pecunia-root 0.1.1 → 0.1.2

package/dist/node_modules/.pnpm/mongodb@6.21.0/node_modules/mongodb/lib/cmap/auth/mongodb_oidc/callback_workflow.mjs

@@ -1,127 +0,0 @@
-import { __commonJSMin, __require } from "../../../../../../../../../_virtual/rolldown_runtime.mjs";
-import { require_error } from "../../../error.mjs";
-import { require_utils } from "../../../utils.mjs";
-import { require_command_builders } from "./command_builders.mjs";
-
-//#region ../../node_modules/.pnpm/mongodb@6.21.0/node_modules/mongodb/lib/cmap/auth/mongodb_oidc/callback_workflow.js
-var require_callback_workflow = /* @__PURE__ */ __commonJSMin(((exports) => {
-	Object.defineProperty(exports, "__esModule", { value: true });
-	exports.CallbackWorkflow = exports.AUTOMATED_TIMEOUT_MS = exports.HUMAN_TIMEOUT_MS = void 0;
-	const promises_1 = __require("timers/promises");
-	const error_1 = require_error();
-	const utils_1 = require_utils();
-	const command_builders_1 = require_command_builders();
-	/** 5 minutes in milliseconds */
-	exports.HUMAN_TIMEOUT_MS = 3e5;
-	/** 1 minute in milliseconds */
-	exports.AUTOMATED_TIMEOUT_MS = 6e4;
-	/** Properties allowed on results of callbacks. */
-	const RESULT_PROPERTIES = [
-		"accessToken",
-		"expiresInSeconds",
-		"refreshToken"
-	];
-	/** Error message when the callback result is invalid. */
-	const CALLBACK_RESULT_ERROR = "User provided OIDC callbacks must return a valid object with an accessToken.";
-	/** The time to throttle callback calls. */
-	const THROTTLE_MS = 100;
-	/**
-	* OIDC implementation of a callback based workflow.
-	* @internal
-	*/
-	var CallbackWorkflow = class {
-		/**
-		* Instantiate the callback workflow.
-		*/
-		constructor(cache, callback) {
-			this.cache = cache;
-			this.callback = this.withLock(callback);
-			this.lastExecutionTime = Date.now() - THROTTLE_MS;
-		}
-		/**
-		* Get the document to add for speculative authentication. This also needs
-		* to add a db field from the credentials source.
-		*/
-		async speculativeAuth(connection, credentials) {
-			if (this.cache.hasAccessToken) {
-				const accessToken = this.cache.getAccessToken();
-				connection.accessToken = accessToken;
-				const document = (0, command_builders_1.finishCommandDocument)(accessToken);
-				document.db = credentials.source;
-				return { speculativeAuthenticate: document };
-			}
-			return {};
-		}
-		/**
-		* Reauthenticate the callback workflow. For this we invalidated the access token
-		* in the cache and run the authentication steps again. No initial handshake needs
-		* to be sent.
-		*/
-		async reauthenticate(connection, credentials) {
-			if (this.cache.hasAccessToken) if (connection.accessToken === this.cache.getAccessToken()) {
-				this.cache.removeAccessToken();
-				delete connection.accessToken;
-			} else connection.accessToken = this.cache.getAccessToken();
-			await this.execute(connection, credentials);
-		}
-		/**
-		* Starts the callback authentication process. If there is a speculative
-		* authentication document from the initial handshake, then we will use that
-		* value to get the issuer, otherwise we will send the saslStart command.
-		*/
-		async startAuthentication(connection, credentials, response) {
-			let result;
-			if (response?.speculativeAuthenticate) result = response.speculativeAuthenticate;
-			else result = await connection.command((0, utils_1.ns)(credentials.source), (0, command_builders_1.startCommandDocument)(credentials), void 0);
-			return result;
-		}
-		/**
-		* Finishes the callback authentication process.
-		*/
-		async finishAuthentication(connection, credentials, token, conversationId) {
-			await connection.command((0, utils_1.ns)(credentials.source), (0, command_builders_1.finishCommandDocument)(token, conversationId), void 0);
-		}
-		/**
-		* Executes the callback and validates the output.
-		*/
-		async executeAndValidateCallback(params) {
-			const result = await this.callback(params);
-			if (isCallbackResultInvalid(result)) throw new error_1.MongoMissingCredentialsError(CALLBACK_RESULT_ERROR);
-			return result;
-		}
-		/**
-		* Ensure the callback is only executed one at a time and throttles the calls
-		* to every 100ms.
-		*/
-		withLock(callback) {
-			let lock = Promise.resolve();
-			return async (params) => {
-				await lock;
-				lock = lock.catch(() => null).then(async () => {
-					const difference = Date.now() - this.lastExecutionTime;
-					if (difference <= THROTTLE_MS) await (0, promises_1.setTimeout)(THROTTLE_MS - difference, { signal: params.timeoutContext });
-					this.lastExecutionTime = Date.now();
-					return await callback(params);
-				});
-				return await lock;
-			};
-		}
-	};
-	exports.CallbackWorkflow = CallbackWorkflow;
-	/**
-	* Determines if a result returned from a request or refresh callback
-	* function is invalid. This means the result is nullish, doesn't contain
-	* the accessToken required field, and does not contain extra fields.
-	*/
-	function isCallbackResultInvalid(tokenResult) {
-		if (tokenResult == null || typeof tokenResult !== "object") return true;
-		if (!("accessToken" in tokenResult)) return true;
-		return !Object.getOwnPropertyNames(tokenResult).every((prop) => RESULT_PROPERTIES.includes(prop));
-	}
-}));
-
-//#endregion
-export default require_callback_workflow();
-
-export { require_callback_workflow };
-//# sourceMappingURL=callback_workflow.mjs.map

package/dist/node_modules/.pnpm/mongodb@6.21.0/node_modules/mongodb/lib/cmap/auth/mongodb_oidc/callback_workflow.mjs.map

