@lancedb/lancedb 0.39.0-beta.8 → 0.39.0-beta.9

package/dist/connection.d.ts

@@ -256,18 +256,19 @@ export declare abstract class Connection {
     /**
      * Define a materialized view named `name` over the table `source`.
      *
-     * The view is created empty, with the query recorded in its schema
-     * metadata; `view.refresh()` computes the rows. The view is a normal
-     * table: it can be queried, indexed and searched, and it appears in
-     * `tableNames`. The source table must have stable row ids (create it with
+     * The view is populated before creation returns. Set `withNoData` to create
+     * only its definition and empty backing table. The view is a normal table:
+     * it can be queried, indexed and searched, and it appears in `tableNames`.
+     * The source table must have stable row ids (create it with
      * the `newTableEnableStableRowIds` storage option); they keep the view's
      * provenance valid across source compactions and cannot be enabled after
-     * a table exists. Local databases only.
+     * a table exists.
      */
     abstract createMaterializedView(name: string, source: string, options?: {
         select?: MaterializedViewSelect;
         where?: string;
         limit?: number;
+        withNoData?: boolean;
     }): Promise<MaterializedView>;
     /**
      * Open the materialized view named `name`.
@@ -281,6 +282,22 @@ export declare abstract class Connection {
      * Found by reading every table's schema, so this costs an open per table.
      */
     abstract listMaterializedViews(): Promise<string[]>;
+    /**
+     * Drop the materialized view named `name`.
+     *
+     * The view may become unavailable before physical cleanup finishes. Use
+     * {@link dropMaterializedViewAsync} to retain and wait for the cleanup job.
+     *
+     * Rejects a table that exists but is not a materialized view.
+     */
+    abstract dropMaterializedView(name: string, namespacePath?: string[]): Promise<void>;
+    /**
+     * Start dropping the materialized view named `name` and return its cleanup
+     * job without waiting for completion.
+     *
+     * Rejects a table that exists but is not a materialized view.
+     */
+    abstract dropMaterializedViewAsync(name: string, namespacePath?: string[]): Promise<Job>;
     abstract openTable(name: string, namespacePath?: string[], options?: Partial<OpenTableOptions>): Promise<Table>;
     /**
      * Creates a new Table and initialize it with new data.
@@ -460,9 +477,12 @@ export declare class LocalConnection extends Connection {
         select?: MaterializedViewSelect;
         where?: string;
         limit?: number;
+        withNoData?: boolean;
     }): Promise<MaterializedView>;
     openMaterializedView(name: string): Promise<MaterializedView>;
     listMaterializedViews(): Promise<string[]>;
+    dropMaterializedView(name: string, namespacePath?: string[]): Promise<void>;
+    dropMaterializedViewAsync(name: string, namespacePath?: string[]): Promise<Job>;
     listTables(namespacePathOrOptions?: string[] | Partial<ListTablesOptions>, options?: Partial<ListTablesOptions>): Promise<ListTablesResponse>;
     openTable(name: string, namespacePath?: string[], options?: Partial<OpenTableOptions>): Promise<Table>;
     cloneTable(targetTableName: string, sourceUri: string, options?: {

package/dist/connection.js

@@ -71,7 +71,7 @@ class LocalConnection extends Connection {
     }
     async createMaterializedView(name, source, options) {
         (0, materialized_view_1.validateNonNegativeInteger)(options?.limit, "limit");
-        const innerTable = await this.inner.createMaterializedView(name, source, (0, materialized_view_1.normalizeSelect)(options?.select), options?.where, options?.limit);
+        const innerTable = await this.inner.createMaterializedView(name, source, (0, materialized_view_1.normalizeSelect)(options?.select), options?.where, options?.limit, options?.withNoData ?? false);
         return new materialized_view_1.MaterializedView(new table_1.LocalTable(innerTable));
     }
     async openMaterializedView(name) {
@@ -81,6 +81,12 @@ class LocalConnection extends Connection {
     async listMaterializedViews() {
         return await this.inner.listMaterializedViews();
     }
+    async dropMaterializedView(name, namespacePath) {
+        return this.inner.dropMaterializedView(name, namespacePath ?? []);
+    }
+    async dropMaterializedViewAsync(name, namespacePath) {
+        return new job_1.Job(await this.inner.dropMaterializedViewAsync(name, namespacePath ?? []));
+    }
     async listTables(namespacePathOrOptions, options) {
         // Detect if first argument is namespacePath array or options object
         const namespacePath = Array.isArray(namespacePathOrOptions)

package/dist/index.d.ts

@@ -17,7 +17,7 @@ export { AutoQuery, ExecutableQuery, Query, QueryBase, VectorQuery, TakeQuery, A
 export { Index, IndexOptions, IvfPqOptions, IvfRqOptions, IvfFlatOptions, HnswPqOptions, HnswSqOptions, FtsOptions, BaseTokenizer, } from "./indices";
 export { Table, Branches, BranchColumnSummary, BranchColumnChange, BranchIndexSummary, BranchRowCountSummary, CherryPickError, BranchDiff, CherryPickPreview, CherryPickResult, AddDataOptions, UpdateOptions, OptimizeOptions, Version, WriteProgress, FtsToken, TokenizeTableOptions, LsmWriteSpec, LsmStats, BucketStats, GenerationStats, MemtableStats, ColumnAlteration, FieldMetadataUpdate, } from "./table";
 export { HeaderProvider, StaticHeaderProvider, OAuthHeaderProvider, TokenResponse, } from "./header";
-export { OAuthConfig, OAuthFlowType } from "./oauth";
+export { OAuthConfig, OAuthFlowType, OAuthSession, SessionLogout, SessionStatus, TokenCacheOptions, } from "./oauth";
 export { MergeInsertBuilder, WriteExecutionOptions } from "./merge";
 export * as embedding from "./embedding";
 export { permutationBuilder, PermutationBuilder } from "./permutation";

package/dist/index.js

@@ -2,7 +2,7 @@
 // SPDX-License-Identifier: Apache-2.0
 // SPDX-FileCopyrightText: Copyright The LanceDB Authors
 Object.defineProperty(exports, "__esModule", { value: true });
-exports.packBits = exports.rerankers = exports.Scannable = exports.PermutationBuilder = exports.permutationBuilder = exports.embedding = exports.MergeInsertBuilder = exports.OAuthFlowType = exports.OAuthHeaderProvider = exports.StaticHeaderProvider = exports.HeaderProvider = exports.Branches = exports.Table = exports.Index = exports.Occur = exports.Operator = exports.FullTextQueryType = exports.BooleanQuery = exports.MultiMatchQuery = exports.BoostQuery = exports.PhraseQuery = exports.MatchQuery = exports.RecordBatchIterator = exports.TakeQuery = exports.VectorQuery = exports.QueryBase = exports.Query = exports.AutoQuery = exports.Job = exports.Session = exports.Connection = exports.BlobFile = exports.isBlobField = exports.blob = exports.VectorColumnOptions = exports.MakeArrowTableOptions = exports.makeArrowTable = exports.BranchContents = exports.TagContents = exports.Tags = exports.instrumentLanceDbMetrics = exports.NativeJsHeaderProvider = exports.MaterializedView = void 0;
+exports.packBits = exports.rerankers = exports.Scannable = exports.PermutationBuilder = exports.permutationBuilder = exports.embedding = exports.MergeInsertBuilder = exports.OAuthSession = exports.OAuthFlowType = exports.OAuthHeaderProvider = exports.StaticHeaderProvider = exports.HeaderProvider = exports.Branches = exports.Table = exports.Index = exports.Occur = exports.Operator = exports.FullTextQueryType = exports.BooleanQuery = exports.MultiMatchQuery = exports.BoostQuery = exports.PhraseQuery = exports.MatchQuery = exports.RecordBatchIterator = exports.TakeQuery = exports.VectorQuery = exports.QueryBase = exports.Query = exports.AutoQuery = exports.Job = exports.Session = exports.Connection = exports.BlobFile = exports.isBlobField = exports.blob = exports.VectorColumnOptions = exports.MakeArrowTableOptions = exports.makeArrowTable = exports.BranchContents = exports.TagContents = exports.Tags = exports.instrumentLanceDbMetrics = exports.NativeJsHeaderProvider = exports.MaterializedView = void 0;
 exports.tokenize = tokenize;
 exports.connect = connect;
 exports.connectNamespace = connectNamespace;
@@ -62,6 +62,7 @@ Object.defineProperty(exports, "StaticHeaderProvider", { enumerable: true, get:
 Object.defineProperty(exports, "OAuthHeaderProvider", { enumerable: true, get: function () { return header_1.OAuthHeaderProvider; } });
 var oauth_1 = require("./oauth");
 Object.defineProperty(exports, "OAuthFlowType", { enumerable: true, get: function () { return oauth_1.OAuthFlowType; } });
+Object.defineProperty(exports, "OAuthSession", { enumerable: true, get: function () { return oauth_1.OAuthSession; } });
 var merge_1 = require("./merge");
 Object.defineProperty(exports, "MergeInsertBuilder", { enumerable: true, get: function () { return merge_1.MergeInsertBuilder; } });
 exports.embedding = require("./embedding");

