@noy-db/to-probe 0.1.0-pre.3

package/LICENSE

@@ -0,0 +1,21 @@
+MIT License
+
+Copyright (c) 2026 vLannaAi
+
+Permission is hereby granted, free of charge, to any person obtaining a copy
+of this software and associated documentation files (the "Software"), to deal
+in the Software without restriction, including without limitation the rights
+to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
+copies of the Software, and to permit persons to whom the Software is
+furnished to do so, subject to the following conditions:
+
+The above copyright notice and this permission notice shall be included in all
+copies or substantial portions of the Software.
+
+THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
+IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
+FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
+AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
+LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
+OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE
+SOFTWARE.

package/README.md

@@ -0,0 +1,33 @@
+# @noy-db/to-probe
+
+[![npm](https://img.shields.io/npm/v/%40noy-db/to-probe.svg)](https://www.npmjs.com/package/@noy-db/to-probe)
+
+> Diagnostic companion for the @noy-db/to-* store family
+
+Part of [**`@noy-db/hub`**](https://www.npmjs.com/package/@noy-db/hub) — the zero-knowledge, offline-first, encrypted document store.
+
+## Install
+
+```bash
+pnpm add @noy-db/hub @noy-db/to-probe
+```
+
+## What it is
+
+Diagnostic companion for the @noy-db/to-* store family — not itself a storage backend. Setup-time suitability test + topology check + runtime reliability monitor. Exercises the 6-method NoydbStore contract across five axes (write latency, CAS integrity, hydration cost, sync economics, network resilience) and produces a structured risk-scored report.
+
+## Status
+
+**Pre-release** (`0.1.0-pre.1`). API may change before `1.0`.
+
+## Documentation
+
+See the [main repository](https://github.com/vLannaAi/noy-db#readme) for setup, examples, and the full subsystem catalog.
+
+- Source — [`packages/to-probe`](https://github.com/vLannaAi/noy-db/tree/main/packages/to-probe)
+- Issues — [github.com/vLannaAi/noy-db/issues](https://github.com/vLannaAi/noy-db/issues)
+- Spec — [`SPEC.md`](https://github.com/vLannaAi/noy-db/blob/main/SPEC.md)
+
+## License
+
+[MIT](./LICENSE) © vLannaAi

package/dist/index.cjs

@@ -0,0 +1,331 @@
+"use strict";
+var __defProp = Object.defineProperty;
+var __getOwnPropDesc = Object.getOwnPropertyDescriptor;
+var __getOwnPropNames = Object.getOwnPropertyNames;
+var __hasOwnProp = Object.prototype.hasOwnProperty;
+var __export = (target, all) => {
+  for (var name in all)
+    __defProp(target, name, { get: all[name], enumerable: true });
+};
+var __copyProps = (to, from, except, desc) => {
+  if (from && typeof from === "object" || typeof from === "function") {
+    for (let key of __getOwnPropNames(from))
+      if (!__hasOwnProp.call(to, key) && key !== except)
+        __defProp(to, key, { get: () => from[key], enumerable: !(desc = __getOwnPropDesc(from, key)) || desc.enumerable });
+  }
+  return to;
+};
+var __toCommonJS = (mod) => __copyProps(__defProp({}, "__esModule", { value: true }), mod);
+
+// src/index.ts
+var index_exports = {};
+__export(index_exports, {
+  probeTopology: () => probeTopology,
+  runStoreProbe: () => runStoreProbe
+});
+module.exports = __toCommonJS(index_exports);
+
+// src/probe.ts
+var PROBE_VAULT = "probe-vault";
+var PROBE_COLLECTION = "probe-benchmark";
+async function runStoreProbe(store, options = {}) {
+  const started = Date.now();
+  const vault = options.vault ?? PROBE_VAULT;
+  const collection = options.collection ?? PROBE_COLLECTION;
+  const runId = Date.now().toString(36);
+  const write = await probeWrite(store, vault, collection, runId, options);
+  const cas = await probeCas(store, vault, collection, runId, options);
+  const hydration = await probeHydration(store, vault, collection, runId, options);
