@sochdb/sochdb 0.4.2 → 0.4.4

package/dist/esm/policy/service.js

@@ -0,0 +1,396 @@
+"use strict";
+/**
+ * Policy Service Implementation
+ *
+ * Policy-based access control and namespace governance for SochDB.
+ */
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.PolicyService = void 0;
+/**
+ * Policy Service for access control and governance
+ *
+ * @example
+ * ```typescript
+ * import { EmbeddedDatabase, PolicyService } from '@sochdb/sochdb';
+ *
+ * const db = EmbeddedDatabase.open('./mydb');
+ * const policy = new PolicyService(db);
+ *
+ * // Create a namespace policy
+ * await policy.createNamespacePolicy({
+ *   namespace: 'tenant_123',
+ *   rules: [{
+ *     id: 'read_only',
+ *     name: 'Read Only Access',
+ *     effect: 'allow',
+ *     principals: ['user:*'],
+ *     resources: ['collection:*'],
+ *     actions: ['read', 'search']
+ *   }],
+ *   defaultEffect: 'deny'
+ * });
+ *
+ * // Evaluate access
+ * const result = await policy.evaluate({
+ *   principal: 'user:alice',
+ *   action: 'read',
+ *   resource: 'collection:documents'
+ * });
+ * ```
+ */
+class PolicyService {
+    db;
+    prefix;
+    cache = new Map();
+    auditEnabled = true;
+    constructor(db, options) {
+        this.db = db;
+        this.prefix = Buffer.from('_policy:');
+        this.auditEnabled = options?.enableAudit ?? true;
+    }
+    /**
+     * Create a namespace policy
+     */
+    async createNamespacePolicy(policy) {
+        const key = this.policyKey(policy.namespace);
+        const data = {
+            ...policy,
+            createdAt: Date.now(),
+            updatedAt: Date.now(),
+        };
+        await this.db.put(key, Buffer.from(JSON.stringify(data)));
+        this.cache.set(policy.namespace, policy);
+    }
+    /**
+     * Get a namespace policy
+     */
+    async getNamespacePolicy(namespace) {
+        // Check cache first
+        if (this.cache.has(namespace)) {
+            return this.cache.get(namespace);
+        }
+        const key = this.policyKey(namespace);
+        const value = await this.db.get(key);
+        if (!value) {
+            return null;
+        }
+        const policy = JSON.parse(value.toString());
+        this.cache.set(namespace, policy);
+        return policy;
+    }
+    /**
+     * Update a namespace policy
+     */
+    async updateNamespacePolicy(namespace, updates) {
+        const existing = await this.getNamespacePolicy(namespace);
+        if (!existing) {
+            throw new Error(`Policy not found for namespace: ${namespace}`);
+        }
+        const updated = {
+            ...existing,
+            ...updates,
+            namespace, // Ensure namespace doesn't change
+            updatedAt: Date.now(),
+        };
+        const key = this.policyKey(namespace);
+        await this.db.put(key, Buffer.from(JSON.stringify(updated)));
+        this.cache.set(namespace, updated);
+    }
+    /**
+     * Delete a namespace policy
+     */
+    async deleteNamespacePolicy(namespace) {
+        const key = this.policyKey(namespace);
+        await this.db.delete(key);
+        this.cache.delete(namespace);
+        return true;
+    }
+    /**
+     * Add a rule to a namespace policy
+     */
+    async addRule(namespace, rule) {
+        const policy = await this.getNamespacePolicy(namespace);
+        if (!policy) {
+            throw new Error(`Policy not found for namespace: ${namespace}`);
+        }
+        // Check for duplicate rule ID
+        if (policy.rules.some(r => r.id === rule.id)) {
+            throw new Error(`Rule with id '${rule.id}' already exists`);
+        }
+        policy.rules.push(rule);
+        await this.updateNamespacePolicy(namespace, { rules: policy.rules });
+    }
+    /**
+     * Remove a rule from a namespace policy
+     */
+    async removeRule(namespace, ruleId) {
+        const policy = await this.getNamespacePolicy(namespace);
+        if (!policy) {
+            return false;
+        }
+        const index = policy.rules.findIndex(r => r.id === ruleId);
+        if (index === -1) {
+            return false;
+        }
+        policy.rules.splice(index, 1);
+        await this.updateNamespacePolicy(namespace, { rules: policy.rules });
+        return true;
+    }
+    /**
+     * Evaluate a policy request
+     */
+    async evaluate(request) {
+        const startTime = Date.now();
+        // Extract namespace from resource
+        const namespace = this.extractNamespace(request.resource);
+        const policy = namespace ? await this.getNamespacePolicy(namespace) : null;
+        let result;
+        if (!policy) {
+            // No policy = allow by default
+            result = {
+                allowed: true,
+                reason: 'No policy defined',
+                evaluationTime: Date.now() - startTime,
+            };
+        }
+        else {