package/dist/materialized_view.d.ts

@@ -36,6 +36,8 @@ export declare function validateNonNegativeInteger(value: number | undefined, na
 export declare function normalizeSelect(select?: MaterializedViewSelect): [string, string][] | undefined;
 /** @internal Parse a definition off a table's stored schema metadata. */
 export declare function definitionFromMetadata(metadata: Map<string, string>, name: string): MaterializedViewDefinition;
+/** @internal Parse the backend-independent definition returned by native code. */
+export declare function definitionFromJson(raw: string, name: string): MaterializedViewDefinition;
 /**
  * A handle on a materialized view: its table plus its definition.
  *
@@ -50,7 +52,7 @@ export declare class MaterializedView {
     get name(): string;
     /** The view, as the table it is. */
     table(): Table;
-    /** The query that defines the view, read from its stored schema. */
+    /** The query that defines the view. */
     definition(): Promise<MaterializedViewDefinition>;
     /**
      * Recompute the view from its source.

package/dist/materialized_view.js

@@ -6,6 +6,7 @@ exports.MaterializedView = exports.DEFINITION_META_KEY = void 0;
 exports.validateNonNegativeInteger = validateNonNegativeInteger;
 exports.normalizeSelect = normalizeSelect;
 exports.definitionFromMetadata = definitionFromMetadata;
+exports.definitionFromJson = definitionFromJson;
 /** Schema metadata key holding a materialized view's definition. */
 exports.DEFINITION_META_KEY = "mv.definition";
 /**
@@ -42,10 +43,16 @@ function definitionFromMetadata(metadata, name) {
     if (raw === undefined) {
         throw new Error(`Table '${name}' is not a materialized view`);
     }
+    return definitionFromJson(raw, name);
+}
+/** @internal Parse the backend-independent definition returned by native code. */
+function definitionFromJson(raw, name) {
     // biome-ignore lint/suspicious/noExplicitAny: raw JSON
     const value = JSON.parse(raw);
     // "namespaced_select" keeps older readers from resolving the source at root.
-    if (value.kind !== "select" && value.kind !== "namespaced_select") {
+    if (value.kind !== undefined &&
+        value.kind !== "select" &&
+        value.kind !== "namespaced_select") {
         throw new Error(`materialized view '${name}' is defined by '${value.kind}', which this ` +
             "version of lancedb cannot refresh");
     }
@@ -89,10 +96,9 @@ class MaterializedView {
     table() {
         return this.inner;
     }
-    /** The query that defines the view, read from its stored schema. */
+    /** The query that defines the view. */
     async definition() {
-        const schema = await this.inner.schema();
-        return definitionFromMetadata(schema.metadata, this.name);
+        return definitionFromJson(await this.inner.materializedViewDefinition(), this.name);
     }
     /**
      * Recompute the view from its source.

package/dist/native.d.ts

@@ -42,9 +42,13 @@ export declare class Connection {
    */
   createTable(name: string, buf: Buffer, mode: string, namespacePath?: Array<string> | undefined | null, storageOptions?: Record<string, string> | undefined | null): Promise<Table>
   createEmptyTable(name: string, schemaBuf: Buffer, mode: string, namespacePath?: Array<string> | undefined | null, storageOptions?: Record<string, string> | undefined | null): Promise<Table>
-  createMaterializedView(name: string, source: string, projections?: Array<Array<string>> | undefined | null, filter?: string | undefined | null, limit?: number | undefined | null): Promise<Table>
+  createMaterializedView(name: string, source: string, projections: Array<Array<string>> | undefined | null, filter: string | undefined | null, limit: number | undefined | null, withNoData: boolean): Promise<Table>
   openMaterializedView(name: string): Promise<Table>
   listMaterializedViews(): Promise<Array<string>>
+  /** Drop a materialized view. */
+  dropMaterializedView(name: string, namespacePath?: Array<string> | undefined | null): Promise<void>
+  /** Start dropping a materialized view and return its cleanup job. */
+  dropMaterializedViewAsync(name: string, namespacePath?: Array<string> | undefined | null): Promise<Job>
   openTable(name: string, namespacePath?: Array<string> | undefined | null, storageOptions?: Record<string, string> | undefined | null, indexCacheSize?: number | undefined | null): Promise<Table>
   cloneTable(targetTableName: string, sourceUri: string, targetNamespacePath: Array<string> | undefined | null, sourceVersion: number | undefined | null, sourceTag: string | undefined | null, isShallow: boolean): Promise<Table>
   /** Drop table with the name. Or raise an error if the table does not exist. */
@@ -207,6 +211,50 @@ export declare class NativeMergeInsertBuilder {
   execute(buf: Buffer): Promise<MergeResult>
 }
 
+/**
+ * Explicit OAuth session lifecycle for the persistent token cache: eager
+ * `login`, non-secret `status`, and local `logout`.
+ *
+ * A session is built from the same `OAuthConfig` used to connect (including
+ * its `tokenCache` options). A connection created with the same
+ * configuration shares the cache, so logging in here prepares tokens for
+ * later processes without any database request.
+ */
+export declare class OAuthSession {
+  /**
+   * Create a session manager for the given OAuth configuration.
+   *
+   * The configuration must enable `tokenCache` options and use a flow that
+   * supports persistent sessions (authorization code or device code).
+   */
+  constructor(config: OAuthConfig)
+  /**
+   * Eagerly run the configured authentication flow and store the session.
+   *
+   * A successful login always replaces any prior cached session for this
+   * identity; if the provider does not issue a refresh token (for example
+   * without `offline_access`), the previous record is removed and the
+   * status reports `refreshable == false`.
+   */
+  login(): Promise<SessionStatus>
+  /**
+   * Report whether a matching cached session exists, with safe metadata.
+   *
+   * This never contacts the identity provider and never exposes token
+   * values.
+   */
+  status(): Promise<SessionStatus>
+  /**
+   * Remove the matching local cached credential.
+   *
+   * This only deletes the local cache entry. It does not revoke the
+   * refresh token with the provider and does not sign out of a browser
+   * SSO session. Repeated calls succeed; `removed` reports whether a
+   * credential existed.
+   */
+  logout(): Promise<SessionLogout>
+}
+
 export declare class PermutationBuilder {
   persist(connection: Connection, tableName: string): PermutationBuilder
   /** Configure random splits */
@@ -325,6 +373,7 @@ export declare class Table {
   refreshColumn(column: string): Promise<RefreshColumnResult>
   refreshColumnAsync(column: string): Promise<Job>
   refreshMaterializedView(full?: boolean | undefined | null, sourceVersion?: number | undefined | null): Promise<RefreshMaterializedViewResult>
+  materializedViewDefinition(): Promise<string>
   addColumnsWithSchema(schemaBuf: Buffer): Promise<AddColumnsResult>
   alterColumns(alterations: Array<ColumnAlteration>): Promise<AlterColumnsResult>
   updateFieldMetadata(updates: Array<FieldMetadataUpdate>): Promise<UpdateFieldMetadataResult>
@@ -349,7 +398,7 @@ export declare class Table {
   branches(): Promise<Branches>
   /** The branch this handle is scoped to, or `null` for the main branch. */
   currentBranch(): string | null
-  optimize(olderThanMs?: number | undefined | null, deleteUnverified?: boolean | undefined | null): Promise<OptimizeStats>
+  optimize(beforeTimestampMs?: number | undefined | null, deleteUnverified?: boolean | undefined | null): Promise<OptimizeStats>
   listIndices(): Promise<Array<IndexConfig>>
   tokenize(query: string, column?: string | undefined | null, indexName?: string | undefined | null): Promise<Array<FtsToken>>
   indexStats(indexName: string): Promise<IndexStatistics | null>
@@ -955,10 +1004,19 @@ export interface OAuthConfig {
    * or resource is required. For example: `["api://{app_id}/.default"]`
    */
   scopes: Array<string>
-  /** Authentication flow: "client_credentials" or "azure_managed_identity" */
+  /**
+   * Authentication flow: "client_credentials", "authorization_code",
+   * "device_code", or "azure_managed_identity"
+   */
   flow?: string
   /** Client secret (required for client_credentials). */
   clientSecret?: string
+  /** Loopback redirect URI for authorization_code. */
+  redirectUri?: string
+  /** Port for the authorization_code loopback callback server. */
+  callbackPort?: number
+  /** Whether authorization_code uses S256 PKCE (default: true). */
+  usePkce?: boolean
   /** Client ID for user-assigned managed identity (azure_managed_identity). */
   managedIdentityClientId?: string
   /**
@@ -967,6 +1025,11 @@ export interface OAuthConfig {
    * the TTL, each request refreshes the token.
    */
   refreshBufferSecs?: number
+  /**
+   * Opt in to the persistent token cache so short-lived processes reuse
+   * one session. Only refresh tokens are persisted.
+   */
+  tokenCache?: TokenCacheOptions
 }
 