+  const sync = await probeSync(store, vault, collection, runId, options);
+  const network = await probeNetwork(store);
+  const capabilities = options.capabilities ?? null;
+  const risks = collectRisks(options, write, cas, hydration, sync, network, capabilities);
+  const suitability = score(risks);
+  await bestEffortCleanup(store, vault, collection);
+  return {
+    store: store.name ?? "unnamed",
+    capabilities,
+    write,
+    cas,
+    hydration,
+    sync,
+    network,
+    suitability,
+    durationMs: Date.now() - started,
+    probedAt: (/* @__PURE__ */ new Date()).toISOString()
+  };
+}
+async function probeWrite(store, vault, collection, runId, options) {
+  const n = options.writeSampleSize ?? 20;
+  const coldId = `w-${runId}-cold`;
+  const coldStart = Date.now();
+  await store.put(vault, collection, coldId, envelope(1));
+  const coldMs = Date.now() - coldStart;
+  const serialSamples = [];
+  for (let i = 0; i < n; i++) {
+    const t0 = Date.now();
+    await store.put(vault, collection, `w-${runId}-s-${i}`, envelope(1));
+    serialSamples.push(Date.now() - t0);
+  }
+  const concurrentSamples = [];
+  for (let batch = 0; batch < 5; batch++) {
+    const t0 = Date.now();
+    await Promise.all(
+      Array.from(
+        { length: 10 },
+        (_, j) => store.put(vault, collection, `w-${runId}-c-${batch}-${j}`, envelope(1))
+      )
+    );
+    concurrentSamples.push(Date.now() - t0);
+  }
+  return {
+    coldStart: coldMs,
+    serial: stats(serialSamples),
+    concurrent: stats(concurrentSamples)
+  };
+}
+async function probeCas(store, vault, collection, runId, options) {
+  const concurrency = options.casConcurrency ?? 10;
+  const id = `cas-${runId}`;
+  await store.put(vault, collection, id, envelope(1));
+  const settled = await Promise.allSettled(
+    Array.from(
+      { length: concurrency },
+      (_, i) => store.put(vault, collection, id, envelope(2, i), 1)
+    )
+  );
+  const successes = settled.filter((r) => r.status === "fulfilled").length;
+  const rejections = settled.length - successes;
+  const declaredAtomic = options.capabilities?.casAtomic ?? null;
+  const expected = declaredAtomic === false ? "multiple-ok" : "exactly-one";
+  return { concurrent: concurrency, successes, rejections, expected };
+}
+async function probeHydration(store, vault, collection, runId, options) {
+  const records = options.hydrationRecords ?? 100;
+  const existing = await store.list(vault, collection);
+  for (let i = existing.length; i < records; i++) {
+    await store.put(vault, collection, `h-${runId}-${i}`, envelope(1));
+  }
+  const t0 = Date.now();
+  const snapshot = await store.loadAll(vault);
+  const loadAllMs = Date.now() - t0;
+  const totalBytes = estimateBytes(snapshot);
+  const loaded = Object.values(snapshot).reduce(
+    (sum, coll) => sum + Object.keys(coll).length,
+    0
+  );
+  const perRecordBytes = loaded > 0 ? Math.round(totalBytes / loaded) : 0;
+  return { records: loaded, loadAllMs, totalBytes, perRecordBytes };
+}
+async function probeSync(store, vault, collection, runId, options) {
+  const batchSize = options.syncBatchSize ?? 50;
+  const singleStart = Date.now();
+  await store.put(vault, collection, `sync-${runId}-single`, envelope(1));
+  const singlePushMs = Date.now() - singleStart;
+  const t0 = Date.now();
+  for (let i = 0; i < batchSize; i++) {
+    await store.put(vault, collection, `sync-${runId}-b-${i}`, envelope(1));
+  }
+  const batchPushMs = Date.now() - t0;
+  const bytesPerPush = approxEnvelopeBytes();
+  return { singlePushMs, batchPushMs, batchSize, bytesPerPush };
+}
+async function probeNetwork(store) {
+  if (typeof store.ping !== "function") {
+    return { pingSupported: false, pingMs: null };
+  }
+  const t0 = Date.now();
+  try {
+    await store.ping();
+    return { pingSupported: true, pingMs: Date.now() - t0 };
+  } catch {
+    return { pingSupported: true, pingMs: null };
