@noy-db/to-aws-s3 0.1.0-pre.3

package/LICENSE

@@ -0,0 +1,21 @@
+MIT License
+
+Copyright (c) 2026 vLannaAi
+
+Permission is hereby granted, free of charge, to any person obtaining a copy
+of this software and associated documentation files (the "Software"), to deal
+in the Software without restriction, including without limitation the rights
+to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
+copies of the Software, and to permit persons to whom the Software is
+furnished to do so, subject to the following conditions:
+
+The above copyright notice and this permission notice shall be included in all
+copies or substantial portions of the Software.
+
+THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
+IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
+FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
+AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
+LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
+OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE
+SOFTWARE.

package/README.md

@@ -0,0 +1,41 @@
+# @noy-db/to-aws-s3
+
+> AWS S3 adapter for [noy-db](https://github.com/vLannaAi/noy-db) — encrypted object storage with zero-knowledge cloud sync.
+
+[![npm](https://img.shields.io/npm/v/@noy-db/to-aws-s3.svg)](https://www.npmjs.com/package/@noy-db/to-aws-s3)
+
+## Install
+
+```bash
+pnpm add @noy-db/hub @noy-db/to-aws-s3 @aws-sdk/client-s3
+```
+
+`@aws-sdk/client-s3` is a peer dependency — install it in your app.
+
+## Usage
+
+```ts
+import { createNoydb } from '@noy-db/hub'
+import { s3 } from '@noy-db/to-aws-s3'
+import { S3Client } from '@aws-sdk/client-s3'
+
+const client = new S3Client({ region: 'ap-southeast-1' })
+
+const db = await createNoydb({
+  adapter: s3({ client, bucket: 'noydb-prod', prefix: 'tenant-a/' }),
+  userId: 'alice',
+  passphrase: process.env.NOYDB_PASSPHRASE!,
+})
+```
+
+Each record becomes an S3 object containing only a ciphertext envelope. S3 never sees plaintext — even with full bucket access, an attacker learns nothing without the user's passphrase.
+
+Best suited for:
+
+- Infrequent-access archival with strong privacy guarantees
+- Cold storage of audit trails and backups
+- Lower-cost alternative to DynamoDB for small teams
+
+## License
+
+MIT © vLannaAi — see the [noy-db repo](https://github.com/vLannaAi/noy-db) for full documentation.

package/dist/index.cjs

@@ -0,0 +1,174 @@
+"use strict";
+var __defProp = Object.defineProperty;
+var __getOwnPropDesc = Object.getOwnPropertyDescriptor;
+var __getOwnPropNames = Object.getOwnPropertyNames;
+var __hasOwnProp = Object.prototype.hasOwnProperty;
+var __export = (target, all) => {
+  for (var name in all)
+    __defProp(target, name, { get: all[name], enumerable: true });
+};
+var __copyProps = (to, from, except, desc) => {
+  if (from && typeof from === "object" || typeof from === "function") {
+    for (let key of __getOwnPropNames(from))
+      if (!__hasOwnProp.call(to, key) && key !== except)
+        __defProp(to, key, { get: () => from[key], enumerable: !(desc = __getOwnPropDesc(from, key)) || desc.enumerable });
+  }
+  return to;
+};
+var __toCommonJS = (mod) => __copyProps(__defProp({}, "__esModule", { value: true }), mod);
+
+// src/index.ts
+var index_exports = {};
+__export(index_exports, {
+  s3: () => s3
+});
+module.exports = __toCommonJS(index_exports);
+var import_hub = require("@noy-db/hub");
+var import_client_s3 = require("@aws-sdk/client-s3");
+function s3(options) {
+  const { bucket, prefix = "" } = options;
+  const client = options.client ?? new import_client_s3.S3Client({
+    ...options.region ? { region: options.region } : {}
+  });
+  function objectKey(vault, collection, id) {
+    const parts = [vault, collection, `${id}.json`];
+    return prefix ? `${prefix}/${parts.join("/")}` : parts.join("/");
+  }
+  function collPrefix(vault, collection) {
+    const parts = [vault, collection, ""];
+    return prefix ? `${prefix}/${parts.join("/")}` : parts.join("/");
+  }
+  function compPrefix(vault) {
+    return prefix ? `${prefix}/${vault}/` : `${vault}/`;
+  }
+  return {
+    name: "s3",
+    async get(vault, collection, id) {
+      try {
+        const result = await client.send(new import_client_s3.GetObjectCommand({
+          Bucket: bucket,
+          Key: objectKey(vault, collection, id)
+        }));
+        if (!result.Body) return null;
+        const body = await result.Body.transformToString();
+        return JSON.parse(body);
+      } catch (err) {
+        if (err instanceof Error && (err.name === "NoSuchKey" || err.name === "NotFound")) {
+          return null;
+        }
+        throw err;
+      }
+    },
+    async put(vault, collection, id, envelope, expectedVersion) {
+      if (expectedVersion !== void 0) {
+        const existing = await this.get(vault, collection, id);
+        if (existing && existing._v !== expectedVersion) {
+          throw new import_hub.ConflictError(existing._v, `Version conflict: expected ${expectedVersion}, found ${existing._v}`);
+        }
+      }
+      await client.send(new import_client_s3.PutObjectCommand({
+        Bucket: bucket,
+        Key: objectKey(vault, collection, id),
+        Body: JSON.stringify(envelope),
+        ContentType: "application/json"
+      }));
+    },
+    async delete(vault, collection, id) {
+      await client.send(new import_client_s3.DeleteObjectCommand({
+        Bucket: bucket,
+        Key: objectKey(vault, collection, id)
+      }));
+    },
+    async list(vault, collection) {
+      const pfx = collPrefix(vault, collection);
+      const result = await client.send(new import_client_s3.ListObjectsV2Command({
+        Bucket: bucket,
+        Prefix: pfx
+      }));
+      return (result.Contents ?? []).map((obj) => obj.Key ?? "").filter((k) => k.endsWith(".json")).map((k) => k.slice(pfx.length, -5));
+    },
+    async loadAll(vault) {
+      const pfx = compPrefix(vault);
+      const listResult = await client.send(new import_client_s3.ListObjectsV2Command({
+        Bucket: bucket,
+        Prefix: pfx
+      }));
+      const snapshot = {};
+      for (const obj of listResult.Contents ?? []) {
+        const key = obj.Key ?? "";
+        if (!key.endsWith(".json")) continue;
+        const relativePath = key.slice(pfx.length);
+        const parts = relativePath.split("/");
+        if (parts.length !== 2) continue;
+        const collection = parts[0];
+        const id = parts[1].slice(0, -5);
+        if (collection.startsWith("_")) continue;
+        const getResult = await client.send(new import_client_s3.GetObjectCommand({
+          Bucket: bucket,
+          Key: key
+        }));
+        if (!getResult.Body) continue;
+        const body = await getResult.Body.transformToString();
+        if (!snapshot[collection]) snapshot[collection] = {};
+        snapshot[collection][id] = JSON.parse(body);
+      }
+      return snapshot;
+    },
+    async saveAll(vault, data) {
+      for (const [collection, records] of Object.entries(data)) {
+        for (const [id, envelope] of Object.entries(records)) {
+          await this.put(vault, collection, id, envelope);
+        }
+      }
+    },
+    async ping() {
+      try {
+        await client.send(new import_client_s3.HeadBucketCommand({ Bucket: bucket }));
+        return true;
+      } catch {
+        return false;
+      }
+    },
+    /**
+     * Paginate over a collection using S3's native `ContinuationToken`.
+     *
+     * Each page does:
+     *   1. ListObjectsV2 with MaxKeys = limit and the previous token
+     *   2. GetObject for every key on the page (in parallel)
+     *
+     * The 2-step pattern is necessary because S3 list responses don't
+     * include object bodies. For very large collections this is N+1 — but
+     * the parallel GETs amortize well, and consumers willing to pay for
+     * stronger pagination should use a different adapter (Dynamo).
+     */
+    async listPage(vault, collection, cursor, limit = 100) {
+      const pfx = collPrefix(vault, collection);
+      const listResult = await client.send(new import_client_s3.ListObjectsV2Command({
+        Bucket: bucket,
+        Prefix: pfx,
+        MaxKeys: limit,
+        ...cursor ? { ContinuationToken: cursor } : {}
+      }));
+      const keys = (listResult.Contents ?? []).map((obj) => obj.Key ?? "").filter((k) => k.endsWith(".json"));
+      const items = await Promise.all(keys.map(async (key) => {
+        const id = key.slice(pfx.length, -5);
+        const getResult = await client.send(new import_client_s3.GetObjectCommand({
+          Bucket: bucket,
+          Key: key
+        }));
+        if (!getResult.Body) return null;
+        const body = await getResult.Body.transformToString();
+        return { id, envelope: JSON.parse(body) };
+      }));
+      return {
+        items: items.filter((x) => x !== null),
+        nextCursor: listResult.IsTruncated && listResult.NextContinuationToken ? listResult.NextContinuationToken : null
+      };
+    }
+  };
+}
+// Annotate the CommonJS export names for ESM import in node:
+0 && (module.exports = {
+  s3
+});
+//# sourceMappingURL=index.cjs.map

