@nullix/zod-mongoose-studio 1.0.13 → 2.0.0

package/.output/server/node_modules/kareem/package.json

@@ -1,6 +1,6 @@
 {
   "name": "kareem",
-  "version": "2.6.3",
+  "version": "3.3.0",
   "description": "Next-generation take on pre/post function hooks",
   "main": "index.js",
   "scripts": {
@@ -17,12 +17,12 @@
     "acquit": "1.x",
     "acquit-ignore": "0.2.x",
     "eslint": "8.20.0",
-    "mocha": "9.2.0",
+    "mocha": "11.x",
     "nyc": "15.1.0"
   },
   "author": "Valeri Karpov <val@karpov.io>",
   "license": "Apache-2.0",
   "engines": {
-    "node": ">=12.0.0"
+    "node": ">=18.0.0"
   }
 }

package/.output/server/node_modules/mongodb/lib/bson.js

@@ -1,6 +1,6 @@
 "use strict";
 Object.defineProperty(exports, "__esModule", { value: true });
-exports.toUTF8 = exports.getBigInt64LE = exports.getFloat64LE = exports.getInt32LE = exports.UUID = exports.Timestamp = exports.serialize = exports.ObjectId = exports.MinKey = exports.MaxKey = exports.Long = exports.Int32 = exports.EJSON = exports.Double = exports.deserialize = exports.Decimal128 = exports.DBRef = exports.Code = exports.calculateObjectSize = exports.BSONType = exports.BSONSymbol = exports.BSONRegExp = exports.BSONError = exports.BSON = exports.Binary = void 0;
+exports.setUint32LE = exports.readInt32LE = exports.UUID = exports.Timestamp = exports.serialize = exports.ObjectId = exports.NumberUtils = exports.MinKey = exports.MaxKey = exports.Long = exports.Int32 = exports.EJSON = exports.Double = exports.deserialize = exports.Decimal128 = exports.DBRef = exports.Code = exports.calculateObjectSize = exports.ByteUtils = exports.BSONType = exports.BSONSymbol = exports.BSONRegExp = exports.BSONError = exports.BSON = exports.Binary = void 0;
 exports.parseToElementsToArray = parseToElementsToArray;
 exports.pluckBSONSerializeOptions = pluckBSONSerializeOptions;
 exports.resolveBSONOptions = resolveBSONOptions;
@@ -14,6 +14,7 @@ Object.defineProperty(exports, "BSONError", { enumerable: true, get: function ()
 Object.defineProperty(exports, "BSONRegExp", { enumerable: true, get: function () { return bson_2.BSONRegExp; } });
 Object.defineProperty(exports, "BSONSymbol", { enumerable: true, get: function () { return bson_2.BSONSymbol; } });
 Object.defineProperty(exports, "BSONType", { enumerable: true, get: function () { return bson_2.BSONType; } });
+Object.defineProperty(exports, "ByteUtils", { enumerable: true, get: function () { return bson_2.ByteUtils; } });
 Object.defineProperty(exports, "calculateObjectSize", { enumerable: true, get: function () { return bson_2.calculateObjectSize; } });
 Object.defineProperty(exports, "Code", { enumerable: true, get: function () { return bson_2.Code; } });
 Object.defineProperty(exports, "DBRef", { enumerable: true, get: function () { return bson_2.DBRef; } });
@@ -25,6 +26,7 @@ Object.defineProperty(exports, "Int32", { enumerable: true, get: function () { r
 Object.defineProperty(exports, "Long", { enumerable: true, get: function () { return bson_2.Long; } });
 Object.defineProperty(exports, "MaxKey", { enumerable: true, get: function () { return bson_2.MaxKey; } });
 Object.defineProperty(exports, "MinKey", { enumerable: true, get: function () { return bson_2.MinKey; } });
+Object.defineProperty(exports, "NumberUtils", { enumerable: true, get: function () { return bson_2.NumberUtils; } });
 Object.defineProperty(exports, "ObjectId", { enumerable: true, get: function () { return bson_2.ObjectId; } });
 Object.defineProperty(exports, "serialize", { enumerable: true, get: function () { return bson_2.serialize; } });
 Object.defineProperty(exports, "Timestamp", { enumerable: true, get: function () { return bson_2.Timestamp; } });
@@ -33,10 +35,30 @@ function parseToElementsToArray(bytes, offset) {
     const res = bson_1.BSON.onDemand.parseToElements(bytes, offset);
     return Array.isArray(res) ? res : [...res];
 }
-exports.getInt32LE = bson_1.BSON.onDemand.NumberUtils.getInt32LE;
-exports.getFloat64LE = bson_1.BSON.onDemand.NumberUtils.getFloat64LE;
-exports.getBigInt64LE = bson_1.BSON.onDemand.NumberUtils.getBigInt64LE;
-exports.toUTF8 = bson_1.BSON.onDemand.ByteUtils.toUTF8;
+// validates buffer inputs, used for read operations
+const validateBufferInputs = (buffer, offset, length) => {
+    if (offset < 0 || offset + length > buffer.length) {
+        throw new RangeError(`Attempt to access memory outside buffer bounds: buffer length: ${buffer.length}, offset: ${offset}, length: ${length}`);
+    }
+};
+// readInt32LE, reads a 32-bit integer from buffer at given offset
+// throws if offset is out of bounds
+const readInt32LE = (buffer, offset) => {
+    validateBufferInputs(buffer, offset, 4);
+    return bson_1.NumberUtils.getInt32LE(buffer, offset);
+};
+exports.readInt32LE = readInt32LE;
+const setUint32LE = (destination, offset, value) => {
+    destination[offset] = value;
+    value >>>= 8;
+    destination[offset + 1] = value;
+    value >>>= 8;
+    destination[offset + 2] = value;
+    value >>>= 8;
+    destination[offset + 3] = value;
+    return 4;
+};
+exports.setUint32LE = setUint32LE;
 function pluckBSONSerializeOptions(options) {
     const { fieldsAsRaw, useBigInt64, promoteValues, promoteBuffers, promoteLongs, serializeFunctions, ignoreUndefined, bsonRegExp, raw, enableUtf8Validation } = options;
     return {