+  }
+}
+function collectRisks(options, write, cas, hydration, sync, network, capabilities) {
+  const risks = [];
+  const slowWriteMs = options.slowWriteMs ?? 100;
+  const slowHydrationMs = options.slowHydrationMs ?? 500;
+  const slowSyncMs = options.slowSyncMs ?? 250;
+  if (write.serial.p99 > slowWriteMs) {
+    risks.push({
+      code: "slow-write-p99",
+      severity: "warn",
+      message: `Serial write p99 ${write.serial.p99}ms exceeds threshold ${slowWriteMs}ms`
+    });
+  }
+  if (hydration.loadAllMs > slowHydrationMs) {
+    risks.push({
+      code: "slow-hydration",
+      severity: "warn",
+      message: `loadAll(${hydration.records}) took ${hydration.loadAllMs}ms (threshold ${slowHydrationMs}ms)`
+    });
+  }
+  if (sync.singlePushMs > slowSyncMs) {
+    risks.push({
+      code: "slow-sync",
+      severity: "warn",
+      message: `Single-record push ${sync.singlePushMs}ms exceeds ${slowSyncMs}ms`
+    });
+  }
+  if (capabilities?.casAtomic === true && cas.successes > 1) {
+    risks.push({
+      code: "cas-mismatch",
+      severity: "error",
+      message: `Store declared casAtomic:true but ${cas.successes}/${cas.concurrent} concurrent puts succeeded (expected exactly 1)`
+    });
+  }
+  if (capabilities?.casAtomic === false) {
+    risks.push({
+      code: "cas-unsupported",
+      severity: "warn",
+      message: "Store lacks atomic CAS \u2014 unsafe for multi-writer sync-peer role"
+    });
+  }
+  if (!network.pingSupported) {
+    risks.push({
+      code: "no-ping",
+      severity: "warn",
+      message: "Store has no ping() \u2014 runtime monitor will rely on list() as liveness check"
+    });
+  }
+  return risks;
+}
+function score(risks) {
+  const hasError = risks.some((r) => r.severity === "error");
+  const casUnsupported = risks.some((r) => r.code === "cas-unsupported");
+  const slowWrite = risks.some((r) => r.code === "slow-write-p99");
+  const recommended = [];
+  if (!hasError) {
+    if (!slowWrite) recommended.push("primary");
+    if (!casUnsupported) recommended.push("sync-peer");
+    recommended.push("backup", "archive");
+  }
+  return { recommended, risks };
+}
+function envelope(version, seed = 0) {
+  const data = `probe-${version}-${seed}`.padEnd(64, "x");
+  const b64 = base64Encode(data);
+  return {
+    _noydb: 1,
+    _v: version,
+    _ts: (/* @__PURE__ */ new Date()).toISOString(),
+    _iv: base64Encode("0".repeat(12)),
+    _data: b64
+  };
+}
+function base64Encode(s) {
+  if (typeof Buffer !== "undefined") return Buffer.from(s, "utf-8").toString("base64");
+  return btoa(unescape(encodeURIComponent(s)));
+}
+function approxEnvelopeBytes() {
+  return JSON.stringify(envelope(1)).length;
+}
+function estimateBytes(snapshot) {
+  let total = 0;
+  for (const coll of Object.values(snapshot)) {
+    for (const rec of Object.values(coll)) {
+      total += JSON.stringify(rec).length;
+    }
+  }
+  return total;
+}
+function stats(samples) {
+  if (samples.length === 0) return { count: 0, p50: 0, p99: 0, max: 0 };
+  const sorted = [...samples].sort((a, b) => a - b);
+  return {
+    count: sorted.length,
+    p50: percentile(sorted, 0.5),
+    p99: percentile(sorted, 0.99),
+    max: sorted[sorted.length - 1]
+  };
+}
+function percentile(sorted, q) {
+  const idx = Math.min(sorted.length - 1, Math.floor(q * sorted.length));
+  return sorted[idx];
+}
+async function bestEffortCleanup(store, vault, collection) {
+  try {
+    const ids = await store.list(vault, collection);
+    await Promise.all(ids.map((id) => store.delete(vault, collection, id).catch(() => {
+    })));
+  } catch {
+  }
+}
+
+// src/topology.ts
+async function probeTopology(options) {
+  const started = Date.now();
+  const expectedUsers = options.expectedUsers ?? 1;
+  const primary = await runStoreProbe(options.store, options);
+  const targets = [];
+  for (const t of options.sync ?? []) {
+    const label = t.label ?? t.store.name ?? t.role;
