@noy-db/to-browser-idb 0.1.0-pre.3

package/LICENSE

@@ -0,0 +1,21 @@
+MIT License
+
+Copyright (c) 2026 vLannaAi
+
+Permission is hereby granted, free of charge, to any person obtaining a copy
+of this software and associated documentation files (the "Software"), to deal
+in the Software without restriction, including without limitation the rights
+to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
+copies of the Software, and to permit persons to whom the Software is
+furnished to do so, subject to the following conditions:
+
+The above copyright notice and this permission notice shall be included in all
+copies or substantial portions of the Software.
+
+THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
+IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
+FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
+AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
+LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
+OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE
+SOFTWARE.

package/README.md

@@ -0,0 +1,33 @@
+# @noy-db/to-browser-idb
+
+[![npm](https://img.shields.io/npm/v/%40noy-db/to-browser-idb.svg)](https://www.npmjs.com/package/@noy-db/to-browser-idb)
+
+> IndexedDB adapter for noy-db with optional key obfuscation
+
+Part of [**`@noy-db/hub`**](https://www.npmjs.com/package/@noy-db/hub) — the zero-knowledge, offline-first, encrypted document store.
+
+## Install
+
+```bash
+pnpm add @noy-db/hub @noy-db/to-browser-idb
+```
+
+## What it is
+
+IndexedDB adapter for noy-db with optional key obfuscation
+
+## Status
+
+**Pre-release** (`0.1.0-pre.1`). API may change before `1.0`.
+
+## Documentation
+
+See the [main repository](https://github.com/vLannaAi/noy-db#readme) for setup, examples, and the full subsystem catalog.
+
+- Source — [`packages/to-browser-idb`](https://github.com/vLannaAi/noy-db/tree/main/packages/to-browser-idb)
+- Issues — [github.com/vLannaAi/noy-db/issues](https://github.com/vLannaAi/noy-db/issues)
+- Spec — [`SPEC.md`](https://github.com/vLannaAi/noy-db/blob/main/SPEC.md)
+
+## License
+
+[MIT](./LICENSE) © vLannaAi

package/dist/index.cjs

@@ -0,0 +1,250 @@
+"use strict";
+var __defProp = Object.defineProperty;
+var __getOwnPropDesc = Object.getOwnPropertyDescriptor;
+var __getOwnPropNames = Object.getOwnPropertyNames;
+var __hasOwnProp = Object.prototype.hasOwnProperty;
+var __export = (target, all) => {
+  for (var name in all)
+    __defProp(target, name, { get: all[name], enumerable: true });
+};
+var __copyProps = (to, from, except, desc) => {
+  if (from && typeof from === "object" || typeof from === "function") {
+    for (let key of __getOwnPropNames(from))
+      if (!__hasOwnProp.call(to, key) && key !== except)
+        __defProp(to, key, { get: () => from[key], enumerable: !(desc = __getOwnPropDesc(from, key)) || desc.enumerable });
+  }
+  return to;
+};
+var __toCommonJS = (mod) => __copyProps(__defProp({}, "__esModule", { value: true }), mod);
+
+// src/index.ts
+var index_exports = {};
+__export(index_exports, {
+  browserIdbStore: () => browserIdbStore
+});
+module.exports = __toCommonJS(index_exports);
+var import_hub = require("@noy-db/hub");
+function browserIdbStore(options = {}) {
+  const prefix = options.prefix ?? "noydb";
+  const obfuscate = options.obfuscate ?? false;
+  const obfKey = obfuscate ? makeObfKey(prefix) : "";
+  return createIndexedDBAdapter(prefix, obfuscate, obfKey);
+}
+function fnv1a(str) {
+  let hash = 2166136261;
+  for (let i = 0; i < str.length; i++) {
+    hash ^= str.charCodeAt(i);
+    hash = Math.imul(hash, 16777619);
+  }
+  return (hash >>> 0).toString(16).padStart(8, "0");
+}
+function hashComponent(value, obfuscate) {
+  return obfuscate ? fnv1a(value) : value;
+}
+function xorEncode(plaintext, key) {
+  const bytes = new TextEncoder().encode(plaintext);
+  const keyBytes = new TextEncoder().encode(key);
+  for (let i = 0; i < bytes.length; i++) {
+    bytes[i] = bytes[i] ^ keyBytes[i % keyBytes.length];
+  }
+  let binary = "";
+  for (let i = 0; i < bytes.length; i++) {
+    binary += String.fromCharCode(bytes[i]);
+  }
+  return btoa(binary);
+}
+function xorDecode(encoded, key) {
+  const binary = atob(encoded);
+  const bytes = new Uint8Array(binary.length);
+  const keyBytes = new TextEncoder().encode(key);
+  for (let i = 0; i < binary.length; i++) {
+    bytes[i] = binary.charCodeAt(i) ^ keyBytes[i % keyBytes.length];
+  }
+  return new TextDecoder().decode(bytes);
+}
+function makeObfKey(prefix) {
+  return prefix + ":noydb-obf-key";
+}
+function createIndexedDBAdapter(prefix, obfuscate, obfKey) {
+  const DB_NAME = `${prefix}_noydb`;
+  const STORE_NAME = "records";
+  let dbPromise = null;
+  function openDB() {
+    if (!dbPromise) {
+      dbPromise = new Promise((resolve, reject) => {
+        const request = indexedDB.open(DB_NAME, 1);
+        request.onupgradeneeded = () => {
+          const db = request.result;
+          if (!db.objectStoreNames.contains(STORE_NAME)) {
+            db.createObjectStore(STORE_NAME);
+          }
+        };
+        request.onsuccess = () => resolve(request.result);
+        request.onerror = () => reject(request.error);
+      });
+    }
+    return dbPromise;
+  }
+  function key(vault, collection, id) {
+    return `${hashComponent(vault, obfuscate)}:${hashComponent(collection, obfuscate)}:${hashComponent(id, obfuscate)}`;
+  }
+  function tx(mode) {
+    return openDB().then((db) => {
+      const transaction = db.transaction(STORE_NAME, mode);
+      const store = transaction.objectStore(STORE_NAME);
+      const complete = new Promise((resolve, reject) => {
+        transaction.oncomplete = () => resolve();
+        transaction.onerror = () => reject(transaction.error);
+      });
+      return { store, complete };
+    });
+  }
+  function idbRequest(request) {
+    return new Promise((resolve, reject) => {
+      request.onsuccess = () => resolve(request.result);
+      request.onerror = () => reject(request.error);
+    });
+  }
+  return {
+    name: "browser:indexedDB",
+    async get(vault, collection, id) {
+      const { store } = await tx("readonly");
+      const raw = await idbRequest(store.get(key(vault, collection, id)));
+      if (!raw) return null;
+      if (obfuscate && typeof raw === "object" && "_e" in raw) {
+        return raw._e;
+      }
+      return raw;
+    },
+    async put(vault, collection, id, envelope, expectedVersion) {
+      const k = key(vault, collection, id);
+      const { store, complete } = await tx("readwrite");
+      if (expectedVersion !== void 0) {
+        const existing = await idbRequest(store.get(k));
+        if (existing) {
+          const env = obfuscate && "_e" in existing ? existing._e : existing;
+          if (env._v !== expectedVersion) {
+            throw new import_hub.ConflictError(env._v, `Version conflict: expected ${expectedVersion}, found ${env._v}`);
+          }
+        }
+      }
+      const value = obfuscate ? { _oi: xorEncode(id, obfKey), _oc: xorEncode(collection, obfKey), _e: envelope } : envelope;
+      store.put(value, k);
+      await complete;
+    },
+    async delete(vault, collection, id) {
+      const { store, complete } = await tx("readwrite");
+      store.delete(key(vault, collection, id));
+      await complete;
+    },
+    async list(vault, collection) {
+      const pfx = `${hashComponent(vault, obfuscate)}:${hashComponent(collection, obfuscate)}:`;
+      const { store } = await tx("readonly");
+      const allKeys = await idbRequest(store.getAllKeys());
+      if (!obfuscate) {
+        return allKeys.filter((k) => typeof k === "string" && k.startsWith(pfx)).map((k) => k.slice(pfx.length));
+      }
+      const ids = [];
+      for (const k of allKeys) {
+        if (typeof k !== "string" || !k.startsWith(pfx)) continue;
+        const raw = await idbRequest(store.get(k));
+        if (raw && typeof raw === "object" && "_oi" in raw) {
+          ids.push(xorDecode(raw._oi, obfKey));
+        }
+      }
+      return ids;
+    },
+    async loadAll(vault) {
+      const pfx = `${hashComponent(vault, obfuscate)}:`;
+      const { store } = await tx("readonly");
+      const allKeys = await idbRequest(store.getAllKeys());
+      const snapshot = {};
+      for (const k of allKeys) {
+        if (typeof k !== "string" || !k.startsWith(pfx)) continue;
+        const raw = await idbRequest(store.get(k));
+        if (!raw) continue;
+        let collection;
+        let id;
+        let envelope;
+        if (obfuscate && typeof raw === "object" && "_e" in raw) {
+          const stored = raw;
+          collection = xorDecode(stored._oc, obfKey);
+          id = xorDecode(stored._oi, obfKey);
+          envelope = stored._e;
+        } else {
+          const rest = k.slice(pfx.length);
+          const colonIdx = rest.indexOf(":");
+          if (colonIdx < 0) continue;
+          collection = rest.slice(0, colonIdx);
+          id = rest.slice(colonIdx + 1);
+          envelope = raw;
+        }
+        if (collection.startsWith("_")) continue;
+        if (!snapshot[collection]) snapshot[collection] = {};
+        snapshot[collection][id] = envelope;
+      }
+      return snapshot;
+    },
+    async saveAll(vault, data) {
+      const { store, complete } = await tx("readwrite");
+      for (const [collection, records] of Object.entries(data)) {
+        for (const [id, envelope] of Object.entries(records)) {
+          const value = obfuscate ? { _oi: xorEncode(id, obfKey), _oc: xorEncode(collection, obfKey), _e: envelope } : envelope;
+          store.put(value, key(vault, collection, id));
+        }
+      }
+      await complete;
+    },
+    async ping() {
+      try {
+        await openDB();
+        return true;
+      } catch {
+        return false;
+      }
+    },
+    /**
+     * Paginate over a collection backed by IndexedDB.
+     *
+     * Strategy: read every key in the prefix once (sorted), then slice
+     * by cursor offset. IndexedDB's `getAllKeys()` returns sorted keys
+     * efficiently for the modern browsers we target (Chrome 87+,
+     * Firefox 78+, Safari 14+, Edge 88+ — same baseline as the rest of
+     * the build target).
+     */
+    async listPage(vault, collection, cursor, limit = 100) {
+      const pfx = `${hashComponent(vault, obfuscate)}:${hashComponent(collection, obfuscate)}:`;
+      const { store } = await tx("readonly");
+      const allKeys = await idbRequest(store.getAllKeys());
+      const matchedKeys = allKeys.filter((k) => typeof k === "string" && k.startsWith(pfx)).sort();
+      const start = cursor ? parseInt(cursor, 10) : 0;
+      const end = Math.min(start + limit, matchedKeys.length);
+      const items = [];
+      for (let i = start; i < end; i++) {
+        const k = matchedKeys[i];
+        const raw = await idbRequest(store.get(k));
+        if (!raw) continue;
+        let envelope;
+        let id;
+        if (obfuscate && typeof raw === "object" && "_e" in raw) {
+          const stored = raw;
+          envelope = stored._e;
+          id = xorDecode(stored._oi, obfKey);
+        } else {
+          envelope = raw;
+          id = k.slice(pfx.length);
+        }
+        items.push({ id, envelope });
+      }
+      return {
+        items,
+        nextCursor: end < matchedKeys.length ? String(end) : null
+      };
+    }
+  };
+}
+// Annotate the CommonJS export names for ESM import in node:
+0 && (module.exports = {
+  browserIdbStore
+});
+//# sourceMappingURL=index.cjs.map