package/.output/server/node_modules/mongodb/lib/bulk/common.js

@@ -300,14 +300,14 @@ async function executeCommands(bulkOperation, options) {
         if (bulkOperation.s.checkKeys === false) {
             finalOptions.checkKeys = false;
         }
-        if (finalOptions.retryWrites) {
+        if (bulkOperation.retryWrites) {
             if (isUpdateBatch(batch)) {
-                finalOptions.retryWrites =
-                    finalOptions.retryWrites && !batch.operations.some(op => op.multi);
+                bulkOperation.retryWrites =
+                    bulkOperation.retryWrites && !batch.operations.some(op => op.multi);
             }
             if (isDeleteBatch(batch)) {
-                finalOptions.retryWrites =
-                    finalOptions.retryWrites && !batch.operations.some(op => op.limit === 0);
+                bulkOperation.retryWrites =
+                    bulkOperation.retryWrites && !batch.operations.some(op => op.limit === 0);
             }
         }
         const operation = isInsertBatch(batch)
@@ -503,6 +503,7 @@ class BulkOperationBase {
      */
     constructor(collection, options, isOrdered) {
         this.collection = collection;
+        this.retryWrites = collection.db.options?.retryWrites;
         // determine whether bulkOperation is ordered or unordered
         this.isOrdered = isOrdered;
         const topology = (0, utils_1.getTopology)(collection);
@@ -528,9 +529,6 @@ class BulkOperationBase {
         //     # of bytes = length of (string representation of (maxWriteBatchSize - 1))
         //   + 1 bytes for null terminator
         const maxKeySize = (maxWriteBatchSize - 1).toString(10).length + 2;
-        // Final options for retryable writes
-        let finalOptions = Object.assign({}, options);
-        finalOptions = (0, utils_1.applyRetryableWrites)(finalOptions, collection.db);
         // Final results
         const bulkResult = {
             ok: 1,
@@ -571,7 +569,7 @@ class BulkOperationBase {
             // Topology
             topology,
             // Options
-            options: finalOptions,
+            options: options,
             // BSON options
             bsonOptions: (0, bson_1.resolveBSONOptions)(options),
             // Current operation