+            // Evaluate rules in priority order
+            const sortedRules = [...policy.rules].sort((a, b) => (a.priority || 0) - (b.priority || 0));
+            let matchedRule;
+            for (const rule of sortedRules) {
+                if (this.matchesRule(request, rule)) {
+                    matchedRule = rule;
+                    break;
+                }
+            }
+            if (matchedRule) {
+                result = {
+                    allowed: matchedRule.effect === 'allow',
+                    matchedRule,
+                    reason: `Matched rule: ${matchedRule.name}`,
+                    evaluationTime: Date.now() - startTime,
+                };
+            }
+            else {
+                result = {
+                    allowed: policy.defaultEffect === 'allow',
+                    reason: `Default effect: ${policy.defaultEffect}`,
+                    evaluationTime: Date.now() - startTime,
+                };
+            }
+        }
+        // Log audit entry
+        if (this.auditEnabled) {
+            await this.logAudit(request, result);
+        }
+        return result;
+    }
+    /**
+     * Grant namespace access to a principal
+     */
+    async grantAccess(grant) {
+        const key = this.grantKey(grant.namespace, grant.principal);
+        const data = {
+            ...grant,
+            grantedAt: Date.now(),
+        };
+        await this.db.put(key, Buffer.from(JSON.stringify(data)));
+    }
+    /**
+     * Revoke namespace access from a principal
+     */
+    async revokeAccess(namespace, principal) {
+        const key = this.grantKey(namespace, principal);
+        await this.db.delete(key);
+        return true;
+    }
+    /**
+     * Check if principal has permission
+     */
+    async hasPermission(namespace, principal, permission) {
+        const key = this.grantKey(namespace, principal);
+        const value = await this.db.get(key);
+        if (!value) {
+            return false;
+        }
+        const grant = JSON.parse(value.toString());
+        // Check expiration
+        if (grant.expiresAt && Date.now() > grant.expiresAt) {
+            return false;
+        }
+        // Admin has all permissions
+        if (grant.permissions.includes('admin')) {
+            return true;
+        }
+        return grant.permissions.includes(permission);
+    }
+    /**
+     * List all grants for a namespace
+     */
+    async listGrants(namespace) {
+        const grants = [];
+        const prefix = Buffer.from(`_grant:${namespace}:`);
+        try {
+            for await (const [_, valueBuffer] of this.db.scanPrefix(prefix)) {
+                const grant = JSON.parse(valueBuffer.toString());
+                grants.push(grant);
+            }
+        }
+        catch (error) {
+            // Ignore scan errors
+        }
+        return grants;
+    }
+    /**
+     * Get audit log entries
+     */
+    async getAuditLog(options) {
+        const entries = [];
+        const prefix = Buffer.from('_audit:');
+        const limit = options?.limit || 100;
+        try {
+            for await (const [_, valueBuffer] of this.db.scanPrefix(prefix)) {
+                const entry = JSON.parse(valueBuffer.toString());
+                // Apply filters
+                if (options?.namespace && !entry.resource.includes(options.namespace)) {
+                    continue;
+                }
+                if (options?.principal && entry.principal !== options.principal) {
+                    continue;
+                }
+                if (options?.action && entry.action !== options.action) {
+                    continue;
+                }
+                if (options?.since && entry.timestamp < options.since) {
+                    continue;
+                }
+                entries.push(entry);
+                if (entries.length >= limit) {
+                    break;
+                }
+            }
+        }
+        catch (error) {
+            // Ignore scan errors
+        }
+        // Sort by timestamp descending
+        return entries.sort((a, b) => b.timestamp - a.timestamp);
+    }
+    /**
+     * Clear policy cache
+     */
+    clearCache() {
+        this.cache.clear();
+    }
+    // Private methods
+    policyKey(namespace) {
+        return Buffer.concat([this.prefix, Buffer.from(`namespace:${namespace}`)]);
+    }
+    grantKey(namespace, principal) {
+        return Buffer.from(`_grant:${namespace}:${principal}`);
+    }
+    extractNamespace(resource) {
+        // Extract namespace from resource like "namespace:tenant_123:collection:docs"
+        const parts = resource.split(':');
+        if (parts.length >= 2 && parts[0] === 'namespace') {
+            return parts[1];
+        }
+        // Try to extract from collection format "collection:tenant_123:docs"