 export interface OpenTableOptions {
@@ -1069,6 +1132,37 @@ export interface RetryConfig {
   statuses?: Array<number>
 }
 
+/** Result of `OAuthSession.logout()`. */
+export interface SessionLogout {
+  /**
+   * Whether a cached credential was removed. `false` means no matching
+   * session was cached; logout is idempotent.
+   */
+  removed: boolean
+}
+
+/**
+ * Safe, non-secret view of a cached OAuth session, returned by
+ * `OAuthSession.status()` and `OAuthSession.login()`.
+ */
+export interface SessionStatus {
+  /**
+   * Whether a cached session exists that can obtain tokens without
+   * interactive authentication.
+   */
+  refreshable: boolean
+  /** Canonical issuer URL of the cached session. */
+  issuerUrl: string
+  /** Client ID of the cached session. */
+  clientId: string
+  /** Canonical (sorted, de-duplicated) scopes of the cached session. */
+  scopes: Array<string>
+  /** Flow that produced the cached session. */
+  flow: string
+  /** When the cached session was obtained, as Unix seconds. */
+  obtainedAt?: number
+}
+
 export interface ShuffleOptions {
   seed?: number
   clumpSize?: number
@@ -1167,6 +1261,29 @@ export interface TlsConfig {
   assertHostname?: boolean
 }
 
+/**
+ * Options for the persistent OAuth token cache.
+ *
+ * The cache is opt-in: it is only used when set as `tokenCache` on
+ * `OAuthConfig`. Only refresh tokens are persisted, in a private directory
+ * with owner-only permissions, so short-lived processes can reuse an
+ * authenticated session instead of re-prompting on every start.
+ */
+export interface TokenCacheOptions {
+  /**
+   * Directory that holds cached credentials. Defaults to
+   * `$XDG_CACHE_HOME/lancedb/oauth`, `$HOME/.cache/lancedb/oauth` on Unix,
+   * or `%LOCALAPPDATA%\lancedb\oauth` on Windows. The directory is created
+   * with owner-only permissions (`0700`) when missing.
+   */
+  cacheDir?: string
+  /**
+   * How long to wait for the cross-process refresh lock before failing,
+   * in seconds (default: 30).
+   */
+  lockTimeoutSecs?: number
+}
+
 export declare function tokenize(query: string, baseTokenizer?: string | undefined | null, language?: string | undefined | null, maxTokenLength?: number | undefined | null, lowerCase?: boolean | undefined | null, stem?: boolean | undefined | null, removeStopWords?: boolean | undefined | null, customStopWords?: Array<string> | undefined | null, asciiFolding?: boolean | undefined | null, ngramMinLength?: number | undefined | null, ngramMaxLength?: number | undefined | null, prefixOnly?: boolean | undefined | null): Array<FtsToken>
 