package/.output/server/node_modules/mongodb/lib/change_stream.js

@@ -1,6 +1,7 @@
 "use strict";
 Object.defineProperty(exports, "__esModule", { value: true });
 exports.ChangeStream = void 0;
+exports.filterOutOptions = filterOutOptions;
 const collection_1 = require("./collection");
 const constants_1 = require("./constants");
 const abstract_cursor_1 = require("./cursor/abstract_cursor");
@@ -9,17 +10,9 @@ const db_1 = require("./db");
 const error_1 = require("./error");
 const mongo_client_1 = require("./mongo_client");
 const mongo_types_1 = require("./mongo_types");
-const resource_management_1 = require("./resource_management");
+const server_selection_1 = require("./sdam/server_selection");
 const timeout_1 = require("./timeout");
 const utils_1 = require("./utils");
-const CHANGE_STREAM_OPTIONS = [
-    'resumeAfter',
-    'startAfter',
-    'startAtOperationTime',
-    'fullDocument',
-    'fullDocumentBeforeChange',
-    'showExpandedEvents'
-];
 const CHANGE_DOMAIN_TYPES = {
     COLLECTION: Symbol('Collection'),
     DATABASE: Symbol('Database'),
@@ -28,15 +21,46 @@ const CHANGE_DOMAIN_TYPES = {
 const CHANGE_STREAM_EVENTS = [constants_1.RESUME_TOKEN_CHANGED, constants_1.END, constants_1.CLOSE];
 const NO_RESUME_TOKEN_ERROR = 'A change stream document has been received that lacks a resume token (_id).';
 const CHANGESTREAM_CLOSED_ERROR = 'ChangeStream is closed';
+const INVALID_STAGE_OPTIONS = buildDisallowedChangeStreamOptions();
+function filterOutOptions(options) {
+    return Object.fromEntries(Object.entries(options).filter(([k, _]) => !INVALID_STAGE_OPTIONS.has(k)));
+}
 /**
  * Creates a new Change Stream instance. Normally created using {@link Collection#watch|Collection.watch()}.
  * @public
  */
 class ChangeStream extends mongo_types_1.TypedEventEmitter {
-    /** @internal */
-    async asyncDispose() {
+    /**
+     * @experimental
+     * An alias for {@link ChangeStream.close|ChangeStream.close()}.
+     */
+    async [Symbol.asyncDispose]() {
         await this.close();
     }
+    /** @event */
+    static { this.RESPONSE = constants_1.RESPONSE; }
+    /** @event */
+    static { this.MORE = constants_1.MORE; }
+    /** @event */
+    static { this.INIT = constants_1.INIT; }
+    /** @event */
+    static { this.CLOSE = constants_1.CLOSE; }
+    /**
+     * Fired for each new matching change in the specified namespace. Attaching a `change`
+     * event listener to a Change Stream will switch the stream into flowing mode. Data will
+     * then be passed as soon as it is available.
+     * @event
+     */
+    static { this.CHANGE = constants_1.CHANGE; }
+    /** @event */
+    static { this.END = constants_1.END; }
+    /** @event */
+    static { this.ERROR = constants_1.ERROR; }
+    /**
+     * Emitted each time the change stream stores a new resume token.
+     * @event
+     */
+    static { this.RESUME_TOKEN_CHANGED = constants_1.RESUME_TOKEN_CHANGED; }
     /**
      * @internal
      *
@@ -96,6 +120,10 @@ class ChangeStream extends mongo_types_1.TypedEventEmitter {
     get resumeToken() {
         return this.cursor?.resumeToken;
     }
+    /** Returns the currently buffered documents length of the underlying cursor. */
+    bufferedCount() {
+        return this.cursor?.bufferedCount() ?? 0;
+    }
     /** Check if there is any document still available in the Change Stream */
     async hasNext() {
         this._setIsIterator();
@@ -257,12 +285,11 @@ class ChangeStream extends mongo_types_1.TypedEventEmitter {
      *
      * @throws MongoChangeStreamError if the underlying cursor or the change stream is closed
      */
-    stream(options) {
+    stream() {
         if (this.closed) {
             throw new error_1.MongoChangeStreamError(CHANGESTREAM_CLOSED_ERROR);
         }
