monsqlize 3.4.0 → 3.5.0

package/CHANGELOG.md

@@ -1,18 +1,19 @@
 # CHANGELOG
 
-> Summary index — the 3.4.0 versioned details are in [changelogs/v3.4.0.md](./changelogs/v3.4.0.md). A versioned note does not establish npm publication; check the registry and immutable tag before deployment.
+> Summary index — the 3.5.0 versioned details are in [changelogs/v3.5.0.md](./changelogs/v3.5.0.md). A versioned note does not establish npm publication; check the registry and immutable tag before deployment.
 > **Last updated**: 2026-10-27
 
 ---
 
 ## Unreleased
 
-The Search index lifecycle API is assigned to **3.4.0** ([versioned notes](./changelogs/v3.4.0.md)); the weekly-scan cache-key, health-check and lockfile security fixes are in [3.3.4](./changelogs/v3.3.4.md); the schema-dsl 3.0.5 upgrade is in [3.3.3](./changelogs/v3.3.3.md); the audited 3.3.2 repairs are in its [versioned notes](./changelogs/v3.3.2.md) and the [next-change staging log](https://github.com/devcodex-labs/monSQLize/blob/main/changelogs/unreleased.md). Untagged checkouts remain release candidates.
+GridFS buckets are assigned to **3.5.0** ([versioned notes](./changelogs/v3.5.0.md)); the Search index lifecycle API is in [3.4.0](./changelogs/v3.4.0.md); the weekly-scan cache-key, health-check and lockfile security fixes are in [3.3.4](./changelogs/v3.3.4.md); the schema-dsl 3.0.5 upgrade is in [3.3.3](./changelogs/v3.3.3.md); the audited 3.3.2 repairs are in its [versioned notes](./changelogs/v3.3.2.md) and the [next-change staging log](https://github.com/devcodex-labs/monSQLize/blob/main/changelogs/unreleased.md). Untagged checkouts remain release candidates.
 
 ## Version Overview
 
 | Version | Date | Summary | Details |
 |---------|------|---------|---------|
+| [v3.5.0](./changelogs/v3.5.0.md) | 2026-10-27 | Minor: GridFS buckets with upload, download, ranges, ensureIndexes and phase-1 resumable upload | [View](./changelogs/v3.5.0.md) |
 | [v3.4.0](./changelogs/v3.4.0.md) | 2026-10-27 | Minor: Search index lifecycle API for Atlas Search and Vector Search | [View](./changelogs/v3.4.0.md) |
 | [v3.3.4](./changelogs/v3.3.4.md) | 2026-10-26 | Patch: cached-read keys under autoConvertObjectId, hung health-check pings, lockfile security patches | [View](./changelogs/v3.3.4.md) |
 | [v3.3.3](./changelogs/v3.3.3.md) | 2026-10-23 | Patch: pin schema-dsl 3.0.5 (dependency bug fixes only) | [View](./changelogs/v3.3.3.md) |

package/README.md

@@ -14,7 +14,7 @@ Upgrade and security: [Migration Guide](./MIGRATION.md) · [Private Vulnerabilit
 
 The npm `latest` dist-tag and GitHub Pages are the stable channel; `main` may contain the next release. Pages deployment accepts only a versioned Git tag whose package version is already present on npm, so unpublished APIs are not promoted as stable documentation. The Google site ownership verification file is copied separately from the workflow commit, with its source commit and content hash recorded in the deployment summary.
 
-This source tree targets **3.4.0**, a minor release that adds the Search index lifecycle API for Atlas Search and Vector Search (see the [3.4.0 notes](./changelogs/v3.4.0.md)); 3.3.4 fixed cached-read keys under `autoConvertObjectId`, hung health-check pings and lockfile security advisories. The 3.3.2 cache, Model, pagination and sync fixes, including cold-cache upgrades and checkpoint rollback limits, are described in the [3.3.2 notes](./changelogs/v3.3.2.md) and [migration guide](./MIGRATION.md). Read the upgrade guide in [English](https://github.com/devcodex-labs/monSQLize/blob/main/docs/en/upgrade-3.3.2.md) or [简体中文](https://github.com/devcodex-labs/monSQLize/blob/main/docs/zh/upgrade-3.3.2.md). Untagged checkouts remain release candidates; verify the immutable tag and requested registry version before deployment. Candidate preparation does not publish npm or update stable Pages.
+This source tree targets **3.5.0**, a minor release that adds GridFS buckets on `msq.gridfs()` and `model.gridfs()` (see the [3.5.0 notes](./changelogs/v3.5.0.md)); 3.4.0 added the Search index lifecycle API for Atlas Search and Vector Search. The 3.3.2 cache, Model, pagination and sync fixes, including cold-cache upgrades and checkpoint rollback limits, are described in the [3.3.2 notes](./changelogs/v3.3.2.md) and [migration guide](./MIGRATION.md). Read the upgrade guide in [English](https://github.com/devcodex-labs/monSQLize/blob/main/docs/en/upgrade-3.3.2.md) or [简体中文](https://github.com/devcodex-labs/monSQLize/blob/main/docs/zh/upgrade-3.3.2.md). Untagged checkouts remain release candidates; verify the immutable tag and requested registry version before deployment. Candidate preparation does not publish npm or update stable Pages.
 
