mdbxmou 0.3.11 → 0.3.13

package/README.md

@@ -7,7 +7,7 @@ Node.js binding for [libmdbx](https://github.com/Mithril-mine/libmdbx) — a fas
 - **Synchronous API** — Direct MDBX operations in main thread
 - **Asynchronous API** — Background operations with async/await
 - **Transactions** — ACID transactions with read/write modes
-- **Multiple key/value types** — String, binary, ordinal (integer) keys
+- **Multiple key/value types** — String, binary, ordinal keys and ordinal duplicate values
 - **Batch operations** — Efficient multi-key read/write
 - **Memory-mapped** — High-performance memory-mapped I/O
 
@@ -86,6 +86,8 @@ Options:
 - `keyFlag` - Default key encoding for all operations (optional, defaults to Buffer)
   - Only `string` can be set (ordinal mode uses `number`/`bigint` separately)
 - `valueFlag` - Default value encoding for all operations (optional, defaults to Buffer)
+  - `string` affects normal string values
+  - `number` and `bigint` are meaningful for `valueMode.multiOrdinal`
 - `maxDbi` - Maximum number of databases (optional, default `32`)
 - `mode` - Filesystem permissions mode (optional, default `0664`)
 - `geometry` - Map size/geometry options (optional)
@@ -190,14 +192,21 @@ const txn = env.startRead();
 ```javascript
 const result = await env.query([
   {
-    dbMode: MDBX_Param.dbMode.accede,
-    keyMode: MDBX_Param.keyMode.ordinal,
+    dbi,
     mode: MDBX_Param.queryMode.get,
     item: [{ key: 1 }, { key: 2 }]
+  },
+  {
+    dbi,
+    mode: MDBX_Param.queryMode.upsert,
+    putFlag: MDBX_Param.putFlag.noOverwrite,
+    item: [{ key: 3, value: "v3" }]
   }
 ]);
 ```
 
+`query()` uses the passed `dbi` and inherits key/value settings from it. `queryMode` selects the operation (`get`, `del`, or base write mode), and optional `putFlag` adds write-only MDBX flags. In `query()` only `noOverwrite`, `noDupData`, `current`, `append`, and `appendDup` are supported.
+
 ### Transaction
 
 #### Methods
@@ -271,6 +280,8 @@ const dbi = txn.openMap({
 > - `keyMode: BigInt(number)` → keys returned as `BigInt`
 > - When you pass `keyMode.ordinal` as a positional argument (Number/BigInt), it also updates `keyFlag` to number/bigint unless a numeric keyFlag was already set in env or explicitly provided.
 
+> **Note**: When `valueMode.multiOrdinal` is used and `valueFlag` is not specified, values are returned as `number` by default. Set `valueFlag: MDBX_Param.valueFlag.bigint` if you need `BigInt` on read.
+
 **commit()**
 ```javascript
 txn.commit();
@@ -285,10 +296,16 @@ txn.abort();
 
 #### Methods
 
-**put(txn, key, value)**
+**put(txn, key, value, [flags])**
 ```javascript
 dbi.put(txn, 123, "value");
 dbi.put(txn, "key", Buffer.from("binary data"));
+
+// Insert only if key does not exist
+dbi.put(txn, 123, "value", MDBX_Param.putFlag.noOverwrite);
+
+// Fast append for sorted inserts
+dbi.put(txn, 124, "value", MDBX_Param.putFlag.append);
 ```
 
 **get(txn, key) → value**
@@ -297,6 +314,8 @@ const value = dbi.get(txn, 123);
 const binary = dbi.get(txn, "key");
 ```
 
+For `valueMode.multiOrdinal`, `get()` returns the first duplicate value for the key, decoded as `number` by default.
+
 **del(txn, key) → boolean**
 ```javascript
 const deleted = dbi.del(txn, 123);
@@ -355,6 +374,12 @@ const rows = dbi.getRange(txn, { start: 10, end: 15 });
 // ]
 ```
 