-        this.streamOptions = options;
-        return this.cursor.stream(options);
+        return this.cursor.stream();
     }
     /** @internal */
     _setIsEmitter() {
@@ -285,7 +312,7 @@ class ChangeStream extends mongo_types_1.TypedEventEmitter {
      * @internal
      */
     _createChangeStreamCursor(options) {
-        const changeStreamStageOptions = (0, utils_1.filterOptions)(options, CHANGE_STREAM_OPTIONS);
+        const changeStreamStageOptions = filterOutOptions(options);
         if (this.type === CHANGE_DOMAIN_TYPES.CLUSTER) {
             changeStreamStageOptions.allChangesForCluster = true;
         }
@@ -425,7 +452,8 @@ class ChangeStream extends mongo_types_1.TypedEventEmitter {
         try {
             await topology.selectServer(this.cursor.readPreference, {
                 operationName: 'reconnect topology in change stream',
-                timeoutContext: this.timeoutContext
+                timeoutContext: this.timeoutContext,
+                deprioritizedServers: new server_selection_1.DeprioritizedServers()
             });
             this.cursor = this._createChangeStreamCursor(this.cursor.resumeOptions);
         }
@@ -437,29 +465,53 @@ class ChangeStream extends mongo_types_1.TypedEventEmitter {
     }
 }
 exports.ChangeStream = ChangeStream;
-/** @event */
-ChangeStream.RESPONSE = constants_1.RESPONSE;
-/** @event */
-ChangeStream.MORE = constants_1.MORE;
-/** @event */
-ChangeStream.INIT = constants_1.INIT;
-/** @event */
-ChangeStream.CLOSE = constants_1.CLOSE;
 /**
- * Fired for each new matching change in the specified namespace. Attaching a `change`
- * event listener to a Change Stream will switch the stream into flowing mode. Data will
- * then be passed as soon as it is available.
- * @event
+ * This function returns a list of options that are *not* supported by the $changeStream
+ * aggregation stage.  This is best-effort - it uses the options "officially supported" by the driver
+ * to derive a list of known, unsupported options for the $changeStream stage.
+ *
+ * Notably, at runtime, users can still provide options unknown to the driver and the driver will
+ * *not* filter them out of the options object (see NODE-5510).
  */
-ChangeStream.CHANGE = constants_1.CHANGE;
-/** @event */
-ChangeStream.END = constants_1.END;
-/** @event */
-ChangeStream.ERROR = constants_1.ERROR;
-/**
- * Emitted each time the change stream stores a new resume token.
- * @event
- */
-ChangeStream.RESUME_TOKEN_CHANGED = constants_1.RESUME_TOKEN_CHANGED;
-(0, resource_management_1.configureResourceManagement)(ChangeStream.prototype);
+function buildDisallowedChangeStreamOptions() {
+    const denyList = {
+        allowDiskUse: '',
+        authdb: '',
+        batchSize: '',
+        bsonRegExp: '',
+        bypassDocumentValidation: '',
+        bypassPinningCheck: '',
+        checkKeys: '',
+        collation: '',
+        comment: '',
+        cursor: '',
+        dbName: '',
+        enableUtf8Validation: '',
+        explain: '',
+        fieldsAsRaw: '',
+        hint: '',
+        ignoreUndefined: '',
+        let: '',
+        maxAwaitTimeMS: '',
+        maxTimeMS: '',
+        omitMaxTimeMS: '',
+        out: '',
+        promoteBuffers: '',
+        promoteLongs: '',
+        promoteValues: '',
+        raw: '',
+        rawData: '',
+        readConcern: '',
+        readPreference: '',
+        serializeFunctions: '',
+        session: '',
+        timeoutContext: '',
+        timeoutMS: '',
+        timeoutMode: '',
+        useBigInt64: '',
+        willRetryWrite: '',
+        writeConcern: ''
+    };
+    return new Set(Object.keys(denyList));
+}
 //# sourceMappingURL=change_stream.js.map

package/.output/server/node_modules/mongodb/lib/client-side-encryption/auto_encrypter.js

