,CAAC,UAAU,CAAC,WAAW,CAAC,CAAC,CACvE,CAAC;IACF,OAAO,8BAAW,CAAC,UAAU,CAAC,kBAAkB,CAAC,CAAC;AACpD,CAAC;AAbD,gEAaC;AAMD,SAAgB,iBAAiB,CAC/B,iBAA8C;;IAE9C,iBAAiB,GAAG,IAAA,kBAAS,EAAC,iBAAiB,CAAC,CAAC;IACjD,MAAM,qBAAqB,GAAG,MAAA,iBAAiB,CAAC,UAAU,0CAAE,cAAc,CAAC;IAC3E,IAAI,CAAA,MAAA,qBAAqB,aAArB,qBAAqB,uBAArB,qBAAqB,CAAE,SAAS,0CAAG,gBAAgB,CAAC,MAAK,IAAI,EAAE;QACjE,qBAAqB,CAAC,SAAS,GAAG,0BAA0B,CAC1D,qBAAqB,CAAC,SAAS,CAAC,kBAAkB,CAAC,CACpD,CAAC;KACH;IACD,IAAI,CAAA,MAAA,qBAAqB,aAArB,qBAAqB,uBAArB,qBAAqB,CAAE,kBAAkB,0CAAG,gBAAgB,CAAC,MAAK,IAAI,EAAE;QAC1E,qBAAqB,CAAC,kBAAkB,GAAG,0BAA0B,CACnE,qBAAqB,CAAC,kBAAkB,CAAC,kBAAkB,CAAC,CAC7D,CAAC;KACH;IACD,OAAO,iBAAiB,CAAC;AAC3B,CAAC;AAhBD,8CAgBC;AAED,SAAgB,cAAc;IAC5B,OAAO,IAAA,oBAAW,EAAC,EAAE,CAAC,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC;AAC5C,CAAC;AAFD,wCAEC"}

package/dist/utils/csfle-kms-fields.d.ts

@@ -0,0 +1,25 @@
+import type { AutoEncryptionOptions } from 'mongodb';
+import type { ConnectionFormError } from './validation';
+declare type KeysOfUnion<T> = T extends T ? keyof T : never;
+export declare type KMSProviders = NonNullable<AutoEncryptionOptions['kmsProviders']>;
+export declare type KMSProviderName = keyof KMSProviders;
+export declare type KMSOption<KMSProvider extends KMSProviderName> = KeysOfUnion<NonNullable<KMSProviders[KMSProvider]>>;
+export interface KMSField<KMSProvider extends KMSProviderName> {
+    name: KMSOption<KMSProvider>;
+    label: string;
+    type: 'password' | 'text' | 'textarea';
+    optional: boolean;
+    value: (autoEncryption: AutoEncryptionOptions) => string;
+    errorMessage?: (errors: ConnectionFormError[]) => string | undefined;
+    state: 'error' | 'none' | ((errors: ConnectionFormError[]) => 'error' | 'none');
+    description?: string;
+}
+export declare const KMSProviderFields: {
+    local: KMSField<"local">[];
+    azure: KMSField<"azure">[];
+    gcp: KMSField<"gcp">[];
+    aws: KMSField<"aws">[];
+    kmip: KMSField<"kmip">[];
+};
+export {};
+//# sourceMappingURL=csfle-kms-fields.d.ts.map

package/dist/utils/csfle-kms-fields.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"csfle-kms-fields.d.ts","sourceRoot":"","sources":["../../src/utils/csfle-kms-fields.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,qBAAqB,EAAE,MAAM,SAAS,CAAC;AACrD,OAAO,KAAK,EAAE,mBAAmB,EAAE,MAAM,cAAc,CAAC;AAGxD,aAAK,WAAW,CAAC,CAAC,IAAI,CAAC,SAAS,CAAC,GAAG,MAAM,CAAC,GAAG,KAAK,CAAC;AACpD,oBAAY,YAAY,GAAG,WAAW,CAAC,qBAAqB,CAAC,cAAc,CAAC,CAAC,CAAC;AAC9E,oBAAY,eAAe,GAAG,MAAM,YAAY,CAAC;AACjD,oBAAY,SAAS,CAAC,WAAW,SAAS,eAAe,IAAI,WAAW,CACtE,WAAW,CAAC,YAAY,CAAC,WAAW,CAAC,CAAC,CACvC,CAAC;AAEF,MAAM,WAAW,QAAQ,CAAC,WAAW,SAAS,eAAe;IAC3D,IAAI,EAAE,SAAS,CAAC,WAAW,CAAC,CAAC;IAC7B,KAAK,EAAE,MAAM,CAAC;IACd,IAAI,EAAE,UAAU,GAAG,MAAM,GAAG,UAAU,CAAC;IACvC,QAAQ,EAAE,OAAO,CAAC;IAClB,KAAK,EAAE,CAAC,cAAc,EAAE,qBAAqB,KAAK,MAAM,CAAC;IACzD,YAAY,CAAC,EAAE,CAAC,MAAM,EAAE,mBAAmB,EAAE,KAAK,MAAM,GAAG,SAAS,CAAC;IACrE,KAAK,EACD,OAAO,GACP,MAAM,GACN,CAAC,CAAC,MAAM,EAAE,mBAAmB,EAAE,KAAK,OAAO,GAAG,MAAM,CAAC,CAAC;IAC1D,WAAW,CAAC,EAAE,MAAM,CAAC;CACtB;AA+ID,eAAO,MAAM,iBAAiB;;;;;;CAM7B,CAAC"}

