pecunia-root 0.1.0 → 0.1.1

package/dist/node_modules/.pnpm/mongodb@6.21.0/node_modules/mongodb/lib/cmap/auth/plain.mjs

@@ -0,0 +1,36 @@
+import { __commonJSMin } from "../../../../../../../../_virtual/rolldown_runtime.mjs";
+import { require_bson } from "../../bson.mjs";
+import { require_error } from "../../error.mjs";
+import { require_utils } from "../../utils.mjs";
+import { require_auth_provider } from "./auth_provider.mjs";
+
+//#region ../../node_modules/.pnpm/mongodb@6.21.0/node_modules/mongodb/lib/cmap/auth/plain.js
+var require_plain = /* @__PURE__ */ __commonJSMin(((exports) => {
+	Object.defineProperty(exports, "__esModule", { value: true });
+	exports.Plain = void 0;
+	const bson_1 = require_bson();
+	const error_1 = require_error();
+	const utils_1 = require_utils();
+	const auth_provider_1 = require_auth_provider();
+	var Plain = class extends auth_provider_1.AuthProvider {
+		async auth(authContext) {
+			const { connection, credentials } = authContext;
+			if (!credentials) throw new error_1.MongoMissingCredentialsError("AuthContext must provide credentials.");
+			const { username, password } = credentials;
+			const command = {
+				saslStart: 1,
+				mechanism: "PLAIN",
+				payload: new bson_1.Binary(Buffer.from(`\x00${username}\x00${password}`)),
+				autoAuthorize: 1
+			};
+			await connection.command((0, utils_1.ns)("$external.$cmd"), command, void 0);
+		}
+	};
+	exports.Plain = Plain;
+}));
+
+//#endregion
+export default require_plain();
+
+export { require_plain };
+//# sourceMappingURL=plain.mjs.map

package/dist/node_modules/.pnpm/mongodb@6.21.0/node_modules/mongodb/lib/cmap/auth/plain.mjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"plain.mjs","names":[],"sources":["../../../../../../../../../../../node_modules/.pnpm/mongodb@6.21.0/node_modules/mongodb/lib/cmap/auth/plain.js"],"sourcesContent":["\"use strict\";\nObject.defineProperty(exports, \"__esModule\", { value: true });\nexports.Plain = void 0;\nconst bson_1 = require(\"../../bson\");\nconst error_1 = require(\"../../error\");\nconst utils_1 = require(\"../../utils\");\nconst auth_provider_1 = require(\"./auth_provider\");\nclass Plain extends auth_provider_1.AuthProvider {\n    async auth(authContext) {\n        const { connection, credentials } = authContext;\n        if (!credentials) {\n            throw new error_1.MongoMissingCredentialsError('AuthContext must provide credentials.');\n        }\n        const { username, password } = credentials;\n        const payload = new bson_1.Binary(Buffer.from(`\\x00${username}\\x00${password}`));\n        const command = {\n            saslStart: 1,\n            mechanism: 'PLAIN',\n            payload: payload,\n            autoAuthorize: 1\n        };\n        await connection.command((0, utils_1.ns)('$external.$cmd'), command, undefined);\n    }\n}\nexports.Plain = Plain;\n//# sourceMappingURL=plain.js.map"],"x_google_ignoreList":[0],"mappings":";;;;;;;;AACA,QAAO,eAAe,SAAS,cAAc,EAAE,OAAO,MAAM,CAAC;AAC7D,SAAQ,QAAQ,KAAK;CACrB,MAAM;CACN,MAAM;CACN,MAAM;CACN,MAAM;CACN,IAAM,QAAN,cAAoB,gBAAgB,aAAa;EAC7C,MAAM,KAAK,aAAa;GACpB,MAAM,EAAE,YAAY,gBAAgB;AACpC,OAAI,CAAC,YACD,OAAM,IAAI,QAAQ,6BAA6B,wCAAwC;GAE3F,MAAM,EAAE,UAAU,aAAa;GAE/B,MAAM,UAAU;IACZ,WAAW;IACX,WAAW;IACX,SAJY,IAAI,OAAO,OAAO,OAAO,KAAK,OAAO,SAAS,MAAM,WAAW,CAAC;IAK5E,eAAe;IAClB;AACD,SAAM,WAAW,SAAS,GAAG,QAAQ,IAAI,iBAAiB,EAAE,SAAS,OAAU;;;AAGvF,SAAQ,QAAQ"}

package/dist/node_modules/.pnpm/mongodb@6.21.0/node_modules/mongodb/lib/cmap/auth/providers.mjs

@@ -0,0 +1,32 @@
+import { __commonJSMin } from "../../../../../../../../_virtual/rolldown_runtime.mjs";
+
+//#region ../../node_modules/.pnpm/mongodb@6.21.0/node_modules/mongodb/lib/cmap/auth/providers.js
+var require_providers = /* @__PURE__ */ __commonJSMin(((exports) => {
+	Object.defineProperty(exports, "__esModule", { value: true });
+	exports.AUTH_MECHS_AUTH_SRC_EXTERNAL = exports.AuthMechanism = void 0;
+	/** @public */
+	exports.AuthMechanism = Object.freeze({
+		MONGODB_AWS: "MONGODB-AWS",
+		MONGODB_CR: "MONGODB-CR",
+		MONGODB_DEFAULT: "DEFAULT",
+		MONGODB_GSSAPI: "GSSAPI",
+		MONGODB_PLAIN: "PLAIN",
+		MONGODB_SCRAM_SHA1: "SCRAM-SHA-1",
+		MONGODB_SCRAM_SHA256: "SCRAM-SHA-256",
+		MONGODB_X509: "MONGODB-X509",
+		MONGODB_OIDC: "MONGODB-OIDC"
+	});
+	/** @internal */
+	exports.AUTH_MECHS_AUTH_SRC_EXTERNAL = new Set([
+		exports.AuthMechanism.MONGODB_GSSAPI,
+		exports.AuthMechanism.MONGODB_AWS,
+		exports.AuthMechanism.MONGODB_OIDC,
+		exports.AuthMechanism.MONGODB_X509
+	]);
+}));
+
+//#endregion
+export default require_providers();
+
+export { require_providers };
+//# sourceMappingURL=providers.mjs.map

package/dist/node_modules/.pnpm/mongodb@6.21.0/node_modules/mongodb/lib/cmap/auth/providers.mjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"providers.mjs","names":[],"sources":["../../../../../../../../../../../node_modules/.pnpm/mongodb@6.21.0/node_modules/mongodb/lib/cmap/auth/providers.js"],"sourcesContent":["\"use strict\";\nObject.defineProperty(exports, \"__esModule\", { value: true });\nexports.AUTH_MECHS_AUTH_SRC_EXTERNAL = exports.AuthMechanism = void 0;\n/** @public */\nexports.AuthMechanism = Object.freeze({\n    MONGODB_AWS: 'MONGODB-AWS',\n    MONGODB_CR: 'MONGODB-CR',\n    MONGODB_DEFAULT: 'DEFAULT',\n    MONGODB_GSSAPI: 'GSSAPI',\n    MONGODB_PLAIN: 'PLAIN',\n    MONGODB_SCRAM_SHA1: 'SCRAM-SHA-1',\n    MONGODB_SCRAM_SHA256: 'SCRAM-SHA-256',\n    MONGODB_X509: 'MONGODB-X509',\n    MONGODB_OIDC: 'MONGODB-OIDC'\n});\n/** @internal */\nexports.AUTH_MECHS_AUTH_SRC_EXTERNAL = new Set([\n    exports.AuthMechanism.MONGODB_GSSAPI,\n    exports.AuthMechanism.MONGODB_AWS,\n    exports.AuthMechanism.MONGODB_OIDC,\n    exports.AuthMechanism.MONGODB_X509\n]);\n//# sourceMappingURL=providers.js.map"],"x_google_ignoreList":[0],"mappings":";;;;AACA,QAAO,eAAe,SAAS,cAAc,EAAE,OAAO,MAAM,CAAC;AAC7D,SAAQ,+BAA+B,QAAQ,gBAAgB,KAAK;;AAEpE,SAAQ,gBAAgB,OAAO,OAAO;EAClC,aAAa;EACb,YAAY;EACZ,iBAAiB;EACjB,gBAAgB;EAChB,eAAe;EACf,oBAAoB;EACpB,sBAAsB;EACtB,cAAc;EACd,cAAc;EACjB,CAAC;;AAEF,SAAQ,+BAA+B,IAAI,IAAI;EAC3C,QAAQ,cAAc;EACtB,QAAQ,cAAc;EACtB,QAAQ,cAAc;EACtB,QAAQ,cAAc;EACzB,CAAC"}

package/dist/node_modules/.pnpm/mongodb@6.21.0/node_modules/mongodb/lib/cmap/auth/scram.mjs

