taurusdb-core 0.5.0-rc.7 → 0.5.0-rc.9

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
@@ -24,7 +24,7 @@ const SecuritySchema = z
24
24
  .object({
25
25
  dynamicTargetsEnabled: z.boolean().default(true),
26
26
  recycleBinRestoreEnabled: z.boolean().default(true),
27
- requireTls: z.boolean().default(true),
27
+ requireTls: z.boolean().default(false),
28
28
  approvalSecretPath: z.string().min(1).optional(),
29
29
  approvalTtlSeconds: z.number().int().positive().max(3600).default(300),
30
30
  credentialIdleTtlMinutes: z.number().int().positive().max(30).default(30),
@@ -20,12 +20,12 @@ async function resolveTls(tls, secretResolver, host, requireTls) {
20
20
  if (requireTls && tls?.enabled === false) {
21
21
  throw new ConnectionPoolError("TLS is required by server policy and cannot be disabled for this datasource.");
22
22
  }
23
- if (requireTls && tls?.rejectUnauthorized === false) {
24
- throw new ConnectionPoolError("TLS certificate verification is required by server policy.");
25
- }
26
23
  const resolved = {
27
24
  enabled: tls?.enabled ?? true,
28
- rejectUnauthorized: tls?.rejectUnauthorized ?? true,
25
+ // Dynamic cloud targets are commonly bound by public IP while the server
26
+ // certificate is issued to a DNS name. When TLS is explicitly enabled,
27
+ // make CA/hostname verification a separate profile opt-in.
28
+ rejectUnauthorized: tls?.rejectUnauthorized ?? false,
29
29
  servername: tls?.servername ?? (isIP(host) === 0 ? host : undefined),
30
30
  };
31
31
  if (tls?.ca) {
@@ -10,6 +10,11 @@ export declare const ErrorCode: {
10
10
  readonly QUERY_TIMEOUT: "QUERY_TIMEOUT";
11
11
  readonly QUERY_CANCELLED: "QUERY_CANCELLED";
12
12
  readonly CONNECTION_FAILED: "CONNECTION_FAILED";
13
+ readonly DB_ENDPOINT_UNREACHABLE: "DB_ENDPOINT_UNREACHABLE";
14
+ readonly DB_CONNECTION_REFUSED: "DB_CONNECTION_REFUSED";
15
+ readonly DB_TLS_FAILED: "DB_TLS_FAILED";
16
+ readonly DB_AUTH_FAILED: "DB_AUTH_FAILED";
17
+ readonly DB_VALIDATION_TIMEOUT: "DB_VALIDATION_TIMEOUT";
13
18
  readonly RESULT_TOO_LARGE: "RESULT_TOO_LARGE";
14
19
  readonly AUDIT_FAILED: "AUDIT_FAILED";
15
20
  readonly SERVER_BUSY: "SERVER_BUSY";
@@ -9,6 +9,11 @@ export const ErrorCode = {
9
9
  QUERY_TIMEOUT: "QUERY_TIMEOUT",
10
10
  QUERY_CANCELLED: "QUERY_CANCELLED",
11
11
  CONNECTION_FAILED: "CONNECTION_FAILED",
12
+ DB_ENDPOINT_UNREACHABLE: "DB_ENDPOINT_UNREACHABLE",
13
+ DB_CONNECTION_REFUSED: "DB_CONNECTION_REFUSED",
14
+ DB_TLS_FAILED: "DB_TLS_FAILED",
15
+ DB_AUTH_FAILED: "DB_AUTH_FAILED",
16
+ DB_VALIDATION_TIMEOUT: "DB_VALIDATION_TIMEOUT",
12
17
  RESULT_TOO_LARGE: "RESULT_TOO_LARGE",
13
18
  AUDIT_FAILED: "AUDIT_FAILED",
14
19
  SERVER_BUSY: "SERVER_BUSY",
package/package.json CHANGED
@@ -1,6 +1,6 @@
1
1
  {
2
2
  "name": "taurusdb-core",
3
- "version": "0.5.0-rc.7",
3
+ "version": "0.5.0-rc.9",
4
4
  "description": "Shared TaurusDB data-plane engine for schema, SQL execution, guardrails, and diagnostics.",
5
5
  "license": "MIT",
6
6
  "repository": {