@@ -1 +0,0 @@
-{"version":3,"file":"callback_workflow.mjs","names":[],"sources":["../../../../../../../../../../../../node_modules/.pnpm/mongodb@6.21.0/node_modules/mongodb/lib/cmap/auth/mongodb_oidc/callback_workflow.js"],"sourcesContent":["\"use strict\";\nObject.defineProperty(exports, \"__esModule\", { value: true });\nexports.CallbackWorkflow = exports.AUTOMATED_TIMEOUT_MS = exports.HUMAN_TIMEOUT_MS = void 0;\nconst promises_1 = require(\"timers/promises\");\nconst error_1 = require(\"../../../error\");\nconst utils_1 = require(\"../../../utils\");\nconst command_builders_1 = require(\"./command_builders\");\n/** 5 minutes in milliseconds */\nexports.HUMAN_TIMEOUT_MS = 300000;\n/** 1 minute in milliseconds */\nexports.AUTOMATED_TIMEOUT_MS = 60000;\n/** Properties allowed on results of callbacks. */\nconst RESULT_PROPERTIES = ['accessToken', 'expiresInSeconds', 'refreshToken'];\n/** Error message when the callback result is invalid. */\nconst CALLBACK_RESULT_ERROR = 'User provided OIDC callbacks must return a valid object with an accessToken.';\n/** The time to throttle callback calls. */\nconst THROTTLE_MS = 100;\n/**\n * OIDC implementation of a callback based workflow.\n * @internal\n */\nclass CallbackWorkflow {\n    /**\n     * Instantiate the callback workflow.\n     */\n    constructor(cache, callback) {\n        this.cache = cache;\n        this.callback = this.withLock(callback);\n        this.lastExecutionTime = Date.now() - THROTTLE_MS;\n    }\n    /**\n     * Get the document to add for speculative authentication. This also needs\n     * to add a db field from the credentials source.\n     */\n    async speculativeAuth(connection, credentials) {\n        // Check if the Client Cache has an access token.\n        // If it does, cache the access token in the Connection Cache and send a JwtStepRequest\n        // with the cached access token in the speculative authentication SASL payload.\n        if (this.cache.hasAccessToken) {\n            const accessToken = this.cache.getAccessToken();\n            connection.accessToken = accessToken;\n            const document = (0, command_builders_1.finishCommandDocument)(accessToken);\n            document.db = credentials.source;\n            return { speculativeAuthenticate: document };\n        }\n        return {};\n    }\n    /**\n     * Reauthenticate the callback workflow. For this we invalidated the access token\n     * in the cache and run the authentication steps again. No initial handshake needs\n     * to be sent.\n     */\n    async reauthenticate(connection, credentials) {\n        if (this.cache.hasAccessToken) {\n            // Reauthentication implies the token has expired.\n            if (connection.accessToken === this.cache.getAccessToken()) {\n                // If connection's access token is the same as the cache's, remove\n                // the token from the cache and connection.\n                this.cache.removeAccessToken();\n                delete connection.accessToken;\n            }\n            else {\n                // If the connection's access token is different from the cache's, set\n                // the cache's token on the connection and do not remove from the\n                // cache.\n                connection.accessToken = this.cache.getAccessToken();\n            }\n        }\n        await this.execute(connection, credentials);\n    }\n    /**\n     * Starts the callback authentication process. If there is a speculative\n     * authentication document from the initial handshake, then we will use that\n     * value to get the issuer, otherwise we will send the saslStart command.\n     */\n    async startAuthentication(connection, credentials, response) {\n        let result;\n        if (response?.speculativeAuthenticate) {\n            result = response.speculativeAuthenticate;\n        }\n        else {\n            result = await connection.command((0, utils_1.ns)(credentials.source), (0, command_builders_1.startCommandDocument)(credentials), undefined);\n        }\n        return result;\n    }\n    /**\n     * Finishes the callback authentication process.\n     */\n    async finishAuthentication(connection, credentials, token, conversationId) {\n        await connection.command((0, utils_1.ns)(credentials.source), (0, command_builders_1.finishCommandDocument)(token, conversationId), undefined);\n    }\n    /**\n     * Executes the callback and validates the output.\n     */\n    async executeAndValidateCallback(params) {\n        const result = await this.callback(params);\n        // Validate that the result returned by the callback is acceptable. If it is not\n        // we must clear the token result from the cache.\n        if (isCallbackResultInvalid(result)) {\n            throw new error_1.MongoMissingCredentialsError(CALLBACK_RESULT_ERROR);\n        }\n        return result;\n    }\n    /**\n     * Ensure the callback is only executed one at a time and throttles the calls\n     * to every 100ms.\n     */\n    withLock(callback) {\n        let lock = Promise.resolve();\n        return async (params) => {\n            // We do this to ensure that we would never return the result of the\n            // previous lock, only the current callback's value would get returned.\n            await lock;\n            lock = lock\n                .catch(() => null)\n                .then(async () => {\n                const difference = Date.now() - this.lastExecutionTime;\n                if (difference <= THROTTLE_MS) {\n                    await (0, promises_1.setTimeout)(THROTTLE_MS - difference, { signal: params.timeoutContext });\n                }\n                this.lastExecutionTime = Date.now();\n                return await callback(params);\n            });\n            return await lock;\n        };\n    }\n}\nexports.CallbackWorkflow = CallbackWorkflow;\n/**\n * Determines if a result returned from a request or refresh callback\n * function is invalid. This means the result is nullish, doesn't contain\n * the accessToken required field, and does not contain extra fields.\n */\nfunction isCallbackResultInvalid(tokenResult) {\n    if (tokenResult == null || typeof tokenResult !== 'object')\n        return true;\n    if (!('accessToken' in tokenResult))\n        return true;\n    return !Object.getOwnPropertyNames(tokenResult).every(prop => RESULT_PROPERTIES.includes(prop));\n}\n//# sourceMappingURL=callback_workflow.js.map"],"x_google_ignoreList":[0],"mappings":";;;;;;;AACA,QAAO,eAAe,SAAS,cAAc,EAAE,OAAO,MAAM,CAAC;AAC7D,SAAQ,mBAAmB,QAAQ,uBAAuB,QAAQ,mBAAmB,KAAK;CAC1F,MAAM,uBAAqB,kBAAkB;CAC7C,MAAM;CACN,MAAM;CACN,MAAM;;AAEN,SAAQ,mBAAmB;;AAE3B,SAAQ,uBAAuB;;CAE/B,MAAM,oBAAoB;EAAC;EAAe;EAAoB;EAAe;;CAE7E,MAAM,wBAAwB;;CAE9B,MAAM,cAAc;;;;;CAKpB,IAAM,mBAAN,MAAuB;;;;EAInB,YAAY,OAAO,UAAU;AACzB,QAAK,QAAQ;AACb,QAAK,WAAW,KAAK,SAAS,SAAS;AACvC,QAAK,oBAAoB,KAAK,KAAK,GAAG;;;;;;EAM1C,MAAM,gBAAgB,YAAY,aAAa;AAI3C,OAAI,KAAK,MAAM,gBAAgB;IAC3B,MAAM,cAAc,KAAK,MAAM,gBAAgB;AAC/C,eAAW,cAAc;IACzB,MAAM,YAAY,GAAG,mBAAmB,uBAAuB,YAAY;AAC3E,aAAS,KAAK,YAAY;AAC1B,WAAO,EAAE,yBAAyB,UAAU;;AAEhD,UAAO,EAAE;;;;;;;EAOb,MAAM,eAAe,YAAY,aAAa;AAC1C,OAAI,KAAK,MAAM,eAEX,KAAI,WAAW,gBAAgB,KAAK,MAAM,gBAAgB,EAAE;AAGxD,SAAK,MAAM,mBAAmB;AAC9B,WAAO,WAAW;SAMlB,YAAW,cAAc,KAAK,MAAM,gBAAgB;AAG5D,SAAM,KAAK,QAAQ,YAAY,YAAY;;;;;;;EAO/C,MAAM,oBAAoB,YAAY,aAAa,UAAU;GACzD,IAAI;AACJ,OAAI,UAAU,wBACV,UAAS,SAAS;OAGlB,UAAS,MAAM,WAAW,SAAS,GAAG,QAAQ,IAAI,YAAY,OAAO,GAAG,GAAG,mBAAmB,sBAAsB,YAAY,EAAE,OAAU;AAEhJ,UAAO;;;;;EAKX,MAAM,qBAAqB,YAAY,aAAa,OAAO,gBAAgB;AACvE,SAAM,WAAW,SAAS,GAAG,QAAQ,IAAI,YAAY,OAAO,GAAG,GAAG,mBAAmB,uBAAuB,OAAO,eAAe,EAAE,OAAU;;;;;EAKlJ,MAAM,2BAA2B,QAAQ;GACrC,MAAM,SAAS,MAAM,KAAK,SAAS,OAAO;AAG1C,OAAI,wBAAwB,OAAO,CAC/B,OAAM,IAAI,QAAQ,6BAA6B,sBAAsB;AAEzE,UAAO;;;;;;EAMX,SAAS,UAAU;GACf,IAAI,OAAO,QAAQ,SAAS;AAC5B,UAAO,OAAO,WAAW;AAGrB,UAAM;AACN,WAAO,KACF,YAAY,KAAK,CACjB,KAAK,YAAY;KAClB,MAAM,aAAa,KAAK,KAAK,GAAG,KAAK;AACrC,SAAI,cAAc,YACd,QAAO,GAAG,WAAW,YAAY,cAAc,YAAY,EAAE,QAAQ,OAAO,gBAAgB,CAAC;AAEjG,UAAK,oBAAoB,KAAK,KAAK;AACnC,YAAO,MAAM,SAAS,OAAO;MAC/B;AACF,WAAO,MAAM;;;;AAIzB,SAAQ,mBAAmB;;;;;;CAM3B,SAAS,wBAAwB,aAAa;AAC1C,MAAI,eAAe,QAAQ,OAAO,gBAAgB,SAC9C,QAAO;AACX,MAAI,EAAE,iBAAiB,aACnB,QAAO;AACX,SAAO,CAAC,OAAO,oBAAoB,YAAY,CAAC,OAAM,SAAQ,kBAAkB,SAAS,KAAK,CAAC"}

package/dist/node_modules/.pnpm/mongodb@6.21.0/node_modules/mongodb/lib/cmap/auth/mongodb_oidc/command_builders.mjs