package/dist/utils/csfle-kms-fields.js

@@ -0,0 +1,132 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.KMSProviderFields = void 0;
+const validation_1 = require("./validation");
+const GCPFields = [
+    {
+        name: 'email',
+        label: 'Service Account E-Mail',
+        type: 'text',
+        optional: false,
+        value: (autoEncryption) => { var _a, _b, _c; return (_c = (_b = (_a = autoEncryption === null || autoEncryption === void 0 ? void 0 : autoEncryption.kmsProviders) === null || _a === void 0 ? void 0 : _a.gcp) === null || _b === void 0 ? void 0 : _b.email) !== null && _c !== void 0 ? _c : ''; },
+        state: 'none',
+        description: 'The service account email to authenticate.',
+    },
+    {
+        name: 'privateKey',
+        label: 'Private Key',
+        type: 'textarea',
+        optional: false,
+        value: (autoEncryption) => { var _a, _b, _c, _d; return (_d = (_c = (_b = (_a = autoEncryption === null || autoEncryption === void 0 ? void 0 : autoEncryption.kmsProviders) === null || _a === void 0 ? void 0 : _a.gcp) === null || _b === void 0 ? void 0 : _b.privateKey) === null || _c === void 0 ? void 0 : _c.toString('base64')) !== null && _d !== void 0 ? _d : ''; },
+        state: 'none',
+        description: 'A base64-encoded PKCS#8 private key.',
+    },
+    {
+        name: 'endpoint',
+        label: 'Endpoint',
+        type: 'text',
+        optional: true,
+        value: (autoEncryption) => { var _a, _b, _c; return (_c = (_b = (_a = autoEncryption === null || autoEncryption === void 0 ? void 0 : autoEncryption.kmsProviders) === null || _a === void 0 ? void 0 : _a.gcp) === null || _b === void 0 ? void 0 : _b.endpoint) !== null && _c !== void 0 ? _c : ''; },
+        state: 'none',
+        description: 'A host with an optional port.',
+    },
+];
+const AWSFields = [
+    {
+        name: 'accessKeyId',
+        label: 'Access Key ID',
+        type: 'text',
+        optional: false,
+        value: (autoEncryption) => { var _a, _b, _c; return (_c = (_b = (_a = autoEncryption === null || autoEncryption === void 0 ? void 0 : autoEncryption.kmsProviders) === null || _a === void 0 ? void 0 : _a.aws) === null || _b === void 0 ? void 0 : _b.accessKeyId) !== null && _c !== void 0 ? _c : ''; },
+        state: 'none',
+        description: 'The access key used for the AWS KMS provider.',
+    },
+    {
+        name: 'secretAccessKey',
+        label: 'Secret Access Key',
+        type: 'password',
+        optional: false,
+        value: (autoEncryption) => { var _a, _b, _c; return (_c = (_b = (_a = autoEncryption === null || autoEncryption === void 0 ? void 0 : autoEncryption.kmsProviders) === null || _a === void 0 ? void 0 : _a.aws) === null || _b === void 0 ? void 0 : _b.secretAccessKey) !== null && _c !== void 0 ? _c : ''; },
+        state: 'none',
+        description: 'The secret access key used for the AWS KMS provider.',
+    },
+    {
+        name: 'sessionToken',
+        label: 'Session Token',
+        type: 'password',
+        optional: true,
+        value: (autoEncryption) => { var _a, _b, _c; return (_c = (_b = (_a = autoEncryption === null || autoEncryption === void 0 ? void 0 : autoEncryption.kmsProviders) === null || _a === void 0 ? void 0 : _a.aws) === null || _b === void 0 ? void 0 : _b.sessionToken) !== null && _c !== void 0 ? _c : ''; },
+        state: 'none',
+        description: 'An optional AWS session token that will be used as the X-Amz-Security-Token header for AWS requests.',
+    },
+];
+const AzureFields = [
+    {
+        name: 'tenantId',
+        label: 'Tenant ID',
+        type: 'text',
+        optional: false,
+        value: (autoEncryption) => { var _a, _b, _c; return (_c = (_b = (_a = autoEncryption === null || autoEncryption === void 0 ? void 0 : autoEncryption.kmsProviders) === null || _a === void 0 ? void 0 : _a.azure) === null || _b === void 0 ? void 0 : _b.tenantId) !== null && _c !== void 0 ? _c : ''; },
+        state: 'none',
+        description: 'The tenant ID identifies the organization for the account.',
+    },
+    {
+        name: 'clientId',
+        label: 'Client ID',
+        type: 'text',
+        optional: false,
+        value: (autoEncryption) => { var _a, _b, _c; return (_c = (_b = (_a = autoEncryption === null || autoEncryption === void 0 ? void 0 : autoEncryption.kmsProviders) === null || _a === void 0 ? void 0 : _a.azure) === null || _b === void 0 ? void 0 : _b.clientId) !== null && _c !== void 0 ? _c : ''; },
+        state: 'none',
+        description: 'The client ID to authenticate a registered application.',
+    },
+    {
+        name: 'clientSecret',
+        label: 'Client Secret',
+        type: 'password',
+        optional: false,
+        value: (autoEncryption) => { var _a, _b, _c; return (_c = (_b = (_a = autoEncryption === null || autoEncryption === void 0 ? void 0 : autoEncryption.kmsProviders) === null || _a === void 0 ? void 0 : _a.azure) === null || _b === void 0 ? void 0 : _b.clientSecret) !== null && _c !== void 0 ? _c : ''; },
+        state: 'none',
+        description: 'The client secret to authenticate a registered application.',
+    },
+    {
+        name: 'identityPlatformEndpoint',
+        label: 'Identity Platform Endpoint',
+        type: 'text',
+        optional: true,
+        value: (autoEncryption) => { var _a, _b, _c; return (_c = (_b = (_a = autoEncryption === null || autoEncryption === void 0 ? void 0 : autoEncryption.kmsProviders) === null || _a === void 0 ? void 0 : _a.azure) === null || _b === void 0 ? void 0 : _b.identityPlatformEndpoint) !== null && _c !== void 0 ? _c : ''; },
+        state: 'none',
+        description: 'A host with an optional port.',
+    },
+];
+const KMIPFields = [
+    {
+        name: 'endpoint',
+        label: 'Endpoint',
+        type: 'text',
+        optional: false,
+        value: (autoEncryption) => { var _a, _b, _c; return (_c = (_b = (_a = autoEncryption === null || autoEncryption === void 0 ? void 0 : autoEncryption.kmsProviders) === null || _a === void 0 ? void 0 : _a.kmip) === null || _b === void 0 ? void 0 : _b.endpoint) !== null && _c !== void 0 ? _c : ''; },
+        errorMessage: (errors) => (0, validation_1.errorMessageByFieldName)(errors, 'kmip.endpoint'),
+        state: (errors) => (0, validation_1.fieldNameHasError)(errors, 'kmip.endpoint') ? 'error' : 'none',
+        description: 'The endpoint consists of a hostname and port separated by a colon.',
+    },
+];
+const LocalFields = [
+    {
+        name: 'key',
+        label: 'Key',
+        type: 'text',
+        optional: false,
+        value: (autoEncryption) => { var _a, _b, _c, _d; return (_d = (_c = (_b = (_a = autoEncryption === null || autoEncryption === void 0 ? void 0 : autoEncryption.kmsProviders) === null || _a === void 0 ? void 0 : _a.local) === null || _b === void 0 ? void 0 : _b.key) === null || _c === void 0 ? void 0 : _c.toString('base64')) !== null && _d !== void 0 ? _d : ''; },
+        errorMessage: (errors) => (0, validation_1.errorMessageByFieldName)(errors, 'local.key'),
+        state: (errors) => (0, validation_1.fieldNameHasError)(errors, 'local.key') ? 'error' : 'none',
+        description: 'A 96-byte long base64-encoded string. Locally managed keys do not require additional setup, but are not recommended for production applications.',
+    },
+];
+exports.KMSProviderFields = {
+    local: LocalFields,
+    azure: AzureFields,
+    gcp: GCPFields,
+    aws: AWSFields,
+    kmip: KMIPFields,
+};
+//# sourceMappingURL=csfle-kms-fields.js.map