+    const report = await runStoreProbe(t.store, { ...options, vault: `_probe-${label}` });
+    targets.push({ ...report, role: t.role, label });
+  }
+  const topology = evaluateTopology(options.store, primary, targets, options.sync, expectedUsers);
+  const allErrors = [
+    ...primary.suitability.risks,
+    ...targets.flatMap((t) => t.suitability.risks),
+    ...topology
+  ].filter((r) => r.severity === "error");
+  return {
+    primary,
+    targets,
+    topology,
+    recommended: allErrors.length === 0,
+    durationMs: Date.now() - started,
+    probedAt: (/* @__PURE__ */ new Date()).toISOString()
+  };
+}
+function evaluateTopology(_primaryStore, primary, targets, syncTargets = [], expectedUsers) {
+  const risks = [];
+  targets.forEach((target, i) => {
+    const input = syncTargets[i];
+    const label = target.label;
+    if (target.role === "sync-peer" && looksLikeBundleStore(target.store)) {
+      risks.push({
+        target: label,
+        code: "bundle-as-sync-peer",
+        severity: "warn",
+        message: `"${label}" looks bundle-shaped \u2014 use role 'backup' or 'archive' for push-only semantics`
+      });
+    }
+    if (target.role === "sync-peer" && expectedUsers > 1 && target.capabilities?.casAtomic === false) {
+      risks.push({
+        target: label,
+        code: "no-atomic-cas-sync-peer",
+        severity: "error",
+        message: `"${label}" has casAtomic:false \u2014 unsafe as sync-peer for ${expectedUsers} concurrent users`
+      });
+    }
+    if (target.role === "sync-peer" && primary.write.serial.p99 > target.write.serial.p99 * 2) {
+      risks.push({
+        target: label,
+        code: "primary-slower-than-peer",
+        severity: "warn",
+        message: `Primary p99 ${primary.write.serial.p99}ms is >2\xD7 peer "${label}" p99 ${target.write.serial.p99}ms \u2014 unusual topology`
+      });
+    }
+    if (target.role === "archive" && input?.hasPullPolicy === true) {
+      risks.push({
+        target: label,
+        code: "archive-pull-configured",
+        severity: "error",
+        message: `"${label}" is an archive target but has a pull policy \u2014 archives are push-only`
+      });
+    }
+  });
+  return risks;
+}
+function looksLikeBundleStore(name) {
+  const n = name.toLowerCase();
+  return /drive|webdav|git|bundle/.test(n);
+}
+// Annotate the CommonJS export names for ESM import in node:
+0 && (module.exports = {
+  probeTopology,
+  runStoreProbe
+});
+//# sourceMappingURL=index.cjs.map

package/dist/index.cjs.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../src/index.ts","../src/probe.ts","../src/topology.ts"],"sourcesContent":["/**\n * **@noy-db/to-probe** — diagnostic companion for the `@noy-db/to-*`\n * store family. **Not itself a storage backend** — it exercises other\n * stores and reports on their suitability.\n *\n * Two surfaces:\n *\n * ```ts\n * import { runStoreProbe, probeTopology } from '@noy-db/to-probe'\n *\n * // Single-store pre-flight check\n * const report = await runStoreProbe(myStore, { capabilities: { casAtomic: true, ... } })\n * if (!report.suitability.recommended.includes('primary')) {\n *   // Surface risks to user, or acknowledge and continue\n * }\n *\n * // Multi-store topology check — primary + sync targets as one report\n * const topology = await probeTopology({\n *   store: browserIdb({ prefix: 'app' }),\n *   sync: [\n *     { store: dynamo({ table: 'live' }),   role: 'sync-peer', label: 'live'    },\n *     { store: s3({ bucket: 'archive' }),   role: 'backup',    label: 'backup'  },\n *   ],\n *   expectedUsers: 3,\n * })\n * ```\n *\n * For runtime metrics on real traffic (not synthetic benchmarks),\n * compose with `@noy-db/to-meter` — the meter wraps a store as a\n * pass-through adapter and tracks live op latency/errors.