+        if (parts.length >= 2 && parts[0] === 'collection') {
+            return parts[1];
+        }
+        return null;
+    }
+    matchesRule(request, rule) {
+        // Check principals
+        if (!this.matchesPatterns(request.principal, rule.principals)) {
+            return false;
+        }
+        // Check resources
+        if (!this.matchesPatterns(request.resource, rule.resources)) {
+            return false;
+        }
+        // Check actions
+        if (!this.matchesPatterns(request.action, rule.actions)) {
+            return false;
+        }
+        // Check conditions
+        if (rule.conditions && rule.conditions.length > 0) {
+            for (const condition of rule.conditions) {
+                if (!this.evaluateCondition(condition, request.context)) {
+                    return false;
+                }
+            }
+        }
+        return true;
+    }
+    matchesPatterns(value, patterns) {
+        for (const pattern of patterns) {
+            if (this.matchesPattern(value, pattern)) {
+                return true;
+            }
+        }
+        return false;
+    }
+    matchesPattern(value, pattern) {
+        if (pattern === '*') {
+            return true;
+        }
+        if (pattern.endsWith('*')) {
+            return value.startsWith(pattern.slice(0, -1));
+        }
+        if (pattern.startsWith('*')) {
+            return value.endsWith(pattern.slice(1));
+        }
+        return value === pattern;
+    }
+    evaluateCondition(condition, context) {
+        if (!context) {
+            return false;
+        }
+        const value = context[condition.key];
+        if (value === undefined) {
+            return false;
+        }
+        switch (condition.operator) {
+            case 'equals':
+                return value === condition.value;
+            case 'not_equals':
+                return value !== condition.value;
+            case 'contains':
+                return String(value).includes(String(condition.value));
+            case 'starts_with':
+                return String(value).startsWith(String(condition.value));
+            case 'ends_with':
+                return String(value).endsWith(String(condition.value));
+            case 'in':
+                return Array.isArray(condition.value) && condition.value.includes(value);
+            case 'not_in':
+                return Array.isArray(condition.value) && !condition.value.includes(value);
+            case 'between':
+                if (Array.isArray(condition.value) && condition.value.length === 2) {
+                    return value >= condition.value[0] && value <= condition.value[1];
+                }
+                return false;
+            default:
+                return false;
+        }
+    }
+    async logAudit(request, result) {
+        const entry = {
+            id: `${Date.now()}-${Math.random().toString(36).substr(2, 9)}`,
+            timestamp: Date.now(),
+            principal: request.principal,
+            action: request.action,
+            resource: request.resource,
+            decision: result.allowed ? 'allow' : 'deny',
+            matchedRule: result.matchedRule?.id,
+            reason: result.reason,
+            context: request.context,
+        };
+        const key = Buffer.from(`_audit:${entry.timestamp}:${entry.id}`);
+        await this.db.put(key, Buffer.from(JSON.stringify(entry)));
+    }
+}
+exports.PolicyService = PolicyService;
+//# sourceMappingURL=data:application/json;base64,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

package/dist/esm/policy/types.js

@@ -0,0 +1,8 @@
+"use strict";
+/**
+ * Policy Service Types
+ *
+ * Type definitions for policy-based access control and namespace governance.
+ */
+Object.defineProperty(exports, "__esModule", { value: true });
+//# sourceMappingURL=data:application/json;base64,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

package/dist/types/embedded/database.d.ts

@@ -31,15 +31,80 @@ export declare class EmbeddedDatabase {
     private bindings;
     private closed;
     private path;
+    private concurrent;
+    private _concurrentModeFallback;
     private constructor();
     /**
-     * Open a database at the specified path
+     * Open a database at the specified path in standard mode
+     *
+     * For web applications with multiple processes, use `openConcurrent()` instead.
      *
      * @param path - Path to database directory
      * @param config - Optional configuration
      * @returns EmbeddedDatabase instance
      */
     static open(path: string, config?: EmbeddedDatabaseConfig): EmbeddedDatabase;
+    /**
+     * Open a database in concurrent mode for multi-process web applications
+     *
+     * This mode allows multiple Node.js processes (e.g., PM2 cluster workers,
+     * multiple Express instances) to access the database simultaneously.