@@ -1,47 +0,0 @@
-import { __commonJSMin } from "../../../../../../../../../_virtual/rolldown_runtime.mjs";
-import { require_bson } from "../../../bson.mjs";
-import { require_providers } from "../providers.mjs";
-
-//#region ../../node_modules/.pnpm/mongodb@6.21.0/node_modules/mongodb/lib/cmap/auth/mongodb_oidc/command_builders.js
-var require_command_builders = /* @__PURE__ */ __commonJSMin(((exports) => {
-	Object.defineProperty(exports, "__esModule", { value: true });
-	exports.finishCommandDocument = finishCommandDocument;
-	exports.startCommandDocument = startCommandDocument;
-	const bson_1 = require_bson();
-	const providers_1 = require_providers();
-	/**
-	* Generate the finishing command document for authentication. Will be a
-	* saslStart or saslContinue depending on the presence of a conversation id.
-	*/
-	function finishCommandDocument(token, conversationId) {
-		if (conversationId != null) return {
-			saslContinue: 1,
-			conversationId,
-			payload: new bson_1.Binary(bson_1.BSON.serialize({ jwt: token }))
-		};
-		return {
-			saslStart: 1,
-			mechanism: providers_1.AuthMechanism.MONGODB_OIDC,
-			payload: new bson_1.Binary(bson_1.BSON.serialize({ jwt: token }))
-		};
-	}
-	/**
-	* Generate the saslStart command document.
-	*/
-	function startCommandDocument(credentials) {
-		const payload = {};
-		if (credentials.username) payload.n = credentials.username;
-		return {
-			saslStart: 1,
-			autoAuthorize: 1,
-			mechanism: providers_1.AuthMechanism.MONGODB_OIDC,
-			payload: new bson_1.Binary(bson_1.BSON.serialize(payload))
-		};
-	}
-}));
-
-//#endregion
-export default require_command_builders();
-
-export { require_command_builders };
-//# sourceMappingURL=command_builders.mjs.map

package/dist/node_modules/.pnpm/mongodb@6.21.0/node_modules/mongodb/lib/cmap/auth/mongodb_oidc/command_builders.mjs.map

@@ -1 +0,0 @@
-{"version":3,"file":"command_builders.mjs","names":[],"sources":["../../../../../../../../../../../../node_modules/.pnpm/mongodb@6.21.0/node_modules/mongodb/lib/cmap/auth/mongodb_oidc/command_builders.js"],"sourcesContent":["\"use strict\";\nObject.defineProperty(exports, \"__esModule\", { value: true });\nexports.finishCommandDocument = finishCommandDocument;\nexports.startCommandDocument = startCommandDocument;\nconst bson_1 = require(\"../../../bson\");\nconst providers_1 = require(\"../providers\");\n/**\n * Generate the finishing command document for authentication. Will be a\n * saslStart or saslContinue depending on the presence of a conversation id.\n */\nfunction finishCommandDocument(token, conversationId) {\n    if (conversationId != null) {\n        return {\n            saslContinue: 1,\n            conversationId: conversationId,\n            payload: new bson_1.Binary(bson_1.BSON.serialize({ jwt: token }))\n        };\n    }\n    // saslContinue requires a conversationId in the command to be valid so in this\n    // case the server allows \"step two\" to actually be a saslStart with the token\n    // as the jwt since the use of the cached value has no correlating conversating\n    // on the particular connection.\n    return {\n        saslStart: 1,\n        mechanism: providers_1.AuthMechanism.MONGODB_OIDC,\n        payload: new bson_1.Binary(bson_1.BSON.serialize({ jwt: token }))\n    };\n}\n/**\n * Generate the saslStart command document.\n */\nfunction startCommandDocument(credentials) {\n    const payload = {};\n    if (credentials.username) {\n        payload.n = credentials.username;\n    }\n    return {\n        saslStart: 1,\n        autoAuthorize: 1,\n        mechanism: providers_1.AuthMechanism.MONGODB_OIDC,\n        payload: new bson_1.Binary(bson_1.BSON.serialize(payload))\n    };\n}\n//# sourceMappingURL=command_builders.js.map"],"x_google_ignoreList":[0],"mappings":";;;;;;AACA,QAAO,eAAe,SAAS,cAAc,EAAE,OAAO,MAAM,CAAC;AAC7D,SAAQ,wBAAwB;AAChC,SAAQ,uBAAuB;CAC/B,MAAM;CACN,MAAM;;;;;CAKN,SAAS,sBAAsB,OAAO,gBAAgB;AAClD,MAAI,kBAAkB,KAClB,QAAO;GACH,cAAc;GACE;GAChB,SAAS,IAAI,OAAO,OAAO,OAAO,KAAK,UAAU,EAAE,KAAK,OAAO,CAAC,CAAC;GACpE;AAML,SAAO;GACH,WAAW;GACX,WAAW,YAAY,cAAc;GACrC,SAAS,IAAI,OAAO,OAAO,OAAO,KAAK,UAAU,EAAE,KAAK,OAAO,CAAC,CAAC;GACpE;;;;;CAKL,SAAS,qBAAqB,aAAa;EACvC,MAAM,UAAU,EAAE;AAClB,MAAI,YAAY,SACZ,SAAQ,IAAI,YAAY;AAE5B,SAAO;GACH,WAAW;GACX,eAAe;GACf,WAAW,YAAY,cAAc;GACrC,SAAS,IAAI,OAAO,OAAO,OAAO,KAAK,UAAU,QAAQ,CAAC;GAC7D"}

package/dist/node_modules/.pnpm/mongodb@6.21.0/node_modules/mongodb/lib/cmap/auth/mongodb_oidc/gcp_machine_workflow.mjs

@@ -1,44 +0,0 @@
-import { __commonJSMin } from "../../../../../../../../../_virtual/rolldown_runtime.mjs";
-import { require_error } from "../../../error.mjs";
-import { require_utils } from "../../../utils.mjs";
-
-//#region ../../node_modules/.pnpm/mongodb@6.21.0/node_modules/mongodb/lib/cmap/auth/mongodb_oidc/gcp_machine_workflow.js
-var require_gcp_machine_workflow = /* @__PURE__ */ __commonJSMin(((exports) => {
-	Object.defineProperty(exports, "__esModule", { value: true });
-	exports.callback = void 0;
-	const error_1 = require_error();
-	const utils_1 = require_utils();
-	/** GCP base URL. */
-	const GCP_BASE_URL = "http://metadata/computeMetadata/v1/instance/service-accounts/default/identity";
-	/** GCP request headers. */
-	const GCP_HEADERS = Object.freeze({ "Metadata-Flavor": "Google" });
-	/** Error for when the token audience is missing in the environment. */
-	const TOKEN_RESOURCE_MISSING_ERROR = "TOKEN_RESOURCE must be set in the auth mechanism properties when ENVIRONMENT is gcp.";
-	/**
-	* The callback function to be used in the automated callback workflow.
-	* @param params - The OIDC callback parameters.
-	* @returns The OIDC response.
-	*/
-	const callback = async (params) => {
-		const tokenAudience = params.tokenAudience;
-		if (!tokenAudience) throw new error_1.MongoGCPError(TOKEN_RESOURCE_MISSING_ERROR);
-		return await getGcpTokenData(tokenAudience);
-	};
-	exports.callback = callback;
-	/**
-	* Hit the GCP endpoint to get the token data.
-	*/
-	async function getGcpTokenData(tokenAudience) {
-		const url = new URL(GCP_BASE_URL);
-		url.searchParams.append("audience", tokenAudience);
-		const response = await (0, utils_1.get)(url, { headers: GCP_HEADERS });
-		if (response.status !== 200) throw new error_1.MongoGCPError(`Status code ${response.status} returned from the GCP endpoint. Response body: ${response.body}`);
-		return { accessToken: response.body };
-	}
-}));
-
-//#endregion
-export default require_gcp_machine_workflow();
-
-export { require_gcp_machine_workflow };
-//# sourceMappingURL=gcp_machine_workflow.mjs.map

package/dist/node_modules/.pnpm/mongodb@6.21.0/node_modules/mongodb/lib/cmap/auth/mongodb_oidc/gcp_machine_workflow.mjs.map