+**getCount(txn, [options]) → number**
+```javascript
+const total = dbi.getCount(txn, { start: 10, end: 20 });
+// 11
+```
+
 **keysRange(txn, [options]) → Array**
 ```javascript
 const keys = dbi.keysRange(txn, { start: 10, end: 20, limit: 5 });
@@ -378,6 +403,7 @@ Range options:
 - `reverse` - scan from upper bound to lower bound
 - `limit` - maximum number of returned items
 - `offset` - skip N items after initial positioning
+- `getCount()` ignores `offset` and `limit` and returns the total size of the bounded range
 
 **drop(txn, [delete_db]) → void**
 ```javascript
@@ -461,7 +487,7 @@ Insert or update a record at cursor position.
 cursor.put('newKey', 'newValue');
 
 // With flags (MDBX_NOOVERWRITE, etc.)
-cursor.put('key', 'value', MDBX_Param.queryMode.insertUnique);
+cursor.put('key', 'value', MDBX_Param.putFlag.noOverwrite);
 ```
 
 **del([flags]) → boolean**
@@ -595,12 +621,20 @@ txn.commit();
 ### Value Modes (MDBX_Param.valueMode)
 
 - **single** - Single value per key (default)
-- **multi** - Multiple values per key (dupsort)
+- **multi** - `MDBX_DUPSORT`, multiple values per key
+- **multiReverse** - `MDBX_DUPSORT | MDBX_REVERSEDUP`
+- **multiSamelength** - `MDBX_DUPSORT | MDBX_DUPFIXED`
+- **multiOrdinal** - `MDBX_DUPSORT | MDBX_DUPFIXED | MDBX_INTEGERDUP`
+- **multiReverseSamelength** - `MDBX_DUPSORT | MDBX_REVERSEDUP | MDBX_DUPFIXED`
 
 ### Value Flags (MDBX_Param.valueFlag)
 
-- **binary** - Raw binary data (default)
+- **binary** - Raw binary data (default, represented by `0`)
 - **string** - UTF-8 strings
+- **number** - Numeric decode for ordinal duplicate values
+- **bigint** - BigInt decode for ordinal duplicate values
+
+`valueFlag.number` and `valueFlag.bigint` matter primarily for `valueMode.multiOrdinal`. For ordinary values, use Buffer (default) or `valueFlag.string`.
 
 ## Examples
 
@@ -815,6 +849,9 @@ function rangeExample() {
   //   { key: 6, value: 'value_6' }
   // ]
 
+  const total = readDbi.getCount(readTxn, { start: 3, end: 8 });
+  console.log(total); // 6
+
   const keys = readDbi.keysRange(readTxn, {
     start: 3,
     end: 8,
@@ -838,6 +875,44 @@ function rangeExample() {
 rangeExample();
 ```
 