package/dist/index.cjs.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../src/index.ts"],"sourcesContent":["/**\n * **@noy-db/to-aws-s3** — S3 object store for NOYDB.\n *\n * Each record is stored as a JSON object at\n * `{prefix}/{vault}/{collection}/{id}.json`. The `loadAll()` method uses\n * `ListObjectsV2` to enumerate keys then fetches them in parallel.\n *\n * ## When to use\n *\n * - **Blob / attachment storage** — pair with `@noy-db/to-aws-dynamo` via\n *   `routeStore({ default: dynamo(...), blobs: s3(...) })` to route\n *   encrypted binary chunks to S3.\n * - **Archive tier** — configure `routeStore` age-based tiering so old\n *   records migrate to S3 while hot records stay in DynamoDB.\n * - **Large vaults** — S3 has no item size limit, unlike DynamoDB's 400 KB cap.\n *\n * ## Limitations\n *\n * - **`casAtomic: false`** — S3 has no server-side conditional write on\n *   arbitrary metadata. Concurrent puts may result in last-write-wins.\n *   Use DynamoDB for records that need conflict-safe writes.\n * - **`loadAll()` is O(N) requests** — listing + fetching every object in a\n *   vault. Suitable for vaults up to ~10K records; beyond that, prefer\n *   DynamoDB for indexed stores and S3 only for append-heavy blob storage.\n *\n * ## IAM minimum permissions\n *\n * ```json\n * { \"Action\": [\"s3:GetObject\", \"s3:PutObject\", \"s3:DeleteObject\",\n *              \"s3:ListBucket\"] }\n * ```\n *\n * @packageDocumentation\n */\n\nimport type { NoydbStore, EncryptedEnvelope, VaultSnapshot } from '@noy-db/hub'\nimport { ConflictError } from '@noy-db/hub'\nimport {\n  S3Client,\n  GetObjectCommand,\n  PutObjectCommand,\n  DeleteObjectCommand,\n  ListObjectsV2Command,\n  HeadBucketCommand,\n} from '@aws-sdk/client-s3'\n\n/**\n * Options for `s3()`.\n *\n * Objects are stored at `{prefix}/{vault}/{collection}/{id}.json`.\n * `loadAll()` uses `ListObjectsV2` over the vault prefix followed by parallel\n * `GetObject` calls — suitable for vaults with up to ~10K records. For larger\n * vaults, use DynamoDB or pair with `routeStore` age-tiering so S3 only\n * holds archived records.\n *\n * Note: S3 does not support atomic CAS (`casAtomic: false`). Last-write-wins\n * on concurrent puts.\n */\nexport interface S3Options {\n  /** S3 bucket name. */\n  bucket: string\n  /** Key prefix within the bucket. Default: ''. */\n  prefix?: string\n  /** AWS region. Used only when `client` is not provided. Default: 'us-east-1'. */\n  region?: string\n  /**\n   * Pre-built S3Client from `@aws-sdk/client-s3`. If provided, the adapter\n   * uses this client directly and ignores `region`. Useful for apps that want\n   * to share a client across adapters or supply custom middleware.\n   */\n  client?: S3Client\n}\n\n/**\n * Create an S3 adapter.\n * Key scheme: `{prefix}/{vault}/{collection}/{id}.json`\n */\nexport function s3(options: S3Options): NoydbStore {\n  const { bucket, prefix = '' } = options\n\n  const client = options.client ?? new S3Client({\n    ...(options.region ? { region: options.region } : {}),\n  })\n\n  function objectKey(vault: string, collection: string, id: string): string {\n    const parts = [vault, collection, `${id}.json`]\n    return prefix ? `${prefix}/${parts.join('/')}` : parts.join('/')\n  }\n\n  function collPrefix(vault: string, collection: string): string {\n    const parts = [vault, collection, '']\n    return prefix ? `${prefix}/${parts.join('/')}` : parts.join('/')\n  }\n\n  function compPrefix(vault: string): string {\n    return prefix ? `${prefix}/${vault}/` : `${vault}/`\n  }\n\n  return {\n    name: 's3',\n\n    async get(vault, collection, id) {\n      try {\n        const result = await client.send(new GetObjectCommand({\n          Bucket: bucket,\n          Key: objectKey(vault, collection, id),\n        }))\n\n        if (!result.Body) return null\n        const body = await result.Body.transformToString()\n        return JSON.parse(body) as EncryptedEnvelope\n      } catch (err: unknown) {\n        if (err instanceof Error && (err.name === 'NoSuchKey' || err.name === 'NotFound')) {\n          return null\n        }\n        throw err\n      }\n    },\n\n    async put(vault, collection, id, envelope, expectedVersion) {\n      if (expectedVersion !== undefined) {\n        const existing = await this.get(vault, collection, id)\n        if (existing && existing._v !== expectedVersion) {\n          throw new ConflictError(existing._v, `Version conflict: expected ${expectedVersion}, found ${existing._v}`)\n        }\n      }\n\n      await client.send(new PutObjectCommand({\n        Bucket: bucket,\n        Key: objectKey(vault, collection, id),\n        Body: JSON.stringify(envelope),\n        ContentType: 'application/json',\n      }))\n    },\n\n    async delete(vault, collection, id) {\n      await client.send(new DeleteObjectCommand({\n        Bucket: bucket,\n        Key: objectKey(vault, collection, id),\n      }))\n    },\n\n    async list(vault, collection) {\n      const pfx = collPrefix(vault, collection)\n      const result = await client.send(new ListObjectsV2Command({\n        Bucket: bucket,\n        Prefix: pfx,\n      }))\n\n      return (result.Contents ?? [])\n        .map(obj => obj.Key ?? '')\n        .filter(k => k.endsWith('.json'))\n        .map(k => k.slice(pfx.length, -5))\n    },\n\n    async loadAll(vault) {\n      const pfx = compPrefix(vault)\n      const listResult = await client.send(new ListObjectsV2Command({\n        Bucket: bucket,\n        Prefix: pfx,\n      }))\n\n      const snapshot: VaultSnapshot = {}\n\n      for (const obj of listResult.Contents ?? []) {\n        const key = obj.Key ?? ''\n        if (!key.endsWith('.json')) continue\n\n        const relativePath = key.slice(pfx.length)\n        const parts = relativePath.split('/')\n        if (parts.length !== 2) continue\n\n        const collection = parts[0]!