@@ -0,0 +1,206 @@
+import { __commonJSMin, __require } from "../../../../../../../../_virtual/rolldown_runtime.mjs";
+import { require_bson } from "../../bson.mjs";
+import { require_error } from "../../error.mjs";
+import { require_utils } from "../../utils.mjs";
+import { require_auth_provider } from "./auth_provider.mjs";
+import { require_providers } from "./providers.mjs";
+import { require_node } from "../../../../../../@mongodb-js_saslprep@1.4.4/node_modules/@mongodb-js/saslprep/dist/node.mjs";
+
+//#region ../../node_modules/.pnpm/mongodb@6.21.0/node_modules/mongodb/lib/cmap/auth/scram.js
+var require_scram = /* @__PURE__ */ __commonJSMin(((exports) => {
+	Object.defineProperty(exports, "__esModule", { value: true });
+	exports.ScramSHA256 = exports.ScramSHA1 = void 0;
+	const saslprep_1 = require_node();
+	const crypto = __require("crypto");
+	const bson_1 = require_bson();
+	const error_1 = require_error();
+	const utils_1 = require_utils();
+	const auth_provider_1 = require_auth_provider();
+	const providers_1 = require_providers();
+	var ScramSHA = class extends auth_provider_1.AuthProvider {
+		constructor(cryptoMethod) {
+			super();
+			this.cryptoMethod = cryptoMethod || "sha1";
+		}
+		async prepare(handshakeDoc, authContext) {
+			const cryptoMethod = this.cryptoMethod;
+			const credentials = authContext.credentials;
+			if (!credentials) throw new error_1.MongoMissingCredentialsError("AuthContext must provide credentials.");
+			const nonce = await (0, utils_1.randomBytes)(24);
+			authContext.nonce = nonce;
+			return {
+				...handshakeDoc,
+				speculativeAuthenticate: {
+					...makeFirstMessage(cryptoMethod, credentials, nonce),
+					db: credentials.source
+				}
+			};
+		}
+		async auth(authContext) {
+			const { reauthenticating, response } = authContext;
+			if (response?.speculativeAuthenticate && !reauthenticating) return await continueScramConversation(this.cryptoMethod, response.speculativeAuthenticate, authContext);
+			return await executeScram(this.cryptoMethod, authContext);
+		}
+	};
+	function cleanUsername(username) {
+		return username.replace("=", "=3D").replace(",", "=2C");
+	}
+	function clientFirstMessageBare(username, nonce) {
+		return Buffer.concat([
+			Buffer.from("n=", "utf8"),
+			Buffer.from(username, "utf8"),
+			Buffer.from(",r=", "utf8"),
+			Buffer.from(nonce.toString("base64"), "utf8")
+		]);
+	}
+	function makeFirstMessage(cryptoMethod, credentials, nonce) {
+		const username = cleanUsername(credentials.username);
+		return {
+			saslStart: 1,
+			mechanism: cryptoMethod === "sha1" ? providers_1.AuthMechanism.MONGODB_SCRAM_SHA1 : providers_1.AuthMechanism.MONGODB_SCRAM_SHA256,
+			payload: new bson_1.Binary(Buffer.concat([Buffer.from("n,,", "utf8"), clientFirstMessageBare(username, nonce)])),
+			autoAuthorize: 1,
+			options: { skipEmptyExchange: true }
+		};
+	}
+	async function executeScram(cryptoMethod, authContext) {
+		const { connection, credentials } = authContext;
+		if (!credentials) throw new error_1.MongoMissingCredentialsError("AuthContext must provide credentials.");
+		if (!authContext.nonce) throw new error_1.MongoInvalidArgumentError("AuthContext must contain a valid nonce property");
+		const nonce = authContext.nonce;
+		const db = credentials.source;
+		const saslStartCmd = makeFirstMessage(cryptoMethod, credentials, nonce);
+		await continueScramConversation(cryptoMethod, await connection.command((0, utils_1.ns)(`${db}.$cmd`), saslStartCmd, void 0), authContext);
+	}
+	async function continueScramConversation(cryptoMethod, response, authContext) {
+		const connection = authContext.connection;
+		const credentials = authContext.credentials;
+		if (!credentials) throw new error_1.MongoMissingCredentialsError("AuthContext must provide credentials.");
+		if (!authContext.nonce) throw new error_1.MongoInvalidArgumentError("Unable to continue SCRAM without valid nonce");
+		const nonce = authContext.nonce;
+		const db = credentials.source;
+		const username = cleanUsername(credentials.username);
+		const password = credentials.password;
+		const processedPassword = cryptoMethod === "sha256" ? (0, saslprep_1.saslprep)(password) : passwordDigest(username, password);
+		const payload = Buffer.isBuffer(response.payload) ? new bson_1.Binary(response.payload) : response.payload;
+		const dict = parsePayload(payload);
+		const iterations = parseInt(dict.i, 10);
+		if (iterations && iterations < 4096) throw new error_1.MongoRuntimeError(`Server returned an invalid iteration count ${iterations}`);
+		const salt = dict.s;
+		const rnonce = dict.r;
+		if (rnonce.startsWith("nonce")) throw new error_1.MongoRuntimeError(`Server returned an invalid nonce: ${rnonce}`);
+		const withoutProof = `c=biws,r=${rnonce}`;
+		const saltedPassword = HI(processedPassword, Buffer.from(salt, "base64"), iterations, cryptoMethod);
+		const clientKey = HMAC(cryptoMethod, saltedPassword, "Client Key");
+		const serverKey = HMAC(cryptoMethod, saltedPassword, "Server Key");
+		const storedKey = H(cryptoMethod, clientKey);
+		const authMessage = [
+			clientFirstMessageBare(username, nonce),
+			payload.toString("utf8"),
+			withoutProof
+		].join(",");
+		const clientFinal = [withoutProof, `p=${xor(clientKey, HMAC(cryptoMethod, storedKey, authMessage))}`].join(",");
+		const serverSignature = HMAC(cryptoMethod, serverKey, authMessage);
+		const saslContinueCmd = {
+			saslContinue: 1,
+			conversationId: response.conversationId,
+			payload: new bson_1.Binary(Buffer.from(clientFinal))
+		};
+		const r = await connection.command((0, utils_1.ns)(`${db}.$cmd`), saslContinueCmd, void 0);
+		const parsedResponse = parsePayload(r.payload);
+		if (!compareDigest(Buffer.from(parsedResponse.v, "base64"), serverSignature)) throw new error_1.MongoRuntimeError("Server returned an invalid signature");
+		if (r.done !== false) return;
+		const retrySaslContinueCmd = {
+			saslContinue: 1,
+			conversationId: r.conversationId,
+			payload: Buffer.alloc(0)
+		};
+		await connection.command((0, utils_1.ns)(`${db}.$cmd`), retrySaslContinueCmd, void 0);
+	}
+	function parsePayload(payload) {
+		const payloadStr = payload.toString("utf8");
+		const dict = {};
+		const parts = payloadStr.split(",");
+		for (let i = 0; i < parts.length; i++) {
+			const valueParts = (parts[i].match(/^([^=]*)=(.*)$/) ?? []).slice(1);
+			dict[valueParts[0]] = valueParts[1];
+		}
+		return dict;
+	}
+	function passwordDigest(username, password) {
+		if (typeof username !== "string") throw new error_1.MongoInvalidArgumentError("Username must be a string");
+		if (typeof password !== "string") throw new error_1.MongoInvalidArgumentError("Password must be a string");
+		if (password.length === 0) throw new error_1.MongoInvalidArgumentError("Password cannot be empty");
+		let md5;
+		try {
+			md5 = crypto.createHash("md5");
+		} catch (err) {
+			if (crypto.getFips()) throw new Error("Auth mechanism SCRAM-SHA-1 is not supported in FIPS mode");
+			throw err;
+		}
+		md5.update(`${username}:mongo:${password}`, "utf8");
+		return md5.digest("hex");
+	}
+	function xor(a, b) {
+		if (!Buffer.isBuffer(a)) a = Buffer.from(a);
+		if (!Buffer.isBuffer(b)) b = Buffer.from(b);
+		const length = Math.max(a.length, b.length);
+		const res = [];
+		for (let i = 0; i < length; i += 1) res.push(a[i] ^ b[i]);
+		return Buffer.from(res).toString("base64");
+	}
+	function H(method, text) {
+		return crypto.createHash(method).update(text).digest();
+	}
+	function HMAC(method, key, text) {
+		return crypto.createHmac(method, key).update(text).digest();
+	}
+	let _hiCache = {};
+	let _hiCacheCount = 0;
+	function _hiCachePurge() {
+		_hiCache = {};
+		_hiCacheCount = 0;
+	}
+	const hiLengthMap = {
+		sha256: 32,
+		sha1: 20
+	};
+	function HI(data, salt, iterations, cryptoMethod) {
+		const key = [
+			data,
+			salt.toString("base64"),
+			iterations
+		].join("_");
+		if (_hiCache[key] != null) return _hiCache[key];
+		const saltedData = crypto.pbkdf2Sync(data, salt, iterations, hiLengthMap[cryptoMethod], cryptoMethod);
+		if (_hiCacheCount >= 200) _hiCachePurge();
+		_hiCache[key] = saltedData;
+		_hiCacheCount += 1;
+		return saltedData;
+	}
+	function compareDigest(lhs, rhs) {
+		if (lhs.length !== rhs.length) return false;
+		if (typeof crypto.timingSafeEqual === "function") return crypto.timingSafeEqual(lhs, rhs);
+		let result = 0;
+		for (let i = 0; i < lhs.length; i++) result |= lhs[i] ^ rhs[i];
+		return result === 0;
+	}
+	var ScramSHA1 = class extends ScramSHA {
+		constructor() {
+			super("sha1");
+		}
+	};
+	exports.ScramSHA1 = ScramSHA1;
+	var ScramSHA256 = class extends ScramSHA {
+		constructor() {
+			super("sha256");
+		}
+	};
+	exports.ScramSHA256 = ScramSHA256;
+}));
+
+//#endregion
+export default require_scram();
+
+export { require_scram };
+//# sourceMappingURL=scram.mjs.map