\n *\n * @packageDocumentation\n */\n\nexport { runStoreProbe } from './probe.js'\nexport { probeTopology } from './topology.js'\n\nexport type {\n  ProbeOptions,\n  ProbeRisk,\n  ProbeRiskCode,\n  ProbeRole,\n  StoreProbeReport,\n  SuitabilityScore,\n  LatencyStats,\n  WriteAxis,\n  CasAxis,\n  HydrationAxis,\n  SyncAxis,\n  NetworkAxis,\n  TopologyProbeOptions,\n  TopologyProbeReport,\n  TopologyRisk,\n  TopologyTargetReport,\n} from './types.js'\n","/**\n * `runStoreProbe()` — setup-time suitability test for a `NoydbStore`.\n *\n * Five measurement axes (D1-D5 per spec in issue ):\n *\n * | Axis | Measures |\n * |------|----------|\n * | D1 — Write responsiveness   | serial + concurrent put p50/p99, cold-start |\n * | D2 — Conflict integrity     | N parallel puts with same `expectedVersion` |\n * | D3 — Hydration cost         | `loadAll()` time and record-size footprint |\n * | D4 — Sync economics         | single + batch `put` cost, bytes/push |\n * | D5 — Network resilience     | `ping()` support + latency |\n *\n * Writes happen to an isolated `_probe / _probe` collection that the\n * probe cleans up on completion. The probe does not mutate real\n * application data — but if a probe is interrupted, stray envelopes\n * may remain under that collection. Adopters can safely delete\n * anything under the `_probe` vault.\n *\n * The probe never decrypts anything. It operates at the `NoydbStore`\n * layer with handcrafted {@link EncryptedEnvelope}-shaped payloads — a\n * probe run produces no keyring, no DEK, and no plaintext the store\n * can see.\n *\n * @module\n */\nimport type { EncryptedEnvelope, NoydbStore, StoreCapabilities, VaultSnapshot } from '@noy-db/hub'\nimport type {\n  CasAxis,\n  HydrationAxis,\n  LatencyStats,\n  NetworkAxis,\n  ProbeOptions,\n  ProbeRisk,\n  ProbeRole,\n  StoreProbeReport,\n  SuitabilityScore,\n  SyncAxis,\n  WriteAxis,\n} from './types.js'\n\nconst PROBE_VAULT = 'probe-vault'\nconst PROBE_COLLECTION = 'probe-benchmark'\n\n/**\n * Run the full 5-axis probe against `store`. Returns a structured\n * report with per-axis measurements and a {@link SuitabilityScore}.\n *\n * The probe is **idempotent-per-run**: it picks unique record IDs per\n * invocation using a monotonically increasing counter seeded by\n * `Date.now()`, so concurrent probe runs against the same store do\n * not collide.\n */\nexport async function runStoreProbe(\n  store: NoydbStore,\n  options: ProbeOptions = {},\n): Promise<StoreProbeReport> {\n  const started = Date.now()\n  const vault = options.vault ?? PROBE_VAULT\n  const collection = options.collection ?? PROBE_COLLECTION\n  const runId = Date.now().toString(36)\n\n  const write = await probeWrite(store, vault, collection, runId, options)\n  const cas = await probeCas(store, vault, collection, runId, options)\n  const hydration = await probeHydration(store, vault, collection, runId, options)\n  const sync = await probeSync(store, vault, collection, runId, options)\n  const network = await probeNetwork(store)\n\n  const capabilities = options.capabilities ?? null\n  const risks = collectRisks(options, write, cas, hydration, sync, network, capabilities)\n  const suitability = score(risks)\n\n  await bestEffortCleanup(store, vault, collection)\n\n  return {\n    store: store.name ?? 'unnamed',\n    capabilities,\n    write, cas, hydration, sync, network,\n    suitability,\n    durationMs: Date.now() - started,\n    probedAt: new Date().toISOString(),\n  }\n}\n\n// ── D1 · write latency ────────────────────────────────────────────────────\n\nasync function probeWrite(\n  store: NoydbStore,\n  vault: string,\n  collection: string,\n  runId: string,\n  options: ProbeOptions,\n): Promise<WriteAxis> {\n  const n = options.writeSampleSize ?? 