package/dist/utils/csfle-kms-fields.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"csfle-kms-fields.js","sourceRoot":"","sources":["../../src/utils/csfle-kms-fields.ts"],"names":[],"mappings":";;;AAEA,6CAA0E;AAuB1E,MAAM,SAAS,GAAsB;IACnC;QACE,IAAI,EAAE,OAAO;QACb,KAAK,EAAE,wBAAwB;QAC/B,IAAI,EAAE,MAAM;QACZ,QAAQ,EAAE,KAAK;QACf,KAAK,EAAE,CAAC,cAAc,EAAE,EAAE,mBAAC,OAAA,MAAA,MAAA,MAAA,cAAc,aAAd,cAAc,uBAAd,cAAc,CAAE,YAAY,0CAAE,GAAG,0CAAE,KAAK,mCAAI,EAAE,CAAA,EAAA;QACzE,KAAK,EAAE,MAAM;QACb,WAAW,EAAE,4CAA4C;KAC1D;IACD;QACE,IAAI,EAAE,YAAY;QAClB,KAAK,EAAE,aAAa;QACpB,IAAI,EAAE,UAAU;QAChB,QAAQ,EAAE,KAAK;QACf,KAAK,EAAE,CAAC,cAAc,EAAE,EAAE,uBACxB,OAAA,MAAA,MAAA,MAAA,MAAA,cAAc,aAAd,cAAc,uBAAd,cAAc,CAAE,YAAY,0CAAE,GAAG,0CAAE,UAAU,0CAAE,QAAQ,CAAC,QAAQ,CAAC,mCAAI,EAAE,CAAA,EAAA;QACzE,KAAK,EAAE,MAAM;QACb,WAAW,EAAE,sCAAsC;KACpD;IACD;QACE,IAAI,EAAE,UAAU;QAChB,KAAK,EAAE,UAAU;QACjB,IAAI,EAAE,MAAM;QACZ,QAAQ,EAAE,IAAI;QACd,KAAK,EAAE,CAAC,cAAc,EAAE,EAAE,mBACxB,OAAA,MAAA,MAAA,MAAA,cAAc,aAAd,cAAc,uBAAd,cAAc,CAAE,YAAY,0CAAE,GAAG,0CAAE,QAAQ,mCAAI,EAAE,CAAA,EAAA;QACnD,KAAK,EAAE,MAAM;QACb,WAAW,EAAE,+BAA+B;KAC7C;CACF,CAAC;AAEF,MAAM,SAAS,GAAsB;IACnC;QACE,IAAI,EAAE,aAAa;QACnB,KAAK,EAAE,eAAe;QACtB,IAAI,EAAE,MAAM;QACZ,QAAQ,EAAE,KAAK;QACf,KAAK,EAAE,CAAC,cAAc,EAAE,EAAE,mBACxB,OAAA,MAAA,MAAA,MAAA,cAAc,aAAd,cAAc,uBAAd,cAAc,CAAE,YAAY,0CAAE,GAAG,0CAAE,WAAW,mCAAI,EAAE,CAAA,EAAA;QACtD,KAAK,EAAE,MAAM;QACb,WAAW,EAAE,+CAA+C;KAC7D;IACD;QACE,IAAI,EAAE,iBAAiB;QACvB,KAAK,EAAE,mBAAmB;QAC1B,IAAI,EAAE,UAAU;QAChB,QAAQ,EAAE,KAAK;QACf,KAAK,EAAE,CAAC,cAAc,EAAE,EAAE,mBACxB,OAAA,MAAA,MAAA,MAAA,cAAc,aAAd,cAAc,uBAAd,cAAc,CAAE,YAAY,0CAAE,GAAG,0CAAE,eAAe,mCAAI,EAAE,CAAA,EAAA;QAC1D,KAAK,EAAE,MAAM;QACb,WAAW,EAAE,sDAAsD;KACpE;IACD;QACE,IAAI,EAAE,cAAc;QACpB,KAAK,EAAE,eAAe;QACtB,IAAI,EAAE,UAAU;QAChB,QAAQ,EAAE,IAAI;QACd,KAAK,EAAE,CAAC,cAAc,EAAE,EAAE,mBACxB,OAAA,MAAA,MAAA,MAAA,cAAc,aAAd,cAAc,uBAAd,cAAc,CAAE,YAAY,0CAAE,GAAG,0CAAE,YAAY,mCAAI,EAAE,CAAA,EAAA;QACvD,KAAK,EAAE,MAAM;QACb,WAAW,EACT,sGAAsG;KACzG;CACF,CAAC;AAEF,MAAM,WAAW,GAAwB;IACvC;QACE,IAAI,EAAE,UAAU;QAChB,KAAK,EAAE,WAAW;QAClB,IAAI,EAAE,MAAM;QACZ,QAAQ,EAAE,KAAK;QACf,KAAK,EAAE,CAAC,cAAc,EAAE,EAAE,mBACxB,OAAA,MAAA,MAAA,MAAA,cAAc,aAAd,cAAc,uBAAd,cAAc,CAAE,YAAY,0CAAE,KAAK,0CAAE,QAAQ,mCAAI,EAAE,CAAA,EAAA;QACrD,KAAK,EAAE,MAAM;QACb,WAAW,EAAE,4DAA4D;KAC1E;IACD;QACE,IAAI,EAAE,UAAU;QAChB,KAAK,EAAE,WAAW;QAClB,IAAI,EAAE,MAAM;QACZ,QAAQ,EAAE,KAAK;QACf,KAAK,EAAE,CAAC,cAAc,EAAE,EAAE,mBACxB,OAAA,MAAA,MAAA,MAAA,cAAc,aAAd,cAAc,uBAAd,cAAc,CAAE,YAAY,0CAAE,KAAK,0CAAE,QAAQ,mCAAI,EAAE,CAAA,EAAA;QACrD,KAAK,EAAE,MAAM;QACb,WAAW,EAAE,yDAAyD;KACvE;IACD;QACE,IAAI,EAAE,cAAc;QACpB,KAAK,EAAE,eAAe;QACtB,IAAI,EAAE,UAAU;QAChB,QAAQ,EAAE,KAAK;QACf,KAAK,EAAE,CAAC,cAAc,EAAE,EAAE,mBACxB,OAAA,MAAA,MAAA,MAAA,cAAc,aAAd,cAAc,uBAAd,cAAc,CAAE,YAAY,0CAAE,KAAK,0CAAE,YAAY,mCAAI,EAAE,CAAA,EAAA;QACzD,KAAK,EAAE,MAAM;QACb,WAAW,EAAE,6DAA6D;KAC3E;IACD;QACE,IAAI,EAAE,0BAA0B;QAChC,KAAK,EAAE,4BAA4B;QACnC,IAAI,EAAE,MAAM;QACZ,QAAQ,EAAE,IAAI;QACd,KAAK,EAAE,CAAC,cAAc,EAAE,EAAE,mBACxB,OAAA,MAAA,MAAA,MAAA,cAAc,aAAd,cAAc,uBAAd,cAAc,CAAE,YAAY,0CAAE,KAAK,0CAAE,wBAAwB,mCAAI,EAAE,CAAA,EAAA;QACrE,KAAK,EAAE,MAAM;QACb,WAAW,EAAE,+BAA+B;KAC7C;CACF,CAAC;AAEF,MAAM,UAAU,GAAuB;IACrC;QACE,IAAI,EAAE,UAAU;QAChB,KAAK,EAAE,UAAU;QACjB,IAAI,EAAE,MAAM;QACZ,QAAQ,EAAE,KAAK;QACf,KAAK,EAAE,CAAC,cAAc,EAAE,EAAE,mBACxB,OAAA,MAAA,MAAA,MAAA,cAAc,aAAd,cAAc,uBAAd,cAAc,CAAE,YAAY,0CAAE,IAAI,0CAAE,QAAQ,mCAAI,EAAE,CAAA,EAAA;QACpD,YAAY,EAAE,CAAC,MAAM,EAAE,EAAE,CAAC,IAAA,oCAAuB,EAAC,MAAM,EAAE,eAAe,CAAC;QAC1E,KAAK,EAAE,CAAC,MAAM,EAAE,EAAE,CAChB,IAAA,8BAAiB,EAAC,MAAM,EAAE,eAAe,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM;QAC/D,WAAW,EACT,oEAAoE;KACvE;CACF,CAAC;AAEF,MAAM,WAAW,GAAwB;IACvC;QACE,IAAI,EAAE,KAAK;QACX,KAAK,EAAE,KAAK;QACZ,IAAI,EAAE,MAAM;QACZ,QAAQ,EAAE,KAAK;QACf,KAAK,EAAE,CAAC,cAAc,EAAE,EAAE,uBACxB,OAAA,MAAA,MAAA,MAAA,MAAA,cAAc,aAAd,cAAc,uBAAd,cAAc,CAAE,YAAY,0CAAE,KAAK,0CAAE,GAAG,0CAAE,QAAQ,CAAC,QAAQ,CAAC,mCAAI,EAAE,CAAA,EAAA;QACpE,YAAY,EAAE,CAAC,MAAM,EAAE,EAAE,CAAC,IAAA,oCAAuB,EAAC,MAAM,EAAE,WAAW,CAAC;QACtE,KAAK,EAAE,CAAC,MAAM,EAAE,EAAE,CAChB,IAAA,8BAAiB,EAAC,MAAM,EAAE,WAAW,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM;QAC3D,WAAW,EACT,kJAAkJ;KACrJ;CACF,CAAC;AAEW,QAAA,iBAAiB,GAAG;IAC/B,KAAK,EAAE,WAAW;IAClB,KAAK,EAAE,WAAW;IAClB,GAAG,EAAE,SAAS;IACd,GAAG,EAAE,SAAS;IACd,IAAI,EAAE,UAAU;CACjB,CAAC"}