package/dist/index.cjs.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../src/index.ts"],"sourcesContent":["/**\n * **@noy-db/to-browser-idb** — IndexedDB-backed NOYDB store.\n *\n * The recommended browser store. Uses a single IndexedDB database\n * (`{prefix}_noydb`) with one object store (`records`). Composite string\n * keys (`{vault}:{collection}:{id}`) avoid the need for complex indexes.\n *\n * ## Why IndexedDB over localStorage\n *\n * - **Larger quota** — typically 50–80% of available disk vs. localStorage's\n *   5 MB hard cap.\n * - **True atomic CAS** — the compare-and-swap check and write happen inside\n *   a single `readwrite` IDB transaction, so concurrent writes from two tabs\n *   cannot interleave. (`casAtomic: true`.)\n * - **Async API** — doesn't block the main thread during large reads.\n *\n * ## Obfuscation mode\n *\n * Identical to `@noy-db/to-browser-local` — FNV-1a hashed keys + XOR-encoded\n * metadata. Envelope `_data` is always AES-GCM ciphertext regardless of this\n * setting.\n *\n * ## Capabilities\n *\n * | Capability | Value |\n * |---|---|\n * | `casAtomic` | `true` — single readwrite IDB transaction per put |\n * | `listPage` | ✓ — cursor-based pagination via `getAllKeys()` |\n * | `ping` | ✓ — `openDB()` round-trip |\n *\n * @packageDocumentation\n */\n\nimport type { NoydbStore, EncryptedEnvelope, VaultSnapshot } from '@noy-db/hub'\nimport { ConflictError } from '@noy-db/hub'\n\n/**\n * Options for `browserIdbStore()`.\n *\n * All NOYDB data is stored in a single IndexedDB database named\n * `{prefix}_noydb`, using composite string keys of the form\n * `{vault}:{collection}:{id}`. CAS checks and writes happen inside a\n * single `readwrite` IDB transaction, giving true atomic compare-and-swap\n * (`casAtomic: true`). Enable `obfuscate` to hash key components and\n * XOR-encode metadata — same obfuscation model as `browserLocalStore`.\n */\nexport interface BrowserIdbOptions {\n  /** Storage key prefix. Default: 'noydb'. */\n  prefix?: string\n  /** Obfuscate storage keys so collection/record names are not readable. Default: false. */\n  obfuscate?: boolean\n}\n\n/**\n * Create an IndexedDB-backed store adapter.\n *\n * Key scheme (normal):    `{vault}:{collection}:{id}`\n * Key scheme (obfuscated): `{hash}:{hash}:{hash}`\n *\n * StoreCapabilities:\n *   casAtomic: true  — CAS check + write happen inside a single readwrite IDB transaction\n *   auth: { kind: 'browser-origin', flow: 'implicit', required: false }\n */\nexport function browserIdbStore(options: BrowserIdbOptions = {}): NoydbStore {\n  const prefix = options.prefix ?? 'noydb'\n  const obfuscate = options.obfuscate ?? false\n  const obfKey = obfuscate ? makeObfKey(prefix) : ''\n\n  return createIndexedDBAdapter(prefix, obfuscate, obfKey)\n}\n\n// ─── Key Obfuscation ───────────────────────────────────────────────────\n\n/**\n * FNV-1a 32-bit hash → 8-char hex string.\n * Not cryptographic — just makes keys opaque to casual inspection.\n */\nfunction fnv1a(str: string): string {\n  let hash = 0x811c9dc5\n  for (let i = 0; i < str.length; i++) {\n    hash ^= str.charCodeAt(i)\n    hash = Math.imul(hash, 0x01000193)\n  }\n  return (hash >>> 0).toString(16).padStart(8, '0')\n}\n\nfunction hashComponent(value: string, obfuscate: boolean): string {\n  return obfuscate ? fnv1a(value) : value\n}\n\n// ─── XOR Encode/Decode (makes metadata unreadable in storage) ──────────\n\n/** XOR-encode a string with a repeating key, return base64. */\nfunction xorEncode(plaintext: string, key: string): string {\n  const bytes = new TextEncoder().encode(plaintext)\n  const keyBytes = new TextEncoder().encode(key)\n  for (let i = 0; i < bytes.length; i++) {\n    bytes[i] = bytes[i]! ^ keyBytes[i % keyBytes.length]!\n  }\n  let binary = ''\n  for (let i = 0; i < bytes.length; i++) {\n    binary += String.fromCharCode(bytes[i]!)\n  }\n  return btoa(binary)\n}\n\n/** Decode a base64 XOR-encoded string. */\nfunction xorDecode(encoded: string, key: string): string {\n  const binary = atob(encoded)\n  const bytes = new Uint8Array(binary.length)\n  const keyBytes = new TextEncoder().encode(key)\n  for (let i = 0; i < binary.length; i++) {\n    bytes[i] = binary.charCodeAt(i) ^ keyBytes[i % keyBytes.length]!\n  }\n  return new TextDecoder().decode(bytes)\n}\n\n/** Stored value wraps envelope + encoded original key parts. */\ninterface StoredValue {\n  /** Encoded original record ID. */\n  _oi: string\n  /** Encoded original collection name. */\n  _oc: string\n  /** The encrypted envelope. */\n  _e: EncryptedEnvelope\n}\n\nfunction makeObfKey(prefix: string): string {\n  return prefix + ':noydb-obf-key'\n}\n\n// ─── IndexedDB Backend ─────────────────────────────────────────────────\n\nfunction createIndexedDBAdapter(prefix: string, obfuscate: boolean, obfKey: string): NoydbStore {\n  const DB_NAME = `${prefix}_noydb`\n  const STORE_NAME = 'records'\n  let dbPromise: Promise<IDBDatabase> | null = null\n\n  function openDB(): Promise<IDBDatabase> {\n    if (!dbPromise) {\n      dbPromise = new Promise((resolve, reject) => {\n        const request = indexedDB.open(DB_NAME, 1)\n        request.onupgradeneeded = () => {\n          const db = request.result\n          if (!db.objectStoreNames.contains(STORE_NAME)) {\n            db.createObjectStore(STORE_NAME)\n          }\n        }\n        request.onsuccess = () => resolve(request.result)\n        request.onerror = () => reject(request.error)\n      })\n    }\n    return dbPromise\n  }\n\n  function key(vault: string, collection: string, id: string): string {\n    return `${hashComponent(vault, obfuscate)}:${hashComponent(collection, obfuscate)}:${hashComponent(id, obfuscate)}`\n  }\n\n  function tx(mode: IDBTransactionMode): Promise<{ store: IDBObjectStore; complete: Promise<void> }> {\n    return openDB().then(db => {\n      const transaction = db.transaction(STORE_NAME, mode)\n      const store = transaction.objectStore(STORE_NAME)\n      const complete = new Promise<void>((resolve, reject) => {\n        transaction.oncomplete = () => resolve()\n        transaction.onerror = () => reject(transaction.error)\n      })\n      return { store, complete }\n    })\n  }\n\n  function idbRequest<T>(request: IDBRequest<T>): Promise<T> {\n    return new Promise((resolve, reject) => {\n      request.onsuccess = () => resolve(request.result)\n      request.onerror = () => reject(request.error)\n    })\n  }\n\n  return {\n    name: 'browser:indexedDB',\n\n    async get(vault, collection, id) {\n      const { store } = await tx('readonly')\n      const raw = await idbRequest(store.get(key(vault, collection, id)))\n      if (!raw) return null\n      if (obfuscate && typeof raw === 'object' && '_e' in (raw as StoredValue)) {\n        return (raw as StoredValue)._e\n      }\n      return raw as EncryptedEnvelope\n    },\n\n    async put(vault, collection, id, envelope, expectedVersion) {\n      const k = key(vault, collection, id)\n\n      const { store, complete } = await tx('readwrite')\n      if (expectedVersion !== undefined) {\n        const existing = await idbRequest(store.get(k))\n        if (existing) {\n          const env = obfuscate && '_e' in (existing as StoredValue) ? (existing as StoredValue)._e : existing as EncryptedEnvelope\n          if (env._v !== expectedVersion) {\n            throw new ConflictError(env._v, `Version conflict: expected ${expectedVersion}, found ${env._v}`)\n          }\n        }\n      }\n\n      const value = obfuscate ? { _oi: xorEncode(id, obfKey), _oc: xorEncode(collection, obfKey), _e: envelope } : envelope\n      store.put(value, k)\n      await complete\n    },\n\n    async delete(vault, collection, id) {\n      const { store, complete } = await tx('readwrite')\n      store.delete(key(vault, collection, id))\n      await complete\n    },\n\n    async list(vault, collection) {\n      const pfx = `${hashComponent(vault, obfuscate)}:${hashComponent(collection, obfuscate)}:`\n      const { store } = await tx('readonly')\n      const allKeys = await idbRequest(store.getAllKeys()) as string[]\n\n      if (!obfuscate) {\n        return allKeys\n          .filter(k => typeof k === 'string' && k.startsWith(pfx))\n          .map(k => k.slice(pfx.length))\n      }\n\n      // Obfuscated: need to read values for original IDs\n      const ids: string[] = []\n      for (const k of allKeys) {\n        if (typeof k !== 'string' || !k.startsWith(pfx)) continue\n        const raw = await idbRequest(store.get(k))\n        if (raw && typeof raw === 'object' && '_oi' in (raw as StoredValue)) {\n          ids.push(xorDecode((raw as StoredValue)._oi, obfKey))\n        }\n      }\n      return ids\n    },\n\n    async loadAll(vault) {\n      const pfx = `${hashComponent(vault, obfuscate)}:`\n      const { store } = await tx('readonly')\n      const allKeys = await idbRequest(store.getAllKeys()) as string[]\n      const snapshot: VaultSnapshot = {}\n\n      for (const k of allKeys) {\n        if (typeof k !