 This development source is pinned to verified registry `schema-dsl@3.0.5`. The v3 package remains subject to the full release gate before an immutable tag and npm publication.
 

package/changelogs/v3.5.0.md

@@ -0,0 +1,23 @@
+# monSQLize v3.5.0
+
+> Release date: 2026-10-27
+> Publication authority: the immutable tag and npm registry. An untagged checkout is a release candidate; the date above does not establish registry availability.
+
+## Highlights
+
+Minor release. Adds GridFS buckets on `msq.gridfs()` and `model.gridfs()`. Existing APIs, defaults and dependency versions are unchanged. Node.js `>=18` remains the consumer runtime.
+
+## Added
+
+- GridFS buckets: upload, download, byte ranges, `getFile`, `findFiles`, delete/drop, and a formal `ensureIndexes` method. `contentType` is stored in `metadata.contentType` (compatible with MongoDB Driver 6.x and 7.x).
+- Phase-1 resumable upload: start, append chunks, finalize and abort. Upload sessions expire through a 7-day TTL index that does not cascade to already written chunks.
+- `writePathPolicy` gains a `gridfs` field and category. Under model-only with inherit, GridFS reads stay allowed and writes require `gridfs: 'allow'`; `drop` is a management operation. Violations stay `INVALID_OPERATION` with `reason: 'WRITE_PATH_POLICY'`. Matching receives the collection-style internal instance id (`iid`).
+- Six `GRIDFS_*` error codes. Driver failures from `getFile`, `findFiles`, `abortResumableUpload` and index creation map to `MONGODB_ERROR`, with the driver error kept as `cause`.
+
+## Budgets
+
+- Root CJS runtime budget rises to 874,000 bytes and ESM to 871,000 bytes; `gridfs()` stays synchronous, so the single-file build keeps GridFS in the main bundle. The CLI budget stays 50,000 bytes.
+
+## Upgrade and rollback
+
+No migration is required for existing APIs. GridFS methods are additive. Rollback to 3.4.0 removes the GridFS API and restores the previous bundle budgets; GridFS collections already written remain readable through the native driver.

package/dist/cjs/cli/data-task.cjs

@@ -31,7 +31,7 @@ var import_node_url = require("node:url");
 // package.json
 var package_default = {
   name: "monsqlize",
-  version: "3.4.0",
+  version: "3.5.0",
   description: "TypeScript production data runtime layer for MongoDB today, with cache, transactions, pools, models, sync, and observability",
   type: "commonjs",
   main: "./dist/cjs/index.cjs",
@@ -52,6 +52,7 @@ var package_default = {
     "./package.json": "./package.json"
   },
   files: [
+    "changelogs/v3.5.0.md",
     "changelogs/v3.4.0.md",
     "changelogs/v3.3.3.md",
     "changelogs/v3.3.4.md",
@@ -167,7 +168,7 @@ var package_default = {
     "test:coverage": "node scripts/run-coverage.cjs",
     "test:audit": "npm audit --omit=dev --registry=https://registry.npmjs.org/",
     test: "npm run build && npm run build:tests && node test/run-tests.cjs",
-    "type-check": "npm run build && tsc -p tsconfig.json --noEmit && tsd --files test/types/root-import.test-d.ts --files test/types/cache-usage.test-d.ts --files test/types/model-usage.test-d.ts --files test/types/pool-usage.test-d.ts --files test/types/sync-usage.test-d.ts --files test/types/slow-query-log-usage.test-d.ts --files test/types/saga-usage.test-d.ts --files test/types/data-tasks-usage.test-d.ts --files test/types/search-index-usage.test-d.ts",
+    "type-check": "npm run build && tsc -p tsconfig.json --noEmit && tsd --files test/types/root-import.test-d.ts --files test/types/cache-usage.test-d.ts --files test/types/model-usage.test-d.ts --files test/types/pool-usage.test-d.ts --files test/types/sync-usage.test-d.ts --files test/types/slow-query-log-usage.test-d.ts --files test/types/saga-usage.test-d.ts --files test/types/data-tasks-usage.test-d.ts --files test/types/search-index-usage.test-d.ts --files test/types/gridfs-usage.test-d.ts",
     "check:test-language": "node scripts/check-test-language.cjs",
     "check:docs-examples": "node scripts/validation/check-doc-example-matrix.cjs",
     "check:release-candidate": "node scripts/check-release-candidate.cjs",