\n        const id = parts[1]!.slice(0, -5)\n        if (collection.startsWith('_')) continue\n\n        const getResult = await client.send(new GetObjectCommand({\n          Bucket: bucket,\n          Key: key,\n        }))\n\n        if (!getResult.Body) continue\n        const body = await getResult.Body.transformToString()\n\n        if (!snapshot[collection]) snapshot[collection] = {}\n        snapshot[collection][id] = JSON.parse(body) as EncryptedEnvelope\n      }\n\n      return snapshot\n    },\n\n    async saveAll(vault, data) {\n      for (const [collection, records] of Object.entries(data)) {\n        for (const [id, envelope] of Object.entries(records)) {\n          await this.put(vault, collection, id, envelope)\n        }\n      }\n    },\n\n    async ping() {\n      try {\n        await client.send(new HeadBucketCommand({ Bucket: bucket }))\n        return true\n      } catch {\n        return false\n      }\n    },\n\n    /**\n     * Paginate over a collection using S3's native `ContinuationToken`.\n     *\n     * Each page does:\n     *   1. ListObjectsV2 with MaxKeys = limit and the previous token\n     *   2. GetObject for every key on the page (in parallel)\n     *\n     * The 2-step pattern is necessary because S3 list responses don't\n     * include object bodies. For very large collections this is N+1 — but\n     * the parallel GETs amortize well, and consumers willing to pay for\n     * stronger pagination should use a different adapter (Dynamo).\n     */\n    async listPage(vault, collection, cursor, limit = 100) {\n      const pfx = collPrefix(vault, collection)\n      const listResult = await client.send(new ListObjectsV2Command({\n        Bucket: bucket,\n        Prefix: pfx,\n        MaxKeys: limit,\n        ...(cursor ? { ContinuationToken: cursor } : {}),\n      }))\n\n      const keys = (listResult.Contents ?? [])\n        .map(obj => obj.Key ?? '')\n        .filter(k => k.endsWith('.json'))\n\n      // Fetch every body in parallel — bounded by `limit` so we never\n      // fan out beyond the page size.\n      const items = await Promise.all(keys.map(async (key) => {\n        const id = key.slice(pfx.length, -5)\n        const getResult = await client.send(new GetObjectCommand({\n          Bucket: bucket,\n          Key: key,\n        }))\n        if (!getResult.Body) return null\n        const body = await getResult.Body.transformToString()\n        return { id, envelope: JSON.parse(body) as EncryptedEnvelope }\n      }))\n\n      return {\n        items: items.filter((x): x is { id: string; envelope: EncryptedEnvelope } => x !== null),\n        nextCursor: listResult.IsTruncated && listResult.NextContinuationToken\n          ? listResult.NextContinuationToken\n          : null,\n      }\n    },\n  }\n}\n"],"mappings":";;;;;;;;;;;;;;;;;;;;AAAA;AAAA;AAAA;AAAA;AAAA;AAoCA,iBAA8B;AAC9B,uBAOO;AAiCA,SAAS,GAAG,SAAgC;AACjD,QAAM,EAAE,QAAQ,SAAS,GAAG,IAAI;AAEhC,QAAM,SAAS,QAAQ,UAAU,IAAI,0BAAS;AAAA,IAC5C,GAAI,QAAQ,SAAS,EAAE,QAAQ,QAAQ,OAAO,IAAI,CAAC;AAAA,EACrD,CAAC;AAED,WAAS,UAAU,OAAe,YAAoB,IAAoB;AACxE,UAAM,QAAQ,CAAC,OAAO,YAAY,GAAG,EAAE,OAAO;AAC9C,WAAO,SAAS,GAAG,MAAM,IAAI,MAAM,KAAK,GAAG,CAAC,KAAK,MAAM,KAAK,GAAG;AAAA,EACjE;AAEA,WAAS,WAAW,OAAe,YAA4B;AAC7D,UAAM,QAAQ,CAAC,OAAO,YAAY,EAAE;AACpC,WAAO,SAAS,GAAG,MAAM,IAAI,MAAM,KAAK,GAAG,CAAC,KAAK,MAAM,KAAK,GAAG;AAAA,EACjE;AAEA,WAAS,WAAW,OAAuB;AACzC,WAAO,SAAS,GAAG,MAAM,IAAI,KAAK,MAAM,GAAG,KAAK;AAAA,EAClD;AAEA,SAAO;AAAA,IACL,MAAM;AAAA,IAEN,MAAM,IAAI,OAAO,YAAY,IAAI;AAC/B,UAAI;AACF,cAAM,SAAS,MAAM,OAAO,KAAK,IAAI,kCAAiB;AAAA,UACpD,QAAQ;AAAA,UACR,KAAK,UAAU,OAAO,YAAY,EAAE;AAAA,QACtC,CAAC,CAAC;AAEF,YAAI,CAAC,OAAO,KAAM,QAAO;AACzB,cAAM,OAAO,MAAM,OAAO,KAAK,kBAAkB;AACjD,eAAO,KAAK,MAAM,IAAI;AAAA,MACxB,SAAS,KAAc;AACrB,YAAI,eAAe,UAAU,IAAI,SAAS,eAAe,IAAI,SAAS,aAAa;AACjF,iBAAO;AAAA,QACT;AACA,cAAM;AAAA,MACR;AAAA,IACF;AAAA,IAEA,MAAM,IAAI,OAAO,YAAY,IAAI,UAAU,iBAAiB;AAC1D,UAAI,oBAAoB,QAAW;AACjC,cAAM,WAAW,MAAM,KAAK,IAAI,OAAO,YAAY,EAAE;AACrD,YAAI,YAAY,SAAS,OAAO,iBAAiB;AAC/C,gBAAM,IAAI,yBAAc,SAAS,IAAI,8BAA8B,eAAe,WAAW,SAAS,EAAE,EAAE;AAAA,QAC5G;AAAA,MACF;AAEA,YAAM,OAAO,KAAK,IAAI,kCAAiB;AAAA,QACrC,QAAQ;AAAA,QACR,KAAK,UAAU,OAAO,YAAY,EAAE;AAAA,QACpC,MAAM,KAAK,UAAU,QAAQ;AAAA,QAC7B,aAAa;AAAA,MACf,CAAC,CAAC;AAAA,IACJ;AAAA,IAEA,MAAM,OAAO,OAAO,YAAY,IAAI;AAClC,YAAM,OAAO,KAAK,IAAI,qCAAoB;AAAA,QACxC,QAAQ;AAAA,QACR,KAAK,UAAU,OAAO,YAAY,EAAE;AAAA,MACtC,CAAC,CAAC;AAAA,IACJ;AAAA,IAEA,MAAM,KAAK,OAAO,YAAY;AAC5B,YAAM,MAAM,WAAW,OAAO,UAAU;AACxC,YAAM,SAAS,MAAM,OAAO,KAAK,IAAI,sCAAqB;AAAA,QACxD,QAAQ;AAAA,QACR,QAAQ;AAAA,MACV,CAAC,CAAC;AAEF,cAAQ,OAAO,YAAY,CAAC,GACzB,IAAI,SAAO,IAAI,OAAO,EAAE,EACxB,OAAO,OAAK,EAAE,SAAS,OAAO,CAAC,EAC/B,IAAI,OAAK,EAAE,MAAM,IAAI,QAAQ,EAAE,CAAC;AAAA,IACrC;AAAA,IAEA,MAAM,QAAQ,OAAO;AACnB,YAAM,MAAM,WAAW,KAAK;AAC5B,YAAM,aAAa,MAAM,OAAO,KAAK,IAAI,sCAAqB;AAAA,QAC5D,QAAQ;AAAA,QACR,QAAQ;AAAA,MACV,CAAC,CAAC;AAEF,YAAM,WAA0B,CAAC;AAEjC,iBAAW,OAAO,WAAW,YAAY,CAAC,GAAG;AAC3C,cAAM,MAAM,IAAI,OAAO;AACvB,YAAI,CAAC,IAAI,SAAS,OAAO,EAAG;AAE5B,cAAM,eAAe,IAAI,MAAM,IAAI,MAAM;AACzC,cAAM,QAAQ,aAAa,MAAM,GAAG;AACpC,YAAI,MAAM,WAAW,EAAG;AAExB,cAAM,aAAa,MAAM,CAAC;AAC1B,cAAM,KAAK,MAAM,CAAC,EAAG,MAAM,GAAG,EAAE;AAChC,YAAI,WAAW,WAAW,GAAG,EAAG;AAEhC,cAAM,YAAY,MAAM,OAAO,KAAK,IAAI,kCAAiB;AAAA,UACvD,QAAQ;AAAA,UACR,KAAK;AAAA,QACP,CAAC,CAAC;AAEF,YAAI,CAAC,UAAU,KAAM;AACrB,cAAM,OAAO,MAAM,UAAU,KAAK,kBAAkB;AAEpD,YAAI,CAAC,SAAS,UAAU,EAAG,UAAS,UAAU,IAAI,CAAC;AACnD,iBAAS,UAAU,EAAE,EAAE,IAAI,KAAK,MAAM,IAAI;AAAA,MAC5C;AAEA,aAAO;AAAA,IACT;AAAA,IAEA,MAAM,QAAQ,OAAO,MAAM;AACzB,iBAAW,CAAC,YAAY,OAAO,KAAK,OAAO,QAAQ,IAAI,GAAG;AACxD,mBAAW,CAAC,IAAI,QAAQ,KAAK,OAAO,QAAQ,OAAO,GAAG;AACpD,gBAAM,KAAK,IAAI,OAAO,YAAY,IAAI,QAAQ;AAAA,QAChD;AAAA,MACF;AAAA,IACF;AAAA,IAEA,MAAM,OAAO;AACX,UAAI;AACF,cAAM,OAAO,KAAK,IAAI,mCAAkB,EAAE,QAAQ,OAAO,CAAC,CAAC;AAC3D,eAAO;AAAA,MACT,QAAQ;AACN,eAAO;AAAA,MACT;AAAA,IACF;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,IAcA,MAAM,SAAS,OAAO,YAAY,QAAQ,QAAQ,KAAK;AACrD,YAAM,MAAM,WAAW,OAAO,UAAU;AACxC,YAAM,aAAa,MAAM,OAAO,KAAK,IAAI,sCAAqB;AAAA,QAC5D,QAAQ;AAAA,QACR,QAAQ;AAAA,QACR,SAAS;AAAA,QACT,GAAI,SAAS,EAAE,mBAAmB,OAAO,IAAI,CAAC;AAAA,MAChD,CAAC,CAAC;AAEF,YAAM,QAAQ,WAAW,YAAY,CAAC,GACnC,IAAI,SAAO,IAAI,OAAO,EAAE,EACxB,OAAO,OAAK,EAAE,SAAS,OAAO,CAAC;AAIlC,YAAM,QAAQ,MAAM,QAAQ,IAAI,KAAK,IAAI,OAAO,QAAQ;AACtD,cAAM,KAAK,IAAI,MAAM,IAAI,QAAQ,EAAE;AACnC,cAAM,YAAY,MAAM,OAAO,KAAK,IAAI,kCAAiB;AAAA,UACvD,QAAQ;AAAA,UACR,KAAK;AAAA,QACP,CAAC,CAAC;AACF,YAAI,CAAC,UAAU,KAAM,QAAO;AAC5B,cAAM,OAAO,MAAM,UAAU,KAAK,kBAAkB;AACpD,eAAO,EAAE,IAAI,UAAU,KAAK,MAAM,IAAI,EAAuB;AAAA,MAC/D,CAAC,CAAC;AAEF,aAAO;AAAA,QACL,OAAO,MAAM,OAAO,CAAC,MAAwD,MAAM,IAAI;AAAA,QACvF,YAAY,WAAW,eAAe,WAAW,wBAC7C,WAAW,wBACX;AAAA,MACN;AAAA,IACF;AAAA,EACF;AACF;","names":[]}