package/dist/utils/tls-handler.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"tls-handler.d.ts","sourceRoot":"","sources":["../../src/utils/tls-handler.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,mBAAmB,MAAM,+BAA+B,CAAC;AACrE,OAAO,KAAK,EAAE,iBAAiB,EAAE,MAAM,sBAAsB,CAAC;AAC9D,OAAO,KAAK,EAAE,kBAAkB,EAAE,MAAM,SAAS,CAAC;AAGlD,oBAAY,WAAW,GAAG,SAAS,GAAG,IAAI,GAAG,KAAK,CAAC;AACnD,oBAAY,aAAa,GACrB,MAAM,IAAI,CACR,kBAAkB,EAChB,WAAW,GACX,uBAAuB,GACvB,+BAA+B,GAC/B,aAAa,GACb,0BAA0B,GAC1B,6BAA6B,CAChC,GACD,aAAa,CAAC;AAClB,MAAM,WAAW,eAAe;IAC9B,IAAI,EAAE,YAAY,CAAC;IACnB,SAAS,EAAE,WAAW,CAAC;CACxB;AAED,MAAM,WAAW,qBAAqB;IACpC,IAAI,EAAE,mBAAmB,CAAC;IAC1B,GAAG,EAAE,aAAa,CAAC;IACnB,KAAK,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;CACvB;AAED,wBAAgB,eAAe,CAAC,EAC9B,MAAM,EACN,mBAAmB,EACnB,iBAAiB,GAClB,EAAE;IACD,MAAM,EAAE,eAAe,CAAC;IACxB,mBAAmB,EAAE,mBAAmB,CAAC;IACzC,iBAAiB,EAAE,iBAAiB,CAAC;CACtC,GAAG;IACF,iBAAiB,EAAE,iBAAiB,CAAC;CACtC,CAsBA;AAED,wBAAgB,qBAAqB,CAAC,EACpC,MAAM,EACN,mBAAmB,EACnB,iBAAiB,GAClB,EAAE;IACD,MAAM,EAAE,qBAAqB,CAAC;IAC9B,mBAAmB,EAAE,mBAAmB,CAAC;IACzC,iBAAiB,EAAE,iBAAiB,CAAC;CACtC,GAAG;IACF,iBAAiB,EAAE,iBAAiB,CAAC;CACtC,CAgCA"}
+{"version":3,"file":"tls-handler.d.ts","sourceRoot":"","sources":["../../src/utils/tls-handler.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,mBAAmB,MAAM,+BAA+B,CAAC;AACrE,OAAO,KAAK,EAAE,iBAAiB,EAAE,MAAM,sBAAsB,CAAC;AAC9D,OAAO,KAAK,EAAE,kBAAkB,EAAE,MAAM,SAAS,CAAC;AAGlD,oBAAY,WAAW,GAAG,SAAS,GAAG,IAAI,GAAG,KAAK,CAAC;AACnD,oBAAY,aAAa,GACrB,MAAM,IAAI,CACR,kBAAkB,EAChB,WAAW,GACX,uBAAuB,GACvB,+BAA+B,GAC/B,aAAa,GACb,0BAA0B,GAC1B,6BAA6B,CAChC,GACD,aAAa,CAAC;AAClB,MAAM,WAAW,eAAe;IAC9B,IAAI,EAAE,YAAY,CAAC;IACnB,SAAS,EAAE,WAAW,CAAC;CACxB;AAED,MAAM,WAAW,qBAAqB;IACpC,IAAI,EAAE,mBAAmB,CAAC;IAC1B,GAAG,EAAE,aAAa,CAAC;IACnB,KAAK,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;CACvB;AAED,wBAAgB,eAAe,CAAC,EAC9B,MAAM,EACN,mBAAmB,EACnB,iBAAiB,GAClB,EAAE;IACD,MAAM,EAAE,eAAe,CAAC;IACxB,mBAAmB,EAAE,mBAAmB,CAAC;IACzC,iBAAiB,EAAE,iBAAiB,CAAC;CACtC,GAAG;IACF,iBAAiB,EAAE,iBAAiB,CAAC;CACtC,CAsBA;AAED,wBAAgB,qBAAqB,CAAC,EACpC,MAAM,EACN,mBAAmB,EACnB,iBAAiB,GAClB,EAAE;IACD,MAAM,EAAE,qBAAqB,CAAC;IAC9B,mBAAmB,EAAE,mBAAmB,CAAC;IACzC,iBAAiB,EAAE,iBAAiB,CAAC;CACtC,GAAG;IACF,iBAAiB,EAAE,iBAAiB,CAAC;CACtC,CAkCA"}

