@lancedb/lancedb 0.39.0-beta.8 → 0.40.0-beta.0

package/dist/oauth.js

@@ -2,7 +2,8 @@
 // SPDX-License-Identifier: Apache-2.0
 // SPDX-FileCopyrightText: Copyright The LanceDB Authors
 Object.defineProperty(exports, "__esModule", { value: true });
-exports.OAuthFlowType = void 0;
+exports.OAuthSession = exports.ClientAuthMethod = exports.OAuthFlowType = void 0;
+const native_1 = require("./native");
 /**
  * OAuth authentication flow types.
  */
@@ -10,6 +11,101 @@ var OAuthFlowType;
 (function (OAuthFlowType) {
     /** Client Credentials grant (service-to-service / M2M). */
     OAuthFlowType["ClientCredentials"] = "client_credentials";
+    /** Interactive Authorization Code grant, using PKCE by default. */
+    OAuthFlowType["AuthorizationCode"] = "authorization_code";
+    /** Device Authorization grant for CLI and headless environments. */
+    OAuthFlowType["DeviceCode"] = "device_code";
     /** Azure Managed Identity via IMDS. */
     OAuthFlowType["AzureManagedIdentity"] = "azure_managed_identity";
 })(OAuthFlowType || (exports.OAuthFlowType = OAuthFlowType = {}));
+/**
+ * How the client authenticates to the OAuth token endpoint.
+ *
+ * The method applies to every OAuth request that carries client
+ * authentication: client-credentials, authorization-code exchange,
+ * refresh-token, and device-authorization requests. The Azure managed
+ * identity flow ignores this option.
+ */
+var ClientAuthMethod;
+(function (ClientAuthMethod) {
+    /**
+     * No client authentication, for public clients using PKCE or the device
+     * flow. Cannot be combined with `clientSecret`.
+     */
+    ClientAuthMethod["None"] = "none";
+    /**
+     * HTTP Basic authentication. This is the RFC 6749 recommended method and
+     * the normal default for confidential clients, including default Okta
+     * applications. Requires `clientSecret`.
+     */
+    ClientAuthMethod["ClientSecretBasic"] = "client_secret_basic";
+    /**
+     * Credentials in the request body, for providers configured to require it.
+     * Requires `clientSecret`.
+     */
+    ClientAuthMethod["ClientSecretPost"] = "client_secret_post";
+})(ClientAuthMethod || (exports.ClientAuthMethod = ClientAuthMethod = {}));
+/**
+ * Explicit OAuth session lifecycle for the persistent token cache: eager
+ * `login`, non-secret `status`, and local `logout`.
+ *
+ * A session is built from the same {@link OAuthConfig} used to connect
+ * (including its `tokenCache` options). A connection created with the same
+ * configuration shares the cache, so logging in here prepares tokens for
+ * later processes without any database request.
+ *
+ * `login` always runs the configured interactive flow and replaces the cached
+ * session (the most recent login wins). `logout` removes only the local
+ * credential; it does not revoke anything with the provider and does not sign
+ * out of a browser SSO session.
+ *
+ * @example
+ * ```typescript
+ * const config: OAuthConfig = {
+ *   issuerUrl: "https://issuer.example.com",
+ *   clientId: "my-app",
+ *   scopes: ["openid", "offline_access"],
+ *   flow: OAuthFlowType.DeviceCode,
+ *   tokenCache: { cacheDir: "/tmp/my-app/oauth-cache" },
+ * };
+ * const session = new OAuthSession(config);
+ * const status = await session.login();
+ * ```
+ */
+class OAuthSession {
+    inner;
+    /** Create a session manager for the given OAuth configuration. */
+    constructor(config) {
+        this.inner = new native_1.OAuthSession(config);
+    }
+    /**
+     * Eagerly run the configured authentication flow and store the session.
+     *
+     * A successful login always replaces any prior cached session for this
+     * identity; if the provider does not issue a refresh token (for example
+     * without `offline_access`), the previous record is removed and the status
+     * reports `refreshable == false`.
+     */
+    async login() {
+        return this.inner.login();
+    }
+    /**
+     * Report whether a matching cached session exists, with safe metadata.
+     *
+     * This never contacts the identity provider and never exposes token values.
+     */
+    async status() {
+        return this.inner.status();
+    }
+    /**
+     * Remove the matching local cached credential.
+     *
+     * This only deletes the local cache entry. It does not revoke the refresh
+     * token with the provider and does not sign out of a browser SSO session.
+     * Repeated calls succeed; `removed` reports whether a credential existed.
+     */
+    async logout() {
+        return this.inner.logout();
+    }
+}
+exports.OAuthSession = OAuthSession;