 export interface UpdateFieldMetadataResult {

package/dist/native.js

@@ -76,8 +76,8 @@ function requireNative() {
             try {
                 const binding = require('@lancedb/lancedb-android-arm64');
                 const bindingPackageVersion = require('@lancedb/lancedb-android-arm64/package.json').version;
-                if (bindingPackageVersion !== '0.39.0-beta.8' && process.env.NAPI_RS_ENFORCE_VERSION_CHECK && process.env.NAPI_RS_ENFORCE_VERSION_CHECK !== '0') {
-                    throw new Error(`Native binding package version mismatch, expected 0.39.0-beta.8 but got ${bindingPackageVersion}. You can reinstall dependencies to fix this issue.`);
+                if (bindingPackageVersion !== '0.39.0-beta.9' && process.env.NAPI_RS_ENFORCE_VERSION_CHECK && process.env.NAPI_RS_ENFORCE_VERSION_CHECK !== '0') {
+                    throw new Error(`Native binding package version mismatch, expected 0.39.0-beta.9 but got ${bindingPackageVersion}. You can reinstall dependencies to fix this issue.`);
                 }
                 return binding;
             }
@@ -95,8 +95,8 @@ function requireNative() {
             try {
                 const binding = require('@lancedb/lancedb-android-arm-eabi');
                 const bindingPackageVersion = require('@lancedb/lancedb-android-arm-eabi/package.json').version;
-                if (bindingPackageVersion !== '0.39.0-beta.8' && process.env.NAPI_RS_ENFORCE_VERSION_CHECK && process.env.NAPI_RS_ENFORCE_VERSION_CHECK !== '0') {
-                    throw new Error(`Native binding package version mismatch, expected 0.39.0-beta.8 but got ${bindingPackageVersion}. You can reinstall dependencies to fix this issue.`);
+                if (bindingPackageVersion !== '0.39.0-beta.9' && process.env.NAPI_RS_ENFORCE_VERSION_CHECK && process.env.NAPI_RS_ENFORCE_VERSION_CHECK !== '0') {
+                    throw new Error(`Native binding package version mismatch, expected 0.39.0-beta.9 but got ${bindingPackageVersion}. You can reinstall dependencies to fix this issue.`);
                 }
                 return binding;
             }
@@ -120,8 +120,8 @@ function requireNative() {
                 try {
                     const binding = require('@lancedb/lancedb-win32-x64-gnu');
                     const bindingPackageVersion = require('@lancedb/lancedb-win32-x64-gnu/package.json').version;
-                    if (bindingPackageVersion !== '0.39.0-beta.8' && process.env.NAPI_RS_ENFORCE_VERSION_CHECK && process.env.NAPI_RS_ENFORCE_VERSION_CHECK !== '0') {
-                        throw new Error(`Native binding package version mismatch, expected 0.39.0-beta.8 but got ${bindingPackageVersion}. You can reinstall dependencies to fix this issue.`);
+                    if (bindingPackageVersion !== '0.39.0-beta.9' && process.env.NAPI_RS_ENFORCE_VERSION_CHECK && process.env.NAPI_RS_ENFORCE_VERSION_CHECK !== '0') {
+                        throw new Error(`Native binding package version mismatch, expected 0.39.0-beta.9 but got ${bindingPackageVersion}. You can reinstall dependencies to fix this issue.`);
                     }
                     return binding;
                 }
@@ -139,8 +139,8 @@ function requireNative() {
                 try {
                     const binding = require('@lancedb/lancedb-win32-x64-msvc');
                     const bindingPackageVersion = require('@lancedb/lancedb-win32-x64-msvc/package.json').version;
-                    if (bindingPackageVersion !== '0.39.0-beta.8' && process.env.NAPI_RS_ENFORCE_VERSION_CHECK && process.env.NAPI_RS_ENFORCE_VERSION_CHECK !== '0') {
-                        throw new Error(`Native binding package version mismatch, expected 0.39.0-beta.8 but got ${bindingPackageVersion}. You can reinstall dependencies to fix this issue.`);
+                    if (bindingPackageVersion !== '0.39.0-beta.9' && process.env.NAPI_RS_ENFORCE_VERSION_CHECK && process.env.NAPI_RS_ENFORCE_VERSION_CHECK !== '0') {
+                        throw new Error(`Native binding package version mismatch, expected 0.39.0-beta.9 but got ${bindingPackageVersion}. You can reinstall dependencies to fix this issue.`);
                     }
                     return binding;
                 }
@@ -159,8 +159,8 @@ function requireNative() {
             try {
                 const binding = require('@lancedb/lancedb-win32-ia32-msvc');
                 const bindingPackageVersion = require('@lancedb/lancedb-win32-ia32-msvc/package.json').version;
-                if (bindingPackageVersion !== '0.39.0-beta.8' && process.env.NAPI_RS_ENFORCE_VERSION_CHECK && process.env.NAPI_RS_ENFORCE_VERSION_CHECK !== '0') {
-                    throw new Error(`Native binding package version mismatch, expected 0.39.0-beta.8 but got ${bindingPackageVersion}. You can reinstall dependencies to fix this issue.`);
+                if (bindingPackageVersion !== '0.39.0-beta.9' && process.env.NAPI_RS_ENFORCE_VERSION_CHECK && process.env.NAPI_RS_ENFORCE_VERSION_CHECK !== '0') {
+                    throw new Error(`Native binding package version mismatch, expected 0.39.0-beta.9 but got ${bindingPackageVersion}. You can reinstall dependencies to fix this issue.`);
                 }
                 return binding;
             }
@@ -178,8 +178,8 @@ function requireNative() {
             try {
                 const binding = require('@lancedb/lancedb-win32-arm64-msvc');
                 const bindingPackageVersion = require('@lancedb/lancedb-win32-arm64-msvc/package.json').version;
-                if (bindingPackageVersion !== '0.39.0-beta.8' && process.env.NAPI_RS_ENFORCE_VERSION_CHECK && process.env.NAPI_RS_ENFORCE_VERSION_CHECK !== '0') {
-                    throw new Error(`Native binding package version mismatch, expected 0.39.0-beta.8 but got ${bindingPackageVersion}. You can reinstall dependencies to fix this issue.`);
+                if (bindingPackageVersion !== '0.39.0-beta.9' && process.env.NAPI_RS_ENFORCE_VERSION_CHECK && process.env.NAPI_RS_ENFORCE_VERSION_CHECK !== '0') {
+                    throw new Error(`Native binding package version mismatch, expected 0.39.0-beta.9 but got ${bindingPackageVersion}. You can reinstall dependencies to fix this issue.`);
                 }
                 return binding;
             }
@@ -201,8 +201,8 @@ function requireNative() {
         try {
             const binding = require('@lancedb/lancedb-darwin-universal');
             const bindingPackageVersion = require('@lancedb/lancedb-darwin-universal/package.json').version;
-            if (bindingPackageVersion !== '0.39.0-beta.8' && process.env.NAPI_RS_ENFORCE_VERSION_CHECK && process.env.NAPI_RS_ENFORCE_VERSION_CHECK !== '0') {
-                throw new Error(`Native binding package version mismatch, expected 0.39.0-beta.8 but got ${bindingPackageVersion}. You can reinstall dependencies to fix this issue.`);
+            if (bindingPackageVersion !== '0.39.0-beta.9' && process.env.NAPI_RS_ENFORCE_VERSION_CHECK && process.env.NAPI_RS_ENFORCE_VERSION_CHECK !== '0') {
+                throw new Error(`Native binding package version mismatch, expected 0.39.0-beta.9 but got ${bindingPackageVersion}. You can reinstall dependencies to fix this issue.`);
             }
             return binding;
         }
@@ -219,8 +219,8 @@ function requireNative() {
             try {
                 const binding = require('@lancedb/lancedb-darwin-x64');
                 const bindingPackageVersion = require('@lancedb/lancedb-darwin-x64/package.json').version;
-                if (bindingPackageVersion !== '0.39.0-beta.8' && process.env.NAPI_RS_ENFORCE_VERSION_CHECK && process.env.NAPI_RS_ENFORCE_VERSION_CHECK !== '0') {
-                    throw new Error(`Native binding package version mismatch, expected 0.39.0-beta.8 but got ${bindingPackageVersion}. You can reinstall dependencies to fix this issue.`);
+                if (bindingPackageVersion !== '0.39.0-beta.9' && process.env.NAPI_RS_ENFORCE_VERSION_CHECK && process.env.NAPI_RS_ENFORCE_VERSION_CHECK !== '0') {
+                    throw new Error(`Native binding package version mismatch, expected 0.39.0-beta.9 but got ${bindingPackageVersion}. You can reinstall dependencies to fix this issue.`);
                 }
                 return binding;
             }
@@ -238,8 +238,8 @@ function requireNative() {
             try {
                 const binding = require('@lancedb/lancedb-darwin-arm64');
                 const bindingPackageVersion = require('@lancedb/lancedb-darwin-arm64/package.json').version;
-                if (bindingPackageVersion !== '0.39.0-beta.8' && process.env.NAPI_RS_ENFORCE_VERSION_CHECK && process.env.NAPI_RS_ENFORCE_VERSION_CHECK !== '0') {
-                    throw new Error(`Native binding package version mismatch, expected 0.39.0-beta.8 but got ${bindingPackageVersion}. You can reinstall dependencies to fix this issue.`);
+                if (bindingPackageVersion !== '0.39.0-beta.9' && process.env.NAPI_RS_ENFORCE_VERSION_CHECK && process.env.NAPI_RS_ENFORCE_VERSION_CHECK !== '0') {
+                    throw new Error(`Native binding package version mismatch, expected 0.39.0-beta.9 but got ${bindingPackageVersion}. You can reinstall dependencies to fix this issue.`);