package/dist/index.d.cts

@@ -0,0 +1,71 @@
+import { NoydbStore } from '@noy-db/hub';
+import { S3Client } from '@aws-sdk/client-s3';
+
+/**
+ * **@noy-db/to-aws-s3** — S3 object store for NOYDB.
+ *
+ * Each record is stored as a JSON object at
+ * `{prefix}/{vault}/{collection}/{id}.json`. The `loadAll()` method uses
+ * `ListObjectsV2` to enumerate keys then fetches them in parallel.
+ *
+ * ## When to use
+ *
+ * - **Blob / attachment storage** — pair with `@noy-db/to-aws-dynamo` via
+ *   `routeStore({ default: dynamo(...), blobs: s3(...) })` to route
+ *   encrypted binary chunks to S3.
+ * - **Archive tier** — configure `routeStore` age-based tiering so old
+ *   records migrate to S3 while hot records stay in DynamoDB.
+ * - **Large vaults** — S3 has no item size limit, unlike DynamoDB's 400 KB cap.
+ *
+ * ## Limitations
+ *
+ * - **`casAtomic: false`** — S3 has no server-side conditional write on
+ *   arbitrary metadata. Concurrent puts may result in last-write-wins.
+ *   Use DynamoDB for records that need conflict-safe writes.
+ * - **`loadAll()` is O(N) requests** — listing + fetching every object in a
+ *   vault. Suitable for vaults up to ~10K records; beyond that, prefer
+ *   DynamoDB for indexed stores and S3 only for append-heavy blob storage.
+ *
+ * ## IAM minimum permissions
+ *
+ * ```json
+ * { "Action": ["s3:GetObject", "s3:PutObject", "s3:DeleteObject",
+ *              "s3:ListBucket"] }
+ * ```
+ *
+ * @packageDocumentation
+ */
+
+/**
+ * Options for `s3()`.
+ *
+ * Objects are stored at `{prefix}/{vault}/{collection}/{id}.json`.
+ * `loadAll()` uses `ListObjectsV2` over the vault prefix followed by parallel
+ * `GetObject` calls — suitable for vaults with up to ~10K records. For larger
+ * vaults, use DynamoDB or pair with `routeStore` age-tiering so S3 only
+ * holds archived records.
+ *
+ * Note: S3 does not support atomic CAS (`casAtomic: false`). Last-write-wins
+ * on concurrent puts.
+ */
+interface S3Options {
+    /** S3 bucket name. */
+    bucket: string;
+    /** Key prefix within the bucket. Default: ''. */
+    prefix?: string;
+    /** AWS region. Used only when `client` is not provided. Default: 'us-east-1'. */
+    region?: string;
+    /**
+     * Pre-built S3Client from `@aws-sdk/client-s3`. If provided, the adapter
+     * uses this client directly and ignores `region`. Useful for apps that want
+     * to share a client across adapters or supply custom middleware.
+     */
+    client?: S3Client;
+}
+/**
+ * Create an S3 adapter.
+ * Key scheme: `{prefix}/{vault}/{collection}/{id}.json`
+ */
+declare function s3(options: S3Options): NoydbStore;
+
+export { type S3Options, s3 };

