@noy-db/hub 0.3.0-pre.10 → 0.3.0-pre.11

package/dist/with-store/store-middleware.d.ts

@@ -0,0 +1,189 @@
+/**
+ * Store middleware — composable interceptors for NoydbStore.
+ *
+ * ```ts
+ * const resilient = wrapStore(
+ *   dynamo({ table: 'myapp' }),
+ *   withRetry({ maxRetries: 3 }),
+ *   withLogging({ level: 'debug' }),
+ *   withCache({ ttlMs: 60_000 }),
+ * )
+ * ```
+ *
+ * Each middleware is `(next: NoydbStore) => NoydbStore`. They compose
+ * left-to-right: first middleware is outermost (processes requests first,
+ * responses last).
+ *
+ * @module
+ */
+import type { NoydbStore } from '../kernel/types.js';
+/**
+ * A store middleware function.
+ *
+ * Takes the next store in the chain and returns a wrapped store. Middlewares
+ * compose left-to-right via `wrapStore()`: the first argument is outermost
+ * (first to intercept requests, last to process responses).
+ *
+ * ```ts
+ * const mw: StoreMiddleware = (next) => ({
+ *   ...next,
+ *   async get(vault, collection, id) {
+ *     console.log('get', id)
+ *     return next.get(vault, collection, id)
+ *   },
+ * })
+ * ```
+ */
+export type StoreMiddleware = (next: NoydbStore) => NoydbStore;
+/**
+ * Wrap a store with one or more middlewares. Middlewares compose left-to-right.
+ */
+export declare function wrapStore(store: NoydbStore, ...middlewares: StoreMiddleware[]): NoydbStore;
+/** Options for `withRetry()`. */
+export interface RetryOptions {
+    /** Maximum retry attempts. Default: 3. */
+    maxRetries?: number;
+    /** Base backoff delay in ms. Default: 500. */
+    backoffMs?: number;
+    /** Jitter factor (0-1). Adds random delay up to `backoffMs * jitter`. Default: 0.3. */
+    jitter?: number;
+    /** Only retry on these error codes. Default: retry all errors. */
+    retryOn?: string[];
+}
+/**
+ * Middleware that retries failed store operations with exponential backoff
+ * and optional jitter. Useful for transient network errors on DynamoDB/S3.
+ *
+ * ```ts
+ * wrapStore(dynamo({ table: 'myapp' }), withRetry({ maxRetries: 5, retryOn: ['NETWORK_ERROR'] }))
+ * ```
+ */
+export declare function withRetry(opts?: RetryOptions): StoreMiddleware;
+/** Log level for `withLogging()`. Maps to standard console method names. */
+export type LogLevel = 'debug' | 'info' | 'warn' | 'error';
+/** Options for `withLogging()`. */
+export interface LoggingOptions {
+    /** Minimum log level. Default: 'info'. */
+    level?: LogLevel;
+    /** Custom logger. Default: console. */
+    logger?: {
+        debug(msg: string, ...args: unknown[]): void;
+        info(msg: string, ...args: unknown[]): void;
+        warn(msg: string, ...args: unknown[]): void;
+        error(msg: string, ...args: unknown[]): void;
+    };
+    /** Log the data payload (envelope contents). Default: false (privacy). */
+    logData?: boolean;
+}
+/**
+ * Middleware that logs every store operation with its method name, arguments,
+ * and elapsed duration. Privacy-safe by default: envelope payloads are not
+ * logged unless `logData: true` is set.
+ */
+export declare function withLogging(opts?: LoggingOptions): StoreMiddleware;
+/**
+ * Data emitted to `MetricsOptions.onOperation` after every store call.
+ *
+ * Carries method name, vault/collection/id context, elapsed duration,
+ * and success/failure status. Wire this into your metrics pipeline
+ * (DataDog, Prometheus, CloudWatch) to get per-operation latency histograms.
+ */
+export interface StoreOperation {
+    method: 'get' | 'put' | 'delete' | 'list' | 'loadAll' | 'saveAll';
+    vault: string;
+    collection?: string;
+    id?: string;
+    durationMs: number;
+    success: boolean;
+    error?: Error;
+}
+/** Options for `withMetrics()`. */
+export interface MetricsOptions {
+    /** Called after every store operation. */
+    onOperation: (op: StoreOperation) => void;
+}
+/**
+ * Middleware that calls `onOperation` after every store method with timing
+ * and success/failure data. Designed for low-overhead integration with
+ * metrics systems — the callback is synchronous and fire-and-forget.
+ */
+export declare function withMetrics(opts: MetricsOptions): StoreMiddleware;
+/**
+ * Options for `withCircuitBreaker()`.
+ *
+ * The circuit breaker moves through three states:
+ * - `closed`: normal operation.
+ * - `open`: store is failing; all calls return fallback values immediately.
+ * - `half-open`: one probe call after `resetTimeoutMs` — success closes, failure re-opens.
+ */
+export interface CircuitBreakerOptions {
+    /** Number of consecutive failures before opening the circuit. Default: 5. */
+    failureThreshold?: number;
+    /** Time in ms before attempting to half-open the circuit. Default: 30_000. */
+    resetTimeoutMs?: number;
+    /** Called when the circuit opens (store becomes unavailable). */
+    onOpen?: () => void;
+    /** Called when the circuit closes (store recovers). */
+    onClose?: () => void;
+}
+/**
+ * Middleware that implements the circuit-breaker pattern.
+ *
+ * When the wrapped store fails `failureThreshold` consecutive times, the
+ * circuit opens: subsequent calls return safe fallback values (`null`, `[]`,
+ * `{}`) without hitting the store. After `resetTimeoutMs` the circuit
+ * half-opens and allows one probe — success closes the circuit, failure
+ * keeps it open. Pair with `withRetry` to handle transient errors before
+ * they trip the circuit.
+ */
+export declare function withCircuitBreaker(opts?: CircuitBreakerOptions): StoreMiddleware;
+/**
+ * Options for `withCache()`.
+ *
+ * The cache is a read-through LRU that caches individual record fetches
+ * (`get`). Writes (`put`, `delete`) invalidate the relevant cache entry
+ * immediately. `list`, `loadAll`, and `saveAll` bypass the cache.
+ *
+ * Named `StoreCacheOptions` to distinguish from `CacheOptions` in
+ * `@noy-db/hub/collection`, which controls the in-memory decrypted-record LRU.
+ */
+export interface StoreCacheOptions {
+    /** Maximum cached entries. Default: 500. */
+    maxEntries?: number;
+    /** Cache TTL in ms. Default: 60_000 (1 minute). 0 = no expiry. */
+    ttlMs?: number;
+}
+/**
+ * Middleware that adds a read-through LRU cache for `get()` calls.
+ *
+ * Reduces latency for frequently-read records (e.g. lookup tables, user
+ * profiles) by serving repeat reads from memory. Because NOYDB records are
+ * encrypted at rest, caching envelopes is safe — the cache holds ciphertext,
+ * not plaintext. For write-heavy workloads, the cache provides little benefit
+ * and should be omitted to avoid the invalidation overhead.
+ */
+export declare function withCache(opts?: StoreCacheOptions): StoreMiddleware;
+export interface HealthCheckOptions {
+    /** Ping interval in ms. Default: 30_000. */
+    checkIntervalMs?: number;
+    /** Suspend after N consecutive ping failures. Default: 3. */
+    suspendAfterFailures?: number;
+    /** Resume after N consecutive ping successes. Default: 1. */
+    resumeAfterSuccess?: number;
+    /** Called when the store is auto-suspended. */
+    onSuspend?: () => void;
+    /** Called when the store is auto-resumed. */
+    onResume?: () => void;
+    /**
+     * Custom health check. Default: calls `store.ping()` if available,
+     * otherwise attempts a `list()` on a sentinel collection.
+     */
+    check?: () => Promise<boolean>;
+}
+/**
+ * Auto-suspends a store when health checks fail, auto-resumes when they recover.
+ *
+ * When suspended, `get` returns null, `put`/`delete` are no-ops, `list` returns [].
+ * This is identical to the `NullStore` behavior from `routeStore.suspend()`.
+ */
+export declare function withHealthCheck(opts?: HealthCheckOptions): StoreMiddleware;