@@ -10,7 +10,6 @@ const error_1 = require("../error");
 const mongo_client_1 = require("../mongo_client");
 const utils_1 = require("../utils");
 const client_encryption_1 = require("./client_encryption");
-const cryptoCallbacks = require("./crypto_callbacks");
 const errors_1 = require("./errors");
 const mongocryptd_manager_1 = require("./mongocryptd_manager");
 const providers_1 = require("./providers");
@@ -28,6 +27,7 @@ exports.AutoEncryptionLoggerLevel = Object.freeze({
  * **NOTE**: Not meant to be instantiated directly, this is for internal use only.
  */
 class AutoEncrypter {
+    static { _a = constants_1.kDecorateResult; }
     /** @internal */
     static getMongoCrypt() {
         const encryption = (0, deps_1.getMongoDBClientEncryption)();
@@ -107,22 +107,30 @@ class AutoEncrypter {
             throw new errors_1.MongoCryptInvalidArgumentError('Can only provide a custom AWS credential provider when the state machine is configured for automatic AWS credential fetching');
         }
         const mongoCryptOptions = {
-            enableMultipleCollinfo: true,
-            cryptoCallbacks
+            errorWrapper: errors_1.defaultErrorWrapper
         };
         if (options.schemaMap) {
-            mongoCryptOptions.schemaMap = Buffer.isBuffer(options.schemaMap)
-                ? options.schemaMap
-                : (0, bson_1.serialize)(options.schemaMap);
+            if (bson_1.ByteUtils.isUint8Array(options.schemaMap)) {
+                mongoCryptOptions.schemaMap = options.schemaMap;
+            }
+            else {
+                mongoCryptOptions.schemaMap = (0, bson_1.serialize)(options.schemaMap);
+            }
         }
         if (options.encryptedFieldsMap) {
-            mongoCryptOptions.encryptedFieldsMap = Buffer.isBuffer(options.encryptedFieldsMap)
-                ? options.encryptedFieldsMap
-                : (0, bson_1.serialize)(options.encryptedFieldsMap);
+            if (bson_1.ByteUtils.isUint8Array(options.encryptedFieldsMap)) {
+                mongoCryptOptions.encryptedFieldsMap = options.encryptedFieldsMap;
+            }
+            else {
+                mongoCryptOptions.encryptedFieldsMap = (0, bson_1.serialize)(options.encryptedFieldsMap);
+            }
+        }
+        if (bson_1.ByteUtils.isUint8Array(this._kmsProviders)) {
+            mongoCryptOptions.kmsProviders = this._kmsProviders;
+        }
+        else {
+            mongoCryptOptions.kmsProviders = (0, bson_1.serialize)(this._kmsProviders);
         }
-        mongoCryptOptions.kmsProviders = !Buffer.isBuffer(this._kmsProviders)
-            ? (0, bson_1.serialize)(this._kmsProviders)
-            : this._kmsProviders;
         if (options.options?.logger) {
             mongoCryptOptions.logger = options.options.logger;
         }
@@ -215,7 +223,7 @@ class AutoEncrypter {
             // If `bypassAutoEncryption` has been specified, don't encrypt
             return cmd;
         }
-        const commandBuffer = Buffer.isBuffer(cmd) ? cmd : (0, bson_1.serialize)(cmd, options);
+        const commandBuffer = (0, bson_1.serialize)(cmd, options);
         const context = this._mongocrypt.makeEncryptionContext(utils_1.MongoDBCollectionNamespace.fromString(ns).db, commandBuffer);
         context.id = this._contextCounter++;
         context.ns = ns;
@@ -270,5 +278,4 @@ class AutoEncrypter {
     }
 }
 exports.AutoEncrypter = AutoEncrypter;
-_a = constants_1.kDecorateResult;
 //# sourceMappingURL=auto_encrypter.js.map

package/.output/server/node_modules/mongodb/lib/client-side-encryption/client_encryption.js