package/dist/index.d.ts

@@ -0,0 +1,71 @@
+import { NoydbStore } from '@noy-db/hub';
+import { S3Client } from '@aws-sdk/client-s3';
+
+/**
+ * **@noy-db/to-aws-s3** — S3 object store for NOYDB.
+ *
+ * Each record is stored as a JSON object at
+ * `{prefix}/{vault}/{collection}/{id}.json`. The `loadAll()` method uses
+ * `ListObjectsV2` to enumerate keys then fetches them in parallel.
+ *
+ * ## When to use
+ *
+ * - **Blob / attachment storage** — pair with `@noy-db/to-aws-dynamo` via
+ *   `routeStore({ default: dynamo(...), blobs: s3(...) })` to route
+ *   encrypted binary chunks to S3.
+ * - **Archive tier** — configure `routeStore` age-based tiering so old
+ *   records migrate to S3 while hot records stay in DynamoDB.
+ * - **Large vaults** — S3 has no item size limit, unlike DynamoDB's 400 KB cap.
+ *
+ * ## Limitations
+ *
+ * - **`casAtomic: false`** — S3 has no server-side conditional write on
+ *   arbitrary metadata. Concurrent puts may result in last-write-wins.
+ *   Use DynamoDB for records that need conflict-safe writes.
+ * - **`loadAll()` is O(N) requests** — listing + fetching every object in a
+ *   vault. Suitable for vaults up to ~10K records; beyond that, prefer
+ *   DynamoDB for indexed stores and S3 only for append-heavy blob storage.
+ *
+ * ## IAM minimum permissions
+ *
+ * ```json
+ * { "Action": ["s3:GetObject", "s3:PutObject", "s3:DeleteObject",
+ *              "s3:ListBucket"] }
+ * ```
+ *
+ * @packageDocumentation
+ */
+
+/**
+ * Options for `s3()`.
+ *
+ * Objects are stored at `{prefix}/{vault}/{collection}/{id}.json`.
+ * `loadAll()` uses `ListObjectsV2` over the vault prefix followed by parallel
+ * `GetObject` calls — suitable for vaults with up to ~10K records. For larger
+ * vaults, use DynamoDB or pair with `routeStore` age-tiering so S3 only
+ * holds archived records.
+ *
+ * Note: S3 does not support atomic CAS (`casAtomic: false`). Last-write-wins
+ * on concurrent puts.
+ */
+interface S3Options {
+    /** S3 bucket name. */
+    bucket: string;
+    /** Key prefix within the bucket. Default: ''. */
+    prefix?: string;
+    /** AWS region. Used only when `client` is not provided. Default: 'us-east-1'. */
+    region?: string;
+    /**
+     * Pre-built S3Client from `@aws-sdk/client-s3`. If provided, the adapter
+     * uses this client directly and ignores `region`. Useful for apps that want
+     * to share a client across adapters or supply custom middleware.
+     */
+    client?: S3Client;
+}
+/**
+ * Create an S3 adapter.
+ * Key scheme: `{prefix}/{vault}/{collection}/{id}.json`
+ */
+declare function s3(options: S3Options): NoydbStore;
+
+export { type S3Options, s3 };

package/dist/index.js

@@ -0,0 +1,156 @@
+// src/index.ts
+import { ConflictError } from "@noy-db/hub";
+import {
+  S3Client,
+  GetObjectCommand,
+  PutObjectCommand,
+  DeleteObjectCommand,
+  ListObjectsV2Command,
+  HeadBucketCommand
+} from "@aws-sdk/client-s3";
+function s3(options) {
+  const { bucket, prefix = "" } = options;
+  const client = options.client ?? new S3Client({
+    ...options.region ? { region: options.region } : {}
+  });
+  function objectKey(vault, collection, id) {
+    const parts = [vault, collection, `${id}.json`];
+    return prefix ? `${prefix}/${parts.join("/")}` : parts.join("/");
+  }
+  function collPrefix(vault, collection) {
+    const parts = [vault, collection, ""];
+    return prefix ? `${prefix}/${parts.join("/")}` : parts.join("/");
+  }
+  function compPrefix(vault) {
+    return prefix ? `${prefix}/${vault}/` : `${vault}/`;
+  }
+  return {
+    name: "s3",
+    async get(vault, collection, id) {
+      try {
+        const result = await client.send(new GetObjectCommand({
+          Bucket: bucket,
+          Key: objectKey(vault, collection, id)
+        }));
+        if (!result.Body) return null;
+        const body = await result.Body.transformToString();
+        return JSON.parse(body);
+      } catch (err) {
+        if (err instanceof Error && (err.name === "NoSuchKey" || err.name === "NotFound")) {
+          return null;
+        }
+        throw err;
+      }
+    },
+    async put(vault, collection, id, envelope, expectedVersion) {
+      if (expectedVersion !== void 0) {
+        const existing = await this.get(vault, collection, id);
+        if (existing && existing._v !== expectedVersion) {
+          throw new ConflictError(existing._v, `Version conflict: expected ${expectedVersion}, found ${existing._v}`);
+        }
+      }
+      await client.send(new PutObjectCommand({
+        Bucket: bucket,
+        Key: objectKey(vault, collection, id),
+        Body: JSON.stringify(envelope),
+        ContentType: "application/json"
+      }));
+    },
+    async delete(vault, collection, id) {
+      await client.send(new DeleteObjectCommand({
+        Bucket: bucket,
+        Key: objectKey(vault, collection, id)
+      }));
+    },
+    async list(vault, collection) {
+      const pfx = collPrefix(vault, collection);
+      const result = await client.send(new ListObjectsV2Command({
+        Bucket: bucket,
+        Prefix: pfx
+      }));
+      return (result.Contents ?? []).map((obj) => obj.Key ?? "").filter((k) => k.endsWith(".json")).map((k) => k.slice(pfx.length, -5));
+    },
+    async loadAll(vault) {
+      const pfx = compPrefix(vault);
+      const listResult = await client.send(new ListObjectsV2Command({
+        Bucket: bucket,
+        Prefix: pfx
+      }));
+      const snapshot = {};
+      for (const obj of listResult.Contents ?? []) {
+        const key = obj.Key ?? "";
+        if (!key.endsWith(".json")) continue;
+        const relativePath = key.slice(pfx.length);
+        const parts = relativePath.split("/");
+        if (parts.length !== 2) continue;
+        const collection = parts[0];
+        const id = parts[1].slice(0, -5);
+        if (collection.startsWith("_")) continue;
+        const getResult = await client.send(new GetObjectCommand({
+          Bucket: bucket,
+          Key: key
+        }));
+        if (!getResult.Body) continue;
+        const body = await getResult.Body.transformToString();
+        if (!snapshot[collection]) snapshot[collection] = {};
+        snapshot[collection][id] = JSON.parse(body);
+      }
+      return snapshot;
+    },
+    async saveAll(vault, data) {
+      for (const [collection, records] of Object.entries(data)) {
+        for (const [id, envelope] of Object.entries(records)) {
+          await this.put(vault, collection, id, envelope);
+        }
+      }
+    },
+    async ping() {
+      try {
+        await client.send(new HeadBucketCommand({ Bucket: bucket }));
+        return true;
+      } catch {
+        return false;
+      }
+    },
+    /**
+     * Paginate over a collection using S3's native `ContinuationToken`.
+     *
+     * Each page does:
+     *   1. ListObjectsV2 with MaxKeys = limit and the previous token
+     *   2. GetObject for every key on the page (in parallel)
+     *
+     * The 2-step pattern is necessary because S3 list responses don't
+     * include object bodies. For very large collections this is N+1 — but
+     * the parallel GETs amortize well, and consumers willing to pay for
+     * stronger pagination should use a different adapter (Dynamo).
+     */
+    async listPage(vault, collection, cursor, limit = 100) {
+      const pfx = collPrefix(vault, collection);
+      const listResult = await client.send(new ListObjectsV2Command({
+        Bucket: bucket,
+        Prefix: pfx,
+        MaxKeys: limit,
+        ...cursor ? { ContinuationToken: cursor } : {}
+      }));
+      const keys = (listResult.Contents ?? []).map((obj) => obj.Key ?? "").filter((k) => k.endsWith(".json"));
+      const items = await Promise.all(keys.map(async (key) => {
+        const id = key.slice(pfx.length, -5);
+        const getResult = await client.send(new GetObjectCommand({
+          Bucket: bucket,
+          Key: key
+        }));
+        if (!getResult.Body) return null;
+        const body = await getResult.Body.transformToString();
+        return { id, envelope: JSON.parse(body) };
+      }));
+      return {
+        items: items.filter((x) => x !== null),
+        nextCursor: listResult.IsTruncated && listResult.NextContinuationToken ? listResult.NextContinuationToken : null
+      };
+    }
+  };
+}
+export {
+  s3
+};
+//# sourceMappingURL=index.js.map

