@visorcraft/mongreldb 0.34.0 → 0.36.0

package/native.d.ts

@@ -240,6 +240,36 @@ export declare class Database {
   static withPath(path: string): Database
   /** Open an existing database from disk. */
   static open(path: string): Database
+  /**
+   * Open an existing database that has `require_auth = true`, verifying
+   * the supplied credentials. Every subsequent operation on the returned
+   * handle is checked against the authenticated principal's permissions.
+   * Throws if the database does not require auth (use `open` instead) or
+   * if the credentials are invalid.
+   */
+  static openWithCredentials(path: string, username: string, password: string): Database
+  /**
+   * Create a fresh database with `require_auth = true` and a single admin
+   * user. The returned handle is already authenticated as that admin.
+   */
+  static createWithCredentials(path: string, adminUsername: string, adminPassword: string): Database
+  /**
+   * Convert a credentialless database to a credentialed one in place:
+   * creates the first admin user, sets `require_auth = true`, and caches
+   * the admin principal on this handle. After this call, the database can
+   * only be reopened via `openWithCredentials`.
+   */
+  enableAuth(adminUsername: string, adminPassword: string): void
+  /** Disable `require_auth`, reverting to credentialless mode (recovery). */
+  disableAuth(): void
+  /** Returns `true` if this database has `require_auth = true`. */
+  requireAuthEnabled(): boolean
+  /**
+   * Re-resolve the cached principal from the on-disk catalog, picking up
+   * role/permission changes made by other handles. No-op on credentialless
+   * databases.
+   */
+  refreshPrincipal(): void
   /** Create a new table with the given schema. */
   createTable(name: string, schema: SchemaSpec): bigint
   /** Drop a table by name. */
@@ -385,6 +415,17 @@ export declare class Database {
   static createEncrypted(path: string, passphrase: string): Database
   /** Open an existing encrypted database with its passphrase. */
   static openEncrypted(path: string, passphrase: string): Database
+  /**
+   * Open an existing encrypted database that has `require_auth = true`,
+   * combining the encryption passphrase with credential verification.
+   */
+  static openEncryptedWithCredentials(path: string, passphrase: string, username: string, password: string): Database
+  /**
+   * Create a fresh encrypted database with `require_auth = true` and a
+   * single admin user. Composes encryption-at-rest with credential
+   * enforcement.
+   */
+  static createEncryptedWithCredentials(path: string, passphrase: string, adminUsername: string, adminPassword: string): Database
 }
 /** A handle to one table inside a [`Database`]. */
 export declare class TableHandle {

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@visorcraft/mongreldb",
-  "version": "0.34.0",
+  "version": "0.36.0",
   "description": "High-performance Node.js bindings for MongrelDB with native in-process storage, sub-ms writes, and hybrid indexing.",
   "main": "index.js",
   "types": "index.d.ts",