@@ -1 +0,0 @@
-{"version":3,"file":"gcp_machine_workflow.mjs","names":[],"sources":["../../../../../../../../../../../../node_modules/.pnpm/mongodb@6.21.0/node_modules/mongodb/lib/cmap/auth/mongodb_oidc/gcp_machine_workflow.js"],"sourcesContent":["\"use strict\";\nObject.defineProperty(exports, \"__esModule\", { value: true });\nexports.callback = void 0;\nconst error_1 = require(\"../../../error\");\nconst utils_1 = require(\"../../../utils\");\n/** GCP base URL. */\nconst GCP_BASE_URL = 'http://metadata/computeMetadata/v1/instance/service-accounts/default/identity';\n/** GCP request headers. */\nconst GCP_HEADERS = Object.freeze({ 'Metadata-Flavor': 'Google' });\n/** Error for when the token audience is missing in the environment. */\nconst TOKEN_RESOURCE_MISSING_ERROR = 'TOKEN_RESOURCE must be set in the auth mechanism properties when ENVIRONMENT is gcp.';\n/**\n * The callback function to be used in the automated callback workflow.\n * @param params - The OIDC callback parameters.\n * @returns The OIDC response.\n */\nconst callback = async (params) => {\n    const tokenAudience = params.tokenAudience;\n    if (!tokenAudience) {\n        throw new error_1.MongoGCPError(TOKEN_RESOURCE_MISSING_ERROR);\n    }\n    return await getGcpTokenData(tokenAudience);\n};\nexports.callback = callback;\n/**\n * Hit the GCP endpoint to get the token data.\n */\nasync function getGcpTokenData(tokenAudience) {\n    const url = new URL(GCP_BASE_URL);\n    url.searchParams.append('audience', tokenAudience);\n    const response = await (0, utils_1.get)(url, {\n        headers: GCP_HEADERS\n    });\n    if (response.status !== 200) {\n        throw new error_1.MongoGCPError(`Status code ${response.status} returned from the GCP endpoint. Response body: ${response.body}`);\n    }\n    return { accessToken: response.body };\n}\n//# sourceMappingURL=gcp_machine_workflow.js.map"],"x_google_ignoreList":[0],"mappings":";;;;;;AACA,QAAO,eAAe,SAAS,cAAc,EAAE,OAAO,MAAM,CAAC;AAC7D,SAAQ,WAAW,KAAK;CACxB,MAAM;CACN,MAAM;;CAEN,MAAM,eAAe;;CAErB,MAAM,cAAc,OAAO,OAAO,EAAE,mBAAmB,UAAU,CAAC;;CAElE,MAAM,+BAA+B;;;;;;CAMrC,MAAM,WAAW,OAAO,WAAW;EAC/B,MAAM,gBAAgB,OAAO;AAC7B,MAAI,CAAC,cACD,OAAM,IAAI,QAAQ,cAAc,6BAA6B;AAEjE,SAAO,MAAM,gBAAgB,cAAc;;AAE/C,SAAQ,WAAW;;;;CAInB,eAAe,gBAAgB,eAAe;EAC1C,MAAM,MAAM,IAAI,IAAI,aAAa;AACjC,MAAI,aAAa,OAAO,YAAY,cAAc;EAClD,MAAM,WAAW,OAAO,GAAG,QAAQ,KAAK,KAAK,EACzC,SAAS,aACZ,CAAC;AACF,MAAI,SAAS,WAAW,IACpB,OAAM,IAAI,QAAQ,cAAc,eAAe,SAAS,OAAO,kDAAkD,SAAS,OAAO;AAErI,SAAO,EAAE,aAAa,SAAS,MAAM"}

package/dist/node_modules/.pnpm/mongodb@6.21.0/node_modules/mongodb/lib/cmap/auth/mongodb_oidc/human_callback_workflow.mjs

@@ -1,101 +0,0 @@
-import { __commonJSMin } from "../../../../../../../../../_virtual/rolldown_runtime.mjs";
-import { require_bson } from "../../../bson.mjs";
-import { require_error } from "../../../error.mjs";
-import { require_timeout } from "../../../timeout.mjs";
-import { require_callback_workflow } from "./callback_workflow.mjs";
-import { require_mongodb_oidc } from "../mongodb_oidc.mjs";
-
-//#region ../../node_modules/.pnpm/mongodb@6.21.0/node_modules/mongodb/lib/cmap/auth/mongodb_oidc/human_callback_workflow.js
-var require_human_callback_workflow = /* @__PURE__ */ __commonJSMin(((exports) => {
-	Object.defineProperty(exports, "__esModule", { value: true });
-	exports.HumanCallbackWorkflow = void 0;
-	const bson_1 = require_bson();
-	const error_1 = require_error();
-	const timeout_1 = require_timeout();
-	const mongodb_oidc_1 = require_mongodb_oidc();
-	const callback_workflow_1 = require_callback_workflow();
-	/**
-	* Class implementing behaviour for the non human callback workflow.
-	* @internal
-	*/
-	var HumanCallbackWorkflow = class extends callback_workflow_1.CallbackWorkflow {
-		/**
-		* Instantiate the human callback workflow.
-		*/
-		constructor(cache, callback) {
-			super(cache, callback);
-		}
-		/**
-		* Execute the OIDC human callback workflow.
-		*/
-		async execute(connection, credentials) {
-			if (this.cache.hasAccessToken) {
-				const token = this.cache.getAccessToken();
-				connection.accessToken = token;
-				try {
-					return await this.finishAuthentication(connection, credentials, token);
-				} catch (error) {
-					if (error instanceof error_1.MongoError && error.code === error_1.MONGODB_ERROR_CODES.AuthenticationFailed) {
-						this.cache.removeAccessToken();
-						delete connection.accessToken;
-						return await this.execute(connection, credentials);
-					} else throw error;
-				}
-			}
-			if (this.cache.hasRefreshToken) {
-				const refreshToken = this.cache.getRefreshToken();
-				const result = await this.fetchAccessToken(this.cache.getIdpInfo(), credentials, refreshToken);
-				this.cache.put(result);
-				connection.accessToken = result.accessToken;
-				try {
-					return await this.finishAuthentication(connection, credentials, result.accessToken);
-				} catch (error) {
-					if (error instanceof error_1.MongoError && error.code === error_1.MONGODB_ERROR_CODES.AuthenticationFailed) {
-						this.cache.removeRefreshToken();
-						delete connection.accessToken;
-						return await this.execute(connection, credentials);
-					} else throw error;
-				}
-			}
-			const startResponse = await this.startAuthentication(connection, credentials);
-			const conversationId = startResponse.conversationId;
-			const idpInfo = bson_1.BSON.deserialize(startResponse.payload.buffer);
-			const callbackResponse = await this.fetchAccessToken(idpInfo, credentials);
-			this.cache.put(callbackResponse, idpInfo);
-			connection.accessToken = callbackResponse.accessToken;
-			return await this.finishAuthentication(connection, credentials, callbackResponse.accessToken, conversationId);
-		}
-		/**
-		* Fetches an access token using the callback.
-		*/
-		async fetchAccessToken(idpInfo, credentials, refreshToken) {
-			const controller = new AbortController();
-			const params = {
-				timeoutContext: controller.signal,
-				version: mongodb_oidc_1.OIDC_VERSION,
-				idpInfo
-			};
-			if (credentials.username) params.username = credentials.username;
-			if (refreshToken) params.refreshToken = refreshToken;
-			const timeout = timeout_1.Timeout.expires(callback_workflow_1.HUMAN_TIMEOUT_MS);
-			try {
-				return await Promise.race([this.executeAndValidateCallback(params), timeout]);
-			} catch (error) {
-				if (timeout_1.TimeoutError.is(error)) {
-					controller.abort();
-					throw new error_1.MongoOIDCError(`OIDC callback timed out after ${callback_workflow_1.HUMAN_TIMEOUT_MS}ms.`);
-				}
-				throw error;
-			} finally {
-				timeout.clear();
-			}
-		}
-	};
-	exports.HumanCallbackWorkflow = HumanCallbackWorkflow;
-}));
-
-//#endregion
-export default require_human_callback_workflow();
-
-export { require_human_callback_workflow };
-//# sourceMappingURL=human_callback_workflow.mjs.map

package/dist/node_modules/.pnpm/mongodb@6.21.0/node_modules/mongodb/lib/cmap/auth/mongodb_oidc/human_callback_workflow.mjs.map