package/dist/withdraw-accessible-CLMZEHQT.js

@@ -0,0 +1,28 @@
+import {
+  FROZEN_SNAPSHOTS_COLLECTION,
+  freezeAndDeleteClosure,
+  freezeSnapshotOnly,
+  randomId,
+  withdrawAccessibleData
+} from "./chunk-7NS43EXZ.js";
+import "./chunk-BCYQA5BK.js";
+import "./chunk-K62IUKOD.js";
+import "./chunk-5XIPOCQC.js";
+import "./chunk-QQJXBZCO.js";
+import "./chunk-FQQF23MC.js";
+import "./chunk-MSPNM2OM.js";
+import "./chunk-SYMS4546.js";
+import "./chunk-X6CMGUAG.js";
+import "./chunk-LP7BEXCT.js";
+import "./chunk-HUS3J5WM.js";
+import "./chunk-CKZW6P5V.js";
+import "./chunk-FH542DDY.js";
+import "./chunk-PZ5AY32C.js";
+export {
+  FROZEN_SNAPSHOTS_COLLECTION,
+  freezeAndDeleteClosure,
+  freezeSnapshotOnly,
+  randomId,
+  withdrawAccessibleData
+};
+//# sourceMappingURL=withdraw-accessible-CLMZEHQT.js.map