package/dist/node_modules/.pnpm/mongodb@6.21.0/node_modules/mongodb/lib/cmap/auth/scram.mjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"scram.mjs","names":[],"sources":["../../../../../../../../../../../node_modules/.pnpm/mongodb@6.21.0/node_modules/mongodb/lib/cmap/auth/scram.js"],"sourcesContent":["\"use strict\";\nObject.defineProperty(exports, \"__esModule\", { value: true });\nexports.ScramSHA256 = exports.ScramSHA1 = void 0;\nconst saslprep_1 = require(\"@mongodb-js/saslprep\");\nconst crypto = require(\"crypto\");\nconst bson_1 = require(\"../../bson\");\nconst error_1 = require(\"../../error\");\nconst utils_1 = require(\"../../utils\");\nconst auth_provider_1 = require(\"./auth_provider\");\nconst providers_1 = require(\"./providers\");\nclass ScramSHA extends auth_provider_1.AuthProvider {\n    constructor(cryptoMethod) {\n        super();\n        this.cryptoMethod = cryptoMethod || 'sha1';\n    }\n    async prepare(handshakeDoc, authContext) {\n        const cryptoMethod = this.cryptoMethod;\n        const credentials = authContext.credentials;\n        if (!credentials) {\n            throw new error_1.MongoMissingCredentialsError('AuthContext must provide credentials.');\n        }\n        const nonce = await (0, utils_1.randomBytes)(24);\n        // store the nonce for later use\n        authContext.nonce = nonce;\n        const request = {\n            ...handshakeDoc,\n            speculativeAuthenticate: {\n                ...makeFirstMessage(cryptoMethod, credentials, nonce),\n                db: credentials.source\n            }\n        };\n        return request;\n    }\n    async auth(authContext) {\n        const { reauthenticating, response } = authContext;\n        if (response?.speculativeAuthenticate && !reauthenticating) {\n            return await continueScramConversation(this.cryptoMethod, response.speculativeAuthenticate, authContext);\n        }\n        return await executeScram(this.cryptoMethod, authContext);\n    }\n}\nfunction cleanUsername(username) {\n    return username.replace('=', '=3D').replace(',', '=2C');\n}\nfunction clientFirstMessageBare(username, nonce) {\n    // NOTE: This is done b/c Javascript uses UTF-16, but the server is hashing in UTF-8.\n    // Since the username is not sasl-prep-d, we need to do this here.\n    return Buffer.concat([\n        Buffer.from('n=', 'utf8'),\n        Buffer.from(username, 'utf8'),\n        Buffer.from(',r=', 'utf8'),\n        Buffer.from(nonce.toString('base64'), 'utf8')\n    ]);\n}\nfunction makeFirstMessage(cryptoMethod, credentials, nonce) {\n    const username = cleanUsername(credentials.username);\n    const mechanism = cryptoMethod === 'sha1' ? providers_1.AuthMechanism.MONGODB_SCRAM_SHA1 : providers_1.AuthMechanism.MONGODB_SCRAM_SHA256;\n    // NOTE: This is done b/c Javascript uses UTF-16, but the server is hashing in UTF-8.\n    // Since the username is not sasl-prep-d, we need to do this here.\n    return {\n        saslStart: 1,\n        mechanism,\n        payload: new bson_1.Binary(Buffer.concat([Buffer.from('n,,', 'utf8'), clientFirstMessageBare(username, nonce)])),\n        autoAuthorize: 1,\n        options: { skipEmptyExchange: true }\n    };\n}\nasync function executeScram(cryptoMethod, authContext) {\n    const { connection, credentials } = authContext;\n    if (!credentials) {\n        throw new error_1.MongoMissingCredentialsError('AuthContext must provide credentials.');\n    }\n    if (!authContext.nonce) {\n        throw new error_1.MongoInvalidArgumentError('AuthContext must contain a valid nonce property');\n    }\n    const nonce = authContext.nonce;\n    const db = credentials.source;\n    const saslStartCmd = makeFirstMessage(cryptoMethod, credentials, nonce);\n    const response = await connection.command((0, utils_1.ns)(`${db}.$cmd`), saslStartCmd, undefined);\n    await continueScramConversation(cryptoMethod, response, authContext);\n}\nasync function continueScramConversation(cryptoMethod, response, authContext) {\n    const connection = authContext.connection;\n    const credentials = authContext.credentials;\n    if (!credentials) {\n        throw new error_1.MongoMissingCredentialsError('AuthContext must provide credentials.');\n    }\n    if (!authContext.nonce) {\n        throw new error_1.MongoInvalidArgumentError('Unable to continue SCRAM without valid nonce');\n    }\n    const nonce = authContext.nonce;\n    const db = credentials.source;\n    const username = cleanUsername(credentials.username);\n    const password = credentials.password;\n    const processedPassword = cryptoMethod === 'sha256' ? (0, saslprep_1.saslprep)(password) : passwordDigest(username, password);\n    const payload = Buffer.isBuffer(response.payload)\n        ? new bson_1.Binary(response.payload)\n        : response.payload;\n    const dict = parsePayload(payload);\n    const iterations = parseInt(dict.i, 10);\n    if (iterations && iterations < 4096) {\n        // TODO(NODE-3483)\n        throw new error_1.MongoRuntimeError(`Server returned an invalid iteration count ${iterations}`);\n    }\n    const salt = dict.s;\n    const rnonce = dict.r;\n    if (rnonce.startsWith('nonce')) {\n        // TODO(NODE-3483)\n        throw new error_1.MongoRuntimeError(`Server returned an invalid nonce: ${rnonce}`);\n    }\n    // Set up start of proof\n    const withoutProof = `c=biws,r=${rnonce}`;\n    const saltedPassword = HI(processedPassword, Buffer.from(salt, 'base64'), iterations, cryptoMethod);\n    const clientKey = HMAC(cryptoMethod, saltedPassword, 'Client Key');\n    const serverKey = HMAC(cryptoMethod, saltedPassword, 'Server Key');\n    const storedKey = H(cryptoMethod, clientKey);\n    const authMessage = [\n        clientFirstMessageBare(username, nonce),\n        payload.toString('utf8'),\n        withoutProof\n    ].join(',');\n    const clientSignature = HMAC(cryptoMethod, storedKey, authMessage);\n    const clientProof = `p=${xor(clientKey, clientSignature)}`;\n    const clientFinal = [withoutProof, clientProof].join(',');\n    const serverSignature = HMAC(cryptoMethod, serverKey, authMessage);\n    const saslContinueCmd = {\n        saslContinue: 1,\n        conversationId: response.conversationId,\n        payload: new bson_1.Binary(Buffer.from(clientFinal))\n    };\n    const r = await connection.command((0, utils_1.ns)(`${db}.$cmd`), saslContinueCmd, undefined);\n    const parsedResponse = parsePayload(r.payload);\n    if (!compareDigest(Buffer.from(parsedResponse.v, 'base64'), serverSignature)) {\n        throw new error_1.MongoRuntimeError('Server returned an invalid signature');\n    }\n    if (r.done !== false) {\n        // If the server sends r.done === true we can save one RTT\n        return;\n    }\n    const retrySaslContinueCmd = {\n        saslContinue: 1,\n        conversationId: r.conversationId,\n        payload: Buffer.alloc(0)\n    };\n    await connection.command((0, utils_1.ns)(`${db}.$cmd`), retrySaslContinueCmd, undefined);\n}\nfunction parsePayload(payload) {\n    const payloadStr = payload.toString('utf8');\n    const dict = {};\n    const parts = payloadStr.split(',');\n    for (let i = 0; i < parts.length; i++) {\n        const valueParts = (parts[i].match(/^([^=]*)=(.*)$/) ?? []).slice(1);\n        dict[valueParts[0]] = valueParts[1];\n    }\n    return dict;\n}\nfunction passwordDigest(username, password) {\n    if (typeof username !== 'string') {\n        throw new error_1.MongoInvalidArgumentError('Username must be a string');\n    }\n    if (typeof password !