@@ -1 +0,0 @@
-{"version":3,"file":"human_callback_workflow.mjs","names":[],"sources":["../../../../../../../../../../../../node_modules/.pnpm/mongodb@6.21.0/node_modules/mongodb/lib/cmap/auth/mongodb_oidc/human_callback_workflow.js"],"sourcesContent":["\"use strict\";\nObject.defineProperty(exports, \"__esModule\", { value: true });\nexports.HumanCallbackWorkflow = void 0;\nconst bson_1 = require(\"../../../bson\");\nconst error_1 = require(\"../../../error\");\nconst timeout_1 = require(\"../../../timeout\");\nconst mongodb_oidc_1 = require(\"../mongodb_oidc\");\nconst callback_workflow_1 = require(\"./callback_workflow\");\n/**\n * Class implementing behaviour for the non human callback workflow.\n * @internal\n */\nclass HumanCallbackWorkflow extends callback_workflow_1.CallbackWorkflow {\n    /**\n     * Instantiate the human callback workflow.\n     */\n    constructor(cache, callback) {\n        super(cache, callback);\n    }\n    /**\n     * Execute the OIDC human callback workflow.\n     */\n    async execute(connection, credentials) {\n        // Check if the Client Cache has an access token.\n        // If it does, cache the access token in the Connection Cache and perform a One-Step SASL conversation\n        // using the access token. If the server returns an Authentication error (18),\n        // invalidate the access token token from the Client Cache, clear the Connection Cache,\n        // and restart the authentication flow. Raise any other errors to the user. On success, exit the algorithm.\n        if (this.cache.hasAccessToken) {\n            const token = this.cache.getAccessToken();\n            connection.accessToken = token;\n            try {\n                return await this.finishAuthentication(connection, credentials, token);\n            }\n            catch (error) {\n                if (error instanceof error_1.MongoError &&\n                    error.code === error_1.MONGODB_ERROR_CODES.AuthenticationFailed) {\n                    this.cache.removeAccessToken();\n                    delete connection.accessToken;\n                    return await this.execute(connection, credentials);\n                }\n                else {\n                    throw error;\n                }\n            }\n        }\n        // Check if the Client Cache has a refresh token.\n        // If it does, call the OIDC Human Callback with the cached refresh token and IdpInfo to get a\n        // new access token. Cache the new access token in the Client Cache and Connection Cache.\n        // Perform a One-Step SASL conversation using the new access token. If the the server returns\n        // an Authentication error (18), clear the refresh token, invalidate the access token from the\n        // Client Cache, clear the Connection Cache, and restart the authentication flow. Raise any other\n        // errors to the user. On success, exit the algorithm.\n        if (this.cache.hasRefreshToken) {\n            const refreshToken = this.cache.getRefreshToken();\n            const result = await this.fetchAccessToken(this.cache.getIdpInfo(), credentials, refreshToken);\n            this.cache.put(result);\n            connection.accessToken = result.accessToken;\n            try {\n                return await this.finishAuthentication(connection, credentials, result.accessToken);\n            }\n            catch (error) {\n                if (error instanceof error_1.MongoError &&\n                    error.code === error_1.MONGODB_ERROR_CODES.AuthenticationFailed) {\n                    this.cache.removeRefreshToken();\n                    delete connection.accessToken;\n                    return await this.execute(connection, credentials);\n                }\n                else {\n                    throw error;\n                }\n            }\n        }\n        // Start a new Two-Step SASL conversation.\n        // Run a PrincipalStepRequest to get the IdpInfo.\n        // Call the OIDC Human Callback with the new IdpInfo to get a new access token and optional refresh\n        // token. Drivers MUST NOT pass a cached refresh token to the callback when performing\n        // a new Two-Step conversation. Cache the new IdpInfo and refresh token in the Client Cache and the\n        // new access token in the Client Cache and Connection Cache.\n        // Attempt to authenticate using a JwtStepRequest with the new access token. Raise any errors to the user.\n        const startResponse = await this.startAuthentication(connection, credentials);\n        const conversationId = startResponse.conversationId;\n        const idpInfo = bson_1.BSON.deserialize(startResponse.payload.buffer);\n        const callbackResponse = await this.fetchAccessToken(idpInfo, credentials);\n        this.cache.put(callbackResponse, idpInfo);\n        connection.accessToken = callbackResponse.accessToken;\n        return await this.finishAuthentication(connection, credentials, callbackResponse.accessToken, conversationId);\n    }\n    /**\n     * Fetches an access token using the callback.\n     */\n    async fetchAccessToken(idpInfo, credentials, refreshToken) {\n        const controller = new AbortController();\n        const params = {\n            timeoutContext: controller.signal,\n            version: mongodb_oidc_1.OIDC_VERSION,\n            idpInfo: idpInfo\n        };\n        if (credentials.username) {\n            params.username = credentials.username;\n        }\n        if (refreshToken) {\n            params.refreshToken = refreshToken;\n        }\n        const timeout = timeout_1.Timeout.expires(callback_workflow_1.HUMAN_TIMEOUT_MS);\n        try {\n            return await Promise.race([this.executeAndValidateCallback(params), timeout]);\n        }\n        catch (error) {\n            if (timeout_1.TimeoutError.is(error)) {\n                controller.abort();\n                throw new error_1.MongoOIDCError(`OIDC callback timed out after ${callback_workflow_1.HUMAN_TIMEOUT_MS}ms.`);\n            }\n            throw error;\n        }\n        finally {\n            timeout.clear();\n        }\n    }\n}\nexports.HumanCallbackWorkflow = HumanCallbackWorkflow;\n//# sourceMappingURL=human_callback_workflow.js.map"],"x_google_ignoreList":[0],"mappings":";;;;;;;;;AACA,QAAO,eAAe,SAAS,cAAc,EAAE,OAAO,MAAM,CAAC;AAC7D,SAAQ,wBAAwB,KAAK;CACrC,MAAM;CACN,MAAM;CACN,MAAM;CACN,MAAM;CACN,MAAM;;;;;CAKN,IAAM,wBAAN,cAAoC,oBAAoB,iBAAiB;;;;EAIrE,YAAY,OAAO,UAAU;AACzB,SAAM,OAAO,SAAS;;;;;EAK1B,MAAM,QAAQ,YAAY,aAAa;AAMnC,OAAI,KAAK,MAAM,gBAAgB;IAC3B,MAAM,QAAQ,KAAK,MAAM,gBAAgB;AACzC,eAAW,cAAc;AACzB,QAAI;AACA,YAAO,MAAM,KAAK,qBAAqB,YAAY,aAAa,MAAM;aAEnE,OAAO;AACV,SAAI,iBAAiB,QAAQ,cACzB,MAAM,SAAS,QAAQ,oBAAoB,sBAAsB;AACjE,WAAK,MAAM,mBAAmB;AAC9B,aAAO,WAAW;AAClB,aAAO,MAAM,KAAK,QAAQ,YAAY,YAAY;WAGlD,OAAM;;;AAWlB,OAAI,KAAK,MAAM,iBAAiB;IAC5B,MAAM,eAAe,KAAK,MAAM,iBAAiB;IACjD,MAAM,SAAS,MAAM,KAAK,iBAAiB,KAAK,MAAM,YAAY,EAAE,aAAa,aAAa;AAC9F,SAAK,MAAM,IAAI,OAAO;AACtB,eAAW,cAAc,OAAO;AAChC,QAAI;AACA,YAAO,MAAM,KAAK,qBAAqB,YAAY,aAAa,OAAO,YAAY;aAEhF,OAAO;AACV,SAAI,iBAAiB,QAAQ,cACzB,MAAM,SAAS,QAAQ,oBAAoB,sBAAsB;AACjE,WAAK,MAAM,oBAAoB;AAC/B,aAAO,WAAW;AAClB,aAAO,MAAM,KAAK,QAAQ,YAAY,YAAY;WAGlD,OAAM;;;GAWlB,MAAM,gBAAgB,MAAM,KAAK,oBAAoB,YAAY,YAAY;GAC7E,MAAM,iBAAiB,cAAc;GACrC,MAAM,UAAU,OAAO,KAAK,YAAY,cAAc,QAAQ,OAAO;GACrE,MAAM,mBAAmB,MAAM,KAAK,iBAAiB,SAAS,YAAY;AAC1E,QAAK,MAAM,IAAI,kBAAkB,QAAQ;AACzC,cAAW,cAAc,iBAAiB;AAC1C,UAAO,MAAM,KAAK,qBAAqB,YAAY,aAAa,iBAAiB,aAAa,eAAe;;;;;EAKjH,MAAM,iBAAiB,SAAS,aAAa,cAAc;GACvD,MAAM,aAAa,IAAI,iBAAiB;GACxC,MAAM,SAAS;IACX,gBAAgB,WAAW;IAC3B,SAAS,eAAe;IACf;IACZ;AACD,OAAI,YAAY,SACZ,QAAO,WAAW,YAAY;AAElC,OAAI,aACA,QAAO,eAAe;GAE1B,MAAM,UAAU,UAAU,QAAQ,QAAQ,oBAAoB,iBAAiB;AAC/E,OAAI;AACA,WAAO,MAAM,QAAQ,KAAK,CAAC,KAAK,2BAA2B,OAAO,EAAE,QAAQ,CAAC;YAE1E,OAAO;AACV,QAAI,UAAU,aAAa,GAAG,MAAM,EAAE;AAClC,gBAAW,OAAO;AAClB,WAAM,IAAI,QAAQ,eAAe,iCAAiC,oBAAoB,iBAAiB,KAAK;;AAEhH,UAAM;aAEF;AACJ,YAAQ,OAAO;;;;AAI3B,SAAQ,wBAAwB"}

package/dist/node_modules/.pnpm/mongodb@6.21.0/node_modules/mongodb/lib/cmap/auth/mongodb_oidc/k8s_machine_workflow.mjs