package/dist/index.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../src/index.ts"],"sourcesContent":["/**\n * **@noy-db/to-aws-s3** — S3 object store for NOYDB.\n *\n * Each record is stored as a JSON object at\n * `{prefix}/{vault}/{collection}/{id}.json`. The `loadAll()` method uses\n * `ListObjectsV2` to enumerate keys then fetches them in parallel.\n *\n * ## When to use\n *\n * - **Blob / attachment storage** — pair with `@noy-db/to-aws-dynamo` via\n *   `routeStore({ default: dynamo(...), blobs: s3(...) })` to route\n *   encrypted binary chunks to S3.\n * - **Archive tier** — configure `routeStore` age-based tiering so old\n *   records migrate to S3 while hot records stay in DynamoDB.\n * - **Large vaults** — S3 has no item size limit, unlike DynamoDB's 400 KB cap.\n *\n * ## Limitations\n *\n * - **`casAtomic: false`** — S3 has no server-side conditional write on\n *   arbitrary metadata. Concurrent puts may result in last-write-wins.\n *   Use DynamoDB for records that need conflict-safe writes.\n * - **`loadAll()` is O(N) requests** — listing + fetching every object in a\n *   vault. Suitable for vaults up to ~10K records; beyond that, prefer\n *   DynamoDB for indexed stores and S3 only for append-heavy blob storage.\n *\n * ## IAM minimum permissions\n *\n * ```json\n * { \"Action\": [\"s3:GetObject\", \"s3:PutObject\", \"s3:DeleteObject\",\n *              \"s3:ListBucket\"] }\n * ```\n *\n * @packageDocumentation\n */\n\nimport type { NoydbStore, EncryptedEnvelope, VaultSnapshot } from '@noy-db/hub'\nimport { ConflictError } from '@noy-db/hub'\nimport {\n  S3Client,\n  GetObjectCommand,\n  PutObjectCommand,\n  DeleteObjectCommand,\n  ListObjectsV2Command,\n  HeadBucketCommand,\n} from '@aws-sdk/client-s3'\n\n/**\n * Options for `s3()`.\n *\n * Objects are stored at `{prefix}/{vault}/{collection}/{id}.json`.\n * `loadAll()` uses `ListObjectsV2` over the vault prefix followed by parallel\n * `GetObject` calls — suitable for vaults with up to ~10K records. For larger\n * vaults, use DynamoDB or pair with `routeStore` age-tiering so S3 only\n * holds archived records.\n *\n * Note: S3 does not support atomic CAS (`casAtomic: false`). Last-write-wins\n * on concurrent puts.\n */\nexport interface S3Options {\n  /** S3 bucket name. */\n  bucket: string\n  /** Key prefix within the bucket. Default: ''. */\n  prefix?: string\n  /** AWS region. Used only when `client` is not provided. Default: 'us-east-1'. */\n  region?: string\n  /**\n   * Pre-built S3Client from `@aws-sdk/client-s3`. If provided, the adapter\n   * uses this client directly and ignores `region`. Useful for apps that want\n   * to share a client across adapters or supply custom middleware.\n   */\n  client?: S3Client\n}\n\n/**\n * Create an S3 adapter.\n * Key scheme: `{prefix}/{vault}/{collection}/{id}.json`\n */\nexport function s3(options: S3Options): NoydbStore {\n  const { bucket, prefix = '' } = options\n\n  const client = options.client ?? new S3Client({\n    ...(options.region ? { region: options.region } : {}),\n  })\n\n  function objectKey(vault: string, collection: string, id: string): string {\n    const parts = [vault, collection, `${id}.json`]\n    return prefix ? `${prefix}/${parts.join('/')}` : parts.join('/')\n  }\n\n  function collPrefix(vault: string, collection: string): string {\n    const parts = [vault, collection, '']\n    return prefix ? `${prefix}/${parts.join('/')}` : parts.join('/')\n  }\n\n  function compPrefix(vault: string): string {\n    return prefix ? `${prefix}/${vault}/` : `${vault}/`\n  }\n\n  return {\n    name: 's3',\n\n    async get(vault, collection, id) {\n      try {\n        const result = await client.send(new GetObjectCommand({\n          Bucket: bucket,\n          Key: objectKey(vault, collection, id),\n        }))\n\n        if (!result.Body) return null\n        const body = await result.Body.transformToString()\n        return JSON.parse(body) as EncryptedEnvelope\n      } catch (err: unknown) {\n        if (err instanceof Error && (err.name === 'NoSuchKey' || err.name === 'NotFound')) {\n          return null\n        }\n        throw err\n      }\n    },\n\n    async put(vault, collection, id, envelope, expectedVersion) {\n      if (expectedVersion !== undefined) {\n        const existing = await this.get(vault, collection, id)\n        if (existing && existing._v !== expectedVersion) {\n          throw new ConflictError(existing._v, `Version conflict: expected ${expectedVersion}, found ${existing._v}`)\n        }\n      }\n\n      await client.send(new PutObjectCommand({\n        Bucket: bucket,\n        Key: objectKey(vault, collection, id),\n        Body: JSON.stringify(envelope),\n        ContentType: 'application/json',\n      }))\n    },\n\n    async delete(vault, collection, id) {\n      await client.send(new DeleteObjectCommand({\n        Bucket: bucket,\n        Key: objectKey(vault, collection, id),\n      }))\n    },\n\n    async list(vault, collection) {\n      const pfx = collPrefix(vault, collection)\n      const result = await client.send(new ListObjectsV2Command({\n        Bucket: bucket,\n        Prefix: pfx,\n      }))\n\n      return (result.Contents ?? [])\n        .map(obj => obj.Key ?? '')\n        .filter(k => k.endsWith('.json'))\n        .map(k => k.slice(pfx.length, -5))\n    },\n\n    async loadAll(vault) {\n      const pfx = compPrefix(vault)\n      const listResult = await client.send(new ListObjectsV2Command({\n        Bucket: bucket,\n        Prefix: pfx,\n      }))\n\n      const snapshot: VaultSnapshot = {}\n\n      for (const obj of listResult.Contents ?? []) {\n        const key = obj.Key ?? ''\n        if (!key.endsWith('.json')) continue\n\n        const relativePath = key.slice(pfx.length)\n        const parts = relativePath.split('/')\n        if (parts.length !== 2) continue\n\n        const collection = parts[0]!