                 }
                 return binding;
             }
@@ -262,8 +262,8 @@ function requireNative() {
             try {
                 const binding = require('@lancedb/lancedb-freebsd-x64');
                 const bindingPackageVersion = require('@lancedb/lancedb-freebsd-x64/package.json').version;
-                if (bindingPackageVersion !== '0.39.0-beta.8' && process.env.NAPI_RS_ENFORCE_VERSION_CHECK && process.env.NAPI_RS_ENFORCE_VERSION_CHECK !== '0') {
-                    throw new Error(`Native binding package version mismatch, expected 0.39.0-beta.8 but got ${bindingPackageVersion}. You can reinstall dependencies to fix this issue.`);
+                if (bindingPackageVersion !== '0.39.0-beta.9' && process.env.NAPI_RS_ENFORCE_VERSION_CHECK && process.env.NAPI_RS_ENFORCE_VERSION_CHECK !== '0') {
+                    throw new Error(`Native binding package version mismatch, expected 0.39.0-beta.9 but got ${bindingPackageVersion}. You can reinstall dependencies to fix this issue.`);
                 }
                 return binding;
             }
@@ -281,8 +281,8 @@ function requireNative() {
             try {
                 const binding = require('@lancedb/lancedb-freebsd-arm64');
                 const bindingPackageVersion = require('@lancedb/lancedb-freebsd-arm64/package.json').version;
-                if (bindingPackageVersion !== '0.39.0-beta.8' && process.env.NAPI_RS_ENFORCE_VERSION_CHECK && process.env.NAPI_RS_ENFORCE_VERSION_CHECK !== '0') {
-                    throw new Error(`Native binding package version mismatch, expected 0.39.0-beta.8 but got ${bindingPackageVersion}. You can reinstall dependencies to fix this issue.`);
+                if (bindingPackageVersion !== '0.39.0-beta.9' && process.env.NAPI_RS_ENFORCE_VERSION_CHECK && process.env.NAPI_RS_ENFORCE_VERSION_CHECK !== '0') {
+                    throw new Error(`Native binding package version mismatch, expected 0.39.0-beta.9 but got ${bindingPackageVersion}. You can reinstall dependencies to fix this issue.`);
                 }
                 return binding;
             }
@@ -306,8 +306,8 @@ function requireNative() {
                 try {
                     const binding = require('@lancedb/lancedb-linux-x64-musl');
                     const bindingPackageVersion = require('@lancedb/lancedb-linux-x64-musl/package.json').version;
-                    if (bindingPackageVersion !== '0.39.0-beta.8' && process.env.NAPI_RS_ENFORCE_VERSION_CHECK && process.env.NAPI_RS_ENFORCE_VERSION_CHECK !== '0') {
-                        throw new Error(`Native binding package version mismatch, expected 0.39.0-beta.8 but got ${bindingPackageVersion}. You can reinstall dependencies to fix this issue.`);
+                    if (bindingPackageVersion !== '0.39.0-beta.9' && process.env.NAPI_RS_ENFORCE_VERSION_CHECK && process.env.NAPI_RS_ENFORCE_VERSION_CHECK !== '0') {
+                        throw new Error(`Native binding package version mismatch, expected 0.39.0-beta.9 but got ${bindingPackageVersion}. You can reinstall dependencies to fix this issue.`);
                     }
                     return binding;
                 }
@@ -325,8 +325,8 @@ function requireNative() {
                 try {
                     const binding = require('@lancedb/lancedb-linux-x64-gnu');
                     const bindingPackageVersion = require('@lancedb/lancedb-linux-x64-gnu/package.json').version;
-                    if (bindingPackageVersion !== '0.39.0-beta.8' && process.env.NAPI_RS_ENFORCE_VERSION_CHECK && process.env.NAPI_RS_ENFORCE_VERSION_CHECK !== '0') {
-                        throw new Error(`Native binding package version mismatch, expected 0.39.0-beta.8 but got ${bindingPackageVersion}. You can reinstall dependencies to fix this issue.`);
+                    if (bindingPackageVersion !== '0.39.0-beta.9' && process.env.NAPI_RS_ENFORCE_VERSION_CHECK && process.env.NAPI_RS_ENFORCE_VERSION_CHECK !== '0') {
+                        throw new Error(`Native binding package version mismatch, expected 0.39.0-beta.9 but got ${bindingPackageVersion}. You can reinstall dependencies to fix this issue.`);
                     }
                     return binding;
                 }
@@ -346,8 +346,8 @@ function requireNative() {
                 try {
                     const binding = require('@lancedb/lancedb-linux-arm64-musl');
                     const bindingPackageVersion = require('@lancedb/lancedb-linux-arm64-musl/package.json').version;
-                    if (bindingPackageVersion !== '0.39.0-beta.8' && process.env.NAPI_RS_ENFORCE_VERSION_CHECK && process.env.NAPI_RS_ENFORCE_VERSION_CHECK !== '0') {
-                        throw new Error(`Native binding package version mismatch, expected 0.39.0-beta.8 but got ${bindingPackageVersion}. You can reinstall dependencies to fix this issue.`);
+                    if (bindingPackageVersion !== '0.39.0-beta.9' && process.env.NAPI_RS_ENFORCE_VERSION_CHECK && process.env.NAPI_RS_ENFORCE_VERSION_CHECK !== '0') {
+                        throw new Error(`Native binding package version mismatch, expected 0.39.0-beta.9 but got ${bindingPackageVersion}. You can reinstall dependencies to fix this issue.`);
                     }
                     return binding;
                 }
@@ -365,8 +365,8 @@ function requireNative() {
                 try {
                     const binding = require('@lancedb/lancedb-linux-arm64-gnu');
                     const bindingPackageVersion = require('@lancedb/lancedb-linux-arm64-gnu/package.json').version;
-                    if (bindingPackageVersion !== '0.39.0-beta.8' && process.env.NAPI_RS_ENFORCE_VERSION_CHECK && process.env.NAPI_RS_ENFORCE_VERSION_CHECK !== '0') {
-                        throw new Error(`Native binding package version mismatch, expected 0.39.0-beta.8 but got ${bindingPackageVersion}. You can reinstall dependencies to fix this issue.`);
+                    if (bindingPackageVersion !== '0.39.0-beta.9' && process.env.NAPI_RS_ENFORCE_VERSION_CHECK && process.env.NAPI_RS_ENFORCE_VERSION_CHECK !== '0') {
+                        throw new Error(`Native binding package version mismatch, expected 0.39.0-beta.9 but got ${bindingPackageVersion}. You can reinstall dependencies to fix this issue.`);
                     }
                     return binding;
                 }
@@ -386,8 +386,8 @@ function requireNative() {
                 try {
                     const binding = require('@lancedb/lancedb-linux-arm-musleabihf');
                     const bindingPackageVersion = require('@lancedb/lancedb-linux-arm-musleabihf/package.json').version;
-                    if (bindingPackageVersion !== '0.39.0-beta.8' && process.env.NAPI_RS_ENFORCE_VERSION_CHECK && process.env.NAPI_RS_ENFORCE_VERSION_CHECK !== '0') {
-                        throw new Error(`Native binding package version mismatch, expected 0.39.0-beta.8 but got ${bindingPackageVersion}. You can reinstall dependencies to fix this issue.`);
+                    if (bindingPackageVersion !== '0.39.0-beta.9' && process.env.NAPI_RS_ENFORCE_VERSION_CHECK && process.env.NAPI_RS_ENFORCE_VERSION_CHECK !== '0') {
+                        throw new Error(`Native binding package version mismatch, expected 0.39.0-beta.9 but got ${bindingPackageVersion}. You can reinstall dependencies to fix this issue.`);
                     }
                     return binding;
                 }
@@ -405,8 +405,8 @@ function requireNative() {
                 try {
                     const binding = require('@lancedb/lancedb-linux-arm-gnueabihf');
                     const bindingPackageVersion = require('@lancedb/lancedb-linux-arm-gnueabihf/package.json').version;
-                    if (bindingPackageVersion !== '0.39.0-beta.8' && process.env.NAPI_RS_ENFORCE_VERSION_CHECK && process.env.NAPI_RS_ENFORCE_VERSION_CHECK !== '0') {
-                        throw new Error(`Native binding package version mismatch, expected 0.39.0-beta.8 but got ${bindingPackageVersion}. You can reinstall dependencies to fix this issue.`);
+                    if (bindingPackageVersion !== '0.39.0-beta.9' && process.env.NAPI_RS_ENFORCE_VERSION_CHECK && process.env.NAPI_RS_ENFORCE_VERSION_CHECK !== '0') {
+                        throw new Error(`Native binding package version mismatch, expected 0.39.0-beta.9 but got ${bindingPackageVersion}. You can reinstall dependencies to fix this issue.`);
                     }
                     return binding;
                 }
@@ -426,8 +426,8 @@ function requireNative() {
                 try {
                     const binding = require('@lancedb/lancedb-linux-loong64-musl');
                     const bindingPackageVersion = require('@lancedb/lancedb-linux-loong64-musl/package.json').version;
-                    if (bindingPackageVersion !== '0.39.0-beta.8' && process.env.NAPI_RS_ENFORCE_VERSION_CHECK && process.env.NAPI_RS_ENFORCE_VERSION_CHECK !== '0') {
-                        throw new Error(`Native binding package version mismatch, expected 0.39.0-beta.8 but got ${bindingPackageVersion}. You can reinstall dependencies to fix this issue.`);