== 'string' || !k.startsWith(pfx)) continue\n\n        const raw = await idbRequest(store.get(k))\n        if (!raw) continue\n\n        let collection: string\n        let id: string\n        let envelope: EncryptedEnvelope\n\n        if (obfuscate && typeof raw === 'object' && '_e' in (raw as StoredValue)) {\n          const stored = raw as StoredValue\n          collection = xorDecode(stored._oc, obfKey)\n          id = xorDecode(stored._oi, obfKey)\n          envelope = stored._e\n        } else {\n          const rest = k.slice(pfx.length)\n          const colonIdx = rest.indexOf(':')\n          if (colonIdx < 0) continue\n          collection = rest.slice(0, colonIdx)\n          id = rest.slice(colonIdx + 1)\n          envelope = raw as EncryptedEnvelope\n        }\n\n        if (collection.startsWith('_')) continue\n        if (!snapshot[collection]) snapshot[collection] = {}\n        snapshot[collection]![id] = envelope\n      }\n\n      return snapshot\n    },\n\n    async saveAll(vault, data) {\n      const { store, complete } = await tx('readwrite')\n      for (const [collection, records] of Object.entries(data)) {\n        for (const [id, envelope] of Object.entries(records)) {\n          const value = obfuscate ? { _oi: xorEncode(id, obfKey), _oc: xorEncode(collection, obfKey), _e: envelope } : envelope\n          store.put(value, key(vault, collection, id))\n        }\n      }\n      await complete\n    },\n\n    async ping() {\n      try {\n        await openDB()\n        return true\n      } catch {\n        return false\n      }\n    },\n\n    /**\n     * Paginate over a collection backed by IndexedDB.\n     *\n     * Strategy: read every key in the prefix once (sorted), then slice\n     * by cursor offset. IndexedDB's `getAllKeys()` returns sorted keys\n     * efficiently for the modern browsers we target (Chrome 87+,\n     * Firefox 78+, Safari 14+, Edge 88+ — same baseline as the rest of\n     * the build target).\n     */\n    async listPage(vault, collection, cursor, limit = 100) {\n      const pfx = `${hashComponent(vault, obfuscate)}:${hashComponent(collection, obfuscate)}:`\n      const { store } = await tx('readonly')\n      const allKeys = await idbRequest(store.getAllKeys()) as string[]\n      const matchedKeys = allKeys\n        .filter(k => typeof k === 'string' && k.startsWith(pfx))\n        .sort()\n\n      const start = cursor ? parseInt(cursor, 10) : 0\n      const end = Math.min(start + limit, matchedKeys.length)\n\n      const items: Array<{ id: string; envelope: EncryptedEnvelope }> = []\n      for (let i = start; i < end; i++) {\n        const k = matchedKeys[i]!\n        const raw = await idbRequest(store.get(k))\n        if (!raw) continue\n\n        let envelope: EncryptedEnvelope\n        let id: string\n        if (obfuscate && typeof raw === 'object' && '_e' in (raw as StoredValue)) {\n          const stored = raw as StoredValue\n          envelope = stored._e\n          id = xorDecode(stored._oi, obfKey)\n        } else {\n          envelope = raw as EncryptedEnvelope\n          id = k.slice(pfx.length)\n        }\n        items.push({ id, envelope })\n      }\n\n      return {\n        items,\n        nextCursor: end < matchedKeys.length ? String(end) : null,\n      }\n    },\n  }\n}\n"],"mappings":";;;;;;;;;;;;;;;;;;;;AAAA;AAAA;AAAA;AAAA;AAAA;AAkCA,iBAA8B;AA6BvB,SAAS,gBAAgB,UAA6B,CAAC,GAAe;AAC3E,QAAM,SAAS,QAAQ,UAAU;AACjC,QAAM,YAAY,QAAQ,aAAa;AACvC,QAAM,SAAS,YAAY,WAAW,MAAM,IAAI;AAEhD,SAAO,uBAAuB,QAAQ,WAAW,MAAM;AACzD;AAQA,SAAS,MAAM,KAAqB;AAClC,MAAI,OAAO;AACX,WAAS,IAAI,GAAG,IAAI,IAAI,QAAQ,KAAK;AACnC,YAAQ,IAAI,WAAW,CAAC;AACxB,WAAO,KAAK,KAAK,MAAM,QAAU;AAAA,EACnC;AACA,UAAQ,SAAS,GAAG,SAAS,EAAE,EAAE,SAAS,GAAG,GAAG;AAClD;AAEA,SAAS,cAAc,OAAe,WAA4B;AAChE,SAAO,YAAY,MAAM,KAAK,IAAI;AACpC;AAKA,SAAS,UAAU,WAAmB,KAAqB;AACzD,QAAM,QAAQ,IAAI,YAAY,EAAE,OAAO,SAAS;AAChD,QAAM,WAAW,IAAI,YAAY,EAAE,OAAO,GAAG;AAC7C,WAAS,IAAI,GAAG,IAAI,MAAM,QAAQ,KAAK;AACrC,UAAM,CAAC,IAAI,MAAM,CAAC,IAAK,SAAS,IAAI,SAAS,MAAM;AAAA,EACrD;AACA,MAAI,SAAS;AACb,WAAS,IAAI,GAAG,IAAI,MAAM,QAAQ,KAAK;AACrC,cAAU,OAAO,aAAa,MAAM,CAAC,CAAE;AAAA,EACzC;AACA,SAAO,KAAK,MAAM;AACpB;AAGA,SAAS,UAAU,SAAiB,KAAqB;AACvD,QAAM,SAAS,KAAK,OAAO;AAC3B,QAAM,QAAQ,IAAI,WAAW,OAAO,MAAM;AAC1C,QAAM,WAAW,IAAI,YAAY,EAAE,OAAO,GAAG;AAC7C,WAAS,IAAI,GAAG,IAAI,OAAO,QAAQ,KAAK;AACtC,UAAM,CAAC,IAAI,OAAO,WAAW,CAAC,IAAI,SAAS,IAAI,SAAS,MAAM;AAAA,EAChE;AACA,SAAO,IAAI,YAAY,EAAE,OAAO,KAAK;AACvC;AAYA,SAAS,WAAW,QAAwB;AAC1C,SAAO,SAAS;AAClB;AAIA,SAAS,uBAAuB,QAAgB,WAAoB,QAA4B;AAC9F,QAAM,UAAU,GAAG,MAAM;AACzB,QAAM,aAAa;AACnB,MAAI,YAAyC;AAE7C,WAAS,SAA+B;AACtC,QAAI,CAAC,WAAW;AACd,kBAAY,IAAI,QAAQ,CAAC,SAAS,WAAW;AAC3C,cAAM,UAAU,UAAU,KAAK,SAAS,CAAC;AACzC,gBAAQ,kBAAkB,MAAM;AAC9B,gBAAM,KAAK,QAAQ;AACnB,cAAI,CAAC,GAAG,iBAAiB,SAAS,UAAU,GAAG;AAC7C,eAAG,kBAAkB,UAAU;AAAA,UACjC;AAAA,QACF;AACA,gBAAQ,YAAY,MAAM,QAAQ,QAAQ,MAAM;AAChD,gBAAQ,UAAU,MAAM,OAAO,QAAQ,KAAK;AAAA,MAC9C,CAAC;AAAA,IACH;AACA,WAAO;AAAA,EACT;AAEA,WAAS,IAAI,OAAe,YAAoB,IAAoB;AAClE,WAAO,GAAG,cAAc,OAAO,SAAS,CAAC,IAAI,cAAc,YAAY,SAAS,CAAC,IAAI,cAAc,IAAI,SAAS,CAAC;AAAA,EACnH;AAEA,WAAS,GAAG,MAAuF;AACjG,WAAO,OAAO,EAAE,KAAK,QAAM;AACzB,YAAM,cAAc,GAAG,YAAY,YAAY,IAAI;AACnD,YAAM,QAAQ,YAAY,YAAY,UAAU;AAChD,YAAM,WAAW,IAAI,QAAc,CAAC,SAAS,WAAW;AACtD,oBAAY,aAAa,MAAM,QAAQ;AACvC,oBAAY,UAAU,MAAM,OAAO,YAAY,KAAK;AAAA,MACtD,CAAC;AACD,aAAO,EAAE,OAAO,SAAS;AAAA,IAC3B,CAAC;AAAA,EACH;AAEA,WAAS,WAAc,SAAoC;AACzD,WAAO,IAAI,QAAQ,CAAC,SAAS,WAAW;AACtC,cAAQ,YAAY,MAAM,QAAQ,QAAQ,MAAM;AAChD,cAAQ,UAAU,MAAM,OAAO,QAAQ,KAAK;AAAA,IAC9C,CAAC;AAAA,EACH;AAEA,SAAO;AAAA,IACL,MAAM;AAAA,IAEN,MAAM,IAAI,OAAO,YAAY,IAAI;AAC/B,YAAM,EAAE,MAAM,IAAI,MAAM,GAAG,UAAU;AACrC,YAAM,MAAM,MAAM,WAAW,MAAM,IAAI,IAAI,OAAO,YAAY,EAAE,CAAC,CAAC;AAClE,UAAI,CAAC,IAAK,QAAO;AACjB,UAAI,aAAa,OAAO,QAAQ,YAAY,QAAS,KAAqB;AACxE,eAAQ,IAAoB;AAAA,MAC9B;AACA,aAAO;AAAA,IACT;AAAA,IAEA,MAAM,IAAI,OAAO,YAAY,IAAI,UAAU,iBAAiB;AAC1D,YAAM,IAAI,IAAI,OAAO,YAAY,EAAE;AAEnC,YAAM,EAAE,OAAO,SAAS,IAAI,MAAM,GAAG,WAAW;AAChD,UAAI,oBAAoB,QAAW;AACjC,cAAM,WAAW,MAAM,WAAW,MAAM,IAAI,CAAC,CAAC;AAC9C,YAAI,UAAU;AACZ,gBAAM,MAAM,aAAa,QAAS,WAA4B,SAAyB,KAAK;AAC5F,cAAI,IAAI,OAAO,iBAAiB;AAC9B,kBAAM,IAAI,yBAAc,IAAI,IAAI,8BAA8B,eAAe,WAAW,IAAI,EAAE,EAAE;AAAA,UAClG;AAAA,QACF;AAAA,MACF;AAEA,YAAM,QAAQ,YAAY,EAAE,KAAK,UAAU,IAAI,MAAM,GAAG,KAAK,UAAU,YAAY,MAAM,GAAG,IAAI,SAAS,IAAI;AAC7G,YAAM,IAAI,OAAO,CAAC;AAClB,YAAM;AAAA,IACR;AAAA,IAEA,MAAM,OAAO,OAAO,YAAY,IAAI;AAClC,YAAM,EAAE,OAAO,SAAS,IAAI,MAAM,GAAG,WAAW;AAChD,YAAM,OAAO,IAAI,OAAO,YAAY,EAAE,CAAC;AACvC,YAAM;AAAA,IACR;AAAA,IAEA,MAAM,KAAK,OAAO,YAAY;AAC5B,YAAM,MAAM,GAAG,cAAc,OAAO,SAAS,CAAC,IAAI,cAAc,YAAY,SAAS,CAAC;AACtF,YAAM,EAAE,MAAM,IAAI,MAAM,GAAG,UAAU;AACrC,YAAM,UAAU,MAAM,WAAW,MAAM,WAAW,CAAC;AAEnD,UAAI,CAAC,WAAW;AACd,eAAO,QACJ,OAAO,OAAK,OAAO,MAAM,YAAY,EAAE,WAAW,GAAG,CAAC,EACtD,IAAI,OAAK,EAAE,MAAM,IAAI,MAAM,CAAC;AAAA,MACjC;AAGA,YAAM,MAAgB,CAAC;AACvB,iBAAW,KAAK,SAAS;AACvB,YAAI,OAAO,MAAM,YAAY,CAAC,EAAE,WAAW,GAAG,EAAG;AACjD,cAAM,MAAM,MAAM,WAAW,MAAM,IAAI,CAAC,CAAC;AACzC,YAAI,OAAO,OAAO,QAAQ,YAAY,SAAU,KAAqB;AACnE,cAAI,KAAK,UAAW,IAAoB,KAAK,MAAM,CAAC;AAAA,QACtD;AAAA,MACF;AACA,aAAO;AAAA,IACT;AAAA,IAEA,MAAM,QAAQ,OAAO;AACnB,YAAM,MAAM,GAAG,cAAc,OAAO,SAAS,CAAC;AAC9C,YAAM,EAAE,MAAM,IAAI,MAAM,GAAG,UAAU;AACrC,YAAM,UAAU,MAAM,WAAW,MAAM,WAAW,CAAC;AACnD,YAAM,WAA0B,CAAC;AAEjC,iBAAW,KAAK,SAAS;AACvB,YAAI,OAAO,MAAM,YAAY,CAAC,EAAE,WAAW,GAAG,EAAG;AAEjD,cAAM,MAAM,MAAM,WAAW,MAAM,IAAI,CAAC,CAAC;AACzC,YAAI,CAAC,IAAK;AAEV,YAAI;AACJ,YAAI;AACJ,YAAI;AAEJ,YAAI,aAAa,OAAO,QAAQ,YAAY,QAAS,KAAqB;AACxE,gBAAM,SAAS;AACf,uBAAa,UAAU,OAAO,KAAK,MAAM;AACzC,eAAK,UAAU,OAAO,KAAK,MAAM;AACjC,qBAAW,OAAO;AAAA,QACpB,OAAO;AACL,gBAAM,OAAO,EAAE,MAAM,IAAI,MAAM;AAC/B,gBAAM,WAAW,KAAK,QAAQ,GAAG;AACjC,cAAI,WAAW,EAAG;AAClB,uBAAa,KAAK,MAAM,GAAG,QAAQ;AACnC,eAAK,KAAK,MAAM,WAAW,CAAC;AAC5B,qBAAW;AAAA,QACb;AAEA,YAAI,WAAW,WAAW,GAAG,EAAG;AAChC,YAAI,CAAC,SAAS,UAAU,EAAG,UAAS,UAAU,IAAI,CAAC;AACnD,iBAAS,UAAU,EAAG,EAAE,IAAI;AAAA,MAC9B;AAEA,aAAO;AAAA,IACT;AAAA,IAEA,MAAM,QAAQ,OAAO,MAAM;AACzB,YAAM,EAAE,OAAO,SAAS,IAAI,MAAM,GAAG,WAAW;AAChD,iBAAW,CAAC,YAAY,OAAO,KAAK,OAAO,QAAQ,IAAI,GAAG;AACxD,mBAAW,CAAC,IAAI,QAAQ,KAAK,OAAO,QAAQ,OAAO,GAAG;AACpD,gBAAM,QAAQ,YAAY,EAAE,KAAK,UAAU,IAAI,MAAM,GAAG,KAAK,UAAU,YAAY,MAAM,GAAG,IAAI,SAAS,IAAI;AAC7G,gBAAM,IAAI,OAAO,IAAI,OAAO,YAAY,EAAE,CAAC;AAAA,QAC7C;AAAA,MACF;AACA,YAAM;AAAA,IACR;AAAA,IAEA,MAAM,OAAO;AACX,UAAI;AACF,cAAM,OAAO;AACb,eAAO;AAAA,MACT,QAAQ;AACN,eAAO;AAAA,MACT;AAAA,IACF;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,IAWA,MAAM,SAAS,OAAO,YAAY,QAAQ,QAAQ,KAAK;AACrD,YAAM,MAAM,GAAG,cAAc,OAAO,SAAS,CAAC,IAAI,cAAc,YAAY,SAAS,CAAC;AACtF,YAAM,EAAE,MAAM,IAAI,MAAM,GAAG,UAAU;AACrC,YAAM,UAAU,MAAM,WAAW,MAAM,WAAW,CAAC;AACnD,YAAM,cAAc,QACjB,OAAO,OAAK,OAAO,MAAM,YAAY,EAAE,WAAW,GAAG,CAAC,EACtD,KAAK;AAER,YAAM,QAAQ,SAAS,SAAS,QAAQ,EAAE,IAAI;AAC9C,YAAM,MAAM,KAAK,IAAI,QAAQ,OAAO,YAAY,MAAM;AAEtD,YAAM,QAA4D,CAAC;AACnE,eAAS,IAAI,OAAO,IAAI,KAAK,KAAK;AAChC,cAAM,IAAI,YAAY,CAAC;AACvB,cAAM,MAAM,MAAM,WAAW,MAAM,IAAI,CAAC,CAAC;AACzC,YAAI,CAAC,IAAK;AAEV,YAAI;AACJ,YAAI;AACJ,YAAI,aAAa,OAAO,QAAQ,YAAY,QAAS,KAAqB;AACxE,gBAAM,SAAS;AACf,qBAAW,OAAO;AAClB,eAAK,UAAU,OAAO,KAAK,MAAM;AAAA,QACnC,OAAO;AACL,qBAAW;AACX,eAAK,EAAE,MAAM,IAAI,MAAM;AAAA,QACzB;AACA,cAAM,KAAK,EAAE,IAAI,SAAS,CAAC;AAAA,MAC7B;AAEA,aAAO;AAAA,QACL;AAAA,QACA,YAAY,MAAM,YAAY,SAAS,OAAO,GAAG,IAAI;AAAA,MACvD;AAAA,IACF;AAAA,EACF;AACF;","names":[]}