20\n\n  // Cold start — single isolated write\n  const coldId = `w-${runId}-cold`\n  const coldStart = Date.now()\n  await store.put(vault, collection, coldId, envelope(1))\n  const coldMs = Date.now() - coldStart\n\n  // Serial sample\n  const serialSamples: number[] = []\n  for (let i = 0; i < n; i++) {\n    const t0 = Date.now()\n    await store.put(vault, collection, `w-${runId}-s-${i}`, envelope(1))\n    serialSamples.push(Date.now() - t0)\n  }\n\n  // Concurrent sample: 5 batches of 10, measured per-batch\n  const concurrentSamples: number[] = []\n  for (let batch = 0; batch < 5; batch++) {\n    const t0 = Date.now()\n    await Promise.all(\n      Array.from({ length: 10 }, (_, j) =>\n        store.put(vault, collection, `w-${runId}-c-${batch}-${j}`, envelope(1)),\n      ),\n    )\n    concurrentSamples.push(Date.now() - t0)\n  }\n\n  return {\n    coldStart: coldMs,\n    serial: stats(serialSamples),\n    concurrent: stats(concurrentSamples),\n  }\n}\n\n// ── D2 · CAS integrity ────────────────────────────────────────────────────\n\nasync function probeCas(\n  store: NoydbStore,\n  vault: string,\n  collection: string,\n  runId: string,\n  options: ProbeOptions,\n): Promise<CasAxis> {\n  const concurrency = options.casConcurrency ?? 10\n  const id = `cas-${runId}`\n\n  // Seed with version 1\n  await store.put(vault, collection, id, envelope(1))\n\n  // Fire N concurrent puts all with expectedVersion=1. For a casAtomic\n  // store: exactly one should succeed; the rest should reject with\n  // ConflictError.\n  const settled = await Promise.allSettled(\n    Array.from({ length: concurrency }, (_, i) =>\n      store.put(vault, collection, id, envelope(2, i), 1),\n    ),\n  )\n  const successes = settled.filter((r) => r.status === 'fulfilled').length\n  const rejections = settled.length - successes\n\n  // What the store promised\n  const declaredAtomic = options.capabilities?.casAtomic ?? null\n  const expected = declaredAtomic === false ? 'multiple-ok' : 'exactly-one'\n\n  return { concurrent: concurrency, successes, rejections, expected }\n}\n\n// ── D3 · hydration ────────────────────────────────────────────────────────\n\nasync function probeHydration(\n  store: NoydbStore,\n  vault: string,\n  collection: string,\n  runId: string,\n  options: ProbeOptions,\n): Promise<HydrationAxis> {\n  const records = options.hydrationRecords ?? 100\n\n  // Fill the probe collection to the target record count. Writes from\n  // D1/D2 already contributed some envelopes; we top up the rest.\n  const existing = await store.list(vault, collection)\n  for (let i = existing.length; i < records; i++) {\n    await store.put(vault, collection, `h-${runId}-${i}`, envelope(1))\n  }\n\n  const t0 = Date.now()\n  const snapshot = await store.loadAll(vault)\n  const loadAllMs = Date.now() - t0\n\n  const totalBytes = estimateBytes(snapshot)\n  const loaded = Object.values(snapshot).reduce(\n    (sum, coll) => sum + Object.keys(coll).length,\n    0,\n  )\n  const perRecordBytes = loaded > 0 ? Math.round(totalBytes / loaded) : 0\n\n  return { records: loaded, loadAllMs, totalBytes, perRecordBytes }\n}\n\n// ── D4 · sync economics ───────────────────────────────────────────────────\n\nasync function probeSync(\n  store: NoydbStore,\n  vault: string,\n  collection: string,\n  runId: string,\n  options: ProbeOptions,\n): Promise<SyncAxis> {\n  const batchSize = options.syncBatchSize ?? 50\n\n  // Single-record push\n  const singleStart = Date.now()\n  await store.put(vault, collection, `sync-${runId}-single`, envelope(1))\n  const singlePushMs = Date.now() - singleStart\n\n  // Batch push (simulated — sequential writes since the contract has no\n  // bulk put; saveAll would also rewrite existing data)\n  const t0 = Date.now()\n  for (let i = 0; i < batchSize; i++) {\n    await store.put(vault, collection, `sync-${runId}-b-${i}`, envelope(1))\n  }\n  const batchPushMs = Date.now() - t0\n\n  // Rough bytes-per-push — envelope size plus keys\n  const bytesPerPush = approxEnvelopeBytes()\n\n  return { singlePushMs, batchPushMs, batchSize, bytesPerPush }\n}\n\n// ── D5 · network resilience ───────────────────────────────────────────────\n\nasync function probeNetwork(store: NoydbStore): Promise<NetworkAxis> {\n  if (typeof store.ping !