@@ -6,7 +6,6 @@ const bson_1 = require("../bson");
 const deps_1 = require("../deps");
 const timeout_1 = require("../timeout");
 const utils_1 = require("../utils");
-const cryptoCallbacks = require("./crypto_callbacks");
 const errors_1 = require("./errors");
 const index_1 = require("./providers/index");
 const state_machine_1 = require("./state_machine");
@@ -67,10 +66,8 @@ class ClientEncryption {
         }
         const mongoCryptOptions = {
             ...options,
-            cryptoCallbacks,
-            kmsProviders: !Buffer.isBuffer(this._kmsProviders)
-                ? (0, bson_1.serialize)(this._kmsProviders)
-                : this._kmsProviders
+            kmsProviders: (0, bson_1.serialize)(this._kmsProviders),
+            errorWrapper: errors_1.defaultErrorWrapper
         };
         this._keyVaultNamespace = options.keyVaultNamespace;
         this._keyVaultClient = options.keyVaultClient || client;

package/.output/server/node_modules/mongodb/lib/client-side-encryption/errors.js

@@ -1,6 +1,6 @@
 "use strict";
 Object.defineProperty(exports, "__esModule", { value: true });
-exports.MongoCryptKMSRequestNetworkTimeoutError = exports.MongoCryptAzureKMSRequestError = exports.MongoCryptCreateEncryptedCollectionError = exports.MongoCryptCreateDataKeyError = exports.MongoCryptInvalidArgumentError = exports.MongoCryptError = void 0;
+exports.MongoCryptKMSRequestNetworkTimeoutError = exports.MongoCryptAzureKMSRequestError = exports.MongoCryptCreateEncryptedCollectionError = exports.MongoCryptCreateDataKeyError = exports.MongoCryptInvalidArgumentError = exports.defaultErrorWrapper = exports.MongoCryptError = void 0;
 const error_1 = require("../error");
 /**
  * @public
@@ -26,6 +26,8 @@ class MongoCryptError extends error_1.MongoError {
     }
 }
 exports.MongoCryptError = MongoCryptError;
+const defaultErrorWrapper = (error) => new MongoCryptError(error.message, { cause: error });
+exports.defaultErrorWrapper = defaultErrorWrapper;
 /**
  * @public
  *

package/.output/server/node_modules/mongodb/lib/client-side-encryption/mongocryptd_manager.js

@@ -7,6 +7,7 @@ const error_1 = require("../error");
  * An internal class that handles spawning a mongocryptd.
  */
 class MongocryptdManager {
+    static { this.DEFAULT_MONGOCRYPTD_URI = 'mongodb://localhost:27020'; }
     constructor(extraOptions = {}) {
         this.spawnPath = '';
         this.spawnArgs = [];
@@ -81,5 +82,4 @@ class MongocryptdManager {
     }
 }
 exports.MongocryptdManager = MongocryptdManager;
-MongocryptdManager.DEFAULT_MONGOCRYPTD_URI = 'mongodb://localhost:27020';
 //# sourceMappingURL=mongocryptd_manager.js.map

package/.output/server/node_modules/mongodb/lib/client-side-encryption/state_machine.js

@@ -3,6 +3,7 @@ Object.defineProperty(exports, "__esModule", { value: true });
 exports.StateMachine = void 0;
 const fs = require("fs/promises");
 const net = require("net");
+const process = require("process");
 const tls = require("tls");
 const bson_1 = require("../bson");
 const abstract_cursor_1 = require("../cursor/abstract_cursor");