+                    if (bindingPackageVersion !== '0.39.0-beta.9' && process.env.NAPI_RS_ENFORCE_VERSION_CHECK && process.env.NAPI_RS_ENFORCE_VERSION_CHECK !== '0') {
+                        throw new Error(`Native binding package version mismatch, expected 0.39.0-beta.9 but got ${bindingPackageVersion}. You can reinstall dependencies to fix this issue.`);
                     }
                     return binding;
                 }
@@ -445,8 +445,8 @@ function requireNative() {
                 try {
                     const binding = require('@lancedb/lancedb-linux-loong64-gnu');
                     const bindingPackageVersion = require('@lancedb/lancedb-linux-loong64-gnu/package.json').version;
-                    if (bindingPackageVersion !== '0.39.0-beta.8' && process.env.NAPI_RS_ENFORCE_VERSION_CHECK && process.env.NAPI_RS_ENFORCE_VERSION_CHECK !== '0') {
-                        throw new Error(`Native binding package version mismatch, expected 0.39.0-beta.8 but got ${bindingPackageVersion}. You can reinstall dependencies to fix this issue.`);
+                    if (bindingPackageVersion !== '0.39.0-beta.9' && process.env.NAPI_RS_ENFORCE_VERSION_CHECK && process.env.NAPI_RS_ENFORCE_VERSION_CHECK !== '0') {
+                        throw new Error(`Native binding package version mismatch, expected 0.39.0-beta.9 but got ${bindingPackageVersion}. You can reinstall dependencies to fix this issue.`);
                     }
                     return binding;
                 }
@@ -466,8 +466,8 @@ function requireNative() {
                 try {
                     const binding = require('@lancedb/lancedb-linux-riscv64-musl');
                     const bindingPackageVersion = require('@lancedb/lancedb-linux-riscv64-musl/package.json').version;
-                    if (bindingPackageVersion !== '0.39.0-beta.8' && process.env.NAPI_RS_ENFORCE_VERSION_CHECK && process.env.NAPI_RS_ENFORCE_VERSION_CHECK !== '0') {
-                        throw new Error(`Native binding package version mismatch, expected 0.39.0-beta.8 but got ${bindingPackageVersion}. You can reinstall dependencies to fix this issue.`);
+                    if (bindingPackageVersion !== '0.39.0-beta.9' && process.env.NAPI_RS_ENFORCE_VERSION_CHECK && process.env.NAPI_RS_ENFORCE_VERSION_CHECK !== '0') {
+                        throw new Error(`Native binding package version mismatch, expected 0.39.0-beta.9 but got ${bindingPackageVersion}. You can reinstall dependencies to fix this issue.`);
                     }
                     return binding;
                 }
@@ -485,8 +485,8 @@ function requireNative() {
                 try {
                     const binding = require('@lancedb/lancedb-linux-riscv64-gnu');
                     const bindingPackageVersion = require('@lancedb/lancedb-linux-riscv64-gnu/package.json').version;
-                    if (bindingPackageVersion !== '0.39.0-beta.8' && process.env.NAPI_RS_ENFORCE_VERSION_CHECK && process.env.NAPI_RS_ENFORCE_VERSION_CHECK !== '0') {
-                        throw new Error(`Native binding package version mismatch, expected 0.39.0-beta.8 but got ${bindingPackageVersion}. You can reinstall dependencies to fix this issue.`);
+                    if (bindingPackageVersion !== '0.39.0-beta.9' && process.env.NAPI_RS_ENFORCE_VERSION_CHECK && process.env.NAPI_RS_ENFORCE_VERSION_CHECK !== '0') {
+                        throw new Error(`Native binding package version mismatch, expected 0.39.0-beta.9 but got ${bindingPackageVersion}. You can reinstall dependencies to fix this issue.`);
                     }
                     return binding;
                 }
@@ -505,8 +505,8 @@ function requireNative() {
             try {
                 const binding = require('@lancedb/lancedb-linux-ppc64-gnu');
                 const bindingPackageVersion = require('@lancedb/lancedb-linux-ppc64-gnu/package.json').version;
-                if (bindingPackageVersion !== '0.39.0-beta.8' && process.env.NAPI_RS_ENFORCE_VERSION_CHECK && process.env.NAPI_RS_ENFORCE_VERSION_CHECK !== '0') {
-                    throw new Error(`Native binding package version mismatch, expected 0.39.0-beta.8 but got ${bindingPackageVersion}. You can reinstall dependencies to fix this issue.`);
+                if (bindingPackageVersion !== '0.39.0-beta.9' && process.env.NAPI_RS_ENFORCE_VERSION_CHECK && process.env.NAPI_RS_ENFORCE_VERSION_CHECK !== '0') {
+                    throw new Error(`Native binding package version mismatch, expected 0.39.0-beta.9 but got ${bindingPackageVersion}. You can reinstall dependencies to fix this issue.`);
                 }
                 return binding;
             }
@@ -524,8 +524,8 @@ function requireNative() {
             try {
                 const binding = require('@lancedb/lancedb-linux-s390x-gnu');
                 const bindingPackageVersion = require('@lancedb/lancedb-linux-s390x-gnu/package.json').version;
-                if (bindingPackageVersion !== '0.39.0-beta.8' && process.env.NAPI_RS_ENFORCE_VERSION_CHECK && process.env.NAPI_RS_ENFORCE_VERSION_CHECK !== '0') {
-                    throw new Error(`Native binding package version mismatch, expected 0.39.0-beta.8 but got ${bindingPackageVersion}. You can reinstall dependencies to fix this issue.`);
+                if (bindingPackageVersion !== '0.39.0-beta.9' && process.env.NAPI_RS_ENFORCE_VERSION_CHECK && process.env.NAPI_RS_ENFORCE_VERSION_CHECK !== '0') {
+                    throw new Error(`Native binding package version mismatch, expected 0.39.0-beta.9 but got ${bindingPackageVersion}. You can reinstall dependencies to fix this issue.`);
                 }
                 return binding;
             }
@@ -548,8 +548,8 @@ function requireNative() {
             try {
                 const binding = require('@lancedb/lancedb-openharmony-arm64');
                 const bindingPackageVersion = require('@lancedb/lancedb-openharmony-arm64/package.json').version;
-                if (bindingPackageVersion !== '0.39.0-beta.8' && process.env.NAPI_RS_ENFORCE_VERSION_CHECK && process.env.NAPI_RS_ENFORCE_VERSION_CHECK !== '0') {
-                    throw new Error(`Native binding package version mismatch, expected 0.39.0-beta.8 but got ${bindingPackageVersion}. You can reinstall dependencies to fix this issue.`);
+                if (bindingPackageVersion !== '0.39.0-beta.9' && process.env.NAPI_RS_ENFORCE_VERSION_CHECK && process.env.NAPI_RS_ENFORCE_VERSION_CHECK !== '0') {
+                    throw new Error(`Native binding package version mismatch, expected 0.39.0-beta.9 but got ${bindingPackageVersion}. You can reinstall dependencies to fix this issue.`);
                 }
                 return binding;
             }
@@ -567,8 +567,8 @@ function requireNative() {
             try {
                 const binding = require('@lancedb/lancedb-openharmony-x64');
                 const bindingPackageVersion = require('@lancedb/lancedb-openharmony-x64/package.json').version;
-                if (bindingPackageVersion !== '0.39.0-beta.8' && process.env.NAPI_RS_ENFORCE_VERSION_CHECK && process.env.NAPI_RS_ENFORCE_VERSION_CHECK !== '0') {
-                    throw new Error(`Native binding package version mismatch, expected 0.39.0-beta.8 but got ${bindingPackageVersion}. You can reinstall dependencies to fix this issue.`);
+                if (bindingPackageVersion !== '0.39.0-beta.9' && process.env.NAPI_RS_ENFORCE_VERSION_CHECK && process.env.NAPI_RS_ENFORCE_VERSION_CHECK !== '0') {
+                    throw new Error(`Native binding package version mismatch, expected 0.39.0-beta.9 but got ${bindingPackageVersion}. You can reinstall dependencies to fix this issue.`);
                 }
                 return binding;
             }
@@ -586,8 +586,8 @@ function requireNative() {
             try {
                 const binding = require('@lancedb/lancedb-openharmony-arm');
                 const bindingPackageVersion = require('@lancedb/lancedb-openharmony-arm/package.json').version;
-                if (bindingPackageVersion !== '0.39.0-beta.8' && process.env.NAPI_RS_ENFORCE_VERSION_CHECK && process.env.NAPI_RS_ENFORCE_VERSION_CHECK !== '0') {
-                    throw new Error(`Native binding package version mismatch, expected 0.39.0-beta.8 but got ${bindingPackageVersion}. You can reinstall dependencies to fix this issue.`);
+                if (bindingPackageVersion !== '0.39.0-beta.9' && process.env.NAPI_RS_ENFORCE_VERSION_CHECK && process.env.NAPI_RS_ENFORCE_VERSION_CHECK !== '0') {
+                    throw new Error(`Native binding package version mismatch, expected 0.39.0-beta.9 but got ${bindingPackageVersion}. You can reinstall dependencies to fix this issue.`);
                 }
                 return binding;
             }
@@ -671,6 +671,7 @@ module.exports.JsFullTextQuery = nativeBinding.JsFullTextQuery;
 module.exports.JsHeaderProvider = nativeBinding.JsHeaderProvider;
 module.exports.NapiScannable = nativeBinding.NapiScannable;
 module.exports.NativeMergeInsertBuilder = nativeBinding.NativeMergeInsertBuilder;
+module.exports.OAuthSession = nativeBinding.OAuthSession;
 module.exports.PermutationBuilder = nativeBinding.PermutationBuilder;
 module.exports.Query = nativeBinding.Query;
 module.exports.RecordBatchIterator = nativeBinding.RecordBatchIterator;