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@noy-db/hub",
-  "version": "0.3.0-pre.10",
+  "version": "0.3.0-pre.11",
   "description": "Zero-knowledge, offline-first, encrypted document store — core library with AES-256-GCM, PBKDF2, multi-user keyring, and sync engine",
   "license": "MIT",
   "author": "vLannaAi <vicio@lanna.ai>",
@@ -21,159 +21,163 @@
       "default": "./dist/index.js"
     },
     "./i18n": {
-      "types": "./dist/i18n/index.d.ts",
+      "types": "./dist/via/i18n/index.d.ts",
       "default": "./dist/i18n/index.js"
     },
     "./team": {
-      "types": "./dist/team/index.d.ts",
+      "types": "./dist/with-party/team/index.d.ts",
       "default": "./dist/team/index.js"
     },
+    "./broker": {
+      "types": "./dist/with-party/broker/index.d.ts",
+      "default": "./dist/broker/index.js"
+    },
     "./session": {
-      "types": "./dist/session/index.d.ts",
+      "types": "./dist/with-party/session/index.d.ts",
       "default": "./dist/session/index.js"
     },
     "./history": {
-      "types": "./dist/history/index.d.ts",
+      "types": "./dist/with-commit/history/index.d.ts",
       "default": "./dist/history/index.js"
     },
     "./forget": {
-      "types": "./dist/forget/index.d.ts",
+      "types": "./dist/with-audit/forget/index.d.ts",
       "default": "./dist/forget/index.js"
     },
     "./sealed-record": {
-      "types": "./dist/sealed-record/index.d.ts",
+      "types": "./dist/with-audit/sealed-record/index.d.ts",
       "default": "./dist/sealed-record/index.js"
     },
     "./query": {
-      "types": "./dist/query/index.d.ts",
+      "types": "./dist/kernel/query/index.d.ts",
       "default": "./dist/query/index.js"
     },
     "./blobs": {
-      "types": "./dist/blobs/index.d.ts",
+      "types": "./dist/via/blob/index.d.ts",
       "default": "./dist/blobs/index.js"
     },
     "./indexing": {
-      "types": "./dist/indexing/index.d.ts",
+      "types": "./dist/with-lookup/indexing/index.d.ts",
       "default": "./dist/indexing/index.js"
     },
     "./lazy": {
-      "types": "./dist/lazy/index.d.ts",
+      "types": "./dist/with-store/lazy/index.d.ts",
       "default": "./dist/lazy/index.js"
     },
     "./aggregate": {
-      "types": "./dist/aggregate/index.d.ts",
+      "types": "./dist/with-lookup/aggregate/index.d.ts",
       "default": "./dist/aggregate/index.js"
     },
     "./crdt": {
-      "types": "./dist/crdt/index.d.ts",
+      "types": "./dist/with-commit/crdt/index.d.ts",
       "default": "./dist/crdt/index.js"
     },
     "./bundle": {
-      "types": "./dist/bundle/index.d.ts",
+      "types": "./dist/legacy/bundle.d.ts",
       "default": "./dist/bundle/index.js"
     },
     "./consent": {
-      "types": "./dist/consent/index.d.ts",
+      "types": "./dist/with-audit/consent/index.d.ts",
       "default": "./dist/consent/index.js"
     },
     "./periods": {
-      "types": "./dist/periods/index.d.ts",
+      "types": "./dist/with-audit/periods/index.d.ts",
       "default": "./dist/periods/index.js"
     },
     "./guards": {
-      "types": "./dist/guards/index.d.ts",
+      "types": "./dist/with-audit/guards/index.d.ts",
       "default": "./dist/guards/index.js"
     },
     "./shadow": {
-      "types": "./dist/shadow/index.d.ts",
+      "types": "./dist/with-fork/shadow/index.d.ts",
       "default": "./dist/shadow/index.js"
     },
     "./snapshots": {
-      "types": "./dist/snapshots/index.d.ts",
+      "types": "./dist/with-fork/snapshots/index.d.ts",
       "default": "./dist/snapshots/index.js"
     },
     "./tx": {
-      "types": "./dist/tx/index.d.ts",
+      "types": "./dist/with-commit/tx/index.d.ts",
       "default": "./dist/tx/index.js"
     },
     "./derivations": {
-      "types": "./dist/derivations/index.d.ts",
+      "types": "./dist/with-formula/derivations/index.d.ts",
       "default": "./dist/derivations/index.js"
     },
     "./materialized-views": {