package/dist/table.d.ts

@@ -90,7 +90,8 @@ export interface OptimizeOptions {
      * olderThan.setDate(olderThan.getDate() - 1));
      * tbl.optimize({cleanupOlderThan: olderThan});
      *
-     * // Delete all versions except the current version
+     * // Delete versions committed before this point. Versions created by the
+     * // optimize call itself are newer than the cutoff and will be retained.
      * tbl.optimize({cleanupOlderThan: new Date()});
      */
     cleanupOlderThan: Date;
@@ -520,10 +521,12 @@ export declare abstract class Table {
      * Recompute this table's contents from its materialized-view definition.
      *
      * Plumbing for {@link MaterializedView.refresh}, which is the way to call
-     * it: rejects tables that carry no view definition. Local tables only.
+     * it: rejects tables that carry no view definition.
      * @ignore
      */
     abstract refreshMaterializedView(full?: boolean, sourceVersion?: number): Promise<RefreshMaterializedViewResult>;
+    /** @ignore */
+    abstract materializedViewDefinition(): Promise<string>;
     /**
      * Alter the name or nullability of columns.
      * @param {ColumnAlteration[]} columnAlterations One or more alterations to
@@ -894,6 +897,7 @@ export declare class LocalTable extends Table {
     refreshColumn(column: string): Promise<RefreshColumnResult>;
     refreshColumnAsync(column: string): Promise<Job>;
     refreshMaterializedView(full?: boolean, sourceVersion?: number): Promise<RefreshMaterializedViewResult>;
+    materializedViewDefinition(): Promise<string>;
     alterColumns(columnAlterations: ColumnAlteration[]): Promise<AlterColumnsResult>;
     updateFieldMetadata(updates: FieldMetadataUpdate[]): Promise<UpdateFieldMetadataResult>;
     dropColumns(columnNames: string[]): Promise<DropColumnsResult>;

package/dist/table.js

@@ -278,6 +278,9 @@ class LocalTable extends Table {
     async refreshMaterializedView(full, sourceVersion) {
         return await this.inner.refreshMaterializedView(full, sourceVersion);
     }
+    async materializedViewDefinition() {
+        return await this.inner.materializedViewDefinition();
+    }
     async alterColumns(columnAlterations) {
         const processedAlterations = columnAlterations.map((alteration) => {
             if (typeof alteration.dataType === "string") {
@@ -371,13 +374,7 @@ class LocalTable extends Table {
         return this.inner.currentBranch() ?? null;
     }
     async optimize(options) {
-        let cleanupOlderThanMs;
-        if (options?.cleanupOlderThan !== undefined &&
-            options?.cleanupOlderThan !== null) {
-            cleanupOlderThanMs =
-                new Date().getTime() - options.cleanupOlderThan.getTime();
-        }
-        return await this.inner.optimize(cleanupOlderThanMs, options?.deleteUnverified);
+        return await this.inner.optimize(options?.cleanupOlderThan?.getTime(), options?.deleteUnverified);
     }
     async listIndices() {
         return await this.inner.listIndices();

package/package.json

@@ -11,7 +11,7 @@
     "ann"
   ],
   "private": false,
-  "version": "0.39.0-beta.8",
+  "version": "0.40.0-beta.0",
   "main": "dist/index.js",
   "exports": {
     ".": "./dist/index.js",
@@ -106,13 +106,13 @@
   "optionalDependencies": {
     "@huggingface/transformers": "3.0.2",
     "openai": "4.29.2",
-    "@lancedb/lancedb-darwin-arm64": "0.39.0-beta.8",
-    "@lancedb/lancedb-linux-x64-gnu": "0.39.0-beta.8",
-    "@lancedb/lancedb-linux-arm64-gnu": "0.39.0-beta.8",
-    "@lancedb/lancedb-linux-x64-musl": "0.39.0-beta.8",
-    "@lancedb/lancedb-linux-arm64-musl": "0.39.0-beta.8",
-    "@lancedb/lancedb-win32-x64-msvc": "0.39.0-beta.8",
-    "@lancedb/lancedb-win32-arm64-msvc": "0.39.0-beta.8"
+    "@lancedb/lancedb-darwin-arm64": "0.40.0-beta.0",
+    "@lancedb/lancedb-linux-x64-gnu": "0.40.0-beta.0",
+    "@lancedb/lancedb-linux-arm64-gnu": "0.40.0-beta.0",
+    "@lancedb/lancedb-linux-x64-musl": "0.40.0-beta.0",
+    "@lancedb/lancedb-linux-arm64-musl": "0.40.0-beta.0",
+    "@lancedb/lancedb-win32-x64-msvc": "0.40.0-beta.0",
+    "@lancedb/lancedb-win32-arm64-msvc": "0.40.0-beta.0"
   },
   "peerDependencies": {
     "@types/node": ">=22",