@@ -1,33 +0,0 @@
-import { __commonJSMin, __require } from "../../../../../../../../../_virtual/rolldown_runtime.mjs";
-
-//#region ../../node_modules/.pnpm/mongodb@6.21.0/node_modules/mongodb/lib/cmap/auth/mongodb_oidc/k8s_machine_workflow.js
-var require_k8s_machine_workflow = /* @__PURE__ */ __commonJSMin(((exports) => {
-	Object.defineProperty(exports, "__esModule", { value: true });
-	exports.callback = void 0;
-	const promises_1 = __require("fs/promises");
-	/** The fallback file name */
-	const FALLBACK_FILENAME = "/var/run/secrets/kubernetes.io/serviceaccount/token";
-	/** The azure environment variable for the file name. */
-	const AZURE_FILENAME = "AZURE_FEDERATED_TOKEN_FILE";
-	/** The AWS environment variable for the file name. */
-	const AWS_FILENAME = "AWS_WEB_IDENTITY_TOKEN_FILE";
-	/**
-	* The callback function to be used in the automated callback workflow.
-	* @param params - The OIDC callback parameters.
-	* @returns The OIDC response.
-	*/
-	const callback = async () => {
-		let filename;
-		if (process.env[AZURE_FILENAME]) filename = process.env[AZURE_FILENAME];
-		else if (process.env[AWS_FILENAME]) filename = process.env[AWS_FILENAME];
-		else filename = FALLBACK_FILENAME;
-		return { accessToken: await (0, promises_1.readFile)(filename, "utf8") };
-	};
-	exports.callback = callback;
-}));
-
-//#endregion
-export default require_k8s_machine_workflow();
-
-export { require_k8s_machine_workflow };
-//# sourceMappingURL=k8s_machine_workflow.mjs.map

package/dist/node_modules/.pnpm/mongodb@6.21.0/node_modules/mongodb/lib/cmap/auth/mongodb_oidc/k8s_machine_workflow.mjs.map

@@ -1 +0,0 @@
-{"version":3,"file":"k8s_machine_workflow.mjs","names":[],"sources":["../../../../../../../../../../../../node_modules/.pnpm/mongodb@6.21.0/node_modules/mongodb/lib/cmap/auth/mongodb_oidc/k8s_machine_workflow.js"],"sourcesContent":["\"use strict\";\nObject.defineProperty(exports, \"__esModule\", { value: true });\nexports.callback = void 0;\nconst promises_1 = require(\"fs/promises\");\n/** The fallback file name */\nconst FALLBACK_FILENAME = '/var/run/secrets/kubernetes.io/serviceaccount/token';\n/** The azure environment variable for the file name. */\nconst AZURE_FILENAME = 'AZURE_FEDERATED_TOKEN_FILE';\n/** The AWS environment variable for the file name. */\nconst AWS_FILENAME = 'AWS_WEB_IDENTITY_TOKEN_FILE';\n/**\n * The callback function to be used in the automated callback workflow.\n * @param params - The OIDC callback parameters.\n * @returns The OIDC response.\n */\nconst callback = async () => {\n    let filename;\n    if (process.env[AZURE_FILENAME]) {\n        filename = process.env[AZURE_FILENAME];\n    }\n    else if (process.env[AWS_FILENAME]) {\n        filename = process.env[AWS_FILENAME];\n    }\n    else {\n        filename = FALLBACK_FILENAME;\n    }\n    const token = await (0, promises_1.readFile)(filename, 'utf8');\n    return { accessToken: token };\n};\nexports.callback = callback;\n//# sourceMappingURL=k8s_machine_workflow.js.map"],"x_google_ignoreList":[0],"mappings":";;;;AACA,QAAO,eAAe,SAAS,cAAc,EAAE,OAAO,MAAM,CAAC;AAC7D,SAAQ,WAAW,KAAK;CACxB,MAAM,uBAAqB,cAAc;;CAEzC,MAAM,oBAAoB;;CAE1B,MAAM,iBAAiB;;CAEvB,MAAM,eAAe;;;;;;CAMrB,MAAM,WAAW,YAAY;EACzB,IAAI;AACJ,MAAI,QAAQ,IAAI,gBACZ,YAAW,QAAQ,IAAI;WAElB,QAAQ,IAAI,cACjB,YAAW,QAAQ,IAAI;MAGvB,YAAW;AAGf,SAAO,EAAE,aADK,OAAO,GAAG,WAAW,UAAU,UAAU,OAAO,EACjC;;AAEjC,SAAQ,WAAW"}

package/dist/node_modules/.pnpm/mongodb@6.21.0/node_modules/mongodb/lib/cmap/auth/mongodb_oidc/token_cache.mjs

@@ -1,53 +0,0 @@
-import { __commonJSMin } from "../../../../../../../../../_virtual/rolldown_runtime.mjs";
-import { require_error } from "../../../error.mjs";
-
-//#region ../../node_modules/.pnpm/mongodb@6.21.0/node_modules/mongodb/lib/cmap/auth/mongodb_oidc/token_cache.js
-var require_token_cache = /* @__PURE__ */ __commonJSMin(((exports) => {
-	Object.defineProperty(exports, "__esModule", { value: true });
-	exports.TokenCache = void 0;
-	const error_1 = require_error();
-	var MongoOIDCError = class extends error_1.MongoDriverError {};
-	/** @internal */
-	var TokenCache = class {
-		get hasAccessToken() {
-			return !!this.accessToken;
-		}
-		get hasRefreshToken() {
-			return !!this.refreshToken;
-		}
-		get hasIdpInfo() {
-			return !!this.idpInfo;
-		}
-		getAccessToken() {
-			if (!this.accessToken) throw new MongoOIDCError("Attempted to get an access token when none exists.");
-			return this.accessToken;
-		}
-		getRefreshToken() {
-			if (!this.refreshToken) throw new MongoOIDCError("Attempted to get a refresh token when none exists.");
-			return this.refreshToken;
-		}
-		getIdpInfo() {
-			if (!this.idpInfo) throw new MongoOIDCError("Attempted to get IDP information when none exists.");
-			return this.idpInfo;
-		}
-		put(response, idpInfo) {
-			this.accessToken = response.accessToken;
-			this.refreshToken = response.refreshToken;
-			this.expiresInSeconds = response.expiresInSeconds;
-			if (idpInfo) this.idpInfo = idpInfo;
-		}
-		removeAccessToken() {
-			this.accessToken = void 0;
-		}
-		removeRefreshToken() {
-			this.refreshToken = void 0;
-		}
-	};
-	exports.TokenCache = TokenCache;
-}));
-
-//#endregion
-export default require_token_cache();
-
-export { require_token_cache };
-//# sourceMappingURL=token_cache.mjs.map

package/dist/node_modules/.pnpm/mongodb@6.21.0/node_modules/mongodb/lib/cmap/auth/mongodb_oidc/token_cache.mjs.map

@@ -1 +0,0 @@
-{"version":3,"file":"token_cache.mjs","names":[],"sources":["../../../../../../../../../../../../node_modules/.pnpm/mongodb@6.21.0/node_modules/mongodb/lib/cmap/auth/mongodb_oidc/token_cache.js"],"sourcesContent":["\"use strict\";\nObject.defineProperty(exports, \"__esModule\", { value: true });\nexports.TokenCache = void 0;\nconst error_1 = require(\"../../../error\");\nclass MongoOIDCError extends error_1.MongoDriverError {\n}\n/** @internal */\nclass TokenCache {\n    get hasAccessToken() {\n        return !!this.accessToken;\n    }\n    get hasRefreshToken() {\n        return !!this.refreshToken;\n    }\n    get hasIdpInfo() {\n        return !!this.idpInfo;\n    }\n    getAccessToken() {\n        if (!this.accessToken) {\n            throw new MongoOIDCError('Attempted to get an access token when none exists.');\n        }\n        return this.accessToken;\n    }\n    getRefreshToken() {\n        if (!this.refreshToken) {\n            throw new MongoOIDCError('Attempted to get a refresh token when none exists.');\n        }\n        return this.refreshToken;\n    }\n    getIdpInfo() {\n        if (!this.idpInfo) {\n            throw new MongoOIDCError('Attempted to get IDP information when none exists.');\n        }\n        return this.idpInfo;\n    }\n    put(response, idpInfo) {\n        this.accessToken = response.accessToken;\n        this.refreshToken = response.refreshToken;\n        this.expiresInSeconds = response.expiresInSeconds;\n        if (idpInfo) {\n            this.idpInfo = idpInfo;\n        }\n    }\n    removeAccessToken() {\n        this.accessToken = undefined;\n    }\n    removeRefreshToken() {\n        this.refreshToken = undefined;\n    }\n}\nexports.TokenCache = TokenCache;\n//# sourceMappingURL=token_cache.js.map"],"x_google_ignoreList":[0],"mappings":";;;;;AACA,QAAO,eAAe,SAAS,cAAc,EAAE,OAAO,MAAM,CAAC;AAC7D,SAAQ,aAAa,KAAK;CAC1B,MAAM;CACN,IAAM,iBAAN,cAA6B,QAAQ,iBAAiB;;CAGtD,IAAM,aAAN,MAAiB;EACb,IAAI,iBAAiB;AACjB,UAAO,CAAC,CAAC,KAAK;;EAElB,IAAI,kBAAkB;AAClB,UAAO,CAAC,CAAC,KAAK;;EAElB,IAAI,aAAa;AACb,UAAO,CAAC,CAAC,KAAK;;EAElB,iBAAiB;AACb,OAAI,CAAC,KAAK,YACN,OAAM,IAAI,eAAe,qDAAqD;AAElF,UAAO,KAAK;;EAEhB,kBAAkB;AACd,OAAI,CAAC,KAAK,aACN,OAAM,IAAI,eAAe,qDAAqD;AAElF,UAAO,KAAK;;EAEhB,aAAa;AACT,OAAI,CAAC,KAAK,QACN,OAAM,IAAI,eAAe,qDAAqD;AAElF,UAAO,KAAK;;EAEhB,IAAI,UAAU,SAAS;AACnB,QAAK,cAAc,SAAS;AAC5B,QAAK,eAAe,SAAS;AAC7B,QAAK,mBAAmB,SAAS;AACjC,OAAI,QACA,MAAK,UAAU;;EAGvB,oBAAoB;AAChB,QAAK,cAAc;;EAEvB,qBAAqB;AACjB,QAAK,eAAe;;;AAG5B,SAAQ,aAAa"}