== 'string') {\n        throw new error_1.MongoInvalidArgumentError('Password must be a string');\n    }\n    if (password.length === 0) {\n        throw new error_1.MongoInvalidArgumentError('Password cannot be empty');\n    }\n    let md5;\n    try {\n        md5 = crypto.createHash('md5');\n    }\n    catch (err) {\n        if (crypto.getFips()) {\n            // This error is (slightly) more helpful than what comes from OpenSSL directly, e.g.\n            // 'Error: error:060800C8:digital envelope routines:EVP_DigestInit_ex:disabled for FIPS'\n            throw new Error('Auth mechanism SCRAM-SHA-1 is not supported in FIPS mode');\n        }\n        throw err;\n    }\n    md5.update(`${username}:mongo:${password}`, 'utf8');\n    return md5.digest('hex');\n}\n// XOR two buffers\nfunction xor(a, b) {\n    if (!Buffer.isBuffer(a)) {\n        a = Buffer.from(a);\n    }\n    if (!Buffer.isBuffer(b)) {\n        b = Buffer.from(b);\n    }\n    const length = Math.max(a.length, b.length);\n    const res = [];\n    for (let i = 0; i < length; i += 1) {\n        res.push(a[i] ^ b[i]);\n    }\n    return Buffer.from(res).toString('base64');\n}\nfunction H(method, text) {\n    return crypto.createHash(method).update(text).digest();\n}\nfunction HMAC(method, key, text) {\n    return crypto.createHmac(method, key).update(text).digest();\n}\nlet _hiCache = {};\nlet _hiCacheCount = 0;\nfunction _hiCachePurge() {\n    _hiCache = {};\n    _hiCacheCount = 0;\n}\nconst hiLengthMap = {\n    sha256: 32,\n    sha1: 20\n};\nfunction HI(data, salt, iterations, cryptoMethod) {\n    // omit the work if already generated\n    const key = [data, salt.toString('base64'), iterations].join('_');\n    if (_hiCache[key] != null) {\n        return _hiCache[key];\n    }\n    // generate the salt\n    const saltedData = crypto.pbkdf2Sync(data, salt, iterations, hiLengthMap[cryptoMethod], cryptoMethod);\n    // cache a copy to speed up the next lookup, but prevent unbounded cache growth\n    if (_hiCacheCount >= 200) {\n        _hiCachePurge();\n    }\n    _hiCache[key] = saltedData;\n    _hiCacheCount += 1;\n    return saltedData;\n}\nfunction compareDigest(lhs, rhs) {\n    if (lhs.length !== rhs.length) {\n        return false;\n    }\n    if (typeof crypto.timingSafeEqual === 'function') {\n        return crypto.timingSafeEqual(lhs, rhs);\n    }\n    let result = 0;\n    for (let i = 0; i < lhs.length; i++) {\n        result |= lhs[i] ^ rhs[i];\n    }\n    return result === 0;\n}\nclass ScramSHA1 extends ScramSHA {\n    constructor() {\n        super('sha1');\n    }\n}\nexports.ScramSHA1 = ScramSHA1;\nclass ScramSHA256 extends ScramSHA {\n    constructor() {\n        super('sha256');\n    }\n}\nexports.ScramSHA256 = ScramSHA256;\n//# sourceMappingURL=scram.js.map"],"x_google_ignoreList":[0],"mappings":";;;;;;;;;;AACA,QAAO,eAAe,SAAS,cAAc,EAAE,OAAO,MAAM,CAAC;AAC7D,SAAQ,cAAc,QAAQ,YAAY,KAAK;CAC/C,MAAM;CACN,MAAM,mBAAiB,SAAS;CAChC,MAAM;CACN,MAAM;CACN,MAAM;CACN,MAAM;CACN,MAAM;CACN,IAAM,WAAN,cAAuB,gBAAgB,aAAa;EAChD,YAAY,cAAc;AACtB,UAAO;AACP,QAAK,eAAe,gBAAgB;;EAExC,MAAM,QAAQ,cAAc,aAAa;GACrC,MAAM,eAAe,KAAK;GAC1B,MAAM,cAAc,YAAY;AAChC,OAAI,CAAC,YACD,OAAM,IAAI,QAAQ,6BAA6B,wCAAwC;GAE3F,MAAM,QAAQ,OAAO,GAAG,QAAQ,aAAa,GAAG;AAEhD,eAAY,QAAQ;AAQpB,UAPgB;IACZ,GAAG;IACH,yBAAyB;KACrB,GAAG,iBAAiB,cAAc,aAAa,MAAM;KACrD,IAAI,YAAY;KACnB;IACJ;;EAGL,MAAM,KAAK,aAAa;GACpB,MAAM,EAAE,kBAAkB,aAAa;AACvC,OAAI,UAAU,2BAA2B,CAAC,iBACtC,QAAO,MAAM,0BAA0B,KAAK,cAAc,SAAS,yBAAyB,YAAY;AAE5G,UAAO,MAAM,aAAa,KAAK,cAAc,YAAY;;;CAGjE,SAAS,cAAc,UAAU;AAC7B,SAAO,SAAS,QAAQ,KAAK,MAAM,CAAC,QAAQ,KAAK,MAAM;;CAE3D,SAAS,uBAAuB,UAAU,OAAO;AAG7C,SAAO,OAAO,OAAO;GACjB,OAAO,KAAK,MAAM,OAAO;GACzB,OAAO,KAAK,UAAU,OAAO;GAC7B,OAAO,KAAK,OAAO,OAAO;GAC1B,OAAO,KAAK,MAAM,SAAS,SAAS,EAAE,OAAO;GAChD,CAAC;;CAEN,SAAS,iBAAiB,cAAc,aAAa,OAAO;EACxD,MAAM,WAAW,cAAc,YAAY,SAAS;AAIpD,SAAO;GACH,WAAW;GACX,WALc,iBAAiB,SAAS,YAAY,cAAc,qBAAqB,YAAY,cAAc;GAMjH,SAAS,IAAI,OAAO,OAAO,OAAO,OAAO,CAAC,OAAO,KAAK,OAAO,OAAO,EAAE,uBAAuB,UAAU,MAAM,CAAC,CAAC,CAAC;GAChH,eAAe;GACf,SAAS,EAAE,mBAAmB,MAAM;GACvC;;CAEL,eAAe,aAAa,cAAc,aAAa;EACnD,MAAM,EAAE,YAAY,gBAAgB;AACpC,MAAI,CAAC,YACD,OAAM,IAAI,QAAQ,6BAA6B,wCAAwC;AAE3F,MAAI,CAAC,YAAY,MACb,OAAM,IAAI,QAAQ,0BAA0B,kDAAkD;EAElG,MAAM,QAAQ,YAAY;EAC1B,MAAM,KAAK,YAAY;EACvB,MAAM,eAAe,iBAAiB,cAAc,aAAa,MAAM;AAEvE,QAAM,0BAA0B,cADf,MAAM,WAAW,SAAS,GAAG,QAAQ,IAAI,GAAG,GAAG,OAAO,EAAE,cAAc,OAAU,EACzC,YAAY;;CAExE,eAAe,0BAA0B,cAAc,UAAU,aAAa;EAC1E,MAAM,aAAa,YAAY;EAC/B,MAAM,cAAc,YAAY;AAChC,MAAI,CAAC,YACD,OAAM,IAAI,QAAQ,6BAA6B,wCAAwC;AAE3F,MAAI,CAAC,YAAY,MACb,OAAM,IAAI,QAAQ,0BAA0B,+CAA+C;EAE/F,MAAM,QAAQ,YAAY;EAC1B,MAAM,KAAK,YAAY;EACvB,MAAM,WAAW,cAAc,YAAY,SAAS;EACpD,MAAM,WAAW,YAAY;EAC7B,MAAM,oBAAoB,iBAAiB,YAAY,GAAG,WAAW,UAAU,SAAS,GAAG,eAAe,UAAU,SAAS;EAC7H,MAAM,UAAU,OAAO,SAAS,SAAS,QAAQ,GAC3C,IAAI,OAAO,OAAO,SAAS,QAAQ,GACnC,SAAS;EACf,MAAM,OAAO,aAAa,QAAQ;EAClC,MAAM,aAAa,SAAS,KAAK,GAAG,GAAG;AACvC,MAAI,cAAc,aAAa,KAE3B,OAAM,IAAI,QAAQ,kBAAkB,8CAA8C,aAAa;EAEnG,MAAM,OAAO,KAAK;EAClB,MAAM,SAAS,KAAK;AACpB,MAAI,OAAO,WAAW,QAAQ,CAE1B,OAAM,IAAI,QAAQ,kBAAkB,qCAAqC,SAAS;EAGtF,MAAM,eAAe,YAAY;EACjC,MAAM,iBAAiB,GAAG,mBAAmB,OAAO,KAAK,MAAM,SAAS,EAAE,YAAY,aAAa;EACnG,MAAM,YAAY,KAAK,cAAc,gBAAgB,aAAa;EAClE,MAAM,YAAY,KAAK,cAAc,gBAAgB,aAAa;EAClE,MAAM,YAAY,EAAE,cAAc,UAAU;EAC5C,MAAM,cAAc;GAChB,uBAAuB,UAAU,MAAM;GACvC,QAAQ,SAAS,OAAO;GACxB;GACH,CAAC,KAAK,IAAI;EAGX,MAAM,cAAc,CAAC,cADD,KAAK,IAAI,WADL,KAAK,cAAc,WAAW,YAAY,CACV,GACT,CAAC,KAAK,IAAI;EACzD,MAAM,kBAAkB,KAAK,cAAc,WAAW,YAAY;EAClE,MAAM,kBAAkB;GACpB,cAAc;GACd,gBAAgB,SAAS;GACzB,SAAS,IAAI,OAAO,OAAO,OAAO,KAAK,YAAY,CAAC;GACvD;EACD,MAAM,IAAI,MAAM,WAAW,SAAS,GAAG,QAAQ,IAAI,GAAG,GAAG,OAAO,EAAE,iBAAiB,OAAU;EAC7F,MAAM,iBAAiB,aAAa,EAAE,QAAQ;AAC9C,MAAI,CAAC,cAAc,OAAO,KAAK,eAAe,GAAG,SAAS,EAAE,gBAAgB,CACxE,OAAM,IAAI,QAAQ,kBAAkB,uCAAuC;AAE/E,MAAI,EAAE,SAAS,MAEX;EAEJ,MAAM,uBAAuB;GACzB,cAAc;GACd,gBAAgB,EAAE;GAClB,SAAS,OAAO,MAAM,EAAE;GAC3B;AACD,QAAM,WAAW,SAAS,GAAG,QAAQ,IAAI,GAAG,GAAG,OAAO,EAAE,sBAAsB,OAAU;;CAE5F,SAAS,aAAa,SAAS;EAC3B,MAAM,aAAa,QAAQ,SAAS,OAAO;EAC3C,MAAM,OAAO,EAAE;EACf,MAAM,QAAQ,WAAW,MAAM,IAAI;AACnC,OAAK,IAAI,IAAI,GAAG,IAAI,MAAM,QAAQ,KAAK;GACnC,MAAM,cAAc,MAAM,GAAG,MAAM,iBAAiB,IAAI,EAAE,EAAE,MAAM,EAAE;AACpE,QAAK,WAAW,MAAM,WAAW;;AAErC,SAAO;;CAEX,SAAS,eAAe,UAAU,UAAU;AACxC,MAAI,OAAO,aAAa,SACpB,OAAM,IAAI,QAAQ,0BAA0B,4BAA4B;AAE5E,MAAI,OAAO,aAAa,SACpB,OAAM,IAAI,QAAQ,0BAA0B,4BAA4B;AAE5E,MAAI,SAAS,WAAW,EACpB,OAAM,IAAI,QAAQ,0BAA0B,2BAA2B;EAE3E,IAAI;AACJ,MAAI;AACA,SAAM,OAAO,WAAW,MAAM;WAE3B,KAAK;AACR,OAAI,OAAO,SAAS,CAGhB,OAAM,IAAI,MAAM,2DAA2D;AAE/E,SAAM;;AAEV,MAAI,OAAO,GAAG,SAAS,SAAS,YAAY,OAAO;AACnD,SAAO,IAAI,OAAO,MAAM;;CAG5B,SAAS,IAAI,GAAG,GAAG;AACf,MAAI,CAAC,OAAO,SAAS,EAAE,CACnB,KAAI,OAAO,KAAK,EAAE;AAEtB,MAAI,CAAC,OAAO,SAAS,EAAE,CACnB,KAAI,OAAO,KAAK,EAAE;EAEtB,MAAM,SAAS,KAAK,IAAI,EAAE,QAAQ,EAAE,OAAO;EAC3C,MAAM,MAAM,EAAE;AACd,OAAK,IAAI,IAAI,GAAG,IAAI,QAAQ,KAAK,EAC7B,KAAI,KAAK,EAAE,KAAK,EAAE,GAAG;AAEzB,SAAO,OAAO,KAAK,IAAI,CAAC,SAAS,SAAS;;CAE9C,SAAS,EAAE,QAAQ,MAAM;AACrB,SAAO,OAAO,WAAW,OAAO,CAAC,OAAO,KAAK,CAAC,QAAQ;;CAE1D,SAAS,KAAK,QAAQ,KAAK,MAAM;AAC7B,SAAO,OAAO,WAAW,QAAQ,IAAI,CAAC,OAAO,KAAK,CAAC,QAAQ;;CAE/D,IAAI,WAAW,EAAE;CACjB,IAAI,gBAAgB;CACpB,SAAS,gBAAgB;AACrB,aAAW,EAAE;AACb,kBAAgB;;CAEpB,MAAM,cAAc;EAChB,QAAQ;EACR,MAAM;EACT;CACD,SAAS,GAAG,MAAM,MAAM,YAAY,cAAc;EAE9C,MAAM,MAAM;GAAC;GAAM,KAAK,SAAS,SAAS;GAAE;GAAW,CAAC,KAAK,IAAI;AACjE,MAAI,SAAS,QAAQ,KACjB,QAAO,SAAS;EAGpB,MAAM,aAAa,OAAO,WAAW,MAAM,MAAM,YAAY,YAAY,eAAe,aAAa;AAErG,MAAI,iBAAiB,IACjB,gBAAe;AAEnB,WAAS,OAAO;AAChB,mBAAiB;AACjB,SAAO;;CAEX,SAAS,cAAc,KAAK,KAAK;AAC7B,MAAI,IAAI,WAAW,IAAI,OACnB,QAAO;AAEX,MAAI,OAAO,OAAO,oBAAoB,WAClC,QAAO,OAAO,gBAAgB,KAAK,IAAI;EAE3C,IAAI,SAAS;AACb,OAAK,IAAI,IAAI,GAAG,IAAI,IAAI,QAAQ,IAC5B,WAAU,IAAI,KAAK,IAAI;AAE3B,SAAO,WAAW;;CAEtB,IAAM,YAAN,cAAwB,SAAS;EAC7B,cAAc;AACV,SAAM,OAAO;;;AAGrB,SAAQ,YAAY;CACpB,IAAM,cAAN,cAA0B,SAAS;EAC/B,cAAc;AACV,SAAM,SAAS;;;AAGvB,SAAQ,cAAc"}