package/dist/index.d.cts

@@ -0,0 +1,64 @@
+import { NoydbStore } from '@noy-db/hub';
+
+/**
+ * **@noy-db/to-browser-idb** — IndexedDB-backed NOYDB store.
+ *
+ * The recommended browser store. Uses a single IndexedDB database
+ * (`{prefix}_noydb`) with one object store (`records`). Composite string
+ * keys (`{vault}:{collection}:{id}`) avoid the need for complex indexes.
+ *
+ * ## Why IndexedDB over localStorage
+ *
+ * - **Larger quota** — typically 50–80% of available disk vs. localStorage's
+ *   5 MB hard cap.
+ * - **True atomic CAS** — the compare-and-swap check and write happen inside
+ *   a single `readwrite` IDB transaction, so concurrent writes from two tabs
+ *   cannot interleave. (`casAtomic: true`.)
+ * - **Async API** — doesn't block the main thread during large reads.
+ *
+ * ## Obfuscation mode
+ *
+ * Identical to `@noy-db/to-browser-local` — FNV-1a hashed keys + XOR-encoded
+ * metadata. Envelope `_data` is always AES-GCM ciphertext regardless of this
+ * setting.
+ *
+ * ## Capabilities
+ *
+ * | Capability | Value |
+ * |---|---|
+ * | `casAtomic` | `true` — single readwrite IDB transaction per put |
+ * | `listPage` | ✓ — cursor-based pagination via `getAllKeys()` |
+ * | `ping` | ✓ — `openDB()` round-trip |
+ *
+ * @packageDocumentation
+ */
+
+/**
+ * Options for `browserIdbStore()`.
+ *
+ * All NOYDB data is stored in a single IndexedDB database named
+ * `{prefix}_noydb`, using composite string keys of the form
+ * `{vault}:{collection}:{id}`. CAS checks and writes happen inside a
+ * single `readwrite` IDB transaction, giving true atomic compare-and-swap
+ * (`casAtomic: true`). Enable `obfuscate` to hash key components and
+ * XOR-encode metadata — same obfuscation model as `browserLocalStore`.
+ */
+interface BrowserIdbOptions {
+    /** Storage key prefix. Default: 'noydb'. */
+    prefix?: string;
+    /** Obfuscate storage keys so collection/record names are not readable. Default: false. */
+    obfuscate?: boolean;
+}
+/**
+ * Create an IndexedDB-backed store adapter.
+ *
+ * Key scheme (normal):    `{vault}:{collection}:{id}`
+ * Key scheme (obfuscated): `{hash}:{hash}:{hash}`
+ *
+ * StoreCapabilities:
+ *   casAtomic: true  — CAS check + write happen inside a single readwrite IDB transaction
+ *   auth: { kind: 'browser-origin', flow: 'implicit', required: false }
+ */
+declare function browserIdbStore(options?: BrowserIdbOptions): NoydbStore;
+
+export { type BrowserIdbOptions, browserIdbStore };