+     *
+     * Features:
+     * - Lock-free reads with ~100ns latency
+     * - Multi-reader, single-writer coordination
+     * - Automatic write serialization
+     *
+     * @example
+     * ```typescript
+     * import { EmbeddedDatabase } from '@sochdb/sochdb';
+     * import express from 'express';
+     *
+     * // Open in concurrent mode - multiple workers can access
+     * const db = EmbeddedDatabase.openConcurrent('./web_db');
+     *
+     * const app = express();
+     *
+     * app.get('/user/:id', async (req, res) => {
+     *   // Multiple concurrent requests can read simultaneously
+     *   const data = await db.get(Buffer.from(`user:${req.params.id}`));
+     *   if (!data) {
+     *     res.status(404).json({ error: 'not found' });
+     *     return;
+     *   }
+     *   res.send(data);
+     * });
+     *
+     * app.post('/user/:id', async (req, res) => {
+     *   // Writes are serialized automatically
+     *   await db.put(Buffer.from(`user:${req.params.id}`), req.body);
+     *   res.json({ status: 'ok' });
+     * });
+     *
+     * // Start with PM2 cluster mode:
+     * // pm2 start app.js -i max
+     * app.listen(3000);
+     * ```
+     *
+     * @param path - Path to database directory
+     * @param options - Optional configuration for concurrent mode
+     * @returns EmbeddedDatabase instance in concurrent mode
+     */
+    static openConcurrent(path: string, options?: {
+        fallbackToStandard?: boolean;
+    }): EmbeddedDatabase;
+    /**
+     * Check if database is opened in concurrent mode
+     */
+    get isConcurrent(): boolean;
+    /**
+     * Check if concurrent mode fell back to standard mode
+     */
+    get isConcurrentFallback(): boolean;
+    /**
+     * Check if concurrent mode is available in the native library
+     */
+    static isConcurrentModeAvailable(): boolean;
     /**
      * Put a key-value pair (auto-transaction)
      */

package/dist/types/embedded/database.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"database.d.ts","sourceRoot":"","sources":["../../../src/embedded/database.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAGH,OAAO,EAAE,cAAc,EAAE,MAAM,gBAAgB,CAAC;AAChD,OAAO,EAAE,mBAAmB,EAAE,MAAM,eAAe,CAAC;AAGpD,MAAM,WAAW,sBAAsB;IACnC,UAAU,CAAC,EAAE,OAAO,CAAC;IACrB,QAAQ,CAAC,EAAE,MAAM,GAAG,QAAQ,GAAG,KAAK,CAAC;IACrC,iBAAiB,CAAC,EAAE,MAAM,CAAC;IAC3B,WAAW,CAAC,EAAE,OAAO,CAAC;IACtB,WAAW,CAAC,EAAE,iBAAiB,GAAG,UAAU,GAAG,gBAAgB,GAAG,aAAa,CAAC;CACnF;AAED;;;;;;;;;;;;GAYG;AACH,qBAAa,gBAAgB;IACzB,OAAO,CAAC,MAAM,CAAM;IACpB,OAAO,CAAC,QAAQ,CAAiB;IACjC,OAAO,CAAC,MAAM,CAAS;IACvB,OAAO,CAAC,IAAI,CAAS;IAErB,OAAO;IAMP;;;;;;OAMG;IACH,MAAM,CAAC,IAAI,CAAC,IAAI,EAAE,MAAM,EAAE,MAAM,CAAC,EAAE,sBAAsB,GAAG,gBAAgB;IA4B5E;;OAEG;IACG,GAAG,CAAC,GAAG,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC;IAapD;;OAEG;IACG,GAAG,