package/dist/oauth.d.ts

@@ -4,9 +4,38 @@
 export declare enum OAuthFlowType {
     /** Client Credentials grant (service-to-service / M2M). */
     ClientCredentials = "client_credentials",
+    /** Interactive Authorization Code grant, using PKCE by default. */
+    AuthorizationCode = "authorization_code",
+    /** Device Authorization grant for CLI and headless environments. */
+    DeviceCode = "device_code",
     /** Azure Managed Identity via IMDS. */
     AzureManagedIdentity = "azure_managed_identity"
 }
+/**
+ * Options for the persistent OAuth token cache.
+ *
+ * The cache is opt-in: it is only used when set as `tokenCache` on
+ * {@link OAuthConfig}. Only refresh tokens are persisted, in a private
+ * directory with owner-only permissions, so short-lived processes can reuse
+ * an authenticated session instead of re-prompting on every start.
+ *
+ * Multiple identities (issuer, client, scopes, flow, client authentication)
+ * get separate cache entries. Within one identity the most recent login wins.
+ */
+export interface TokenCacheOptions {
+    /**
+     * Directory that holds cached credentials. Defaults to
+     * `$XDG_CACHE_HOME/lancedb/oauth`, `$HOME/.cache/lancedb/oauth` on Unix,
+     * or `%LOCALAPPDATA%\\lancedb\\oauth` on Windows. The directory is created
+     * with owner-only permissions (`0700`) when missing.
+     */
+    cacheDir?: string;
+    /**
+     * How long to wait for the cross-process refresh lock before failing, in
+     * seconds (default: 30).
+     */
+    lockTimeoutSecs?: number;
+}
 /**
  * OAuth configuration for LanceDB authentication.
  *
@@ -36,6 +65,21 @@ export declare enum OAuthFlowType {
  *   flow: OAuthFlowType.AzureManagedIdentity,
  * };
  * ```
+ *
+ * @example Authorization Code with PKCE:
+ * The authorization URL is written to stderr before LanceDB tries to open a
+ * browser, so it can be copied in headless environments.
+ * ```typescript
+ * const config: OAuthConfig = {
+ *   issuerUrl: "https://login.microsoftonline.com/{tenant}/v2.0",
+ *   clientId: "app-id",
+ *   scopes: ["openid", "api://lancedb-api/access"],
+ *   flow: OAuthFlowType.AuthorizationCode,
+ * };
+ * ```
+ *
+ * Device Authorization writes the verification URL and user code to stderr
+ * before polling begins.
  */
 export interface OAuthConfig {
     /**
@@ -55,6 +99,12 @@ export interface OAuthConfig {
     flow?: OAuthFlowType;
     /** Client secret (required for ClientCredentials). */
     clientSecret?: string;
+    /** Loopback redirect URI for AuthorizationCode. */
+    redirectUri?: string;
+    /** Port for the AuthorizationCode loopback callback server (default: 8400). */
+    callbackPort?: number;
+    /** Protect AuthorizationCode with S256 PKCE (default: true). */
+    usePkce?: boolean;
     /** Client ID for user-assigned managed identity (AzureManagedIdentity). */
     managedIdentityClientId?: string;
     /**
@@ -63,4 +113,98 @@ export interface OAuthConfig {
      * the TTL, each request refreshes the token.
      */
     refreshBufferSecs?: number;
+    /**
+     * Opt in to the persistent token cache so short-lived processes reuse one
+     * session. Only refresh tokens are persisted. Only supported by
+     * AuthorizationCode and DeviceCode; Azure managed identity is rejected.
+     * Default: unset (memory only).
+     */
+    tokenCache?: TokenCacheOptions;
+}
+/**
+ * Safe, non-secret view of a cached OAuth session, returned by
+ * {@link OAuthSession.status} and {@link OAuthSession.login}.
+ */
+export interface SessionStatus {
+    /**
+     * Whether a cached session exists that can obtain tokens without
+     * interactive authentication. Because access tokens are not persisted,
+     * this is `true` exactly when a refresh token is cached; the next
+     * connection refreshes with it rather than opening a browser or device
+     * prompt.
+     */
+    refreshable: boolean;
+    /** Canonical issuer URL of the cached session. */
+    issuerUrl: string;
+    /** Client ID of the cached session. */
+    clientId: string;
+    /** Canonical (sorted, de-duplicated) scope set of the cached session. */
+    scopes: string[];
+    /** Flow that produced the cached session. */
+    flow: string;
+    /** When the cached session was obtained, as Unix seconds. */
+    obtainedAt?: number;
+}
+/** Result of {@link OAuthSession.logout}. */
+export interface SessionLogout {
+    /**
+     * Whether a cached credential was removed. `false` means no matching
+     * session was cached; logout is idempotent.
+     */
+    removed: boolean;
+}
+/**
+ * Explicit OAuth session lifecycle for the persistent token cache: eager
+ * `login`, non-secret `status`, and local `logout`.
+ *
+ * A session is built from the same {@link OAuthConfig} used to connect
+ * (including its `tokenCache` options). A connection created with the same
+ * configuration shares the cache, so logging in here prepares tokens for
+ * later processes without any database request.
+ *
+ * `login` always runs the configured interactive flow and replaces the cached
+ * session (the most recent login wins). `logout` removes only the local
+ * credential; it does not revoke anything with the provider and does not sign
+ * out of a browser SSO session.
+ *
+ * @example
+ * ```typescript
+ * const config: OAuthConfig = {
+ *   issuerUrl: "https://issuer.example.com",
+ *   clientId: "my-app",
+ *   scopes: ["openid", "offline_access"],
+ *   flow: OAuthFlowType.DeviceCode,
+ *   tokenCache: { cacheDir: "/tmp/my-app/oauth-cache" },
+ * };
+ * const session = new OAuthSession(config);
+ * const status = await session.login();
+ * ```
+ */
+export declare class OAuthSession {
+    private readonly inner;
+    /** Create a session manager for the given OAuth configuration. */
+    constructor(config: OAuthConfig);
+    /**
+     * Eagerly run the configured authentication flow and store the session.
+     *
+     * A successful login always replaces any prior cached session for this
+     * identity; if the provider does not issue a refresh token (for example
+     * without `offline_access`), the previous record is removed and the status
+     * reports `refreshable == false`.
+     */
+    login(): Promise<SessionStatus>;
+    /**
+     * Report whether a matching cached session exists, with safe metadata.
+     *
+     * This never contacts the identity provider and never exposes token values.
+     */
+    status(): Promise<SessionStatus>;
+    /**
+     * Remove the matching local cached credential.
+     *
+     * This only deletes the local cache entry. It does not revoke the refresh
+     * token with the provider and does not sign out of a browser SSO session.
+     * Repeated calls succeed; `removed` reports whether a credential existed.
+     */
+    logout(): Promise<SessionLogout>;
 }

package/dist/oauth.js

@@ -2,7 +2,8 @@
 // SPDX-License-Identifier: Apache-2.0
 // SPDX-FileCopyrightText: Copyright The LanceDB Authors
 Object.defineProperty(exports, "__esModule", { value: true });
-exports.OAuthFlowType = void 0;
+exports.OAuthSession = exports.OAuthFlowType = void 0;
+const native_1 = require("./native");
 /**
  * OAuth authentication flow types.
  */
@@ -10,6 +11,74 @@ var OAuthFlowType;