package/dist/index.d.ts

@@ -0,0 +1,64 @@
+import { NoydbStore } from '@noy-db/hub';
+
+/**
+ * **@noy-db/to-browser-idb** — IndexedDB-backed NOYDB store.
+ *
+ * The recommended browser store. Uses a single IndexedDB database
+ * (`{prefix}_noydb`) with one object store (`records`). Composite string
+ * keys (`{vault}:{collection}:{id}`) avoid the need for complex indexes.
+ *
+ * ## Why IndexedDB over localStorage
+ *
+ * - **Larger quota** — typically 50–80% of available disk vs. localStorage's
+ *   5 MB hard cap.
+ * - **True atomic CAS** — the compare-and-swap check and write happen inside
+ *   a single `readwrite` IDB transaction, so concurrent writes from two tabs
+ *   cannot interleave. (`casAtomic: true`.)
+ * - **Async API** — doesn't block the main thread during large reads.
+ *
+ * ## Obfuscation mode
+ *
+ * Identical to `@noy-db/to-browser-local` — FNV-1a hashed keys + XOR-encoded
+ * metadata. Envelope `_data` is always AES-GCM ciphertext regardless of this
+ * setting.
+ *
+ * ## Capabilities
+ *
+ * | Capability | Value |
+ * |---|---|
+ * | `casAtomic` | `true` — single readwrite IDB transaction per put |
+ * | `listPage` | ✓ — cursor-based pagination via `getAllKeys()` |
+ * | `ping` | ✓ — `openDB()` round-trip |
+ *
+ * @packageDocumentation
+ */
+
+/**
+ * Options for `browserIdbStore()`.
+ *
+ * All NOYDB data is stored in a single IndexedDB database named
+ * `{prefix}_noydb`, using composite string keys of the form
+ * `{vault}:{collection}:{id}`. CAS checks and writes happen inside a
+ * single `readwrite` IDB transaction, giving true atomic compare-and-swap
+ * (`casAtomic: true`). Enable `obfuscate` to hash key components and
+ * XOR-encode metadata — same obfuscation model as `browserLocalStore`.
+ */
+interface BrowserIdbOptions {
+    /** Storage key prefix. Default: 'noydb'. */
+    prefix?: string;
+    /** Obfuscate storage keys so collection/record names are not readable. Default: false. */
+    obfuscate?: boolean;
+}
+/**
+ * Create an IndexedDB-backed store adapter.
+ *
+ * Key scheme (normal):    `{vault}:{collection}:{id}`
+ * Key scheme (obfuscated): `{hash}:{hash}:{hash}`
+ *
+ * StoreCapabilities:
+ *   casAtomic: true  — CAS check + write happen inside a single readwrite IDB transaction
+ *   auth: { kind: 'browser-origin', flow: 'implicit', required: false }
+ */
+declare function browserIdbStore(options?: BrowserIdbOptions): NoydbStore;
+
+export { type BrowserIdbOptions, browserIdbStore };

package/dist/index.js

@@ -0,0 +1,225 @@
+// src/index.ts
+import { ConflictError } from "@noy-db/hub";
+function browserIdbStore(options = {}) {
+  const prefix = options.prefix ?? "noydb";
+  const obfuscate = options.obfuscate ?? false;
+  const obfKey = obfuscate ? makeObfKey(prefix) : "";
+  return createIndexedDBAdapter(prefix, obfuscate, obfKey);
+}
+function fnv1a(str) {
+  let hash = 2166136261;
+  for (let i = 0; i < str.length; i++) {
+    hash ^= str.charCodeAt(i);
+    hash = Math.imul(hash, 16777619);
+  }
+  return (hash >>> 0).toString(16).padStart(8, "0");
+}
+function hashComponent(value, obfuscate) {
+  return obfuscate ? fnv1a(value) : value;
+}
+function xorEncode(plaintext, key) {
+  const bytes = new TextEncoder().encode(plaintext);
+  const keyBytes = new TextEncoder().encode(key);
+  for (let i = 0; i < bytes.length; i++) {
+    bytes[i] = bytes[i] ^ keyBytes[i % keyBytes.length];
+  }
+  let binary = "";
+  for (let i = 0; i < bytes.length; i++) {
+    binary += String.fromCharCode(bytes[i]);
+  }
+  return btoa(binary);
+}
+function xorDecode(encoded, key) {
+  const binary = atob(encoded);
+  const bytes = new Uint8Array(binary.length);
+  const keyBytes = new TextEncoder().encode(key);
+  for (let i = 0; i < binary.length; i++) {
+    bytes[i] = binary.charCodeAt(i) ^ keyBytes[i % keyBytes.length];
+  }
+  return new TextDecoder().decode(bytes);
+}
+function makeObfKey(prefix) {
+  return prefix + ":noydb-obf-key";
+}
+function createIndexedDBAdapter(prefix, obfuscate, obfKey) {
+  const DB_NAME = `${prefix}_noydb`;
+  const STORE_NAME = "records";
+  let dbPromise = null;
+  function openDB() {
+    if (!dbPromise) {
+      dbPromise = new Promise((resolve, reject) => {
+        const request = indexedDB.open(DB_NAME, 1);
+        request.onupgradeneeded = () => {
+          const db = request.result;
+          if (!db.objectStoreNames.contains(STORE_NAME)) {
+            db.createObjectStore(STORE_NAME);
+          }
+        };
+        request.onsuccess = () => resolve(request.result);
+        request.onerror = () => reject(request.error);
+      });
+    }
+    return dbPromise;
+  }
+  function key(vault, collection, id) {
+    return `${hashComponent(vault, obfuscate)}:${hashComponent(collection, obfuscate)}:${hashComponent(id, obfuscate)}`;
+  }
+  function tx(mode) {
+    return openDB().then((db) => {
+      const transaction = db.transaction(STORE_NAME, mode);
+      const store = transaction.objectStore(STORE_NAME);
+      const complete = new Promise((resolve, reject) => {
+        transaction.oncomplete = () => resolve();
+        transaction.onerror = () => reject(transaction.error);
+      });
+      return { store, complete };
+    });
+  }
+  function idbRequest(request) {
+    return new Promise((resolve, reject) => {
+      request.onsuccess = () => resolve(request.result);
+      request.onerror = () => reject(request.error);
+    });
+  }
+  return {
+    name: "browser:indexedDB",
+    async get(vault, collection, id) {
+      const { store } = await tx("readonly");
+      const raw = await idbRequest(store.get(key(vault, collection, id)));
+      if (!raw) return null;
+      if (obfuscate && typeof raw === "object" && "_e" in raw) {
+        return raw._e;
+      }
+      return raw;
+    },
+    async put(vault, collection, id, envelope, expectedVersion) {
+      const k = key(vault, collection, id);
+      const { store, complete } = await tx("readwrite");
+      if (expectedVersion !== void 0) {
+        const existing = await idbRequest(store.get(k));
+        if (existing) {
+          const env = obfuscate && "_e" in existing ? existing._e : existing;
+          if (env._v !== expectedVersion) {
+            throw new ConflictError(env._v, `Version conflict: expected ${expectedVersion}, found ${env._v}`);
+          }
+        }
+      }
+      const value = obfuscate ? { _oi: xorEncode(id, obfKey), _oc: xorEncode(collection, obfKey), _e: envelope } : envelope;
+      store.put(value, k);
+      await complete;
+    },
+    async delete(vault, collection, id) {
+      const { store, complete } = await tx("readwrite");
+      store.delete(key(vault, collection, id));
+      await complete;
+    },
+    async list(vault, collection) {
+      const pfx = `${hashComponent(vault, obfuscate)}:${hashComponent(collection, obfuscate)}:`;
+      const { store } = await tx("readonly");
+      const allKeys = await idbRequest(store.getAllKeys());
+      if (!obfuscate) {
+        return allKeys.filter((k) => typeof k === "string" && k.startsWith(pfx)).map((k) => k.slice(pfx.length));
+      }
+      const ids = [];
+      for (const k of allKeys) {
+        if (typeof k !== "string" || !k.startsWith(pfx)) continue;
+        const raw = await idbRequest(store.get(k));
+        if (raw && typeof raw === "object" && "_oi" in raw) {
+          ids.push(xorDecode(raw._oi, obfKey));
+        }
+      }
+      return ids;
+    },
+    async loadAll(vault) {
+      const pfx = `${hashComponent(vault, obfuscate)}:`;
+      const { store } = await tx("readonly");
+      const allKeys = await idbRequest(store.getAllKeys());
+      const snapshot = {};
+      for (const k of allKeys) {
+        if (typeof k !== "string" || !k.startsWith(pfx)) continue;
+        const raw = await idbRequest(store.get(k));
+        if (!raw) continue;
+        let collection;
+        let id;
+        let envelope;
+        if (obfuscate && typeof raw === "object" && "_e" in raw) {
+          const stored = raw;
+          collection = xorDecode(stored._oc, obfKey);
+          id = xorDecode(stored._oi, obfKey);
+          envelope = stored._e;
+        } else {
+          const rest = k.slice(pfx.length);
+          const colonIdx = rest.indexOf(":");
+          if (colonIdx < 0) continue;
+          collection = rest.slice(0, colonIdx);
+          id = rest.slice(colonIdx + 1);
+          envelope = raw;
+        }
+        if (collection.startsWith("_")) continue;
+        if (!snapshot[collection]) snapshot[collection] = {};
+        snapshot[collection][id] = envelope;
+      }
+      return snapshot;
+    },
+    async saveAll(vault, data) {
+      const { store, complete } = await tx("readwrite");
+      for (const [collection, records] of Object.entries(data)) {
+        for (const [id, envelope] of Object.entries(records)) {
+          const value = obfuscate ? { _oi: xorEncode(id, obfKey), _oc: xorEncode(collection, obfKey), _e: envelope } : envelope;
+          store.put(value, key(vault, collection, id));
+        }
+      }
+      await complete;
+    },
+    async ping() {
+      try {
+        await openDB();
+        return true;
+      } catch {
+        return false;
+      }
+    },
+    /**
+     * Paginate over a collection backed by IndexedDB.
+     *
+     * Strategy: read every key in the prefix once (sorted), then slice
+     * by cursor offset. IndexedDB's `getAllKeys()` returns sorted keys
+     * efficiently for the modern browsers we target (Chrome 87+,
+     * Firefox 78+, Safari 14+, Edge 88+ — same baseline as the rest of
+     * the build target).
+     */
+    async listPage(vault, collection, cursor, limit = 100) {
+      const pfx = `${hashComponent(vault, obfuscate)}:${hashComponent(collection, obfuscate)}:`;
+      const { store } = await tx("readonly");
+      const allKeys = await idbRequest(store.getAllKeys());
+      const matchedKeys = allKeys.filter((k) => typeof k === "string" && k.startsWith(pfx)).sort();
+      const start = cursor ? parseInt(cursor, 10) : 0;
+      const end = Math.min(start + limit, matchedKeys.length);
+      const items = [];
+      for (let i = start; i < end; i++) {
+        const k = matchedKeys[i];
+        const raw = await idbRequest(store.get(k));
+        if (!raw) continue;
+        let envelope;
+        let id;
+        if (obfuscate && typeof raw === "object" && "_e" in raw) {
+          const stored = raw;
+          envelope = stored._e;
+          id = xorDecode(stored._oi, obfKey);
+        } else {
+          envelope = raw;
+          id = k.slice(pfx.length);
+        }
+        items.push({ id, envelope });
+      }
+      return {
+        items,
+        nextCursor: end < matchedKeys.length ? String(end) : null
+      };
+    }
+  };
+}
+export {
+  browserIdbStore
+};
+//# sourceMappingURL=index.js.map