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,GAAG,IAAI,CAAC;IAc9C;;OAEG;IACG,MAAM,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC;IAaxC;;OAEG;IACG,OAAO,CAAC,IAAI,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC;IAazD;;OAEG;IACG,OAAO,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,GAAG,IAAI,CAAC;IAcnD;;OAEG;IACI,UAAU,CAAC,MAAM,EAAE,MAAM,GAAG,cAAc,CAAC,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IAenE;;OAEG;IACH,WAAW,IAAI,mBAAmB;IAOlC;;OAEG;IACG,eAAe,CAAC,CAAC,EAAE,EAAE,EAAE,CAAC,GAAG,EAAE,mBAAmB,KAAK,OAAO,CAAC,CAAC,CAAC,GAAG,OAAO,CAAC,CAAC,CAAC;IAYlF;;OAEG;IACG,UAAU,IAAI,OAAO,CAAC,MAAM,CAAC;IAMnC;;OAEG;IACG,KAAK,IAAI,OAAO,CAAC;QACnB,iBAAiB,EAAE,MAAM,CAAC;QAC1B,YAAY,EAAE,MAAM,CAAC;QACrB,kBAAkB,EAAE,MAAM,CAAC;QAC3B,iBAAiB,EAAE,MAAM,CAAC;QAC1B,iBAAiB,EAAE,MAAM,CAAC;KAC7B,CAAC;IAiBF;;OAEG;IACH,KAAK,IAAI,IAAI;IAOb,OAAO,CAAC,UAAU;IAMlB;;;OAGG;IACH,SAAS,IAAI,GAAG;IAIhB;;;OAGG;IACH,WAAW,IAAI,cAAc;CAGhC"}
+{"version":3,"file":"database.d.ts","sourceRoot":"","sources":["../../../src/embedded/database.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAGH,OAAO,EAAE,cAAc,EAAE,MAAM,gBAAgB,CAAC;AAChD,OAAO,EAAE,mBAAmB,EAAE,MAAM,eAAe,CAAC;AAGpD,MAAM,WAAW,sBAAsB;IACnC,UAAU,CAAC,EAAE,OAAO,CAAC;IACrB,QAAQ,CAAC,EAAE,MAAM,GAAG,QAAQ,GAAG,KAAK,CAAC;IACrC,iBAAiB,CAAC,EAAE,MAAM,CAAC;IAC3B,WAAW,CAAC,EAAE,OAAO,CAAC;IACtB,WAAW,CAAC,EAAE,iBAAiB,GAAG,UAAU,GAAG,gBAAgB,GAAG,aAAa,CAAC;CACnF;AAED;;;;;;;;;;;;GAYG;AACH,qBAAa,gBAAgB;IACzB,OAAO,CAAC,MAAM,CAAM;IACpB,OAAO,CAAC,QAAQ,CAAiB;IACjC,OAAO,CAAC,MAAM,CAAS;IACvB,OAAO,CAAC,IAAI,CAAS;IACrB,OAAO,CAAC,UAAU,CAAS;IAC3B,OAAO,CAAC,uBAAuB,CAAS;IAExC,OAAO;IAQP;;;;;;;;OAQG;IACH,MAAM,CAAC,IAAI,CAAC,IAAI,EAAE,MAAM,EAAE,MAAM,CAAC,EAAE,sBAAsB,GAAG,gBAAgB;IA4B5E;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;OA6CG;IACH,MAAM,CAAC,cAAc,CAAC,IAAI,EAAE,MAAM,EAAE,OAAO,CAAC,EAAE;QAAE,kBAAkB,CAAC,EAAE,OAAO,CAAA;KAAE,GAAG,gBAAgB;IAgCjG;;OAEG;IACH,IAAI,YAAY,IAAI,OAAO,CAE1B;IAED;;OAEG;IACH,IAAI,oBAAoB,IAAI,OAAO,CAElC;IAED;;OAEG;IACH,MAAM,CAAC,yBAAyB,IAAI,OAAO;IAI3C;;OAEG;IACG,GAAG,CAAC,GAAG,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC;IAapD;;OAEG;IACG,GAAG,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,GAAG,IAAI,CAAC;IAc9C;;OAEG;IACG,MAAM,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC;IAaxC;;OAEG;IACG,OAAO,CAAC,IAAI,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC;IAazD;;OAEG;IACG,OAAO,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,GAAG,IAAI,CAAC;IAcnD;;OAEG;IACI,UAAU,CAAC,MAAM,EAAE,MAAM,GAAG,cAAc,CAAC,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IAenE;;OAEG;IACH,WAAW,IAAI,mBAAmB;IAOlC;;OAEG;IACG,eAAe,CAAC,CAAC,EAAE,EAAE,EAAE,CAAC,GAAG,EAAE,mBAAmB,KAAK,OAAO,CAAC,CAAC,CAAC,GAAG,OAAO,CAAC,CAAC,CAAC;IAYlF;;OAEG;IACG,UAAU,IAAI,OAAO,CAAC,MAAM,CAAC;IAMnC;;OAEG;IACG,KAAK,IAAI,OAAO,CAAC;QACnB,iBAAiB,EAAE,MAAM,CAAC;QAC1B,YAAY,EAAE,MAAM,CAAC;QACrB,kBAAkB,EAAE,MAAM,CAAC;QAC3B,iBAAiB,EAAE,MAAM,CAAC;QAC1B,iBAAiB,EAAE,MAAM,CAAC;KAC7B,CAAC;IAiBF;;OAEG;IACH,KAAK,IAAI,IAAI;IAOb,OAAO,CAAC,UAAU;IAMlB;;;OAGG;IACH,SAAS,IAAI,GAAG;IAIhB;;;OAGG;IACH,WAAW,IAAI,cAAc;CAGhC"}