-      "types": "./dist/materialized-views/index.d.ts",
+      "types": "./dist/with-formula/materialized-views/index.d.ts",
       "default": "./dist/materialized-views/index.js"
     },
     "./overlay-views": {
-      "types": "./dist/overlay-views/index.d.ts",
+      "types": "./dist/with-formula/overlay-views/index.d.ts",
       "default": "./dist/overlay-views/index.js"
     },
     "./sync": {
-      "types": "./dist/sync/index.d.ts",
+      "types": "./dist/with-party/sync/index.d.ts",
       "default": "./dist/sync/index.js"
     },
     "./util": {
-      "types": "./dist/util/index.d.ts",
+      "types": "./dist/kernel/util/index.d.ts",
       "default": "./dist/util/index.js"
     },
     "./attestation": {
-      "types": "./dist/attestation/index.d.ts",
+      "types": "./dist/with-audit/attestation/index.d.ts",
       "default": "./dist/attestation/index.js"
     },
     "./classified": {
-      "types": "./dist/classified/index.d.ts",
+      "types": "./dist/via/classified/index.d.ts",
       "default": "./dist/classified/index.js"
     },
     "./satellites": {
-      "types": "./dist/satellites/index.d.ts",
+      "types": "./dist/with-shape/satellites/index.d.ts",
       "default": "./dist/satellites/index.js"
     },
     "./tiers": {
-      "types": "./dist/tiers/index.d.ts",
+      "types": "./dist/with-audit/tiers/index.d.ts",
       "default": "./dist/tiers/index.js"
     },
     "./portability": {
-      "types": "./dist/portability/index.d.ts",
+      "types": "./dist/with-audit/portability/index.d.ts",
       "default": "./dist/portability/index.js"
     },
     "./cargo": {
-      "types": "./dist/cargo/index.d.ts",
+      "types": "./dist/with-cargo/index.d.ts",
       "default": "./dist/cargo/index.js"
     },
     "./pod": {
-      "types": "./dist/pod/index.d.ts",
+      "types": "./dist/with-pod/index.d.ts",
       "default": "./dist/pod/index.js"
     },
     "./to": {
-      "types": "./dist/to/index.d.ts",
+      "types": "./dist/port/to/index.d.ts",
       "default": "./dist/to/index.js"
     },
     "./with": {
-      "types": "./dist/with/index.d.ts",
+      "types": "./dist/port/with/index.d.ts",
       "default": "./dist/with/index.js"
     },
     "./ui": {
-      "types": "./dist/ui/index.d.ts",
+      "types": "./dist/port/ui/index.d.ts",
       "default": "./dist/ui/index.js"
     },
     "./by": {
-      "types": "./dist/by/index.d.ts",
+      "types": "./dist/port/by/index.d.ts",
       "default": "./dist/by/index.js"
     },
     "./on": {
-      "types": "./dist/on/index.d.ts",
+      "types": "./dist/port/on/index.d.ts",
       "default": "./dist/on/index.js"
     },
     "./at": {
-      "types": "./dist/at/index.d.ts",
+      "types": "./dist/port/at/index.d.ts",
       "default": "./dist/at/index.js"
     },
     "./in": {
-      "types": "./dist/in/index.d.ts",
+      "types": "./dist/port/in/index.d.ts",
       "default": "./dist/in/index.js"
     },
     "./as": {
-      "types": "./dist/as/index.d.ts",
+      "types": "./dist/port/as/index.d.ts",
       "default": "./dist/as/index.js"
     }
   },
@@ -188,14 +192,14 @@
     "node": ">=22.0.0"
   },
   "dependencies": {
-    "@noy-db/attestation": "0.3.0-pre.10"
+    "@noy-db/attestation": "0.3.0-pre.11"
   },
   "devDependencies": {
     "@types/node": "^22.0.0",
     "esbuild": "^0.25.0",
     "zod": "^4.0.0",
     "zod-to-json-schema": "^3.25.2",
-    "@noy-db/on-shamir": "0.3.0-pre.10"
+    "@noy-db/on-shamir": "0.3.0-pre.11"
   },
   "peerDependencies": {
     "zod-to-json-schema": "^3.25.0"
@@ -227,7 +231,7 @@
     "tag": "latest"
   },
   "scripts": {
-    "build": "node --max-old-space-size=12288 ../../node_modules/tsup/dist/cli-default.js",
+    "build": "node scripts/build.mjs",
     "test": "vitest run",
     "lint": "eslint src/",
     "typecheck": "tsc --noEmit && tsc --noEmit -p tsconfig.typetest.json && tsc --noEmit -p tsconfig.tests.json",