package/dist/index.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../src/index.ts"],"sourcesContent":["/**\n * **@noy-db/to-browser-idb** — IndexedDB-backed NOYDB store.\n *\n * The recommended browser store. Uses a single IndexedDB database\n * (`{prefix}_noydb`) with one object store (`records`). Composite string\n * keys (`{vault}:{collection}:{id}`) avoid the need for complex indexes.\n *\n * ## Why IndexedDB over localStorage\n *\n * - **Larger quota** — typically 50–80% of available disk vs. localStorage's\n *   5 MB hard cap.\n * - **True atomic CAS** — the compare-and-swap check and write happen inside\n *   a single `readwrite` IDB transaction, so concurrent writes from two tabs\n *   cannot interleave. (`casAtomic: true`.)\n * - **Async API** — doesn't block the main thread during large reads.\n *\n * ## Obfuscation mode\n *\n * Identical to `@noy-db/to-browser-local` — FNV-1a hashed keys + XOR-encoded\n * metadata. Envelope `_data` is always AES-GCM ciphertext regardless of this\n * setting.\n *\n * ## Capabilities\n *\n * | Capability | Value |\n * |---|---|\n * | `casAtomic` | `true` — single readwrite IDB transaction per put |\n * | `listPage` | ✓ — cursor-based pagination via `getAllKeys()` |\n * | `ping` | ✓ — `openDB()` round-trip |\n *\n * @packageDocumentation\n */\n\nimport type { NoydbStore, EncryptedEnvelope, VaultSnapshot } from '@noy-db/hub'\nimport { ConflictError } from '@noy-db/hub'\n\n/**\n * Options for `browserIdbStore()`.\n *\n * All NOYDB data is stored in a single IndexedDB database named\n * `{prefix}_noydb`, using composite string keys of the form\n * `{vault}:{collection}:{id}`. CAS checks and writes happen inside a\n * single `readwrite` IDB transaction, giving true atomic compare-and-swap\n * (`casAtomic: true`). Enable `obfuscate` to hash key components and\n * XOR-encode metadata — same obfuscation model as `browserLocalStore`.\n */\nexport interface BrowserIdbOptions {\n  /** Storage key prefix. Default: 'noydb'. */\n  prefix?: string\n  /** Obfuscate storage keys so collection/record names are not readable. Default: false. */\n  obfuscate?: boolean\n}\n\n/**\n * Create an IndexedDB-backed store adapter.\n *\n * Key scheme (normal):    `{vault}:{collection}:{id}`\n * Key scheme (obfuscated): `{hash}:{hash}:{hash}`\n *\n * StoreCapabilities:\n *   casAtomic: true  — CAS check + write happen inside a single readwrite IDB transaction\n *   auth: { kind: 'browser-origin', flow: 'implicit', required: false }\n */\nexport function browserIdbStore(options: BrowserIdbOptions = {}): NoydbStore {\n  const prefix = options.prefix ?? 'noydb'\n  const obfuscate = options.obfuscate ?? false\n  const obfKey = obfuscate ? makeObfKey(prefix) : ''\n\n  return createIndexedDBAdapter(prefix, obfuscate, obfKey)\n}\n\n// ─── Key Obfuscation ───────────────────────────────────────────────────\n\n/**\n * FNV-1a 32-bit hash → 8-char hex string.\n * Not cryptographic — just makes keys opaque to casual inspection.\n */\nfunction fnv1a(str: string): string {\n  let hash = 0x811c9dc5\n  for (let i = 0; i < str.length; i++) {\n    hash ^= str.charCodeAt(i)\n    hash = Math.imul(hash, 0x01000193)\n  }\n  return (hash >>> 0).toString(16).padStart(8, '0')\n}\n\nfunction hashComponent(value: string, obfuscate: boolean): string {\n  return obfuscate ? fnv1a(value) : value\n}\n\n// ─── XOR Encode/Decode (makes metadata unreadable in storage) ──────────\n\n/** XOR-encode a string with a repeating key, return base64. */\nfunction xorEncode(plaintext: string, key: string): string {\n  const bytes = new TextEncoder().encode(plaintext)\n  const keyBytes = new TextEncoder().encode(key)\n  for (let i = 0; i < bytes.length; i++) {\n    bytes[i] = bytes[i]! ^ keyBytes[i % keyBytes.length]!\n  }\n  let binary = ''\n  for (let i = 0; i < bytes.length; i++) {\n    binary += String.fromCharCode(bytes[i]!)\n  }\n  return btoa(binary)\n}\n\n/** Decode a base64 XOR-encoded string. */\nfunction xorDecode(encoded: string, key: string): string {\n  const binary = atob(encoded)\n  const bytes = new Uint8Array(binary.length)\n  const keyBytes = new TextEncoder().encode(key)\n  for (let i = 0; i < binary.length; i++) {\n    bytes[i] = binary.charCodeAt(i) ^ keyBytes[i % keyBytes.length]!\n  }\n  return new TextDecoder().decode(bytes)\n}\n\n/** Stored value wraps envelope + encoded original key parts. */\ninterface StoredValue {\n  /** Encoded original record ID. */\n  _oi: string\n  /** Encoded original collection name. */\n  _oc: string\n  /** The encrypted envelope. */\n  _e: EncryptedEnvelope\n}\n\nfunction makeObfKey(prefix: string): string {\n  return prefix + ':noydb-obf-key'\n}\n\n// ─── IndexedDB Backend ─────────────────────────────────────────────────\n\nfunction createIndexedDBAdapter(prefix: string, obfuscate: boolean, obfKey: string): NoydbStore {\n  const DB_NAME = `${prefix}_noydb`\n  const STORE_NAME = 'records'\n  let dbPromise: Promise<IDBDatabase> | null = null\n\n  function openDB(): Promise<IDBDatabase> {\n    if (!dbPromise) {\n      dbPromise = new Promise((resolve, reject) => {\n        const request = indexedDB.open(DB_NAME, 1)\n        request.onupgradeneeded = () => {\n          const db = request.result\n          if (!db.objectStoreNames.contains(STORE_NAME)) {\n            db.createObjectStore(STORE_NAME)\n          }\n        }\n        request.onsuccess = () => resolve(request.result)\n        request.onerror = () => reject(request.error)\n      })\n    }\n    return dbPromise\n  }\n\n  function key(vault: string, collection: string, id: string): string {\n    return `${hashComponent(vault, obfuscate)}:${hashComponent(collection, obfuscate)}:${hashComponent(id, obfuscate)}`\n  }\n\n  function tx(mode: IDBTransactionMode): Promise<{ store: IDBObjectStore; complete: Promise<void> }> {\n    return openDB().then(db => {\n      const transaction = db.transaction(STORE_NAME, mode)\n      const store = transaction.objectStore(STORE_NAME)\n      const complete = new Promise<void>((resolve, reject) => {\n        transaction.oncomplete = () => resolve()\n        transaction.onerror = () => reject(transaction.error)\n      })\n      return { store, complete }\n    })\n  }\n\n  function idbRequest<T>(request: IDBRequest<T>): Promise<T> {\n    return new Promise((resolve, reject) => {\n      request.onsuccess = () => resolve(request.result)\n      request.onerror = () => reject(request.error)\n    })\n  }\n\n  return {\n    name: 'browser:indexedDB',\n\n    async get(vault, collection, id) {\n      const { store } = await tx('readonly')\n      const raw = await idbRequest(store.get(key(vault, collection, id)))\n      if (!raw) return null\n      if (obfuscate && typeof raw === 'object' && '_e' in (raw as StoredValue)) {\n        return (raw as StoredValue)._e\n      }\n      return raw as EncryptedEnvelope\n    },\n\n    async put(vault, collection, id, envelope, expectedVersion) {\n      const k = key(vault, collection, id)\n\n      const { store, complete } = await tx('readwrite')\n      if (expectedVersion !== undefined) {\n        const existing = await idbRequest(store.get(k))\n        if (existing) {\n          const env = obfuscate && '_e' in (existing as StoredValue) ? (existing as StoredValue)._e : existing as EncryptedEnvelope\n          if (env._v !== expectedVersion) {\n            throw new ConflictError(env._v, `Version conflict: expected ${expectedVersion}, found ${env._v}`)\n          }\n        }\n      }\n\n      const value = obfuscate ? { _oi: xorEncode(id, obfKey), _oc: xorEncode(collection, obfKey), _e: envelope } : envelope\n      store.put(value, k)\n      await complete\n    },\n\n    async delete(vault, collection, id) {\n      const { store, complete } = await tx('readwrite')\n      store.delete(key(vault, collection, id))\n      await complete\n    },\n\n    async list(vault, collection) {\n      const pfx = `${hashComponent(vault, obfuscate)}:${hashComponent(collection, obfuscate)}:`\n      const { store } = await tx('readonly')\n      const allKeys = await idbRequest(store.getAllKeys()) as string[]\n\n      if (!obfuscate) {\n        return allKeys\n          .filter(k => typeof k === 'string' && k.startsWith(pfx))\n          .map(k => k.slice(pfx.length))\n      }\n\n      // Obfuscated: need to read values for original IDs\n      const ids: string[] = []\n      for (const k of allKeys) {\n        if (typeof k !== 'string' || !k.startsWith(pfx)) continue\n        const raw = await idbRequest(store.get(k))\n        if (raw && typeof raw === 'object' && '_oi' in (raw as StoredValue)) {\n          ids.push(xorDecode((raw as StoredValue)._oi, obfKey))\n        }\n      }\n      return ids\n    },\n\n    async loadAll(vault) {\n      const pfx = `${hashComponent(vault, obfuscate)}:`\n      const { store } = await tx('readonly')\n      const allKeys = await idbRequest(store.getAllKeys()) as string[]\n      const snapshot: VaultSnapshot = {}\n\n      for (const k of allKeys) {\n        if (typeof k !