package/dist/types/embedded/ffi/bindings.d.ts

@@ -1,8 +1,11 @@
 export declare class NativeBindings {
     private static instance;
     private lib;
+    private _concurrentModeAvailable;
     sochdb_open: any;
     sochdb_open_with_config: any;
+    sochdb_open_concurrent: any;
+    sochdb_is_concurrent: any;
     sochdb_close: any;
     sochdb_begin_txn: any;
     sochdb_commit: any;
@@ -20,5 +23,9 @@ export declare class NativeBindings {
     sochdb_free_bytes: any;
     private constructor();
     static getInstance(): NativeBindings;
+    /**
+     * Check if concurrent mode is available in the native library
+     */
+    isConcurrentModeAvailable(): boolean;
 }
 //# sourceMappingURL=bindings.d.ts.map

package/dist/types/embedded/ffi/bindings.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"bindings.d.ts","sourceRoot":"","sources":["../../../../src/embedded/ffi/bindings.ts"],"names":[],"mappings":"AAsCA,qBAAa,cAAc;IACvB,OAAO,CAAC,MAAM,CAAC,QAAQ,CAAiB;IACxC,OAAO,CAAC,GAAG,CAAM;IAGV,WAAW,EAAE,GAAG,CAAC;IACjB,uBAAuB,EAAE,GAAG,CAAC;IAC7B,YAAY,EAAE,GAAG,CAAC;IAGlB,gBAAgB,EAAE,GAAG,CAAC;IACtB,aAAa,EAAE,GAAG,CAAC;IACnB,YAAY,EAAE,GAAG,CAAC;IAIlB,UAAU,EAAE,GAAG,CAAC;IAEhB,UAAU,EAAE,GAAG,CAAC;IAEhB,aAAa,EAAE,GAAG,CAAC;IAGnB,eAAe,EAAE,GAAG,CAAC;IACrB,eAAe,EAAE,GAAG,CAAC;IAGrB,kBAAkB,EAAE,GAAG,CAAC;IACxB,oBAAoB,EAAE,GAAG,CAAC;IAC1B,qBAAqB,EAAE,GAAG,CAAC;IAG3B,YAAY,EAAE,GAAG,CAAC;IAClB,iBAAiB,EAAE,GAAG,CAAC;IAGvB,iBAAiB,EAAE,GAAG,CAAC;IAE9B,OAAO;WA2CO,WAAW,IAAI,cAAc;CAM9C"}
+{"version":3,"file":"bindings.d.ts","sourceRoot":"","sources":["../../../../src/embedded/ffi/bindings.ts"],"names":[],"mappings":"AAyDA,qBAAa,cAAc;IACvB,OAAO,CAAC,MAAM,CAAC,QAAQ,CAAiB;IACxC,OAAO,CAAC,GAAG,CAAM;IACjB,OAAO,CAAC,wBAAwB,CAAS;IAGlC,WAAW,EAAE,GAAG,CAAC;IACjB,uBAAuB,EAAE,GAAG,CAAC;IAC7B,sBAAsB,EAAE,GAAG,CAAC;IAC5B,oBAAoB,EAAE,GAAG,CAAC;IAC1B,YAAY,EAAE,GAAG,CAAC;IAGlB,gBAAgB,EAAE,GAAG,CAAC;IACtB,aAAa,EAAE,GAAG,CAAC;IACnB,YAAY,EAAE,GAAG,CAAC;IAIlB,UAAU,EAAE,GAAG,CAAC;IAEhB,UAAU,EAAE,GAAG,CAAC;IAEhB,aAAa,EAAE,GAAG,CAAC;IAGnB,eAAe,EAAE,GAAG,CAAC;IACrB,eAAe,EAAE,GAAG,CAAC;IAGrB,kBAAkB,EAAE,GAAG,CAAC;IACxB,oBAAoB,EAAE,GAAG,CAAC;IAC1B,qBAAqB,EAAE,GAAG,CAAC;IAG3B,YAAY,EAAE,GAAG,CAAC;IAClB,iBAAiB,EAAE,GAAG,CAAC;IAGvB,iBAAiB,EAAE,GAAG,CAAC;IAE9B,OAAO;WAwDO,WAAW,IAAI,cAAc;IAO3C;;OAEG;IACI,yBAAyB,IAAI,OAAO;CAG9C"}

package/dist/types/index.d.ts

@@ -1,5 +1,5 @@
 /**
- * SochDB Node.js SDK v0.4.2
+ * SochDB Node.js SDK v0.4.4
  *
  * Dual-mode architecture: Embedded (FFI) + Server (gRPC/IPC)
  *
@@ -12,7 +12,12 @@
  *    - No server required - just npm install and run
  *    - Best for: Local development, simple apps
  *