+### MultiOrdinal Values
+
+```javascript
+const { MDBX_Env, MDBX_Param } = require('mdbxmou');
+
+function multiOrdinalExample() {
+  const env = new MDBX_Env();
+  env.openSync({ path: './multi-ordinal-data' });
+
+  const writeTxn = env.startWrite();
+  const dbi = writeTxn.createMap({
+    name: 'dup-ids',
+    keyMode: MDBX_Param.keyMode.ordinal,
+    valueMode: MDBX_Param.valueMode.multiOrdinal
+  });
+
+  dbi.put(writeTxn, 5, 30);
+  dbi.put(writeTxn, 5, 10);
+  dbi.put(writeTxn, 5, 20n);
+  writeTxn.commit();
+
+  const readTxn = env.startRead();
+  const readDbi = readTxn.openMap({
+    name: 'dup-ids',
+    keyMode: MDBX_Param.keyMode.ordinal,
+    valueMode: MDBX_Param.valueMode.multiOrdinal
+  });
+
+  console.log(readDbi.get(readTxn, 5)); // 10
+  console.log(readDbi.valuesRange(readTxn, { start: 5, end: 5 })); // [10, 20, 30]
+
+  readTxn.commit();
+  env.closeSync();
+}
+
+multiOrdinalExample();
+```
+
 ### Query API (Advanced Async)
 
 ```javascript
@@ -856,7 +931,8 @@ async function queryExample() {
   const results = await env.query([
     {
       dbi,
-      mode: MDBX_Param.queryMode.insertUnique,
+      mode: MDBX_Param.queryMode.upsert,
+      putFlag: MDBX_Param.putFlag.noOverwrite,
       item: [
         { key: 1, value: JSON.stringify({ name: "Alice" }) },
         { key: 2, value: JSON.stringify({ name: "Bob" }) }
@@ -981,7 +1057,21 @@ MDBX_Param.keyFlag.number     // Number type (used with ordinal mode)
 MDBX_Param.keyFlag.bigint     // BigInt type (used with ordinal mode)
 // Default - Buffer representation
 
+// Value modes
+MDBX_Param.valueMode.multi                 // MDBX_DUPSORT
+MDBX_Param.valueMode.multiReverse          // MDBX_DUPSORT | MDBX_REVERSEDUP
+MDBX_Param.valueMode.multiSamelength       // MDBX_DUPSORT | MDBX_DUPFIXED
+MDBX_Param.valueMode.multiOrdinal          // MDBX_DUPSORT | MDBX_DUPFIXED | MDBX_INTEGERDUP
+MDBX_Param.valueMode.multiReverseSamelength // MDBX_DUPSORT | MDBX_REVERSEDUP | MDBX_DUPFIXED
+
+// Value flags (optional, control value representation)
+MDBX_Param.valueFlag.string   // UTF-8 string values
+MDBX_Param.valueFlag.number   // Number values for multiOrdinal
+MDBX_Param.valueFlag.bigint   // BigInt values for multiOrdinal
+// Default - Buffer representation
+
 Note: For ordinal (integer) keys, use keyFlag.number or keyFlag.bigint to specify the data type.
+For `valueMode.multiOrdinal`, values are returned as `number` by default, or as `bigint` when `valueFlag.bigint` is used.
 ```
 
 ### Environment Flags
@@ -1027,11 +1117,23 @@ Note: For ordinal (integer) keys, use keyFlag.number or keyFlag.bigint to specif
 
 ### Query Modes
 - `MDBX_Param.queryMode.get` - Read operations
-- `MDBX_Param.queryMode.upsert` - Write operations (insert or update)
-- `MDBX_Param.queryMode.update` - Update existing (MDBX_CURRENT)
-- `MDBX_Param.queryMode.insertUnique` - Insert unique (MDBX_NOOVERWRITE)
+- `MDBX_Param.queryMode.upsert` - Base write mode (insert or update)
+- `MDBX_Param.queryMode.update` - Base write mode with `MDBX_CURRENT`
+- `MDBX_Param.queryMode.insertUnique` - Base write mode with `MDBX_NOOVERWRITE`
 - `MDBX_Param.queryMode.del` - Delete operations
 
+### Put Flags
+- `MDBX_Param.putFlag.noOverwrite` - `MDBX_NOOVERWRITE`
+- `MDBX_Param.putFlag.noDupData` - `MDBX_NODUPDATA`
+- `MDBX_Param.putFlag.current` - `MDBX_CURRENT`
+- `MDBX_Param.putFlag.allDups` - `MDBX_ALLDUPS`
+- `MDBX_Param.putFlag.reserve` - `MDBX_RESERVE`
+- `MDBX_Param.putFlag.append` - `MDBX_APPEND`
+- `MDBX_Param.putFlag.appendDup` - `MDBX_APPENDDUP`
+- `MDBX_Param.putFlag.multiple` - `MDBX_MULTIPLE`
+
+For `env.query()` write requests, only `noOverwrite`, `noDupData`, `current`, `append`, and `appendDup` are supported.
+
 ### Cursor Modes
 - `MDBX_Param.cursorMode.first` - First key
 - `MDBX_Param.cursorMode.last` - Last key  

package/deps/libmdbx/ChangeLog.md

@@ -9,6 +9,45 @@ Donations are welcome to ETH `0xD104d8f8B2dC312aaD74899F83EBf3EEBDC1EA3A`,
 BTC `bc1qzvl9uegf2ea6cwlytnanrscyv8snwsvrc0xfsu`, SOL `FTCTgbHajoLVZGr8aEFWMzx3NDMyS5wXJgfeMTmJznRi`.
 Всё будет хорошо!
 