package/dist/node_modules/.pnpm/mongodb@6.21.0/node_modules/mongodb/lib/cmap/auth/x509.mjs

@@ -0,0 +1,45 @@
+import { __commonJSMin } from "../../../../../../../../_virtual/rolldown_runtime.mjs";
+import { require_error } from "../../error.mjs";
+import { require_utils } from "../../utils.mjs";
+import { require_auth_provider } from "./auth_provider.mjs";
+
+//#region ../../node_modules/.pnpm/mongodb@6.21.0/node_modules/mongodb/lib/cmap/auth/x509.js
+var require_x509 = /* @__PURE__ */ __commonJSMin(((exports) => {
+	Object.defineProperty(exports, "__esModule", { value: true });
+	exports.X509 = void 0;
+	const error_1 = require_error();
+	const utils_1 = require_utils();
+	const auth_provider_1 = require_auth_provider();
+	var X509 = class extends auth_provider_1.AuthProvider {
+		async prepare(handshakeDoc, authContext) {
+			const { credentials } = authContext;
+			if (!credentials) throw new error_1.MongoMissingCredentialsError("AuthContext must provide credentials.");
+			return {
+				...handshakeDoc,
+				speculativeAuthenticate: x509AuthenticateCommand(credentials)
+			};
+		}
+		async auth(authContext) {
+			const connection = authContext.connection;
+			const credentials = authContext.credentials;
+			if (!credentials) throw new error_1.MongoMissingCredentialsError("AuthContext must provide credentials.");
+			if (authContext.response?.speculativeAuthenticate) return;
+			await connection.command((0, utils_1.ns)("$external.$cmd"), x509AuthenticateCommand(credentials), void 0);
+		}
+	};
+	exports.X509 = X509;
+	function x509AuthenticateCommand(credentials) {
+		const command = {
+			authenticate: 1,
+			mechanism: "MONGODB-X509"
+		};
+		if (credentials.username) command.user = credentials.username;
+		return command;
+	}
+}));
+
+//#endregion
+export default require_x509();
+
+export { require_x509 };
+//# sourceMappingURL=x509.mjs.map