- * 2. Server Mode (gRPC/IPC) - For distributed systems:
+ * 2. Concurrent Mode (FFI) - For multi-process apps:
+ *    - Same FFI bindings with MVCC for concurrent access
+ *    - Multiple Node.js processes can access same database
+ *    - Best for: PM2 cluster, Express workers
+ *
+ * 3. Server Mode (gRPC/IPC) - For distributed systems:
  *    - Thin client connecting to sochdb-grpc server
  *    - Best for: Production, multi-language, scalability
  *
@@ -26,6 +31,15 @@
  * await db.close();
  * ```
  *
+ * @example Concurrent Mode
+ * ```typescript
+ * import { Database } from '@sochdb/sochdb';
+ *
+ * // Multiple processes can access simultaneously
+ * const db = Database.openConcurrent('./mydb');
+ * console.log(`Concurrent: ${db.isConcurrent}`);
+ * ```
+ *
  * @example Server Mode
  * ```typescript
  * import { SochDBClient } from '@sochdb/sochdb';
@@ -35,7 +49,7 @@
  * await client.putKv('key', Buffer.from('value'));
  * ```
  */
-export declare const VERSION = "0.4.2";
+export declare const VERSION = "0.4.4";
 export { EmbeddedDatabase, EmbeddedDatabaseConfig } from './embedded';
 export { EmbeddedTransaction } from './embedded';
 export { HnswIndex, HnswConfig, HnswBindings } from './embedded';
@@ -49,8 +63,12 @@ export { SemanticCache, } from './semantic-cache';
 export type { CacheEntry, CacheHit, CacheStats, } from './semantic-cache';
 export { ContextQueryBuilder, ContextOutputFormat, TruncationStrategy, createContextBuilder, } from './context-builder';
 export type { ContextResult, } from './context-builder';
-export { ExtractionPipeline, Consolidator, HybridRetriever, AllowedSet, NamespacePolicy, } from './memory';
-export type { Entity, Relation, Assertion, RawAssertion, CanonicalFact, ExtractionResult, ExtractionSchema, ConsolidationConfig, RetrievalConfig, RetrievalResult, RetrievalResponse, NamespaceGrant, } from './memory';
+export { ExtractionPipeline, Consolidator, HybridRetriever, AllowedSet, } from './memory';
+export type { Entity, Relation, Assertion, RawAssertion, CanonicalFact, ExtractionResult, ExtractionSchema, ConsolidationConfig, RetrievalConfig, RetrievalResult, RetrievalResponse, } from './memory';
+export { McpServer, McpClient, McpError, MCP_ERROR_CODES, } from './mcp';
+export type { McpTool, McpToolCall, McpToolResult, McpResource, McpResourceContent, McpPrompt, McpPromptArgument, McpPromptMessage, McpServerCapabilities, McpServerConfig, McpClientConfig, McpTransport, } from './mcp';
+export { PolicyService, } from './policy';
+export type { PolicyRule, PolicyCondition, PolicyEvaluation, NamespacePolicy, NamespaceGrant, NamespacePermission, PolicyAction, PolicyRequest, PolicySet, PolicyAuditEntry, } from './policy';
 export { SochDBClient } from './grpc-client';
 export type { SearchResult, Document, GraphNode, GraphEdge, } from './grpc-client';
 export { IpcClient } from './ipc-client';