package/.output/server/node_modules/mongodb/lib/cmap/auth/aws4.js

@@ -0,0 +1,161 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.aws4Sign = aws4Sign;
+const bson_1 = require("../../bson");
+/**
+ * Calculates the SHA-256 hash of a string.
+ *
+ * @param str - String to hash.
+ * @returns Hexadecimal representation of the hash.
+ */
+const getHexSha256 = async (str) => {
+    const data = stringToBuffer(str);
+    const hashBuffer = await crypto.subtle.digest('SHA-256', data);
+    const hashHex = bson_1.ByteUtils.toHex(new Uint8Array(hashBuffer));
+    return hashHex;
+};
+/**
+ * Calculates the HMAC-SHA256 of a string using the provided key.
+ * @param key - Key to use for HMAC calculation. Can be a string or Uint8Array.
+ * @param str - String to calculate HMAC for.
+ * @returns Uint8Array containing the HMAC-SHA256 digest.
+ */
+const getHmacSha256 = async (key, str) => {
+    let keyData;
+    if (typeof key === 'string') {
+        keyData = stringToBuffer(key);
+    }
+    else {
+        keyData = key;
+    }
+    const importedKey = await crypto.subtle.importKey('raw', keyData, { name: 'HMAC', hash: { name: 'SHA-256' } }, false, ['sign']);
+    const strData = stringToBuffer(str);
+    const signature = await crypto.subtle.sign('HMAC', importedKey, strData);
+    const digest = new Uint8Array(signature);
+    return digest;
+};
+/**
+ * Converts header values according to AWS requirements,
+ * From https://docs.aws.amazon.com/IAM/latest/UserGuide/reference_sigv-create-signed-request.html#create-canonical-request
+ * For values, you must:
+    - trim any leading or trailing spaces.
+    - convert sequential spaces to a single space.
+ * @param value - Header value to convert.
+ * @returns - Converted header value.
+ */
+const convertHeaderValue = (value) => {
+    return value.toString().trim().replace(/\s+/g, ' ');
+};
+/**
+ * Returns a Uint8Array representation of a string, encoded in UTF-8.
+ * @param str - String to convert.
+ * @returns Uint8Array containing the UTF-8 encoded string.
+ */
+function stringToBuffer(str) {
+    const data = new Uint8Array(bson_1.ByteUtils.utf8ByteLength(str));
+    bson_1.ByteUtils.encodeUTF8Into(data, str, 0);
+    return data;
+}
+/**
+ * This method implements AWS Signature 4 logic for a very specific request format.
+ * The signing logic is described here: https://docs.aws.amazon.com/IAM/latest/UserGuide/reference_sigv-create-signed-request.html
+ */
+async function aws4Sign(options, credentials) {
+    /**
+     * From the spec: https://docs.aws.amazon.com/IAM/latest/UserGuide/reference_sigv-create-signed-request.html
+     *
+     * Summary of signing steps
+     * 1. Create a canonical request
+     *    Arrange the contents of your request (host, action, headers, etc.) into a standard canonical format. The canonical request is one of the inputs used to create the string to sign.
+     * 2. Create a hash of the canonical request
+     *    Hash the canonical request using the same algorithm that you used to create the hash of the payload. The hash of the canonical request is a string of lowercase hexadecimal characters.
+     * 3. Create a string to sign
+     *    Create a string to sign with the canonical request and extra information such as the algorithm, request date, credential scope, and the hash of the canonical request.
+     * 4. Derive a signing key
+     *    Use the secret access key to derive the key used to sign the request.
+     * 5. Calculate the signature
+     *    Perform a keyed hash operation on the string to sign using the derived signing key as the hash key.
+     * 6. Add the signature to the request
+     *    Add the calculated signature to an HTTP header or to the query string of the request.
+     */
+    // 1: Create a canonical request
+    // Date – The date and time used to sign the request.
+    const date = options.date;
+    // RequestDateTime – The date and time used in the credential scope. This value is the current UTC time in ISO 8601 format (for example, 20130524T000000Z).
+    const requestDateTime = date.toISOString().replace(/[:-]|\.\d{3}/g, '');
+    // RequestDate – The date used in the credential scope. This value is the current UTC date in YYYYMMDD format (for example, 20130524).
+    const requestDate = requestDateTime.substring(0, 8);
+    // Method – The HTTP request method. For us, this is always 'POST'.
+    const method = options.method;
+    // CanonicalUri – The URI-encoded version of the absolute path component URI, starting with the / that follows the domain name and up to the end of the string