package/dist/aggregate/index.d.ts

@@ -1,41 +0,0 @@
-import { a9 as AggregateStrategy } from '../index-DjWbxsjb.js';
-export { aa as AggregateResult, ab as AggregateSpec, ac as Aggregation, ad as AggregationUpstream, ae as GROUPBY_MAX_CARDINALITY, af as GROUPBY_WARN_CARDINALITY, ag as GroupedAggregation, ah as GroupedQuery, ai as GroupedQueryN, aj as GroupedRow, ak as GroupedRowN, al as LiveAggregation, am as Reducer, an as ReducerBuilder, ao as ReducerOptions, ap as avg, aq as buildLiveAggregation, ar as count, as as groupAndReduce, at as max, au as min, av as moneyMax, aw as moneyMin, ax as moneySum, ay as reduceRecords, az as reducerBuilder, aA as resetGroupByWarnings, aB as sum } from '../index-DjWbxsjb.js';
-import '../subject-index-CyOgGMJL.js';
-import '../index-B9QdHytu.js';
-import '@noy-db/attestation';
-
-/**
- * Active aggregate strategy factory. Calling `withAggregate()` returns
- * an `AggregateStrategy` whose methods construct real `Aggregation` /
- * `GroupedQuery` instances and run the streaming reducer protocol.
- *
- * This module is only reachable through the `@noy-db/hub/aggregate`
- * subpath — a consumer that never imports the subpath ships none of
- * this (ESM tree-shaking + hub's `"sideEffects": false`).
- */
-
-/**
- * Build the default aggregate strategy. Pass into
- * `createNoydb({ aggregateStrategy: withAggregate() })` to light up
- * `.aggregate()` and `.groupBy()` on `Query` and `ScanBuilder`.
- *
- * @example
- * ```ts
- * import { createNoydb } from '@noy-db/hub'
- * import { withAggregate, sum, count } from '@noy-db/hub/aggregate'
- *
- * const db = await createNoydb({
- *   store, user, secret,
- *   aggregateStrategy: withAggregate(),
- * })
- *
- * const totals = invoices.query()
- *   .where('status', '==', 'paid')
- *   .groupBy('clientId')
- *   .aggregate({ amount: sum('amount'), n: count() })
- *   .run()
- * ```
- */
-declare function withAggregate(): AggregateStrategy;
-
-export { AggregateStrategy, withAggregate };