 (function (OAuthFlowType) {
     /** Client Credentials grant (service-to-service / M2M). */
     OAuthFlowType["ClientCredentials"] = "client_credentials";
+    /** Interactive Authorization Code grant, using PKCE by default. */
+    OAuthFlowType["AuthorizationCode"] = "authorization_code";
+    /** Device Authorization grant for CLI and headless environments. */
+    OAuthFlowType["DeviceCode"] = "device_code";
     /** Azure Managed Identity via IMDS. */
     OAuthFlowType["AzureManagedIdentity"] = "azure_managed_identity";
 })(OAuthFlowType || (exports.OAuthFlowType = OAuthFlowType = {}));
+/**
+ * Explicit OAuth session lifecycle for the persistent token cache: eager
+ * `login`, non-secret `status`, and local `logout`.
+ *
+ * A session is built from the same {@link OAuthConfig} used to connect
+ * (including its `tokenCache` options). A connection created with the same
+ * configuration shares the cache, so logging in here prepares tokens for
+ * later processes without any database request.
+ *
+ * `login` always runs the configured interactive flow and replaces the cached
+ * session (the most recent login wins). `logout` removes only the local
+ * credential; it does not revoke anything with the provider and does not sign
+ * out of a browser SSO session.
+ *
+ * @example
+ * ```typescript
+ * const config: OAuthConfig = {
+ *   issuerUrl: "https://issuer.example.com",
+ *   clientId: "my-app",
+ *   scopes: ["openid", "offline_access"],
+ *   flow: OAuthFlowType.DeviceCode,
+ *   tokenCache: { cacheDir: "/tmp/my-app/oauth-cache" },
+ * };
+ * const session = new OAuthSession(config);
+ * const status = await session.login();
+ * ```
+ */
+class OAuthSession {
+    inner;
+    /** Create a session manager for the given OAuth configuration. */
+    constructor(config) {
+        this.inner = new native_1.OAuthSession(config);
+    }
+    /**
+     * Eagerly run the configured authentication flow and store the session.
+     *
+     * A successful login always replaces any prior cached session for this
+     * identity; if the provider does not issue a refresh token (for example
+     * without `offline_access`), the previous record is removed and the status
+     * reports `refreshable == false`.
+     */
+    async login() {
+        return this.inner.login();
+    }
+    /**
+     * Report whether a matching cached session exists, with safe metadata.
+     *
+     * This never contacts the identity provider and never exposes token values.
+     */
+    async status() {
+        return this.inner.status();
+    }
+    /**
+     * Remove the matching local cached credential.
+     *
+     * This only deletes the local cache entry. It does not revoke the refresh
+     * token with the provider and does not sign out of a browser SSO session.
+     * Repeated calls succeed; `removed` reports whether a credential existed.
+     */
+    async logout() {
+        return this.inner.logout();
+    }
+}
+exports.OAuthSession = OAuthSession;

package/dist/table.d.ts

@@ -90,7 +90,8 @@ export interface OptimizeOptions {
      * olderThan.setDate(olderThan.getDate() - 1));
      * tbl.optimize({cleanupOlderThan: olderThan});
      *
-     * // Delete all versions except the current version
+     * // Delete versions committed before this point. Versions created by the
+     * // optimize call itself are newer than the cutoff and will be retained.
      * tbl.optimize({cleanupOlderThan: new Date()});
      */
     cleanupOlderThan: Date;
@@ -520,10 +521,12 @@ export declare abstract class Table {
      * Recompute this table's contents from its materialized-view definition.
      *
      * Plumbing for {@link MaterializedView.refresh}, which is the way to call
-     * it: rejects tables that carry no view definition. Local tables only.
+     * it: rejects tables that carry no view definition.
      * @ignore
      */
     abstract refreshMaterializedView(full?: boolean, sourceVersion?: number): Promise<RefreshMaterializedViewResult>;
+    /** @ignore */
+    abstract materializedViewDefinition(): Promise<string>;
     /**
      * Alter the name or nullability of columns.
      * @param {ColumnAlteration[]} columnAlterations One or more alterations to
@@ -894,6 +897,7 @@ export declare class LocalTable extends Table {
     refreshColumn(column: string): Promise<RefreshColumnResult>;
     refreshColumnAsync(column: string): Promise<Job>;
     refreshMaterializedView(full?: boolean, sourceVersion?: number): Promise<RefreshMaterializedViewResult>;
+    materializedViewDefinition(): Promise<string>;
     alterColumns(columnAlterations: ColumnAlteration[]): Promise<AlterColumnsResult>;
     updateFieldMetadata(updates: FieldMetadataUpdate[]): Promise<UpdateFieldMetadataResult>;
     dropColumns(columnNames: string[]): Promise<DropColumnsResult>;

package/dist/table.js

@@ -278,6 +278,9 @@ class LocalTable extends Table {
     async refreshMaterializedView(full, sourceVersion) {
         return await this.inner.refreshMaterializedView(full, sourceVersion);
     }
+    async materializedViewDefinition() {
+        return await this.inner.materializedViewDefinition();
+    }
     async alterColumns(columnAlterations) {
         const processedAlterations = columnAlterations.map((alteration) => {
             if (typeof alteration.dataType === "string") {
@@ -371,13 +374,7 @@ class LocalTable extends Table {
         return this.inner.currentBranch() ?? null;
     }
     async optimize(options) {
-        let cleanupOlderThanMs;
-        if (options?.cleanupOlderThan !== undefined &&
-            options?.cleanupOlderThan !== null) {
-            cleanupOlderThanMs =
-                new Date().getTime() - options.cleanupOlderThan.getTime();
-        }
-        return await this.inner.optimize(cleanupOlderThanMs, options?.deleteUnverified);
+        return await this.inner.optimize(options?.cleanupOlderThan?.getTime(), options?.deleteUnverified);
     }
     async listIndices() {
         return await this.inner.listIndices();

package/package.json

@@ -11,7 +11,7 @@
     "ann"
   ],
   "private": false,
-  "version": "0.39.0-beta.8",
+  "version": "0.39.0-beta.9",
   "main": "dist/index.js",
   "exports": {
     ".": "./dist/index.js",
@@ -106,13 +106,13 @@
   "optionalDependencies": {
     "@huggingface/transformers": "3.0.2",
     "openai": "4.29.2",
-    "@lancedb/lancedb-darwin-arm64": "0.39.0-beta.8",
-    "@lancedb/lancedb-linux-x64-gnu": "0.39.0-beta.8",
-    "@lancedb/lancedb-linux-arm64-gnu": "0.39.0-beta.8",
-    "@lancedb/lancedb-linux-x64-musl": "0.39.0-beta.8",
-    "@lancedb/lancedb-linux-arm64-musl": "0.39.0-beta.8",
-    "@lancedb/lancedb-win32-x64-msvc": "0.39.0-beta.8",
-    "@lancedb/lancedb-win32-arm64-msvc": "0.39.0-beta.8"
+    "@lancedb/lancedb-darwin-arm64": "0.39.0-beta.9",
+    "@lancedb/lancedb-linux-x64-gnu": "0.39.0-beta.9",
+    "@lancedb/lancedb-linux-arm64-gnu": "0.39.0-beta.9",
+    "@lancedb/lancedb-linux-x64-musl": "0.39.0-beta.9",
+    "@lancedb/lancedb-linux-arm64-musl": "0.39.0-beta.9",
+    "@lancedb/lancedb-win32-x64-msvc": "0.39.0-beta.9",
+    "@lancedb/lancedb-win32-arm64-msvc": "0.39.0-beta.9"
   },
   "peerDependencies": {
     "@types/node": ">=22",