package/dist/node_modules/.pnpm/mongodb@6.21.0/node_modules/mongodb/lib/cmap/auth/x509.mjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"x509.mjs","names":[],"sources":["../../../../../../../../../../../node_modules/.pnpm/mongodb@6.21.0/node_modules/mongodb/lib/cmap/auth/x509.js"],"sourcesContent":["\"use strict\";\nObject.defineProperty(exports, \"__esModule\", { value: true });\nexports.X509 = void 0;\nconst error_1 = require(\"../../error\");\nconst utils_1 = require(\"../../utils\");\nconst auth_provider_1 = require(\"./auth_provider\");\nclass X509 extends auth_provider_1.AuthProvider {\n    async prepare(handshakeDoc, authContext) {\n        const { credentials } = authContext;\n        if (!credentials) {\n            throw new error_1.MongoMissingCredentialsError('AuthContext must provide credentials.');\n        }\n        return { ...handshakeDoc, speculativeAuthenticate: x509AuthenticateCommand(credentials) };\n    }\n    async auth(authContext) {\n        const connection = authContext.connection;\n        const credentials = authContext.credentials;\n        if (!credentials) {\n            throw new error_1.MongoMissingCredentialsError('AuthContext must provide credentials.');\n        }\n        const response = authContext.response;\n        if (response?.speculativeAuthenticate) {\n            return;\n        }\n        await connection.command((0, utils_1.ns)('$external.$cmd'), x509AuthenticateCommand(credentials), undefined);\n    }\n}\nexports.X509 = X509;\nfunction x509AuthenticateCommand(credentials) {\n    const command = { authenticate: 1, mechanism: 'MONGODB-X509' };\n    if (credentials.username) {\n        command.user = credentials.username;\n    }\n    return command;\n}\n//# sourceMappingURL=x509.js.map"],"x_google_ignoreList":[0],"mappings":";;;;;;;AACA,QAAO,eAAe,SAAS,cAAc,EAAE,OAAO,MAAM,CAAC;AAC7D,SAAQ,OAAO,KAAK;CACpB,MAAM;CACN,MAAM;CACN,MAAM;CACN,IAAM,OAAN,cAAmB,gBAAgB,aAAa;EAC5C,MAAM,QAAQ,cAAc,aAAa;GACrC,MAAM,EAAE,gBAAgB;AACxB,OAAI,CAAC,YACD,OAAM,IAAI,QAAQ,6BAA6B,wCAAwC;AAE3F,UAAO;IAAE,GAAG;IAAc,yBAAyB,wBAAwB,YAAY;IAAE;;EAE7F,MAAM,KAAK,aAAa;GACpB,MAAM,aAAa,YAAY;GAC/B,MAAM,cAAc,YAAY;AAChC,OAAI,CAAC,YACD,OAAM,IAAI,QAAQ,6BAA6B,wCAAwC;AAG3F,OADiB,YAAY,UACf,wBACV;AAEJ,SAAM,WAAW,SAAS,GAAG,QAAQ,IAAI,iBAAiB,EAAE,wBAAwB,YAAY,EAAE,OAAU;;;AAGpH,SAAQ,OAAO;CACf,SAAS,wBAAwB,aAAa;EAC1C,MAAM,UAAU;GAAE,cAAc;GAAG,WAAW;GAAgB;AAC9D,MAAI,YAAY,SACZ,SAAQ,OAAO,YAAY;AAE/B,SAAO"}

package/dist/node_modules/.pnpm/mongodb@6.21.0/node_modules/mongodb/lib/cmap/command_monitoring_events.mjs

@@ -0,0 +1,213 @@
+import { __commonJSMin } from "../../../../../../../_virtual/rolldown_runtime.mjs";
+import { require_constants } from "../constants.mjs";
+import { require_utils } from "../utils.mjs";
+import { require_commands } from "./commands.mjs";
+
+//#region ../../node_modules/.pnpm/mongodb@6.21.0/node_modules/mongodb/lib/cmap/command_monitoring_events.js
+var require_command_monitoring_events = /* @__PURE__ */ __commonJSMin(((exports) => {
+	Object.defineProperty(exports, "__esModule", { value: true });
+	exports.SENSITIVE_COMMANDS = exports.CommandFailedEvent = exports.CommandSucceededEvent = exports.CommandStartedEvent = void 0;
+	const constants_1 = require_constants();
+	const utils_1 = require_utils();
+	const commands_1 = require_commands();
+	/**
+	* An event indicating the start of a given command
+	* @public
+	* @category Event
+	*/
+	var CommandStartedEvent = class {
+		/**
+		* Create a started event
+		*
+		* @internal
+		* @param pool - the pool that originated the command
+		* @param command - the command
+		*/
+		constructor(connection, command, serverConnectionId) {
+			/** @internal */
+			this.name = constants_1.COMMAND_STARTED;
+			const cmd = extractCommand(command);
+			const commandName = extractCommandName(cmd);
+			const { address, connectionId, serviceId } = extractConnectionDetails(connection);
+			if (exports.SENSITIVE_COMMANDS.has(commandName)) {
+				this.commandObj = {};
+				this.commandObj[commandName] = true;
+			}
+			this.address = address;
+			this.connectionId = connectionId;
+			this.serviceId = serviceId;
+			this.requestId = command.requestId;
+			this.databaseName = command.databaseName;
+			this.commandName = commandName;
+			this.command = maybeRedact(commandName, cmd, cmd);
+			this.serverConnectionId = serverConnectionId;
+		}
+		get hasServiceId() {
+			return !!this.serviceId;
+		}
+	};
+	exports.CommandStartedEvent = CommandStartedEvent;
+	/**
+	* An event indicating the success of a given command
+	* @public
+	* @category Event
+	*/
+	var CommandSucceededEvent = class {
+		/**
+		* Create a succeeded event
+		*
+		* @internal
+		* @param pool - the pool that originated the command
+		* @param command - the command
+		* @param reply - the reply for this command from the server
+		* @param started - a high resolution tuple timestamp of when the command was first sent, to calculate duration
+		*/
+		constructor(connection, command, reply, started, serverConnectionId) {
+			/** @internal */
+			this.name = constants_1.COMMAND_SUCCEEDED;
+			const cmd = extractCommand(command);
+			const commandName = extractCommandName(cmd);
+			const { address, connectionId, serviceId } = extractConnectionDetails(connection);
+			this.address = address;
+			this.connectionId = connectionId;
+			this.serviceId = serviceId;
+			this.requestId = command.requestId;
+			this.commandName = commandName;
+			this.duration = (0, utils_1.calculateDurationInMs)(started);
+			this.reply = maybeRedact(commandName, cmd, extractReply(reply));
+			this.serverConnectionId = serverConnectionId;
+			this.databaseName = command.databaseName;
+		}
+		get hasServiceId() {
+			return !!this.serviceId;
+		}
+	};
+	exports.CommandSucceededEvent = CommandSucceededEvent;
+	/**
+	* An event indicating the failure of a given command
+	* @public
+	* @category Event
+	*/
+	var CommandFailedEvent = class {
+		/**
+		* Create a failure event
+		*
+		* @internal
+		* @param pool - the pool that originated the command
+		* @param command - the command
+		* @param error - the generated error or a server error response
+		* @param started - a high resolution tuple timestamp of when the command was first sent, to calculate duration
+		*/
+		constructor(connection, command, error, started, serverConnectionId) {
+			/** @internal */
+			this.name = constants_1.COMMAND_FAILED;
+			const cmd = extractCommand(command);
+			const commandName = extractCommandName(cmd);
+			const { address, connectionId, serviceId } = extractConnectionDetails(connection);
+			this.address = address;
+			this.connectionId = connectionId;
+			this.serviceId = serviceId;
+			this.requestId = command.requestId;
+			this.commandName = commandName;
+			this.duration = (0, utils_1.calculateDurationInMs)(started);
+			this.failure = maybeRedact(commandName, cmd, error);
+			this.serverConnectionId = serverConnectionId;
+			this.databaseName = command.databaseName;
+		}
+		get hasServiceId() {
+			return !!this.serviceId;
+		}
+	};
+	exports.CommandFailedEvent = CommandFailedEvent;
+	/**
+	* Commands that we want to redact because of the sensitive nature of their contents
+	* @internal
+	*/
+	exports.SENSITIVE_COMMANDS = new Set([
+		"authenticate",
+		"saslStart",
+		"saslContinue",
+		"getnonce",
+		"createUser",
+		"updateUser",
+		"copydbgetnonce",
+		"copydbsaslstart",
+		"copydb"
+	]);
+	const HELLO_COMMANDS = new Set([
+		"hello",
+		constants_1.LEGACY_HELLO_COMMAND,
+		constants_1.LEGACY_HELLO_COMMAND_CAMEL_CASE
+	]);
+	const extractCommandName = (commandDoc) => Object.keys(commandDoc)[0];
+	const collectionName = (command) => command.ns.split(".")[1];
+	const maybeRedact = (commandName, commandDoc, result) => exports.SENSITIVE_COMMANDS.has(commandName) || HELLO_COMMANDS.has(commandName) && commandDoc.speculativeAuthenticate ? {} : result;
+	const LEGACY_FIND_QUERY_MAP = {
+		$query: "filter",
+		$orderby: "sort",
+		$hint: "hint",
+		$comment: "comment",
+		$maxScan: "maxScan",
+		$max: "max",
+		$min: "min",
+		$returnKey: "returnKey",
+		$showDiskLoc: "showRecordId",
+		$maxTimeMS: "maxTimeMS",
+		$snapshot: "snapshot"
+	};
+	const LEGACY_FIND_OPTIONS_MAP = {
+		numberToSkip: "skip",
+		numberToReturn: "batchSize",
+		returnFieldSelector: "projection"
+	};
+	/** Extract the actual command from the query, possibly up-converting if it's a legacy format */
+	function extractCommand(command) {
+		if (command instanceof commands_1.OpMsgRequest) {
+			const cmd = { ...command.command };
+			if (cmd.ops instanceof commands_1.DocumentSequence) cmd.ops = cmd.ops.documents;
+			if (cmd.nsInfo instanceof commands_1.DocumentSequence) cmd.nsInfo = cmd.nsInfo.documents;
+			return cmd;
+		}
+		if (command.query?.$query) {
+			let result;
+			if (command.ns === "admin.$cmd") result = Object.assign({}, command.query.$query);
+			else {
+				result = { find: collectionName(command) };
+				Object.keys(LEGACY_FIND_QUERY_MAP).forEach((key) => {
+					if (command.query[key] != null) result[LEGACY_FIND_QUERY_MAP[key]] = { ...command.query[key] };
+				});
+			}
+			Object.keys(LEGACY_FIND_OPTIONS_MAP).forEach((key) => {
+				const legacyKey = key;
+				if (command[legacyKey] != null) result[LEGACY_FIND_OPTIONS_MAP[legacyKey]] = command[legacyKey];
+			});
+			return result;
+		}
+		let clonedQuery = {};
+		const clonedCommand = { ...command };
+		if (command.query) {
+			clonedQuery = { ...command.query };
+			clonedCommand.query = clonedQuery;
+		}
+		return command.query ? clonedQuery : clonedCommand;
+	}
+	function extractReply(reply) {
+		if (!reply) return reply;
+		return reply.result ? reply.result : reply;
+	}
+	function extractConnectionDetails(connection) {
+		let connectionId;
+		if ("id" in connection) connectionId = connection.id;
+		return {
+			address: connection.address,
+			serviceId: connection.serviceId,
+			connectionId
+		};
+	}
+}));
+
+//#endregion
+export default require_command_monitoring_events();
+
+export { require_command_monitoring_events };
+//# sourceMappingURL=command_monitoring_events.mjs.map