package/dist/utils/tls-handler.js

@@ -32,8 +32,11 @@ function handleUpdateTlsOption({ action, connectionStringUrl, connectionOptions,
     if (action.key === 'useSystemCA') {
         if (action.value) {
             updatedSearchParams.delete('tlsCAFile');
+            updatedConnectionOptions.useSystemCA = true;
+        }
+        else {
+            delete updatedConnectionOptions.useSystemCA;
         }
-        updatedConnectionOptions.useSystemCA = !!action.value;
     }
     else if (!action.value) {
         updatedSearchParams.delete(action.key);
@@ -43,7 +46,7 @@ function handleUpdateTlsOption({ action, connectionStringUrl, connectionOptions,
         updatedSearchParams.set('tls', 'true');
         updatedSearchParams.set(action.key, action.value);
         if (action.key === 'tlsCAFile') {
-            updatedConnectionOptions.useSystemCA = false;
+            delete updatedConnectionOptions.useSystemCA;
         }
     }
     return {

package/dist/utils/tls-handler.js.map

@@ -1 +1 @@
-{"version":3,"file":"tls-handler.js","sourceRoot":"","sources":["../../src/utils/tls-handler.ts"],"names":[],"mappings":";;;AAGA,mCAAmC;AAyBnC,SAAgB,eAAe,CAAC,EAC9B,MAAM,EACN,mBAAmB,EACnB,iBAAiB,GAKlB;IAGC,MAAM,uBAAuB,GAAG,mBAAmB,CAAC,KAAK,EAAE,CAAC;IAC5D,MAAM,mBAAmB,GACvB,uBAAuB,CAAC,iBAAiB,EAAsB,CAAC;IAElE,IAAI,MAAM,CAAC,SAAS,KAAK,IAAI,EAAE;QAC7B,mBAAmB,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;QAClC,mBAAmB,CAAC,GAAG,CAAC,KAAK,EAAE,MAAM,CAAC,CAAC;KACxC;SAAM,IAAI,MAAM,CAAC,SAAS,KAAK,KAAK,EAAE;QACrC,mBAAmB,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;QAClC,mBAAmB,CAAC,GAAG,CAAC,KAAK,EAAE,OAAO,CAAC,CAAC;KACzC;SAAM,IAAI,MAAM,CAAC,SAAS,KAAK,SAAS,EAAE;QACzC,mBAAmB,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;QAClC,mBAAmB,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;KACnC;IAED,OAAO;QACL,iBAAiB,EAAE;YACjB,GAAG,IAAA,kBAAS,EAAC,iBAAiB,CAAC;YAC/B,gBAAgB,EAAE,uBAAuB,CAAC,QAAQ,EAAE;SACrD;KACF,CAAC;AACJ,CAAC;AAhCD,0CAgCC;AAED,SAAgB,qBAAqB,CAAC,EACpC,MAAM,EACN,mBAAmB,EACnB,iBAAiB,GAKlB;IAGC,MAAM,wBAAwB,GAAG,IAAA,kBAAS,EAAC,iBAAiB,CAAC,CAAC;IAC9D,MAAM,uBAAuB,GAAG,mBAAmB,CAAC,KAAK,EAAE,CAAC;IAC5D,MAAM,mBAAmB,GACvB,uBAAuB,CAAC,iBAAiB,EAAsB,CAAC;IAElE,IAAI,MAAM,CAAC,GAAG,KAAK,aAAa,EAAE;QAChC,IAAI,MAAM,CAAC,KAAK,EAAE;YAChB,mBAAmB,CAAC,MAAM,CAAC,WAAW,CAAC,CAAC;SACzC;QACD,wBAAwB,CAAC,WAAW,GAAG,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC;KACvD;SAAM,IAAI,CAAC,MAAM,CAAC,KAAK,EAAE;QACxB,mBAAmB,CAAC,MAAM,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;KACxC;SAAM;QAGL,mBAAmB,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;QAClC,mBAAmB,CAAC,GAAG,CAAC,KAAK,EAAE,MAAM,CAAC,CAAC;QAEvC,mBAAmB,CAAC,GAAG,CAAC,MAAM,CAAC,GAAG,EAAE,MAAM,CAAC,KAAK,CAAC,CAAC;QAElD,IAAI,MAAM,CAAC,GAAG,KAAK,WAAW,EAAE;YAC9B,wBAAwB,CAAC,WAAW,GAAG,KAAK,CAAC;SAC9C;KACF;IAED,OAAO;QACL,iBAAiB,EAAE;YACjB,GAAG,wBAAwB;YAC3B,gBAAgB,EAAE,uBAAuB,CAAC,QAAQ,EAAE;SACrD;KACF,CAAC;AACJ,CAAC;AA1CD,sDA0CC"}
+{"version":3,"file":"tls-handler.js","sourceRoot":"","sources":["../../src/utils/tls-handler.ts"],"names":[],"mappings":";;;AAGA,mCAAmC;AAyBnC,SAAgB,eAAe,CAAC,EAC9B,MAAM,EACN,mBAAmB,EACnB,iBAAiB,GAKlB;IAGC,MAAM,uBAAuB,GAAG,mBAAmB,CAAC,KAAK,EAAE,CAAC;IAC5D,MAAM,mBAAmB,GACvB,uBAAuB,CAAC,iBAAiB,EAAsB,CAAC;IAElE,IAAI,MAAM,CAAC,SAAS,KAAK,IAAI,EAAE;QAC7B,mBAAmB,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;QAClC,mBAAmB,CAAC,GAAG,CAAC,KAAK,EAAE,MAAM,CAAC,CAAC;KACxC;SAAM,IAAI,MAAM,CAAC,SAAS,KAAK,KAAK,EAAE;QACrC,mBAAmB,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;QAClC,mBAAmB,CAAC,GAAG,CAAC,KAAK,EAAE,OAAO,CAAC,CAAC;KACzC;SAAM,IAAI,MAAM,CAAC,SAAS,KAAK,SAAS,EAAE;QACzC,mBAAmB,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;QAClC,mBAAmB,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;KACnC;IAED,OAAO;QACL,iBAAiB,EAAE;YACjB,GAAG,IAAA,kBAAS,EAAC,iBAAiB,CAAC;YAC/B,gBAAgB,EAAE,uBAAuB,CAAC,QAAQ,EAAE;SACrD;KACF,CAAC;AACJ,CAAC;AAhCD,0CAgCC;AAED,SAAgB,qBAAqB,CAAC,EACpC,MAAM,EACN,mBAAmB,EACnB,iBAAiB,GAKlB;IAGC,MAAM,wBAAwB,GAAG,IAAA,kBAAS,EAAC,iBAAiB,CAAC,CAAC;IAC9D,MAAM,uBAAuB,GAAG,mBAAmB,CAAC,KAAK,EAAE,CAAC;IAC5D,MAAM,mBAAmB,GACvB,uBAAuB,CAAC,iBAAiB,EAAsB,CAAC;IAElE,IAAI,MAAM,CAAC,GAAG,KAAK,aAAa,EAAE;QAChC,IAAI,MAAM,CAAC,KAAK,EAAE;YAChB,mBAAmB,CAAC,MAAM,CAAC,WAAW,CAAC,CAAC;YACxC,wBAAwB,CAAC,WAAW,GAAG,IAAI,CAAC;SAC7C;aAAM;YACL,OAAO,wBAAwB,CAAC,WAAW,CAAC;SAC7C;KACF;SAAM,IAAI,CAAC,MAAM,CAAC,KAAK,EAAE;QACxB,mBAAmB,CAAC,MAAM,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;KACxC;SAAM;QAGL,mBAAmB,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;QAClC,mBAAmB,CAAC,GAAG,CAAC,KAAK,EAAE,MAAM,CAAC,CAAC;QAEvC,mBAAmB,CAAC,GAAG,CAAC,MAAM,CAAC,GAAG,EAAE,MAAM,CAAC,KAAK,CAAC,CAAC;QAElD,IAAI,MAAM,CAAC,GAAG,KAAK,WAAW,EAAE;YAC9B,OAAO,wBAAwB,CAAC,WAAW,CAAC;SAC7C;KACF;IAED,OAAO;QACL,iBAAiB,EAAE;YACjB,GAAG,wBAAwB;YAC3B,gBAAgB,EAAE,uBAAuB,CAAC,QAAQ,EAAE;SACrD;KACF,CAAC;AACJ,CAAC;AA5CD,sDA4CC"}