== 'string' || !k.startsWith(pfx)) continue\n\n        const raw = await idbRequest(store.get(k))\n        if (!raw) continue\n\n        let collection: string\n        let id: string\n        let envelope: EncryptedEnvelope\n\n        if (obfuscate && typeof raw === 'object' && '_e' in (raw as StoredValue)) {\n          const stored = raw as StoredValue\n          collection = xorDecode(stored._oc, obfKey)\n          id = xorDecode(stored._oi, obfKey)\n          envelope = stored._e\n        } else {\n          const rest = k.slice(pfx.length)\n          const colonIdx = rest.indexOf(':')\n          if (colonIdx < 0) continue\n          collection = rest.slice(0, colonIdx)\n          id = rest.slice(colonIdx + 1)\n          envelope = raw as EncryptedEnvelope\n        }\n\n        if (collection.startsWith('_')) continue\n        if (!snapshot[collection]) snapshot[collection] = {}\n        snapshot[collection]![id] = envelope\n      }\n\n      return snapshot\n    },\n\n    async saveAll(vault, data) {\n      const { store, complete } = await tx('readwrite')\n      for (const [collection, records] of Object.entries(data)) {\n        for (const [id, envelope] of Object.entries(records)) {\n          const value = obfuscate ? { _oi: xorEncode(id, obfKey), _oc: xorEncode(collection, obfKey), _e: envelope } : envelope\n          store.put(value, key(vault, collection, id))\n        }\n      }\n      await complete\n    },\n\n    async ping() {\n      try {\n        await openDB()\n        return true\n      } catch {\n        return false\n      }\n    },\n\n    /**\n     * Paginate over a collection backed by IndexedDB.\n     *\n     * Strategy: read every key in the prefix once (sorted), then slice\n     * by cursor offset. IndexedDB's `getAllKeys()` returns sorted keys\n     * efficiently for the modern browsers we target (Chrome 87+,\n     * Firefox 78+, Safari 14+, Edge 88+ — same baseline as the rest of\n     * the build target).\n     */\n    async listPage(vault, collection, cursor, limit = 100) {\n      const pfx = `${hashComponent(vault, obfuscate)}:${hashComponent(collection, obfuscate)}:`\n      const { store } = await tx('readonly')\n      const allKeys = await idbRequest(store.getAllKeys()) as string[]\n      const matchedKeys = allKeys\n        .filter(k => typeof k === 'string' && k.startsWith(pfx))\n        .sort()\n\n      const start = cursor ? parseInt(cursor, 10) : 0\n      const end = Math.min(start + limit, matchedKeys.length)\n\n      const items: Array<{ id: string; envelope: EncryptedEnvelope }> = []\n      for (let i = start; i < end; i++) {\n        const k = matchedKeys[i]!\n        const raw = await idbRequest(store.get(k))\n        if (!raw) continue\n\n        let envelope: EncryptedEnvelope\n        let id: string\n        if (obfuscate && typeof raw === 'object' && '_e' in (raw as StoredValue)) {\n          const stored = raw as StoredValue\n          envelope = stored._e\n          id = xorDecode(stored._oi, obfKey)\n        } else {\n          envelope = raw as EncryptedEnvelope\n          id = k.slice(pfx.length)\n        }\n        items.push({ id, envelope })\n      }\n\n      return {\n        items,\n        nextCursor: end < matchedKeys.length ? String(end) : null,\n      }\n    },\n  }\n}\n"],"mappings":";AAkCA,SAAS,qBAAqB;AA6BvB,SAAS,gBAAgB,UAA6B,CAAC,GAAe;AAC3E,QAAM,SAAS,QAAQ,UAAU;AACjC,QAAM,YAAY,QAAQ,aAAa;AACvC,QAAM,SAAS,YAAY,WAAW,MAAM,IAAI;AAEhD,SAAO,uBAAuB,QAAQ,WAAW,MAAM;AACzD;AAQA,SAAS,MAAM,KAAqB;AAClC,MAAI,OAAO;AACX,WAAS,IAAI,GAAG,IAAI,IAAI,QAAQ,KAAK;AACnC,YAAQ,IAAI,WAAW,CAAC;AACxB,WAAO,KAAK,KAAK,MAAM,QAAU;AAAA,EACnC;AACA,UAAQ,SAAS,GAAG,SAAS,EAAE,EAAE,SAAS,GAAG,GAAG;AAClD;AAEA,SAAS,cAAc,OAAe,WAA4B;AAChE,SAAO,YAAY,MAAM,KAAK,IAAI;AACpC;AAKA,SAAS,UAAU,WAAmB,KAAqB;AACzD,QAAM,QAAQ,IAAI,YAAY,EAAE,OAAO,SAAS;AAChD,QAAM,WAAW,IAAI,YAAY,EAAE,OAAO,GAAG;AAC7C,WAAS,IAAI,GAAG,IAAI,MAAM,QAAQ,KAAK;AACrC,UAAM,CAAC,IAAI,MAAM,CAAC,IAAK,SAAS,IAAI,SAAS,MAAM;AAAA,EACrD;AACA,MAAI,SAAS;AACb,WAAS,IAAI,GAAG,IAAI,MAAM,QAAQ,KAAK;AACrC,cAAU,OAAO,aAAa,MAAM,CAAC,CAAE;AAAA,EACzC;AACA,SAAO,KAAK,MAAM;AACpB;AAGA,SAAS,UAAU,SAAiB,KAAqB;AACvD,QAAM,SAAS,KAAK,OAAO;AAC3B,QAAM,QAAQ,IAAI,WAAW,OAAO,MAAM;AAC1C,QAAM,WAAW,IAAI,YAAY,EAAE,OAAO,GAAG;AAC7C,WAAS,IAAI,GAAG,IAAI,OAAO,QAAQ,KAAK;AACtC,UAAM,CAAC,IAAI,OAAO,WAAW,CAAC,IAAI,SAAS,IAAI,SAAS,MAAM;AAAA,EAChE;AACA,SAAO,IAAI,YAAY,EAAE,OAAO,KAAK;AACvC;AAYA,SAAS,WAAW,QAAwB;AAC1C,SAAO,SAAS;AAClB;AAIA,SAAS,uBAAuB,QAAgB,WAAoB,QAA4B;AAC9F,QAAM,UAAU,GAAG,MAAM;AACzB,QAAM,aAAa;AACnB,MAAI,YAAyC;AAE7C,WAAS,SAA+B;AACtC,QAAI,CAAC,WAAW;AACd,kBAAY,IAAI,QAAQ,CAAC,SAAS,WAAW;AAC3C,cAAM,UAAU,UAAU,KAAK,SAAS,CAAC;AACzC,gBAAQ,kBAAkB,MAAM;AAC9B,gBAAM,KAAK,QAAQ;AACnB,cAAI,CAAC,GAAG,iBAAiB,SAAS,UAAU,GAAG;AAC7C,eAAG,kBAAkB,UAAU;AAAA,UACjC;AAAA,QACF;AACA,gBAAQ,YAAY,MAAM,QAAQ,QAAQ,MAAM;AAChD,gBAAQ,UAAU,MAAM,OAAO,QAAQ,KAAK;AAAA,MAC9C,CAAC;AAAA,IACH;AACA,WAAO;AAAA,EACT;AAEA,WAAS,IAAI,OAAe,YAAoB,IAAoB;AAClE,WAAO,GAAG,cAAc,OAAO,SAAS,CAAC,IAAI,cAAc,YAAY,SAAS,CAAC,IAAI,cAAc,IAAI,SAAS,CAAC;AAAA,EACnH;AAEA,WAAS,GAAG,MAAuF;AACjG,WAAO,OAAO,EAAE,KAAK,QAAM;AACzB,YAAM,cAAc,GAAG,YAAY,YAAY,IAAI;AACnD,YAAM,QAAQ,YAAY,YAAY,UAAU;AAChD,YAAM,WAAW,IAAI,QAAc,CAAC,SAAS,WAAW;AACtD,oBAAY,aAAa,MAAM,QAAQ;AACvC,oBAAY,UAAU,MAAM,OAAO,YAAY,KAAK;AAAA,MACtD,CAAC;AACD,aAAO,EAAE,OAAO,SAAS;AAAA,IAC3B,CAAC;AAAA,EACH;AAEA,WAAS,WAAc,SAAoC;AACzD,WAAO,IAAI,QAAQ,CAAC,SAAS,WAAW;AACtC,cAAQ,YAAY,MAAM,QAAQ,QAAQ,MAAM;AAChD,cAAQ,UAAU,MAAM,OAAO,QAAQ,KAAK;AAAA,IAC9C,CAAC;AAAA,EACH;AAEA,SAAO;AAAA,IACL,MAAM;AAAA,IAEN,MAAM,IAAI,OAAO,YAAY,IAAI;AAC/B,YAAM,EAAE,MAAM,IAAI,MAAM,GAAG,UAAU;AACrC,YAAM,MAAM,MAAM,WAAW,MAAM,IAAI,IAAI,OAAO,YAAY,EAAE,CAAC,CAAC;AAClE,UAAI,CAAC,IAAK,QAAO;AACjB,UAAI,aAAa,OAAO,QAAQ,YAAY,QAAS,KAAqB;AACxE,eAAQ,IAAoB;AAAA,MAC9B;AACA,aAAO;AAAA,IACT;AAAA,IAEA,MAAM,IAAI,OAAO,YAAY,IAAI,UAAU,iBAAiB;AAC1D,YAAM,IAAI,IAAI,OAAO,YAAY,EAAE;AAEnC,YAAM,EAAE,OAAO,SAAS,IAAI,MAAM,GAAG,WAAW;AAChD,UAAI,oBAAoB,QAAW;AACjC,cAAM,WAAW,MAAM,WAAW,MAAM,IAAI,CAAC,CAAC;AAC9C,YAAI,UAAU;AACZ,gBAAM,MAAM,aAAa,QAAS,WAA4B,SAAyB,KAAK;AAC5F,cAAI,IAAI,OAAO,iBAAiB;AAC9B,kBAAM,IAAI,cAAc,IAAI,IAAI,8BAA8B,eAAe,WAAW,IAAI,EAAE,EAAE;AAAA,UAClG;AAAA,QACF;AAAA,MACF;AAEA,YAAM,QAAQ,YAAY,EAAE,KAAK,UAAU,IAAI,MAAM,GAAG,KAAK,UAAU,YAAY,MAAM,GAAG,IAAI,SAAS,IAAI;AAC7G,YAAM,IAAI,OAAO,CAAC;AAClB,YAAM;AAAA,IACR;AAAA,IAEA,MAAM,OAAO,OAAO,YAAY,IAAI;AAClC,YAAM,EAAE,OAAO,SAAS,IAAI,MAAM,GAAG,WAAW;AAChD,YAAM,OAAO,IAAI,OAAO,YAAY,EAAE,CAAC;AACvC,YAAM;AAAA,IACR;AAAA,IAEA,MAAM,KAAK,OAAO,YAAY;AAC5B,YAAM,MAAM,GAAG,cAAc,OAAO,SAAS,CAAC,IAAI,cAAc,YAAY,SAAS,CAAC;AACtF,YAAM,EAAE,MAAM,IAAI,MAAM,GAAG,UAAU;AACrC,YAAM,UAAU,MAAM,WAAW,MAAM,WAAW,CAAC;AAEnD,UAAI,CAAC,WAAW;AACd,eAAO,QACJ,OAAO,OAAK,OAAO,MAAM,YAAY,EAAE,WAAW,GAAG,CAAC,EACtD,IAAI,OAAK,EAAE,MAAM,IAAI,MAAM,CAAC;AAAA,MACjC;AAGA,YAAM,MAAgB,CAAC;AACvB,iBAAW,KAAK,SAAS;AACvB,YAAI,OAAO,MAAM,YAAY,CAAC,EAAE,WAAW,GAAG,EAAG;AACjD,cAAM,MAAM,MAAM,WAAW,MAAM,IAAI,CAAC,CAAC;AACzC,YAAI,OAAO,OAAO,QAAQ,YAAY,SAAU,KAAqB;AACnE,cAAI,KAAK,UAAW,IAAoB,KAAK,MAAM,CAAC;AAAA,QACtD;AAAA,MACF;AACA,aAAO;AAAA,IACT;AAAA,IAEA,MAAM,QAAQ,OAAO;AACnB,YAAM,MAAM,GAAG,cAAc,OAAO,SAAS,CAAC;AAC9C,YAAM,EAAE,MAAM,IAAI,MAAM,GAAG,UAAU;AACrC,YAAM,UAAU,MAAM,WAAW,MAAM,WAAW,CAAC;AACnD,YAAM,WAA0B,CAAC;AAEjC,iBAAW,KAAK,SAAS;AACvB,YAAI,OAAO,MAAM,YAAY,CAAC,EAAE,WAAW,GAAG,EAAG;AAEjD,cAAM,MAAM,MAAM,WAAW,MAAM,IAAI,CAAC,CAAC;AACzC,YAAI,CAAC,IAAK;AAEV,YAAI;AACJ,YAAI;AACJ,YAAI;AAEJ,YAAI,aAAa,OAAO,QAAQ,YAAY,QAAS,KAAqB;AACxE,gBAAM,SAAS;AACf,uBAAa,UAAU,OAAO,KAAK,MAAM;AACzC,eAAK,UAAU,OAAO,KAAK,MAAM;AACjC,qBAAW,OAAO;AAAA,QACpB,OAAO;AACL,gBAAM,OAAO,EAAE,MAAM,IAAI,MAAM;AAC/B,gBAAM,WAAW,KAAK,QAAQ,GAAG;AACjC,cAAI,WAAW,EAAG;AAClB,uBAAa,KAAK,MAAM,GAAG,QAAQ;AACnC,eAAK,KAAK,MAAM,WAAW,CAAC;AAC5B,qBAAW;AAAA,QACb;AAEA,YAAI,WAAW,WAAW,GAAG,EAAG;AAChC,YAAI,CAAC,SAAS,UAAU,EAAG,UAAS,UAAU,IAAI,CAAC;AACnD,iBAAS,UAAU,EAAG,EAAE,IAAI;AAAA,MAC9B;AAEA,aAAO;AAAA,IACT;AAAA,IAEA,MAAM,QAAQ,OAAO,MAAM;AACzB,YAAM,EAAE,OAAO,SAAS,IAAI,MAAM,GAAG,WAAW;AAChD,iBAAW,CAAC,YAAY,OAAO,KAAK,OAAO,QAAQ,IAAI,GAAG;AACxD,mBAAW,CAAC,IAAI,QAAQ,KAAK,OAAO,QAAQ,OAAO,GAAG;AACpD,gBAAM,QAAQ,YAAY,EAAE,KAAK,UAAU,IAAI,MAAM,GAAG,KAAK,UAAU,YAAY,MAAM,GAAG,IAAI,SAAS,IAAI;AAC7G,gBAAM,IAAI,OAAO,IAAI,OAAO,YAAY,EAAE,CAAC;AAAA,QAC7C;AAAA,MACF;AACA,YAAM;AAAA,IACR;AAAA,IAEA,MAAM,OAAO;AACX,UAAI;AACF,cAAM,OAAO;AACb,eAAO;AAAA,MACT,QAAQ;AACN,eAAO;AAAA,MACT;AAAA,IACF;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,IAWA,MAAM,SAAS,OAAO,YAAY,QAAQ,QAAQ,KAAK;AACrD,YAAM,MAAM,GAAG,cAAc,OAAO,SAAS,CAAC,IAAI,cAAc,YAAY,SAAS,CAAC;AACtF,YAAM,EAAE,MAAM,IAAI,MAAM,GAAG,UAAU;AACrC,YAAM,UAAU,MAAM,WAAW,MAAM,WAAW,CAAC;AACnD,YAAM,cAAc,QACjB,OAAO,OAAK,OAAO,MAAM,YAAY,EAAE,WAAW,GAAG,CAAC,EACtD,KAAK;AAER,YAAM,QAAQ,SAAS,SAAS,QAAQ,EAAE,IAAI;AAC9C,YAAM,MAAM,KAAK,IAAI,QAAQ,OAAO,YAAY,MAAM;AAEtD,YAAM,QAA4D,CAAC;AACnE,eAAS,IAAI,OAAO,IAAI,KAAK,KAAK;AAChC,cAAM,IAAI,YAAY,CAAC;AACvB,cAAM,MAAM,MAAM,WAAW,MAAM,IAAI,CAAC,CAAC;AACzC,YAAI,CAAC,IAAK;AAEV,YAAI;AACJ,YAAI;AACJ,YAAI,aAAa,OAAO,QAAQ,YAAY,QAAS,KAAqB;AACxE,gBAAM,SAAS;AACf,qBAAW,OAAO;AAClB,eAAK,UAAU,OAAO,KAAK,MAAM;AAAA,QACnC,OAAO;AACL,qBAAW;AACX,eAAK,EAAE,MAAM,IAAI,MAAM;AAAA,QACzB;AACA,cAAM,KAAK,EAAE,IAAI,SAAS,CAAC;AAAA,MAC7B;AAEA,aAAO;AAAA,QACL;AAAA,QACA,YAAY,MAAM,YAAY,SAAS,OAAO,GAAG,IAAI;AAAA,MACvD;AAAA,IACF;AAAA,EACF;AACF;","names":[]}