== 'function') {\n    return { pingSupported: false, pingMs: null }\n  }\n  const t0 = Date.now()\n  try {\n    await store.ping()\n    return { pingSupported: true, pingMs: Date.now() - t0 }\n  } catch {\n    return { pingSupported: true, pingMs: null }\n  }\n}\n\n// ── Risk aggregation + scoring ────────────────────────────────────────────\n\nfunction collectRisks(\n  options: ProbeOptions,\n  write: WriteAxis,\n  cas: CasAxis,\n  hydration: HydrationAxis,\n  sync: SyncAxis,\n  network: NetworkAxis,\n  capabilities: StoreCapabilities | null,\n): ProbeRisk[] {\n  const risks: ProbeRisk[] = []\n  const slowWriteMs = options.slowWriteMs ?? 100\n  const slowHydrationMs = options.slowHydrationMs ?? 500\n  const slowSyncMs = options.slowSyncMs ?? 250\n\n  if (write.serial.p99 > slowWriteMs) {\n    risks.push({\n      code: 'slow-write-p99',\n      severity: 'warn',\n      message: `Serial write p99 ${write.serial.p99}ms exceeds threshold ${slowWriteMs}ms`,\n    })\n  }\n  if (hydration.loadAllMs > slowHydrationMs) {\n    risks.push({\n      code: 'slow-hydration',\n      severity: 'warn',\n      message: `loadAll(${hydration.records}) took ${hydration.loadAllMs}ms (threshold ${slowHydrationMs}ms)`,\n    })\n  }\n  if (sync.singlePushMs > slowSyncMs) {\n    risks.push({\n      code: 'slow-sync',\n      severity: 'warn',\n      message: `Single-record push ${sync.singlePushMs}ms exceeds ${slowSyncMs}ms`,\n    })\n  }\n  if (capabilities?.casAtomic === true && cas.successes > 1) {\n    risks.push({\n      code: 'cas-mismatch',\n      severity: 'error',\n      message: `Store declared casAtomic:true but ${cas.successes}/${cas.concurrent} concurrent puts succeeded (expected exactly 1)`,\n    })\n  }\n  if (capabilities?.casAtomic === false) {\n    risks.push({\n      code: 'cas-unsupported',\n      severity: 'warn',\n      message: 'Store lacks atomic CAS — unsafe for multi-writer sync-peer role',\n    })\n  }\n  if (!network.pingSupported) {\n    risks.push({\n      code: 'no-ping',\n      severity: 'warn',\n      message: 'Store has no ping() — runtime monitor will rely on list() as liveness check',\n    })\n  }\n\n  return risks\n}\n\nfunction score(risks: readonly ProbeRisk[]): SuitabilityScore {\n  const hasError = risks.some((r) => r.severity === 'error')\n  const casUnsupported = risks.some((r) => r.code === 'cas-unsupported')\n  const slowWrite = risks.some((r) => r.code === 'slow-write-p99')\n\n  const recommended: ProbeRole[] = []\n  if (!hasError) {\n    if (!slowWrite) recommended.push('primary')\n    if (!casUnsupported) recommended.push('sync-peer')\n    recommended.push('backup', 'archive')\n  }\n  return { recommended, risks }\n}\n\n// ── helpers ───────────────────────────────────────────────────────────────\n\n/** Build a synthetic envelope with a tiny ciphertext payload. Safe —\n *  the store never decrypts, so the `_data` just needs to parse through\n *  whatever JSON round-tripping the store does. */\nfunction envelope(version: number, seed = 0): EncryptedEnvelope {\n  const data = `probe-${version}-${seed}`.padEnd(64, 'x')\n  // base64-encode a deterministic marker so stores that assert\n  // base64-shape on persist don't explode\n  const b64 = base64Encode(data)\n  return {\n    _noydb: 1,\n    _v: version,\n    _ts: new Date().toISOString(),\n    _iv: base64Encode('0'.repeat(12)),\n    _data: b64,\n  }\n}\n\nfunction base64Encode(s: string): string {\n  if (typeof Buffer !== 'undefined') return Buffer.from(s, 'utf-8').toString('base64')\n  return btoa(unescape(encodeURIComponent(s)))\n}\n\nfunction approxEnvelopeBytes(): number {\n  return JSON.stringify(envelope(1)).length\n}\n\nfunction estimateBytes(snapshot: VaultSnapshot): number {\n  let total = 0\n  for (const coll of Object.values(snapshot)) {\n    for (const rec of Object.values(coll)) {\n      total += JSON.stringify(rec).length\n    }\n  }\n  return total\n}\n\nfunction stats(samples: number[]): LatencyStats {\n  if (samples.length === 0) return { count: 0, p50: 0, p99: 0, max: 0 }\n  const sorted = [...samples].sort((a, b) => a - b)\n  return {\n    count: sorted.length,\n    p50: percentile(sorted, 0.5),\n    p99: percentile(sorted, 0.99),\n    max: sorted[sorted.length - 1]!,\n  }\n}\n\nfunction percentile(sorted: number[], q: number): number {\n  const idx = Math.min(sorted.length - 1, Math.floor(q * sorted.length))\n  return sorted[idx]!