package/dist/utils/url-options.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"url-options.d.ts","sourceRoot":"","sources":["../../src/utils/url-options.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,kBAAkB,EAAE,MAAM,SAAS,CAAC;AAElD,MAAM,WAAW,SAAS;IACxB,IAAI,EAAE,MAAM,kBAAkB,CAAC;IAC/B,KAAK,EAAE,MAAM,CAAC;CACf;AAED,eAAO,MAAM,kBAAkB;;;GA4C9B,CAAC"}
+{"version":3,"file":"url-options.d.ts","sourceRoot":"","sources":["../../src/utils/url-options.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,kBAAkB,EAAE,MAAM,SAAS,CAAC;AAElD,MAAM,WAAW,SAAS;IACxB,IAAI,EAAE,MAAM,kBAAkB,CAAC;IAC/B,KAAK,EAAE,MAAM,CAAC;CACf;AAED,eAAO,MAAM,kBAAkB;;;GAkD9B,CAAC"}

package/dist/utils/url-options.js

@@ -43,7 +43,13 @@ exports.editableUrlOptions = [
     },
     {
         title: 'Miscellaneous Configuration',
-        values: ['appName', 'retryReads', 'retryWrites', 'uuidRepresentation'],
+        values: [
+            'appName',
+            'retryReads',
+            'retryWrites',
+            'srvMaxHosts',
+            'uuidRepresentation',
+        ],
     },
 ];
 //# sourceMappingURL=url-options.js.map

package/dist/utils/url-options.js.map

@@ -1 +1 @@
-{"version":3,"file":"url-options.js","sourceRoot":"","sources":["../../src/utils/url-options.ts"],"names":[],"mappings":";;;AAOa,QAAA,kBAAkB,GAAG;IAChC;QACE,KAAK,EAAE,4BAA4B;QACnC,MAAM,EAAE,CAAC,kBAAkB,EAAE,iBAAiB,CAAC;KAChD;IACD;QACE,KAAK,EAAE,qBAAqB;QAC5B,MAAM,EAAE,CAAC,aAAa,EAAE,sBAAsB,CAAC;KAChD;IACD;QACE,KAAK,EAAE,yBAAyB;QAChC,MAAM,EAAE;YACN,aAAa;YACb,aAAa;YACb,eAAe;YACf,mBAAmB;YACnB,oBAAoB;SACrB;KACF;IACD;QACE,KAAK,EAAE,uBAAuB;QAC9B,MAAM,EAAE,CAAC,GAAG,EAAE,YAAY,EAAE,SAAS,CAAC;KACvC;IACD;QACE,KAAK,EAAE,sBAAsB;QAC7B,MAAM,EAAE,CAAC,kBAAkB,CAAC;KAC7B;IACD;QACE,KAAK,EAAE,0BAA0B;QACjC,MAAM,EAAE,CAAC,qBAAqB,EAAE,oBAAoB,CAAC;KACtD;IACD;QACE,KAAK,EAAE,gBAAgB;QACvB,MAAM,EAAE;YACN,kBAAkB;YAClB,0BAA0B;YAC1B,wBAAwB;YACxB,sBAAsB;SACvB;KACF;IACD;QACE,KAAK,EAAE,6BAA6B;QACpC,MAAM,EAAE,CAAC,SAAS,EAAE,YAAY,EAAE,aAAa,EAAE,oBAAoB,CAAC;KACvE;CACF,CAAC"}
+{"version":3,"file":"url-options.js","sourceRoot":"","sources":["../../src/utils/url-options.ts"],"names":[],"mappings":";;;AAOa,QAAA,kBAAkB,GAAG;IAChC;QACE,KAAK,EAAE,4BAA4B;QACnC,MAAM,EAAE,CAAC,kBAAkB,EAAE,iBAAiB,CAAC;KAChD;IACD;QACE,KAAK,EAAE,qBAAqB;QAC5B,MAAM,EAAE,CAAC,aAAa,EAAE,sBAAsB,CAAC;KAChD;IACD;QACE,KAAK,EAAE,yBAAyB;QAChC,MAAM,EAAE;YACN,aAAa;YACb,aAAa;YACb,eAAe;YACf,mBAAmB;YACnB,oBAAoB;SACrB;KACF;IACD;QACE,KAAK,EAAE,uBAAuB;QAC9B,MAAM,EAAE,CAAC,GAAG,EAAE,YAAY,EAAE,SAAS,CAAC;KACvC;IACD;QACE,KAAK,EAAE,sBAAsB;QAC7B,MAAM,EAAE,CAAC,kBAAkB,CAAC;KAC7B;IACD;QACE,KAAK,EAAE,0BAA0B;QACjC,MAAM,EAAE,CAAC,qBAAqB,EAAE,oBAAoB,CAAC;KACtD;IACD;QACE,KAAK,EAAE,gBAAgB;QACvB,MAAM,EAAE;YACN,kBAAkB;YAClB,0BAA0B;YAC1B,wBAAwB;YACxB,sBAAsB;SACvB;KACF;IACD;QACE,KAAK,EAAE,6BAA6B;QACpC,MAAM,EAAE;YACN,SAAS;YACT,YAAY;YACZ,aAAa;YACb,aAAa;YACb,oBAAoB;SACrB;KACF;CACF,CAAC"}