package/dist/node_modules/.pnpm/mongodb@6.21.0/node_modules/mongodb/lib/cmap/auth/mongodb_oidc/token_machine_workflow.mjs

@@ -1,29 +0,0 @@
-import { __commonJSMin, __require } from "../../../../../../../../../_virtual/rolldown_runtime.mjs";
-import { require_error } from "../../../error.mjs";
-
-//#region ../../node_modules/.pnpm/mongodb@6.21.0/node_modules/mongodb/lib/cmap/auth/mongodb_oidc/token_machine_workflow.js
-var require_token_machine_workflow = /* @__PURE__ */ __commonJSMin(((exports) => {
-	Object.defineProperty(exports, "__esModule", { value: true });
-	exports.callback = void 0;
-	const fs = __require("fs");
-	const error_1 = require_error();
-	/** Error for when the token is missing in the environment. */
-	const TOKEN_MISSING_ERROR = "OIDC_TOKEN_FILE must be set in the environment.";
-	/**
-	* The callback function to be used in the automated callback workflow.
-	* @param params - The OIDC callback parameters.
-	* @returns The OIDC response.
-	*/
-	const callback = async () => {
-		const tokenFile = process.env.OIDC_TOKEN_FILE;
-		if (!tokenFile) throw new error_1.MongoAWSError(TOKEN_MISSING_ERROR);
-		return { accessToken: await fs.promises.readFile(tokenFile, "utf8") };
-	};
-	exports.callback = callback;
-}));
-
-//#endregion
-export default require_token_machine_workflow();
-
-export { require_token_machine_workflow };
-//# sourceMappingURL=token_machine_workflow.mjs.map

package/dist/node_modules/.pnpm/mongodb@6.21.0/node_modules/mongodb/lib/cmap/auth/mongodb_oidc/token_machine_workflow.mjs.map

@@ -1 +0,0 @@
-{"version":3,"file":"token_machine_workflow.mjs","names":[],"sources":["../../../../../../../../../../../../node_modules/.pnpm/mongodb@6.21.0/node_modules/mongodb/lib/cmap/auth/mongodb_oidc/token_machine_workflow.js"],"sourcesContent":["\"use strict\";\nObject.defineProperty(exports, \"__esModule\", { value: true });\nexports.callback = void 0;\nconst fs = require(\"fs\");\nconst error_1 = require(\"../../../error\");\n/** Error for when the token is missing in the environment. */\nconst TOKEN_MISSING_ERROR = 'OIDC_TOKEN_FILE must be set in the environment.';\n/**\n * The callback function to be used in the automated callback workflow.\n * @param params - The OIDC callback parameters.\n * @returns The OIDC response.\n */\nconst callback = async () => {\n    const tokenFile = process.env.OIDC_TOKEN_FILE;\n    if (!tokenFile) {\n        throw new error_1.MongoAWSError(TOKEN_MISSING_ERROR);\n    }\n    const token = await fs.promises.readFile(tokenFile, 'utf8');\n    return { accessToken: token };\n};\nexports.callback = callback;\n//# sourceMappingURL=token_machine_workflow.js.map"],"x_google_ignoreList":[0],"mappings":";;;;;AACA,QAAO,eAAe,SAAS,cAAc,EAAE,OAAO,MAAM,CAAC;AAC7D,SAAQ,WAAW,KAAK;CACxB,MAAM,eAAa,KAAK;CACxB,MAAM;;CAEN,MAAM,sBAAsB;;;;;;CAM5B,MAAM,WAAW,YAAY;EACzB,MAAM,YAAY,QAAQ,IAAI;AAC9B,MAAI,CAAC,UACD,OAAM,IAAI,QAAQ,cAAc,oBAAoB;AAGxD,SAAO,EAAE,aADK,MAAM,GAAG,SAAS,SAAS,WAAW,OAAO,EAC9B;;AAEjC,SAAQ,WAAW"}

package/dist/node_modules/.pnpm/mongodb@6.21.0/node_modules/mongodb/lib/cmap/auth/mongodb_oidc.mjs

@@ -1,83 +0,0 @@
-import { __commonJSMin } from "../../../../../../../../_virtual/rolldown_runtime.mjs";
-import { require_error } from "../../error.mjs";
-import { require_auth_provider } from "./auth_provider.mjs";
-import { require_automated_callback_workflow } from "./mongodb_oidc/automated_callback_workflow.mjs";
-import { require_azure_machine_workflow } from "./mongodb_oidc/azure_machine_workflow.mjs";
-import { require_gcp_machine_workflow } from "./mongodb_oidc/gcp_machine_workflow.mjs";
-import { require_k8s_machine_workflow } from "./mongodb_oidc/k8s_machine_workflow.mjs";
-import { require_token_cache } from "./mongodb_oidc/token_cache.mjs";
-import { require_token_machine_workflow } from "./mongodb_oidc/token_machine_workflow.mjs";
-
-//#region ../../node_modules/.pnpm/mongodb@6.21.0/node_modules/mongodb/lib/cmap/auth/mongodb_oidc.js
-var require_mongodb_oidc = /* @__PURE__ */ __commonJSMin(((exports) => {
-	Object.defineProperty(exports, "__esModule", { value: true });
-	exports.MongoDBOIDC = exports.OIDC_WORKFLOWS = exports.OIDC_VERSION = void 0;
-	const error_1 = require_error();
-	const auth_provider_1 = require_auth_provider();
-	const automated_callback_workflow_1 = require_automated_callback_workflow();
-	const azure_machine_workflow_1 = require_azure_machine_workflow();
-	const gcp_machine_workflow_1 = require_gcp_machine_workflow();
-	const k8s_machine_workflow_1 = require_k8s_machine_workflow();
-	const token_cache_1 = require_token_cache();
-	const token_machine_workflow_1 = require_token_machine_workflow();
-	/** Error when credentials are missing. */
-	const MISSING_CREDENTIALS_ERROR = "AuthContext must provide credentials.";
-	/** The current version of OIDC implementation. */
-	exports.OIDC_VERSION = 1;
-	/** @internal */
-	exports.OIDC_WORKFLOWS = /* @__PURE__ */ new Map();
-	exports.OIDC_WORKFLOWS.set("test", () => new automated_callback_workflow_1.AutomatedCallbackWorkflow(new token_cache_1.TokenCache(), token_machine_workflow_1.callback));
-	exports.OIDC_WORKFLOWS.set("azure", () => new automated_callback_workflow_1.AutomatedCallbackWorkflow(new token_cache_1.TokenCache(), azure_machine_workflow_1.callback));
-	exports.OIDC_WORKFLOWS.set("gcp", () => new automated_callback_workflow_1.AutomatedCallbackWorkflow(new token_cache_1.TokenCache(), gcp_machine_workflow_1.callback));
-	exports.OIDC_WORKFLOWS.set("k8s", () => new automated_callback_workflow_1.AutomatedCallbackWorkflow(new token_cache_1.TokenCache(), k8s_machine_workflow_1.callback));
-	/**
-	* OIDC auth provider.
-	*/
-	var MongoDBOIDC = class extends auth_provider_1.AuthProvider {
-		/**
-		* Instantiate the auth provider.
-		*/
-		constructor(workflow) {
-			super();
-			if (!workflow) throw new error_1.MongoInvalidArgumentError("No workflow provided to the OIDC auth provider.");
-			this.workflow = workflow;
-		}
-		/**
-		* Authenticate using OIDC
-		*/
-		async auth(authContext) {
-			const { connection, reauthenticating, response } = authContext;
-			if (response?.speculativeAuthenticate?.done && !reauthenticating) return;
-			const credentials = getCredentials(authContext);
-			if (reauthenticating) await this.workflow.reauthenticate(connection, credentials);
-			else await this.workflow.execute(connection, credentials, response);
-		}
-		/**
-		* Add the speculative auth for the initial handshake.
-		*/
-		async prepare(handshakeDoc, authContext) {
-			const { connection } = authContext;
-			const credentials = getCredentials(authContext);
-			const result = await this.workflow.speculativeAuth(connection, credentials);
-			return {
-				...handshakeDoc,
-				...result
-			};
-		}
-	};
-	exports.MongoDBOIDC = MongoDBOIDC;
-	/**
-	* Get credentials from the auth context, throwing if they do not exist.
-	*/
-	function getCredentials(authContext) {
-		const { credentials } = authContext;
-		if (!credentials) throw new error_1.MongoMissingCredentialsError(MISSING_CREDENTIALS_ERROR);
-		return credentials;
-	}
-}));
-
-//#endregion
-export default require_mongodb_oidc();
-
-export { require_mongodb_oidc };
-//# sourceMappingURL=mongodb_oidc.mjs.map