package/package.json

@@ -0,0 +1,71 @@
+{
+  "name": "@noy-db/to-browser-idb",
+  "version": "0.1.0-pre.3",
+  "description": "IndexedDB adapter for noy-db with optional key obfuscation",
+  "license": "MIT",
+  "author": "vLannaAi <vicio@lanna.ai>",
+  "homepage": "https://github.com/vLannaAi/noy-db/tree/main/packages/to-browser-idb#readme",
+  "repository": {
+    "type": "git",
+    "url": "git+https://github.com/vLannaAi/noy-db.git",
+    "directory": "packages/to-browser-idb"
+  },
+  "bugs": {
+    "url": "https://github.com/vLannaAi/noy-db/issues"
+  },
+  "type": "module",
+  "sideEffects": false,
+  "exports": {
+    ".": {
+      "import": {
+        "types": "./dist/index.d.ts",
+        "default": "./dist/index.js"
+      },
+      "require": {
+        "types": "./dist/index.d.cts",
+        "default": "./dist/index.cjs"
+      }
+    }
+  },
+  "main": "./dist/index.cjs",
+  "module": "./dist/index.js",
+  "types": "./dist/index.d.ts",
+  "files": [
+    "dist",
+    "README.md",
+    "LICENSE"
+  ],
+  "engines": {
+    "node": ">=18.0.0"
+  },
+  "peerDependencies": {
+    "@noy-db/hub": "0.1.0-pre.3"
+  },
+  "devDependencies": {
+    "fake-indexeddb": "^6.2.5",
+    "happy-dom": "^18.0.0",
+    "@noy-db/hub": "0.1.0-pre.3",
+    "@noy-db/test-adapter-conformance": "0.0.0"
+  },
+  "keywords": [
+    "noy-db",
+    "adapter",
+    "browser",
+    "indexeddb",
+    "web",
+    "offline-first",
+    "encryption",
+    "zero-knowledge",
+    "obfuscation"
+  ],
+  "publishConfig": {
+    "access": "public",
+    "tag": "latest"
+  },
+  "scripts": {
+    "build": "tsup",
+    "test": "vitest run",
+    "lint": "eslint src/",
+    "typecheck": "tsc --noEmit"
+  }
+}