package/dist/utils/validation.d.ts

@@ -1,8 +1,8 @@
 import type { ConnectionOptions } from 'mongodb-data-service';
 import ConnectionString from 'mongodb-connection-string-url';
 import type { ConnectionStringParsingOptions } from 'mongodb-connection-string-url';
-export declare type FieldName = 'connectionString' | 'hostname' | 'hosts' | 'isSrv' | 'kerberosPrincipal' | 'password' | 'schema' | 'proxyHostname' | 'sshHostname' | 'sshIdentityKeyFile' | 'sshPassword' | 'sshUsername' | 'tls' | 'tlsCertificateKeyFile' | 'username';
-export declare type TabId = 'general' | 'authentication' | 'tls' | 'proxy' | 'advanced';
+export declare type FieldName = 'connectionString' | 'hostname' | 'hosts' | 'isSrv' | 'kerberosPrincipal' | 'keyVaultNamespace' | 'kmip.endpoint' | 'local.key' | 'password' | 'schema' | 'proxyHostname' | 'schemaMap' | 'encryptedFieldsMap' | 'sshHostname' | 'sshIdentityKeyFile' | 'sshPassword' | 'sshUsername' | 'tls' | 'tlsCertificateKeyFile' | 'username';
+export declare type TabId = 'general' | 'authentication' | 'tls' | 'proxy' | 'csfle' | 'advanced';
 declare type ConnectionFormErrorWithField = {
     fieldName: FieldName;
     fieldTab: TabId;

package/dist/utils/validation.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"validation.d.ts","sourceRoot":"","sources":["../../src/utils/validation.ts"],"names":[],"mappings":"AAEA,OAAO,KAAK,EAAE,iBAAiB,EAAE,MAAM,sBAAsB,CAAC;AAC9D,OAAO,gBAAgB,MAAM,+BAA+B,CAAC;AAC7D,OAAO,KAAK,EAAE,8BAA8B,EAAE,MAAM,+BAA+B,CAAC;AAEpF,oBAAY,SAAS,GACjB,kBAAkB,GAClB,UAAU,GACV,OAAO,GACP,OAAO,GACP,mBAAmB,GACnB,UAAU,GACV,QAAQ,GACR,eAAe,GACf,aAAa,GACb,oBAAoB,GACpB,aAAa,GACb,aAAa,GACb,KAAK,GACL,uBAAuB,GACvB,UAAU,CAAC;AAEf,oBAAY,KAAK,GAAG,SAAS,GAAG,gBAAgB,GAAG,KAAK,GAAG,OAAO,GAAG,UAAU,CAAC;AAEhF,aAAK,4BAA4B,GAAG;IAClC,SAAS,EAAE,SAAS,CAAC;IACrB,QAAQ,EAAE,KAAK,CAAC;IAChB,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,OAAO,EAAE,MAAM,CAAC;CACjB,CAAC;AACF,aAAK,+BAA+B,GAAG;IACrC,SAAS,CAAC,EAAE,KAAK,CAAC;IAClB,QAAQ,CAAC,EAAE,KAAK,CAAC;IACjB,UAAU,CAAC,EAAE,KAAK,CAAC;IACnB,OAAO,EAAE,MAAM,CAAC;CACjB,CAAC;AACF,oBAAY,mBAAmB,GAC3B,4BAA4B,GAC5B,+BAA+B,CAAC;AACpC,MAAM,WAAW,qBAAqB;IACpC,OAAO,EAAE,MAAM,CAAC;CACjB;AAED,wBAAgB,gBAAgB,CAC9B,MAAM,EAAE,mBAAmB,EAAE,EAC7B,KAAK,EAAE,KAAK,GACX,mBAAmB,EAAE,CAEvB;AAED,wBAAgB,uBAAuB,CACrC,MAAM,EAAE,mBAAmB,EAAE,EAC7B,SAAS,EAAE,SAAS,GACnB,MAAM,GAAG,SAAS,CAEpB;AAED,wBAAgB,iBAAiB,CAC/B,MAAM,EAAE,mBAAmB,EAAE,EAC7B,SAAS,EAAE,SAAS,GACnB,OAAO,CAET;AAED,wBAAgB,+BAA+B,CAC7C,MAAM,EAAE,mBAAmB,EAAE,EAC7B,SAAS,EAAE,SAAS,EACpB,UAAU,EAAE,MAAM,GACjB,MAAM,GAAG,SAAS,CAIpB;AAED,wBAAgB,+BAA+B,CAC7C,iBAAiB,EAAE,iBAAiB,EACpC,cAAc,CAAC,EAAE,8BAA8B,GAC9C,mBAAmB,EAAE,CAYvB;AA4JD,wBAAgB,QAAQ,CAAC,gBAAgB,EAAE,gBAAgB,GAAG,OAAO,CAQpE;AAED,wBAAgB,iCAAiC,CAC/C,iBAAiB,EAAE,iBAAiB,GACnC,qBAAqB,EAAE,CAuBzB"}
+{"version":3,"file":"validation.d.ts","sourceRoot":"","sources":["../../src/utils/validation.ts"],"names":[],"mappings":"AAEA,OAAO,KAAK,EAAE,iBAAiB,EAAE,MAAM,sBAAsB,CAAC;AAC9D,OAAO,gBAAgB,MAAM,+BAA+B,CAAC;AAC7D,OAAO,KAAK,EAAE,8BAA8B,EAAE,MAAM,+BAA+B,CAAC;AAGpF,oBAAY,SAAS,GACjB,kBAAkB,GAClB,UAAU,GACV,OAAO,GACP,OAAO,GACP,mBAAmB,GACnB,mBAAmB,GACnB,eAAe,GACf,WAAW,GACX,UAAU,GACV,QAAQ,GACR,eAAe,GACf,WAAW,GACX,oBAAoB,GACpB,aAAa,GACb,oBAAoB,GACpB,aAAa,GACb,aAAa,GACb,KAAK,GACL,uBAAuB,GACvB,UAAU,CAAC;AAEf,oBAAY,KAAK,GACb,SAAS,GACT,gBAAgB,GAChB,KAAK,GACL,OAAO,GACP,OAAO,GACP,UAAU,CAAC;AAEf,aAAK,4BAA4B,GAAG;IAClC,SAAS,EAAE,SAAS,CAAC;IACrB,QAAQ,EAAE,KAAK,CAAC;IAChB,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,OAAO,EAAE,MAAM,CAAC;CACjB,CAAC;AACF,aAAK,+BAA+B,GAAG;IACrC,SAAS,CAAC,EAAE,KAAK,CAAC;IAClB,QAAQ,CAAC,EAAE,KAAK,CAAC;IACjB,UAAU,CAAC,EAAE,KAAK,CAAC;IACnB,OAAO,EAAE,MAAM,CAAC;CACjB,CAAC;AACF,oBAAY,mBAAmB,GAC3B,4BAA4B,GAC5B,+BAA+B,CAAC;AACpC,MAAM,WAAW,qBAAqB;IACpC,OAAO,EAAE,MAAM,CAAC;CACjB;AAED,wBAAgB,gBAAgB,CAC9B,MAAM,EAAE,mBAAmB,EAAE,EAC7B,KAAK,EAAE,KAAK,GACX,mBAAmB,EAAE,CAEvB;AAED,wBAAgB,uBAAuB,CACrC,MAAM,EAAE,mBAAmB,EAAE,EAC7B,SAAS,EAAE,SAAS,GACnB,MAAM,GAAG,SAAS,CAEpB;AAED,wBAAgB,iBAAiB,CAC/B,MAAM,EAAE,mBAAmB,EAAE,EAC7B,SAAS,EAAE,SAAS,GACnB,OAAO,CAET;AAED,wBAAgB,+BAA+B,CAC7C,MAAM,EAAE,mBAAmB,EAAE,EAC7B,SAAS,EAAE,SAAS,EACpB,UAAU,EAAE,MAAM,GACjB,MAAM,GAAG,SAAS,CAIpB;AAED,wBAAgB,+BAA+B,CAC7C,iBAAiB,EAAE,iBAAiB,EACpC,cAAc,CAAC,EAAE,8BAA8B,GAC9C,mBAAmB,EAAE,CAavB;AA0ND,wBAAgB,QAAQ,CAAC,gBAAgB,EAAE,gBAAgB,GAAG,OAAO,CAQpE;AAED,wBAAgB,iCAAiC,CAC/C,iBAAiB,EAAE,iBAAiB,GACnC,qBAAqB,EAAE,CAwBzB"}

