@tursodatabase/database 0.5.0-pre.3 → 0.5.0-pre.4

package/dist/compat.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"compat.d.ts","sourceRoot":"","sources":["../compat.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,cAAc,EAAkB,WAAW,EAAE,YAAY,EAAE,MAAM,gCAAgC,CAAA;AAG1G,cAAM,QAAS,SAAQ,cAAc;gBACrB,IAAI,EAAE,MAAM,EAAE,IAAI,GAAE,YAAiB;CAGpD;AAED,OAAO,EAAE,QAAQ,EAAE,WAAW,EAAE,CAAA"}
+{"version":3,"file":"compat.d.ts","sourceRoot":"","sources":["../compat.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,cAAc,EAAkB,WAAW,EAAE,YAAY,EAAoB,MAAM,gCAAgC,CAAA;AAoB5H,cAAM,QAAS,SAAQ,cAAc;gBACrB,IAAI,EAAE,MAAM,EAAE,IAAI,GAAE,YAAiB;CAUpD;AAED,OAAO,EAAE,QAAQ,EAAE,WAAW,EAAE,CAAA"}

package/dist/compat.js

@@ -1,8 +1,31 @@
 import { DatabaseCompat, SqliteError } from "@tursodatabase/database-common";
-import { Database as NativeDB } from "#index";
+import { Database as NativeDB, EncryptionCipher as NativeEncryptionCipher } from "#index";
+// Map string cipher names to native enum values (lazy to avoid errors if native module lacks encryption)
+function getCipherValue(cipher) {
+    if (!NativeEncryptionCipher) {
+        throw new Error('Encryption is not supported in this build');
+    }
+    const cipherMap = {
+        'aes128gcm': NativeEncryptionCipher.Aes128Gcm,
+        'aes256gcm': NativeEncryptionCipher.Aes256Gcm,
+        'aegis256': NativeEncryptionCipher.Aegis256,
+        'aegis256x2': NativeEncryptionCipher.Aegis256x2,
+        'aegis128l': NativeEncryptionCipher.Aegis128l,
+        'aegis128x2': NativeEncryptionCipher.Aegis128x2,
+        'aegis128x4': NativeEncryptionCipher.Aegis128x4,
+    };
+    return cipherMap[cipher];
+}
 class Database extends DatabaseCompat {
     constructor(path, opts = {}) {
-        super(new NativeDB(path, opts));
+        const nativeOpts = { ...opts };
+        if (opts.encryption) {
+            nativeOpts.encryption = {
+                cipher: getCipherValue(opts.encryption.cipher),
+                hexkey: opts.encryption.hexkey,
+            };
+        }
+        super(new NativeDB(path, nativeOpts));
     }
 }
 export { Database, SqliteError };

package/dist/compat.test.js

@@ -102,3 +102,39 @@ test('blobs', () => {
     const rows = db.prepare("SELECT x'1020' as x").all();
     expect(rows).toEqual([{ x: Buffer.from([16, 32]) }]);
 });
+test('encryption', () => {
+    const path = `test-encryption-${(Math.random() * 10000) | 0}.db`;
+    const hexkey = 'b1bbfda4f589dc9daaf004fe21111e00dc00c98237102f5c7002a5669fc76327';
+    const wrongKey = 'aaaaaaa4f589dc9daaf004fe21111e00dc00c98237102f5c7002a5669fc76327';
+    try {
+        const db = new Database(path, {
+            encryption: { cipher: 'aegis256', hexkey }
+        });
+        db.exec("CREATE TABLE t(x)");
+        db.exec("INSERT INTO t SELECT 'secret' FROM generate_series(1, 1024)");
+        db.exec("PRAGMA wal_checkpoint(truncate)");
+        db.close();
+        // lets re-open with the same key
+        const db2 = new Database(path, {
+            encryption: { cipher: 'aegis256', hexkey }
+        });
+        const rows = db2.prepare("SELECT COUNT(*) as cnt FROM t").all();
+        expect(rows).toEqual([{ cnt: 1024 }]);
+        db2.close();
+        // opening with wrong key MUST fail
+        expect(() => {
+            const db3 = new Database(path, {
+                encryption: { cipher: 'aegis256', hexkey: wrongKey }
+            });
+            db3.prepare("SELECT * FROM t").all();
+        }).toThrow();
+        // opening without encryption MUST fail
+        expect(() => {
+            const db5 = new Database(path);
+            db5.prepare("SELECT * FROM t").all();
+        }).toThrow();
+    }
+    finally {
+        unlinkSync(path);
+    }
+});

package/index.js

@@ -508,7 +508,8 @@ if (!nativeBinding) {
   throw new Error(`Failed to load native binding`)
 }
 
-const { BatchExecutor, Database, Statement } = nativeBinding
+const { BatchExecutor, Database, Statement, EncryptionCipher } = nativeBinding
 export { BatchExecutor }
 export { Database }
 export { Statement }
+export { EncryptionCipher }

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@tursodatabase/database",
-  "version": "0.5.0-pre.3",
+  "version": "0.5.0-pre.4",
   "repository": {
     "type": "git",
     "url": "https://github.com/tursodatabase/turso"
@@ -29,7 +29,7 @@
     "vitest": "^3.2.4"
   },
   "scripts": {
-    "napi-build": "napi build --platform --release --esm --manifest-path ../../Cargo.toml --output-dir .",
+    "napi-build": "napi build --platform --profile release-official --esm --manifest-path ../../Cargo.toml --output-dir .",
     "napi-dirs": "napi create-npm-dirs",
     "napi-artifacts": "napi artifacts --output-dir .",
     "tsc-build": "npm exec tsc",
@@ -47,15 +47,15 @@
     ]
   },
   "dependencies": {
-    "@tursodatabase/database-common": "^0.5.0-pre.3"
+    "@tursodatabase/database-common": "^0.5.0-pre.4"
   },
   "imports": {
     "#index": "./index.js"
   },
   "optionalDependencies": {
-    "@tursodatabase/database-linux-x64-gnu": "0.5.0-pre.3",
-    "@tursodatabase/database-win32-x64-msvc": "0.5.0-pre.3",
-    "@tursodatabase/database-darwin-arm64": "0.5.0-pre.3",
-    "@tursodatabase/database-linux-arm64-gnu": "0.5.0-pre.3"
+    "@tursodatabase/database-linux-x64-gnu": "0.5.0-pre.4",
+    "@tursodatabase/database-win32-x64-msvc": "0.5.0-pre.4",
+    "@tursodatabase/database-darwin-arm64": "0.5.0-pre.4",
+    "@tursodatabase/database-linux-arm64-gnu": "0.5.0-pre.4"
   }
 }