+    // For our requests, this is always '/'
+    const canonicalUri = options.path;
+    // CanonicalQueryString – The URI-encoded query string parameters. For our requests, there are no query string parameters, so this is always an empty string.
+    const canonicalQuerystring = '';
+    // CanonicalHeaders – A list of request headers with their values. Individual header name and value pairs are separated by the newline character ("\n").
+    // All of our known/expected headers are included here, there are no extra headers.
+    const headers = new Headers({
+        'content-length': convertHeaderValue(options.headers['Content-Length']),
+        'content-type': convertHeaderValue(options.headers['Content-Type']),
+        host: convertHeaderValue(options.host),
+        'x-amz-date': convertHeaderValue(requestDateTime),
+        'x-mongodb-gs2-cb-flag': convertHeaderValue(options.headers['X-MongoDB-GS2-CB-Flag']),
+        'x-mongodb-server-nonce': convertHeaderValue(options.headers['X-MongoDB-Server-Nonce'])
+    });
+    // If session token is provided, include it in the headers
+    if ('sessionToken' in credentials && credentials.sessionToken) {
+        headers.append('x-amz-security-token', convertHeaderValue(credentials.sessionToken));
+    }
+    // Canonical headers are lowercased and sorted.
+    const canonicalHeaders = Array.from(headers.entries())
+        .map(([key, value]) => `${key.toLowerCase()}:${value}`)
+        .sort()
+        .join('\n');
+    const canonicalHeaderNames = Array.from(headers.keys()).map(header => header.toLowerCase());
+    // SignedHeaders – An alphabetically sorted, semicolon-separated list of lowercase request header names.
+    const signedHeaders = canonicalHeaderNames.sort().join(';');
+    // HashedPayload – A string created using the payload in the body of the HTTP request as input to a hash function. This string uses lowercase hexadecimal characters.
+    const hashedPayload = await getHexSha256(options.body);
+    // CanonicalRequest – A string that includes the above elements, separated by newline characters.
+    const canonicalRequest = [
+        method,
+        canonicalUri,
+        canonicalQuerystring,
+        canonicalHeaders + '\n',
+        signedHeaders,
+        hashedPayload
+    ].join('\n');
+    // 2. Create a hash of the canonical request
+    // HashedCanonicalRequest – A string created by using the canonical request as input to a hash function.
+    const hashedCanonicalRequest = await getHexSha256(canonicalRequest);
+    // 3. Create a string to sign
+    // Algorithm – The algorithm used to create the hash of the canonical request. For SigV4, use AWS4-HMAC-SHA256.
+    const algorithm = 'AWS4-HMAC-SHA256';
+    // CredentialScope – The credential scope, which restricts the resulting signature to the specified Region and service.
+    // Has the following format: YYYYMMDD/region/service/aws4_request.
+    const credentialScope = `${requestDate}/${options.region}/${options.service}/aws4_request`;
+    // StringToSign – A string that includes the above elements, separated by newline characters.
+    const stringToSign = [algorithm, requestDateTime, credentialScope, hashedCanonicalRequest].join('\n');
+    // 4. Derive a signing key
+    // To derive a signing key for SigV4, perform a succession of keyed hash operations (HMAC) on the request date, Region, and service, with your AWS secret access key as the key for the initial hashing operation.
+    const dateKey = await getHmacSha256('AWS4' + credentials.secretAccessKey, requestDate);
+    const dateRegionKey = await getHmacSha256(dateKey, options.region);
+    const dateRegionServiceKey = await getHmacSha256(dateRegionKey, options.service);
+    const signingKey = await getHmacSha256(dateRegionServiceKey, 'aws4_request');
+    // 5. Calculate the signature
+    const signatureBuffer = await getHmacSha256(signingKey, stringToSign);
+    const signature = bson_1.ByteUtils.toHex(signatureBuffer);
+    // 6. Add the signature to the request
+    // Calculate the Authorization header
+    const authorizationHeader = [
+        'AWS4-HMAC-SHA256 Credential=' + credentials.accessKeyId + '/' + credentialScope,
+        'SignedHeaders=' + signedHeaders,
+        'Signature=' + signature
+    ].join(', ');
+    // Return the calculated headers
+    return {
+        Authorization: authorizationHeader,
+        'X-Amz-Date': requestDateTime
+    };
+}
+//# sourceMappingURL=aws4.js.map