package/dist/utils/validation.js

@@ -6,6 +6,7 @@ Object.defineProperty(exports, "__esModule", { value: true });
 exports.validateConnectionOptionsWarnings = exports.isSecure = exports.validateConnectionOptionsErrors = exports.errorMessageByFieldNameAndIndex = exports.fieldNameHasError = exports.errorMessageByFieldName = exports.errorsByFieldTab = void 0;
 const mongodb_build_info_1 = require("mongodb-build-info");
 const mongodb_connection_string_url_1 = __importDefault(require("mongodb-connection-string-url"));
+const csfle_handler_1 = require("../utils/csfle-handler");
 function errorsByFieldTab(errors, tabId) {
     return errors.filter((error) => error.fieldTab === tabId);
 }
@@ -25,9 +26,11 @@ function errorMessageByFieldNameAndIndex(errors, fieldName, fieldIndex) {
 }
 exports.errorMessageByFieldNameAndIndex = errorMessageByFieldNameAndIndex;
 function validateConnectionOptionsErrors(connectionOptions, parsingOptions) {
+    var _a, _b;
     const connectionString = new mongodb_connection_string_url_1.default(connectionOptions.connectionString, { looseValidation: true, ...parsingOptions });
     return [
         ...validateAuthMechanismErrors(connectionString),
+        ...validateCSFLEErrors((_b = (_a = connectionOptions.fleOptions) === null || _a === void 0 ? void 0 : _a.autoEncryption) !== null && _b !== void 0 ? _b : {}),
         ...(connectionOptions.sshTunnel
             ? validateSSHTunnelErrors(connectionOptions.sshTunnel)
             : validateSocksProxyErrors(connectionString)),
@@ -157,6 +160,54 @@ function validateSocksProxyErrors(connectionString) {
     }
     return errors;
 }
+function validateCSFLEErrors(autoEncryptionOptions) {
+    var _a, _b, _c, _d, _e;
+    const errors = [];
+    for (const fieldName of ['schemaMap', 'encryptedFieldsMap']) {
+        const encryptedFieldConfigError = (_a = autoEncryptionOptions[fieldName]) === null || _a === void 0 ? void 0 : _a['$compass.error'];
+        if (encryptedFieldConfigError) {
+            errors.push({
+                fieldTab: 'csfle',
+                fieldName,
+                message: `EncryptedFieldConfig is invalid: ${encryptedFieldConfigError}`,
+            });
+        }
+    }
+    if (autoEncryptionOptions.keyVaultNamespace &&
+        !autoEncryptionOptions.keyVaultNamespace.includes('.')) {
+        errors.push({
+            fieldTab: 'csfle',
+            fieldName: 'keyVaultNamespace',
+            message: 'Key Vault namespace must be of the format <db>.<collection>',
+        });
+    }
+    if (!autoEncryptionOptions.keyVaultNamespace &&
+        (0, csfle_handler_1.hasAnyCsfleOption)(autoEncryptionOptions)) {
+        errors.push({
+            fieldTab: 'csfle',
+            fieldName: 'keyVaultNamespace',
+            message: 'Key Vault namespace must be specified for In-Use-Encryption-enabled connections',
+        });
+    }
+    const kmsProviders = (_b = autoEncryptionOptions.kmsProviders) !== null && _b !== void 0 ? _b : {};
+    if (typeof ((_c = kmsProviders.local) === null || _c === void 0 ? void 0 : _c.key) === 'string' &&
+        !/[a-zA-Z0-9+/-_=]{128}/.test(kmsProviders.local.key)) {
+        errors.push({
+            fieldTab: 'csfle',
+            fieldName: 'local.key',
+            message: 'Local key must be a Base64-encoded 96-byte string',
+        });
+    }
+    if (typeof ((_d = kmsProviders.kmip) === null || _d === void 0 ? void 0 : _d.endpoint) === 'string' &&
+        !((_e = kmsProviders.kmip) === null || _e === void 0 ? void 0 : _e.endpoint.includes(':'))) {
+        errors.push({
+            fieldTab: 'csfle',
+            fieldName: 'kmip.endpoint',
+            message: 'KMIP endpoint must be of the format <host>:<port>',
+        });
+    }
+    return errors;
+}
 function isSecure(connectionString) {
     const sslParam = connectionString.searchParams.get('ssl');
     const tlsParam = connectionString.searchParams.get('tls');
@@ -185,9 +236,20 @@ function validateConnectionOptionsWarnings(connectionOptions) {
         ...validateDirectConnectionAndMultiHostWarnings(connectionString),
         ...validateTLSAndHostWarnings(connectionString),
         ...validateSocksWarnings(connectionString),
+        ...validateCSFLEWarnings(connectionOptions),
     ];
 }
 exports.validateConnectionOptionsWarnings = validateConnectionOptionsWarnings;
+function validateCSFLEWarnings(connectionOptions) {
+    var _a;
+    const warnings = [];
+    if ((_a = connectionOptions.fleOptions) === null || _a === void 0 ? void 0 : _a.storeCredentials) {
+        warnings.push({
+            message: 'In-Use Encryption KMS provider credentials will be stored to disk.',
+        });
+    }
+    return warnings;
+}
 function validateCertificateValidationWarnings(connectionString) {
     const warnings = [];
     if (!isSecure(connectionString)) {