package/dist/node_modules/.pnpm/mongodb@6.21.0/node_modules/mongodb/lib/cmap/auth/mongodb_oidc.mjs.map

@@ -1 +0,0 @@
-{"version":3,"file":"mongodb_oidc.mjs","names":[],"sources":["../../../../../../../../../../../node_modules/.pnpm/mongodb@6.21.0/node_modules/mongodb/lib/cmap/auth/mongodb_oidc.js"],"sourcesContent":["\"use strict\";\nObject.defineProperty(exports, \"__esModule\", { value: true });\nexports.MongoDBOIDC = exports.OIDC_WORKFLOWS = exports.OIDC_VERSION = void 0;\nconst error_1 = require(\"../../error\");\nconst auth_provider_1 = require(\"./auth_provider\");\nconst automated_callback_workflow_1 = require(\"./mongodb_oidc/automated_callback_workflow\");\nconst azure_machine_workflow_1 = require(\"./mongodb_oidc/azure_machine_workflow\");\nconst gcp_machine_workflow_1 = require(\"./mongodb_oidc/gcp_machine_workflow\");\nconst k8s_machine_workflow_1 = require(\"./mongodb_oidc/k8s_machine_workflow\");\nconst token_cache_1 = require(\"./mongodb_oidc/token_cache\");\nconst token_machine_workflow_1 = require(\"./mongodb_oidc/token_machine_workflow\");\n/** Error when credentials are missing. */\nconst MISSING_CREDENTIALS_ERROR = 'AuthContext must provide credentials.';\n/** The current version of OIDC implementation. */\nexports.OIDC_VERSION = 1;\n/** @internal */\nexports.OIDC_WORKFLOWS = new Map();\nexports.OIDC_WORKFLOWS.set('test', () => new automated_callback_workflow_1.AutomatedCallbackWorkflow(new token_cache_1.TokenCache(), token_machine_workflow_1.callback));\nexports.OIDC_WORKFLOWS.set('azure', () => new automated_callback_workflow_1.AutomatedCallbackWorkflow(new token_cache_1.TokenCache(), azure_machine_workflow_1.callback));\nexports.OIDC_WORKFLOWS.set('gcp', () => new automated_callback_workflow_1.AutomatedCallbackWorkflow(new token_cache_1.TokenCache(), gcp_machine_workflow_1.callback));\nexports.OIDC_WORKFLOWS.set('k8s', () => new automated_callback_workflow_1.AutomatedCallbackWorkflow(new token_cache_1.TokenCache(), k8s_machine_workflow_1.callback));\n/**\n * OIDC auth provider.\n */\nclass MongoDBOIDC extends auth_provider_1.AuthProvider {\n    /**\n     * Instantiate the auth provider.\n     */\n    constructor(workflow) {\n        super();\n        if (!workflow) {\n            throw new error_1.MongoInvalidArgumentError('No workflow provided to the OIDC auth provider.');\n        }\n        this.workflow = workflow;\n    }\n    /**\n     * Authenticate using OIDC\n     */\n    async auth(authContext) {\n        const { connection, reauthenticating, response } = authContext;\n        if (response?.speculativeAuthenticate?.done && !reauthenticating) {\n            return;\n        }\n        const credentials = getCredentials(authContext);\n        if (reauthenticating) {\n            await this.workflow.reauthenticate(connection, credentials);\n        }\n        else {\n            await this.workflow.execute(connection, credentials, response);\n        }\n    }\n    /**\n     * Add the speculative auth for the initial handshake.\n     */\n    async prepare(handshakeDoc, authContext) {\n        const { connection } = authContext;\n        const credentials = getCredentials(authContext);\n        const result = await this.workflow.speculativeAuth(connection, credentials);\n        return { ...handshakeDoc, ...result };\n    }\n}\nexports.MongoDBOIDC = MongoDBOIDC;\n/**\n * Get credentials from the auth context, throwing if they do not exist.\n */\nfunction getCredentials(authContext) {\n    const { credentials } = authContext;\n    if (!credentials) {\n        throw new error_1.MongoMissingCredentialsError(MISSING_CREDENTIALS_ERROR);\n    }\n    return credentials;\n}\n//# sourceMappingURL=mongodb_oidc.js.map"],"x_google_ignoreList":[0],"mappings":";;;;;;;;;;;;AACA,QAAO,eAAe,SAAS,cAAc,EAAE,OAAO,MAAM,CAAC;AAC7D,SAAQ,cAAc,QAAQ,iBAAiB,QAAQ,eAAe,KAAK;CAC3E,MAAM;CACN,MAAM;CACN,MAAM;CACN,MAAM;CACN,MAAM;CACN,MAAM;CACN,MAAM;CACN,MAAM;;CAEN,MAAM,4BAA4B;;AAElC,SAAQ,eAAe;;AAEvB,SAAQ,iCAAiB,IAAI,KAAK;AAClC,SAAQ,eAAe,IAAI,cAAc,IAAI,8BAA8B,0BAA0B,IAAI,cAAc,YAAY,EAAE,yBAAyB,SAAS,CAAC;AACxK,SAAQ,eAAe,IAAI,eAAe,IAAI,8BAA8B,0BAA0B,IAAI,cAAc,YAAY,EAAE,yBAAyB,SAAS,CAAC;AACzK,SAAQ,eAAe,IAAI,aAAa,IAAI,8BAA8B,0BAA0B,IAAI,cAAc,YAAY,EAAE,uBAAuB,SAAS,CAAC;AACrK,SAAQ,eAAe,IAAI,aAAa,IAAI,8BAA8B,0BAA0B,IAAI,cAAc,YAAY,EAAE,uBAAuB,SAAS,CAAC;;;;CAIrK,IAAM,cAAN,cAA0B,gBAAgB,aAAa;;;;EAInD,YAAY,UAAU;AAClB,UAAO;AACP,OAAI,CAAC,SACD,OAAM,IAAI,QAAQ,0BAA0B,kDAAkD;AAElG,QAAK,WAAW;;;;;EAKpB,MAAM,KAAK,aAAa;GACpB,MAAM,EAAE,YAAY,kBAAkB,aAAa;AACnD,OAAI,UAAU,yBAAyB,QAAQ,CAAC,iBAC5C;GAEJ,MAAM,cAAc,eAAe,YAAY;AAC/C,OAAI,iBACA,OAAM,KAAK,SAAS,eAAe,YAAY,YAAY;OAG3D,OAAM,KAAK,SAAS,QAAQ,YAAY,aAAa,SAAS;;;;;EAMtE,MAAM,QAAQ,cAAc,aAAa;GACrC,MAAM,EAAE,eAAe;GACvB,MAAM,cAAc,eAAe,YAAY;GAC/C,MAAM,SAAS,MAAM,KAAK,SAAS,gBAAgB,YAAY,YAAY;AAC3E,UAAO;IAAE,GAAG;IAAc,GAAG;IAAQ;;;AAG7C,SAAQ,cAAc;;;;CAItB,SAAS,eAAe,aAAa;EACjC,MAAM,EAAE,gBAAgB;AACxB,MAAI,CAAC,YACD,OAAM,IAAI,QAAQ,6BAA6B,0BAA0B;AAE7E,SAAO"}