package/dist/api-TX2EX2FX.js

@@ -1,20 +0,0 @@
-import {
-  UserApi,
-  createUserApi
-} from "./chunk-BKARNZJN.js";
-import "./chunk-OVYRLHPE.js";
-import "./chunk-MCHVVJIA.js";
-import "./chunk-QA2KUPCP.js";
-import "./chunk-2OV5NVE7.js";
-import "./chunk-VEPTFUJY.js";
-import "./chunk-HYR4WZZ3.js";
-import "./chunk-LP7BEXCT.js";
-import "./chunk-3OPY6MK2.js";
-import "./chunk-YN5IAHN6.js";
-import "./chunk-S7VFUQM2.js";
-import "./chunk-PZ5AY32C.js";
-export {
-  UserApi,
-  createUserApi
-};
-//# sourceMappingURL=api-TX2EX2FX.js.map

package/dist/as/index.d.ts

@@ -1,6 +0,0 @@
-export { V as VaultDiff, d as diffVault } from '../vault-diff-Z2DUayMe.js';
-export { N as NoydbPodHeader, W as WritePodOptions, r as readPod, a as readPodHeader, w as writePod } from '../bundle-D6GxiUfq.js';
-export { V as Vault } from '../index-DjWbxsjb.js';
-import '../subject-index-CyOgGMJL.js';
-import '../index-B9QdHytu.js';
-import '@noy-db/attestation';

package/dist/at/index.d.ts

@@ -1,4 +0,0 @@
-export { dn as SealingKeyProvider } from '../index-DjWbxsjb.js';
-import '../subject-index-CyOgGMJL.js';
-import '../index-B9QdHytu.js';
-import '@noy-db/attestation';

package/dist/attestation/index.d.ts

@@ -1,19 +0,0 @@
-import { dF as AttestationStrategy } from '../index-DjWbxsjb.js';
-export { dG as AttestationError, dH as AttestationNotEnabledError, dI as IssueArgs, dJ as IssueContext, dK as IssueResult, dL as NO_ATTESTATION, dM as RevokeContext, dN as getRevokedDocIdsCore, dO as issueAttestationCore, dP as publishRevocationListCore, dQ as revokeDocCore, dR as unrevokeDocCore } from '../index-DjWbxsjb.js';
-export { AttestationFieldSchema, QrPayload, RevocationList, VerifyInput, VerifyResult, decodeQr, isRevoked, signRevocationList, verifyAttestation, verifyRevocationList } from '@noy-db/attestation';
-import '../subject-index-CyOgGMJL.js';
-import '../index-B9QdHytu.js';
-
-/**
- * Enable the attestation capability.
- * Pass to `createNoydb({ attestationStrategy: withAttestation() })` to make the
- * vault's `issueAttestation` / `getDocumentSigningPublicKey` / `revokeAttestation`
- * / `unrevokeAttestation` / `getRevokedDocIds` / `publishRevocationList` methods
- * live. The issue/revoke/signer engines are dynamically imported here, so they
- * stay out of the floor bundle until opted in.
- */
-declare function withAttestation(): AttestationStrategy;
-
-declare const ATTESTATIONS_COLLECTION = "_attestations";
-
-export { ATTESTATIONS_COLLECTION, AttestationStrategy, withAttestation };