+## v0.13.12 "Аврора" (Aurora) at 2026-04-30
+
+The supporting release of a stable branch with bug fixes.
+
+Appreciations:
+
+ - [Erigon](https://erigon.tech/) for sponsorship.
+ - [Chloe Cano](https://github.com/Segwaz) for fuzzing, bug reporting and fixes.
+ - [Weixie Cui](https://github.com/cuiweixie) for bug fixing through pull-requests.
+ - [Alexander Kelchin](https://serebrium.ru/) (Serebrium Company) for bug reporting and prototypes of exploits.
+
+Fixes:
+
+ - Fixed the counting of nested trees in the `mdbx_chk` tool for a multi-values/dupsort hives (backport).
+
+ - Fixed swapping the shrink/growth parameters in a DB-geometry in the `mdbx_load` utility (backport).
+
+ - Fixed `SIGSEGV` in the case when all meta pages are not entirely usable (backport).
+
+ - Fixed information collection via `kstat()` for bootid on Solaris and related platforms (backport).
+
+ - Fixed a typo in the `ST_EXPORTED` processing path that broke the build on platforms where the mentioned flag is defined for `fstatvfs()` (backport).
+
+ - Fixed missing error handling of `NtUnmapViewOfSection()` and `munmap()` inside `osal_munmap()` (backport).
+
+ - Fixed `SIGSEGV` due to an attempt to clean/overwrite a corrupted meta page when opening the database in read-only mode (backport).
+
+ - Fixed returning a wrong/uninitialized `ms_psize` field when using `mdbx_enumerate_tables()` (backport).
+
+ - Fixed adjusting of neighbor nested cursors after a dupsort item deletion (backport).
+
+Other:
+
+ - The dumps generated by the `mdbx_dump` utility no longer contains the current size of a DB and `maxreaders` parameter, so that the contents of a dump depend only on a payload data.
+
+ - Cutoff `packages/` into the separate aside repository.
+
+--------------------------------------------------------------------------------
+
 ## v0.13.11 "A7A5" (just as Stable) at 2026-01-30
 
 The supporting release of a stable branch with bug fixes.
@@ -59,6 +98,11 @@ Other:
 
  - Added link to [`mdbxmou`](https://github.com/ikonopistsev/mdbxmou) bindings for NodeJS.
 
+ - Added in-code example of fix out-of-bounds read via corrupted leaf-node with comments.
+   See `node_read()` inside the source code.
+
+ - Refined a handling of bad/corrupted/crafted database geometry in a meta-pages, corresponding behaviour and logged messages.
+
 --------------------------------------------------------------------------------
 
 ## v0.13.10 "Блеск Славы" (Gloss of Glory) от 2025-12-17

package/deps/libmdbx/SECURITY.md

@@ -0,0 +1,18 @@
+# Security Policy
+
+## Supported Versions
+
+The following versions will receive security updates promptly based on the maintainers' discretion.
+
+In fact, >80% of all kinds of bugs are fixed within 24 hours, and with rare exceptions, any issues are fixed within a week.
+However, this should not be taken as a promise or a guarantee - we just try to do what we set out to do properly.
+
+| Version | Supported          |
+| ------- | ------------------ |
+| 0.14.x  | :white_check_mark: |
+| 0.13.x  | :white_check_mark: |
+| < 0.13  | :x:                |
+
+## Reporting a Vulnerability
+
+To report a vulnerability, please email to `libmdbx-security @ dqdkfa.ru` or use the GitHub disclosure in the security tab to alert us to a security issue.

package/deps/libmdbx/VERSION.json

@@ -1 +1 @@
-{ "git_describe": "v0.13.11-0-gb862eb08", "git_timestamp": "2026-01-30T16:04:44+03:00", "git_tree": "34a88ae65e76bbf3b9bcb0c2106dec18d2c067da", "git_commit": "b862eb08b77eccd4b8e8367a3276ffdea0d73de5", "semver": "0.13.11" }
+{ "git_describe": "v0.13.12-0-gf619d43d", "git_timestamp": "2026-04-30T16:36:24+03:00", "git_tree": "f5574b87cc64fa7a3a6b21ba33809258498d5f17", "git_commit": "f619d43dfbc36cbc9a1832503ce43f2e5223996e", "semver": "0.13.12" }