\n        const id = parts[1]!.slice(0, -5)\n        if (collection.startsWith('_')) continue\n\n        const getResult = await client.send(new GetObjectCommand({\n          Bucket: bucket,\n          Key: key,\n        }))\n\n        if (!getResult.Body) continue\n        const body = await getResult.Body.transformToString()\n\n        if (!snapshot[collection]) snapshot[collection] = {}\n        snapshot[collection][id] = JSON.parse(body) as EncryptedEnvelope\n      }\n\n      return snapshot\n    },\n\n    async saveAll(vault, data) {\n      for (const [collection, records] of Object.entries(data)) {\n        for (const [id, envelope] of Object.entries(records)) {\n          await this.put(vault, collection, id, envelope)\n        }\n      }\n    },\n\n    async ping() {\n      try {\n        await client.send(new HeadBucketCommand({ Bucket: bucket }))\n        return true\n      } catch {\n        return false\n      }\n    },\n\n    /**\n     * Paginate over a collection using S3's native `ContinuationToken`.\n     *\n     * Each page does:\n     *   1. ListObjectsV2 with MaxKeys = limit and the previous token\n     *   2. GetObject for every key on the page (in parallel)\n     *\n     * The 2-step pattern is necessary because S3 list responses don't\n     * include object bodies. For very large collections this is N+1 — but\n     * the parallel GETs amortize well, and consumers willing to pay for\n     * stronger pagination should use a different adapter (Dynamo).\n     */\n    async listPage(vault, collection, cursor, limit = 100) {\n      const pfx = collPrefix(vault, collection)\n      const listResult = await client.send(new ListObjectsV2Command({\n        Bucket: bucket,\n        Prefix: pfx,\n        MaxKeys: limit,\n        ...(cursor ? { ContinuationToken: cursor } : {}),\n      }))\n\n      const keys = (listResult.Contents ?? [])\n        .map(obj => obj.Key ?? '')\n        .filter(k => k.endsWith('.json'))\n\n      // Fetch every body in parallel — bounded by `limit` so we never\n      // fan out beyond the page size.\n      const items = await Promise.all(keys.map(async (key) => {\n        const id = key.slice(pfx.length, -5)\n        const getResult = await client.send(new GetObjectCommand({\n          Bucket: bucket,\n          Key: key,\n        }))\n        if (!getResult.Body) return null\n        const body = await getResult.Body.transformToString()\n        return { id, envelope: JSON.parse(body) as EncryptedEnvelope }\n      }))\n\n      return {\n        items: items.filter((x): x is { id: string; envelope: EncryptedEnvelope } => x !== null),\n        nextCursor: listResult.IsTruncated && listResult.NextContinuationToken\n          ? listResult.NextContinuationToken\n          : null,\n      }\n    },\n  }\n}\n"],"mappings":";AAoCA,SAAS,qBAAqB;AAC9B;AAAA,EACE;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,OACK;AAiCA,SAAS,GAAG,SAAgC;AACjD,QAAM,EAAE,QAAQ,SAAS,GAAG,IAAI;AAEhC,QAAM,SAAS,QAAQ,UAAU,IAAI,SAAS;AAAA,IAC5C,GAAI,QAAQ,SAAS,EAAE,QAAQ,QAAQ,OAAO,IAAI,CAAC;AAAA,EACrD,CAAC;AAED,WAAS,UAAU,OAAe,YAAoB,IAAoB;AACxE,UAAM,QAAQ,CAAC,OAAO,YAAY,GAAG,EAAE,OAAO;AAC9C,WAAO,SAAS,GAAG,MAAM,IAAI,MAAM,KAAK,GAAG,CAAC,KAAK,MAAM,KAAK,GAAG;AAAA,EACjE;AAEA,WAAS,WAAW,OAAe,YAA4B;AAC7D,UAAM,QAAQ,CAAC,OAAO,YAAY,EAAE;AACpC,WAAO,SAAS,GAAG,MAAM,IAAI,MAAM,KAAK,GAAG,CAAC,KAAK,MAAM,KAAK,GAAG;AAAA,EACjE;AAEA,WAAS,WAAW,OAAuB;AACzC,WAAO,SAAS,GAAG,MAAM,IAAI,KAAK,MAAM,GAAG,KAAK;AAAA,EAClD;AAEA,SAAO;AAAA,IACL,MAAM;AAAA,IAEN,MAAM,IAAI,OAAO,YAAY,IAAI;AAC/B,UAAI;AACF,cAAM,SAAS,MAAM,OAAO,KAAK,IAAI,iBAAiB;AAAA,UACpD,QAAQ;AAAA,UACR,KAAK,UAAU,OAAO,YAAY,EAAE;AAAA,QACtC,CAAC,CAAC;AAEF,YAAI,CAAC,OAAO,KAAM,QAAO;AACzB,cAAM,OAAO,MAAM,OAAO,KAAK,kBAAkB;AACjD,eAAO,KAAK,MAAM,IAAI;AAAA,MACxB,SAAS,KAAc;AACrB,YAAI,eAAe,UAAU,IAAI,SAAS,eAAe,IAAI,SAAS,aAAa;AACjF,iBAAO;AAAA,QACT;AACA,cAAM;AAAA,MACR;AAAA,IACF;AAAA,IAEA,MAAM,IAAI,OAAO,YAAY,IAAI,UAAU,iBAAiB;AAC1D,UAAI,oBAAoB,QAAW;AACjC,cAAM,WAAW,MAAM,KAAK,IAAI,OAAO,YAAY,EAAE;AACrD,YAAI,YAAY,SAAS,OAAO,iBAAiB;AAC/C,gBAAM,IAAI,cAAc,SAAS,IAAI,8BAA8B,eAAe,WAAW,SAAS,EAAE,EAAE;AAAA,QAC5G;AAAA,MACF;AAEA,YAAM,OAAO,KAAK,IAAI,iBAAiB;AAAA,QACrC,QAAQ;AAAA,QACR,KAAK,UAAU,OAAO,YAAY,EAAE;AAAA,QACpC,MAAM,KAAK,UAAU,QAAQ;AAAA,QAC7B,aAAa;AAAA,MACf,CAAC,CAAC;AAAA,IACJ;AAAA,IAEA,MAAM,OAAO,OAAO,YAAY,IAAI;AAClC,YAAM,OAAO,KAAK,IAAI,oBAAoB;AAAA,QACxC,QAAQ;AAAA,QACR,KAAK,UAAU,OAAO,YAAY,EAAE;AAAA,MACtC,CAAC,CAAC;AAAA,IACJ;AAAA,IAEA,MAAM,KAAK,OAAO,YAAY;AAC5B,YAAM,MAAM,WAAW,OAAO,UAAU;AACxC,YAAM,SAAS,MAAM,OAAO,KAAK,IAAI,qBAAqB;AAAA,QACxD,QAAQ;AAAA,QACR,QAAQ;AAAA,MACV,CAAC,CAAC;AAEF,cAAQ,OAAO,YAAY,CAAC,GACzB,IAAI,SAAO,IAAI,OAAO,EAAE,EACxB,OAAO,OAAK,EAAE,SAAS,OAAO,CAAC,EAC/B,IAAI,OAAK,EAAE,MAAM,IAAI,QAAQ,EAAE,CAAC;AAAA,IACrC;AAAA,IAEA,MAAM,QAAQ,OAAO;AACnB,YAAM,MAAM,WAAW,KAAK;AAC5B,YAAM,aAAa,MAAM,OAAO,KAAK,IAAI,qBAAqB;AAAA,QAC5D,QAAQ;AAAA,QACR,QAAQ;AAAA,MACV,CAAC,CAAC;AAEF,YAAM,WAA0B,CAAC;AAEjC,iBAAW,OAAO,WAAW,YAAY,CAAC,GAAG;AAC3C,cAAM,MAAM,IAAI,OAAO;AACvB,YAAI,CAAC,IAAI,SAAS,OAAO,EAAG;AAE5B,cAAM,eAAe,IAAI,MAAM,IAAI,MAAM;AACzC,cAAM,QAAQ,aAAa,MAAM,GAAG;AACpC,YAAI,MAAM,WAAW,EAAG;AAExB,cAAM,aAAa,MAAM,CAAC;AAC1B,cAAM,KAAK,MAAM,CAAC,EAAG,MAAM,GAAG,EAAE;AAChC,YAAI,WAAW,WAAW,GAAG,EAAG;AAEhC,cAAM,YAAY,MAAM,OAAO,KAAK,IAAI,iBAAiB;AAAA,UACvD,QAAQ;AAAA,UACR,KAAK;AAAA,QACP,CAAC,CAAC;AAEF,YAAI,CAAC,UAAU,KAAM;AACrB,cAAM,OAAO,MAAM,UAAU,KAAK,kBAAkB;AAEpD,YAAI,CAAC,SAAS,UAAU,EAAG,UAAS,UAAU,IAAI,CAAC;AACnD,iBAAS,UAAU,EAAE,EAAE,IAAI,KAAK,MAAM,IAAI;AAAA,MAC5C;AAEA,aAAO;AAAA,IACT;AAAA,IAEA,MAAM,QAAQ,OAAO,MAAM;AACzB,iBAAW,CAAC,YAAY,OAAO,KAAK,OAAO,QAAQ,IAAI,GAAG;AACxD,mBAAW,CAAC,IAAI,QAAQ,KAAK,OAAO,QAAQ,OAAO,GAAG;AACpD,gBAAM,KAAK,IAAI,OAAO,YAAY,IAAI,QAAQ;AAAA,QAChD;AAAA,MACF;AAAA,IACF;AAAA,IAEA,MAAM,OAAO;AACX,UAAI;AACF,cAAM,OAAO,KAAK,IAAI,kBAAkB,EAAE,QAAQ,OAAO,CAAC,CAAC;AAC3D,eAAO;AAAA,MACT,QAAQ;AACN,eAAO;AAAA,MACT;AAAA,IACF;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,IAcA,MAAM,SAAS,OAAO,YAAY,QAAQ,QAAQ,KAAK;AACrD,YAAM,MAAM,WAAW,OAAO,UAAU;AACxC,YAAM,aAAa,MAAM,OAAO,KAAK,IAAI,qBAAqB;AAAA,QAC5D,QAAQ;AAAA,QACR,QAAQ;AAAA,QACR,SAAS;AAAA,QACT,GAAI,SAAS,EAAE,mBAAmB,OAAO,IAAI,CAAC;AAAA,MAChD,CAAC,CAAC;AAEF,YAAM,QAAQ,WAAW,YAAY,CAAC,GACnC,IAAI,SAAO,IAAI,OAAO,EAAE,EACxB,OAAO,OAAK,EAAE,SAAS,OAAO,CAAC;AAIlC,YAAM,QAAQ,MAAM,QAAQ,IAAI,KAAK,IAAI,OAAO,QAAQ;AACtD,cAAM,KAAK,IAAI,MAAM,IAAI,QAAQ,EAAE;AACnC,cAAM,YAAY,MAAM,OAAO,KAAK,IAAI,iBAAiB;AAAA,UACvD,QAAQ;AAAA,UACR,KAAK;AAAA,QACP,CAAC,CAAC;AACF,YAAI,CAAC,UAAU,KAAM,QAAO;AAC5B,cAAM,OAAO,MAAM,UAAU,KAAK,kBAAkB;AACpD,eAAO,EAAE,IAAI,UAAU,KAAK,MAAM,IAAI,EAAuB;AAAA,MAC/D,CAAC,CAAC;AAEF,aAAO;AAAA,QACL,OAAO,MAAM,OAAO,CAAC,MAAwD,MAAM,IAAI;AAAA,QACvF,YAAY,WAAW,eAAe,WAAW,wBAC7C,WAAW,wBACX;AAAA,MACN;AAAA,IACF;AAAA,EACF;AACF;","names":[]}