package/dist/node_modules/.pnpm/mongodb@6.21.0/node_modules/mongodb/lib/cmap/command_monitoring_events.mjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"command_monitoring_events.mjs","names":[],"sources":["../../../../../../../../../../node_modules/.pnpm/mongodb@6.21.0/node_modules/mongodb/lib/cmap/command_monitoring_events.js"],"sourcesContent":["\"use strict\";\nObject.defineProperty(exports, \"__esModule\", { value: true });\nexports.SENSITIVE_COMMANDS = exports.CommandFailedEvent = exports.CommandSucceededEvent = exports.CommandStartedEvent = void 0;\nconst constants_1 = require(\"../constants\");\nconst utils_1 = require(\"../utils\");\nconst commands_1 = require(\"./commands\");\n/**\n * An event indicating the start of a given command\n * @public\n * @category Event\n */\nclass CommandStartedEvent {\n    /**\n     * Create a started event\n     *\n     * @internal\n     * @param pool - the pool that originated the command\n     * @param command - the command\n     */\n    constructor(connection, command, serverConnectionId) {\n        /** @internal */\n        this.name = constants_1.COMMAND_STARTED;\n        const cmd = extractCommand(command);\n        const commandName = extractCommandName(cmd);\n        const { address, connectionId, serviceId } = extractConnectionDetails(connection);\n        // TODO: remove in major revision, this is not spec behavior\n        if (exports.SENSITIVE_COMMANDS.has(commandName)) {\n            this.commandObj = {};\n            this.commandObj[commandName] = true;\n        }\n        this.address = address;\n        this.connectionId = connectionId;\n        this.serviceId = serviceId;\n        this.requestId = command.requestId;\n        this.databaseName = command.databaseName;\n        this.commandName = commandName;\n        this.command = maybeRedact(commandName, cmd, cmd);\n        this.serverConnectionId = serverConnectionId;\n    }\n    /* @internal */\n    get hasServiceId() {\n        return !!this.serviceId;\n    }\n}\nexports.CommandStartedEvent = CommandStartedEvent;\n/**\n * An event indicating the success of a given command\n * @public\n * @category Event\n */\nclass CommandSucceededEvent {\n    /**\n     * Create a succeeded event\n     *\n     * @internal\n     * @param pool - the pool that originated the command\n     * @param command - the command\n     * @param reply - the reply for this command from the server\n     * @param started - a high resolution tuple timestamp of when the command was first sent, to calculate duration\n     */\n    constructor(connection, command, reply, started, serverConnectionId) {\n        /** @internal */\n        this.name = constants_1.COMMAND_SUCCEEDED;\n        const cmd = extractCommand(command);\n        const commandName = extractCommandName(cmd);\n        const { address, connectionId, serviceId } = extractConnectionDetails(connection);\n        this.address = address;\n        this.connectionId = connectionId;\n        this.serviceId = serviceId;\n        this.requestId = command.requestId;\n        this.commandName = commandName;\n        this.duration = (0, utils_1.calculateDurationInMs)(started);\n        this.reply = maybeRedact(commandName, cmd, extractReply(reply));\n        this.serverConnectionId = serverConnectionId;\n        this.databaseName = command.databaseName;\n    }\n    /* @internal */\n    get hasServiceId() {\n        return !!this.serviceId;\n    }\n}\nexports.CommandSucceededEvent = CommandSucceededEvent;\n/**\n * An event indicating the failure of a given command\n * @public\n * @category Event\n */\nclass CommandFailedEvent {\n    /**\n     * Create a failure event\n     *\n     * @internal\n     * @param pool - the pool that originated the command\n     * @param command - the command\n     * @param error - the generated error or a server error response\n     * @param started - a high resolution tuple timestamp of when the command was first sent, to calculate duration\n     */\n    constructor(connection, command, error, started, serverConnectionId) {\n        /** @internal */\n        this.name = constants_1.COMMAND_FAILED;\n        const cmd = extractCommand(command);\n        const commandName = extractCommandName(cmd);\n        const { address, connectionId, serviceId } = extractConnectionDetails(connection);\n        this.address = address;\n        this.connectionId = connectionId;\n        this.serviceId = serviceId;\n        this.requestId = command.requestId;\n        this.commandName = commandName;\n        this.duration = (0, utils_1.calculateDurationInMs)(started);\n        this.failure = maybeRedact(commandName, cmd, error);\n        this.serverConnectionId = serverConnectionId;\n        this.databaseName = command.databaseName;\n    }\n    /* @internal */\n    get hasServiceId() {\n        return !!this.serviceId;\n    }\n}\nexports.CommandFailedEvent = CommandFailedEvent;\n/**\n * Commands that we want to redact because of the sensitive nature of their contents\n * @internal\n */\nexports.SENSITIVE_COMMANDS = new Set([\n    'authenticate',\n    'saslStart',\n    'saslContinue',\n    'getnonce',\n    'createUser',\n    'updateUser',\n    'copydbgetnonce',\n    'copydbsaslstart',\n    'copydb'\n]);\nconst HELLO_COMMANDS = new Set(['hello', constants_1.LEGACY_HELLO_COMMAND, constants_1.LEGACY_HELLO_COMMAND_CAMEL_CASE]);\n// helper methods\nconst extractCommandName = (commandDoc) => Object.keys(commandDoc)[0];\nconst collectionName = (command) => command.ns.split('.')[1];\nconst maybeRedact = (commandName, commandDoc, result) => exports.SENSITIVE_COMMANDS.has(commandName) ||\n    (HELLO_COMMANDS.has(commandName) && commandDoc.speculativeAuthenticate)\n    ? {}\n    : result;\nconst LEGACY_FIND_QUERY_MAP = {\n    $query: 'filter',\n    $orderby: 'sort',\n    $hint: 'hint',\n    $comment: 'comment',\n    $maxScan: 'maxScan',\n    $max: 'max',\n    $min: 'min',\n    $returnKey: 'returnKey',\n    $showDiskLoc: 'showRecordId',\n    $maxTimeMS: 'maxTimeMS',\n    $snapshot: 'snapshot'\n};\nconst LEGACY_FIND_OPTIONS_MAP = {\n    numberToSkip: 'skip',\n    numberToReturn: 'batchSize',\n    returnFieldSelector: 'projection'\n};\n/** Extract the actual command from the query, possibly up-converting if it's a legacy format */\nfunction extractCommand(command) {\n    if (command instanceof commands_1.OpMsgRequest) {\n        const cmd = { ...command.command };\n        // For OP_MSG with payload type 1 we need to pull the documents\n        // array out of the document sequence for monitoring.\n        if (cmd.ops instanceof commands_1.DocumentSequence) {\n            cmd.ops = cmd.ops.documents;\n        }\n        if (cmd.nsInfo instanceof commands_1.DocumentSequence) {\n            cmd.nsInfo = cmd.nsInfo.documents;\n        }\n        return cmd;\n    }\n    if (command.query?.$query) {\n        let result;\n        if (command.ns === 'admin.$cmd') {\n            // up-convert legacy command\n            result = Object.assign({}, command.query.$query);\n        }\n        else {\n            // up-convert legacy find command\n            result = { find: collectionName(command) };\n            Object.keys(LEGACY_FIND_QUERY_MAP).forEach(key => {\n                if (command.query[key] != null) {\n                    result[LEGACY_FIND_QUERY_MAP[key]] = { ...command.query[key] };\n                }\n            });\n        }\n        Object.keys(LEGACY_FIND_OPTIONS_MAP).forEach(key => {\n            const legacyKey = key;\n            if (command[legacyKey] != null) {\n                result[LEGACY_FIND_OPTIONS_MAP[legacyKey]] = command[legacyKey];\n            }\n        });\n        return result;\n    }\n    let clonedQuery = {};\n    const clonedCommand = { ...command };\n    if (command.query) {\n        clonedQuery = { ...command.query };\n        clonedCommand.query = clonedQuery;\n    }\n    return command.query ? clonedQuery : clonedCommand;\n}\nfunction extractReply(reply) {\n    if (!reply) {\n        return reply;\n    }\n    return reply.result ? reply.result : reply;\n}\nfunction extractConnectionDetails(connection) {\n    let connectionId;\n    if ('id' in connection) {\n        connectionId = connection.id;\n    }\n    return {\n        address: connection.address,\n        serviceId: connection.serviceId,\n        connectionId\n    };\n}\n//# sourceMappingURL=command_monitoring_events.js.map"],"x_google_ignoreList":[0],"mappings":";;;;;;;AACA,QAAO,eAAe,SAAS,cAAc,EAAE,OAAO,MAAM,CAAC;AAC7D,SAAQ,qBAAqB,QAAQ,qBAAqB,QAAQ,wBAAwB,QAAQ,sBAAsB,KAAK;CAC7H,MAAM;CACN,MAAM;CACN,MAAM;;;;;;CAMN,IAAM,sBAAN,MAA0B;;;;;;;;EAQtB,YAAY,YAAY,SAAS,oBAAoB;;AAEjD,QAAK,OAAO,YAAY;GACxB,MAAM,MAAM,eAAe,QAAQ;GACnC,MAAM,cAAc,mBAAmB,IAAI;GAC3C,MAAM,EAAE,SAAS,cAAc,cAAc,yBAAyB,WAAW;AAEjF,OAAI,QAAQ,mBAAmB,IAAI,YAAY,EAAE;AAC7C,SAAK,aAAa,EAAE;AACpB,SAAK,WAAW,eAAe;;AAEnC,QAAK,UAAU;AACf,QAAK,eAAe;AACpB,QAAK,YAAY;AACjB,QAAK,YAAY,QAAQ;AACzB,QAAK,eAAe,QAAQ;AAC5B,QAAK,cAAc;AACnB,QAAK,UAAU,YAAY,aAAa,KAAK,IAAI;AACjD,QAAK,qBAAqB;;EAG9B,IAAI,eAAe;AACf,UAAO,CAAC,CAAC,KAAK;;;AAGtB,SAAQ,sBAAsB;;;;;;CAM9B,IAAM,wBAAN,MAA4B;;;;;;;;;;EAUxB,YAAY,YAAY,SAAS,OAAO,SAAS,oBAAoB;;AAEjE,QAAK,OAAO,YAAY;GACxB,MAAM,MAAM,eAAe,QAAQ;GACnC,MAAM,cAAc,mBAAmB,IAAI;GAC3C,MAAM,EAAE,SAAS,cAAc,cAAc,yBAAyB,WAAW;AACjF,QAAK,UAAU;AACf,QAAK,eAAe;AACpB,QAAK,YAAY;AACjB,QAAK,YAAY,QAAQ;AACzB,QAAK,cAAc;AACnB,QAAK,YAAY,GAAG,QAAQ,uBAAuB,QAAQ;AAC3D,QAAK,QAAQ,YAAY,aAAa,KAAK,aAAa,MAAM,CAAC;AAC/D,QAAK,qBAAqB;AAC1B,QAAK,eAAe,QAAQ;;EAGhC,IAAI,eAAe;AACf,UAAO,CAAC,CAAC,KAAK;;;AAGtB,SAAQ,wBAAwB;;;;;;CAMhC,IAAM,qBAAN,MAAyB;;;;;;;;;;EAUrB,YAAY,YAAY,SAAS,OAAO,SAAS,oBAAoB;;AAEjE,QAAK,OAAO,YAAY;GACxB,MAAM,MAAM,eAAe,QAAQ;GACnC,MAAM,cAAc,mBAAmB,IAAI;GAC3C,MAAM,EAAE,SAAS,cAAc,cAAc,yBAAyB,WAAW;AACjF,QAAK,UAAU;AACf,QAAK,eAAe;AACpB,QAAK,YAAY;AACjB,QAAK,YAAY,QAAQ;AACzB,QAAK,cAAc;AACnB,QAAK,YAAY,GAAG,QAAQ,uBAAuB,QAAQ;AAC3D,QAAK,UAAU,YAAY,aAAa,KAAK,MAAM;AACnD,QAAK,qBAAqB;AAC1B,QAAK,eAAe,QAAQ;;EAGhC,IAAI,eAAe;AACf,UAAO,CAAC,CAAC,KAAK;;;AAGtB,SAAQ,qBAAqB;;;;;AAK7B,SAAQ,qBAAqB,IAAI,IAAI;EACjC;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACH,CAAC;CACF,MAAM,iBAAiB,IAAI,IAAI;EAAC;EAAS,YAAY;EAAsB,YAAY;EAAgC,CAAC;CAExH,MAAM,sBAAsB,eAAe,OAAO,KAAK,WAAW,CAAC;CACnE,MAAM,kBAAkB,YAAY,QAAQ,GAAG,MAAM,IAAI,CAAC;CAC1D,MAAM,eAAe,aAAa,YAAY,WAAW,QAAQ,mBAAmB,IAAI,YAAY,IAC/F,eAAe,IAAI,YAAY,IAAI,WAAW,0BAC7C,EAAE,GACF;CACN,MAAM,wBAAwB;EAC1B,QAAQ;EACR,UAAU;EACV,OAAO;EACP,UAAU;EACV,UAAU;EACV,MAAM;EACN,MAAM;EACN,YAAY;EACZ,cAAc;EACd,YAAY;EACZ,WAAW;EACd;CACD,MAAM,0BAA0B;EAC5B,cAAc;EACd,gBAAgB;EAChB,qBAAqB;EACxB;;CAED,SAAS,eAAe,SAAS;AAC7B,MAAI,mBAAmB,WAAW,cAAc;GAC5C,MAAM,MAAM,EAAE,GAAG,QAAQ,SAAS;AAGlC,OAAI,IAAI,eAAe,WAAW,iBAC9B,KAAI,MAAM,IAAI,IAAI;AAEtB,OAAI,IAAI,kBAAkB,WAAW,iBACjC,KAAI,SAAS,IAAI,OAAO;AAE5B,UAAO;;AAEX,MAAI,QAAQ,OAAO,QAAQ;GACvB,IAAI;AACJ,OAAI,QAAQ,OAAO,aAEf,UAAS,OAAO,OAAO,EAAE,EAAE,QAAQ,MAAM,OAAO;QAE/C;AAED,aAAS,EAAE,MAAM,eAAe,QAAQ,EAAE;AAC1C,WAAO,KAAK,sBAAsB,CAAC,SAAQ,QAAO;AAC9C,SAAI,QAAQ,MAAM,QAAQ,KACtB,QAAO,sBAAsB,QAAQ,EAAE,GAAG,QAAQ,MAAM,MAAM;MAEpE;;AAEN,UAAO,KAAK,wBAAwB,CAAC,SAAQ,QAAO;IAChD,MAAM,YAAY;AAClB,QAAI,QAAQ,cAAc,KACtB,QAAO,wBAAwB,cAAc,QAAQ;KAE3D;AACF,UAAO;;EAEX,IAAI,cAAc,EAAE;EACpB,MAAM,gBAAgB,EAAE,GAAG,SAAS;AACpC,MAAI,QAAQ,OAAO;AACf,iBAAc,EAAE,GAAG,QAAQ,OAAO;AAClC,iBAAc,QAAQ;;AAE1B,SAAO,QAAQ,QAAQ,cAAc;;CAEzC,SAAS,aAAa,OAAO;AACzB,MAAI,CAAC,MACD,QAAO;AAEX,SAAO,MAAM,SAAS,MAAM,SAAS;;CAEzC,SAAS,yBAAyB,YAAY;EAC1C,IAAI;AACJ,MAAI,QAAQ,WACR,gBAAe,WAAW;AAE9B,SAAO;GACH,SAAS,WAAW;GACpB,WAAW,WAAW;GACtB;GACH"}