package/package.json

@@ -0,0 +1,69 @@
+{
+  "name": "@noy-db/to-aws-s3",
+  "version": "0.1.0-pre.3",
+  "description": "AWS S3 adapter for noy-db — encrypted object storage with zero-knowledge cloud sync",
+  "license": "MIT",
+  "author": "vLannaAi <vicio@lanna.ai>",
+  "homepage": "https://github.com/vLannaAi/noy-db/tree/main/packages/to-aws-s3#readme",
+  "repository": {
+    "type": "git",
+    "url": "git+https://github.com/vLannaAi/noy-db.git",
+    "directory": "packages/to-aws-s3"
+  },
+  "bugs": {
+    "url": "https://github.com/vLannaAi/noy-db/issues"
+  },
+  "type": "module",
+  "sideEffects": false,
+  "exports": {
+    ".": {
+      "import": {
+        "types": "./dist/index.d.ts",
+        "default": "./dist/index.js"
+      },
+      "require": {
+        "types": "./dist/index.d.cts",
+        "default": "./dist/index.cjs"
+      }
+    }
+  },
+  "main": "./dist/index.cjs",
+  "module": "./dist/index.js",
+  "types": "./dist/index.d.ts",
+  "files": [
+    "dist",
+    "README.md",
+    "LICENSE"
+  ],
+  "engines": {
+    "node": ">=18.0.0"
+  },
+  "peerDependencies": {
+    "@aws-sdk/client-s3": "^3.0.0",
+    "@noy-db/hub": "0.1.0-pre.3"
+  },
+  "devDependencies": {
+    "@aws-sdk/client-s3": "^3.0.0",
+    "@noy-db/hub": "0.1.0-pre.3"
+  },
+  "keywords": [
+    "noy-db",
+    "adapter",
+    "s3",
+    "aws",
+    "object-storage",
+    "cloud",
+    "encryption",
+    "zero-knowledge"
+  ],
+  "publishConfig": {
+    "access": "public",
+    "tag": "latest"
+  },
+  "scripts": {
+    "build": "tsup",
+    "test": "vitest run",
+    "lint": "eslint src/",
+    "typecheck": "tsc --noEmit"
+  }
+}