\n}\n\nasync function bestEffortCleanup(\n  store: NoydbStore,\n  vault: string,\n  collection: string,\n): Promise<void> {\n  try {\n    const ids = await store.list(vault, collection)\n    await Promise.all(ids.map((id) => store.delete(vault, collection, id).catch(() => {})))\n  } catch {\n    // Silent — cleanup failure is not a probe failure\n  }\n}\n","/**\n * `probeTopology()` — multi-backend health + suitability check.\n *\n * Runs {@link runStoreProbe} independently on the primary store and\n * every sync target, then layers topology-level rules that only make\n * sense across the whole graph:\n *\n * | Rule | Condition | Severity |\n * |------|-----------|----------|\n * | `bundle-as-sync-peer`        | Bundle-shaped store used as `sync-peer`                    | warn  |\n * | `no-atomic-cas-sync-peer`    | Non-atomic-CAS store used as `sync-peer` with >1 user      | error |\n * | `primary-slower-than-peer`   | Primary p99 > sync-peer p99 × 2                            | warn  |\n * | `archive-pull-configured`    | `archive` target declared with a pull policy               | error |\n *\n * Only one probe pass per store — if two targets happen to point at\n * the same backend, both get probed (the target identifies the\n * configuration, not the backend instance).\n *\n * @module\n */\nimport type { NoydbStore } from '@noy-db/hub'\nimport { runStoreProbe } from './probe.js'\nimport type {\n  StoreProbeReport,\n  TopologyProbeOptions,\n  TopologyProbeReport,\n  TopologyRisk,\n  TopologyTargetReport,\n} from './types.js'\n\nexport async function probeTopology(\n  options: TopologyProbeOptions,\n): Promise<TopologyProbeReport> {\n  const started = Date.now()\n  const expectedUsers = options.expectedUsers ?? 1\n\n  const primary = await runStoreProbe(options.store, options)\n  const targets: TopologyTargetReport[] = []\n\n  for (const t of options.sync ?? []) {\n    const label = t.label ?? t.store.name ?? t.role\n    const report = await runStoreProbe(t.store, { ...options, vault: `_probe-${label}` })\n    targets.push({ ...report, role: t.role, label })\n  }\n\n  const topology = evaluateTopology(options.store, primary, targets, options.sync, expectedUsers)\n  const allErrors = [\n    ...primary.suitability.risks,\n    ...targets.flatMap((t) => t.suitability.risks),\n    ...topology,\n  ].filter((r) => r.severity === 'error')\n\n  return {\n    primary, targets, topology,\n    recommended: allErrors.length === 0,\n    durationMs: Date.now() - started,\n    probedAt: new Date().toISOString(),\n  }\n}\n\nfunction evaluateTopology(\n  _primaryStore: NoydbStore,\n  primary: StoreProbeReport,\n  targets: readonly TopologyTargetReport[],\n  syncTargets: TopologyProbeOptions['sync'] = [],\n  expectedUsers: number,\n): TopologyRisk[] {\n  const risks: TopologyRisk[] = []\n\n  targets.forEach((target, i) => {\n    const input = syncTargets[i]\n    const label = target.label\n\n    // Bundle-shaped stores (drive/webdav/git) don't have atomic CAS\n    // and surface as sync-peer-unsuitable. For we detect by\n    // name heuristics; future hub work can annotate StoreCapabilities\n    // with a `shape: 'kv' | 'bundle'` field.\n    if (target.role === 'sync-peer' && looksLikeBundleStore(target.store)) {\n      risks.push({\n        target: label,\n        code: 'bundle-as-sync-peer',\n        severity: 'warn',\n        message: `\"${label}\" looks bundle-shaped — use role 'backup' or 'archive' for push-only semantics`,\n      })\n    }\n\n    if (\n      target.role === 'sync-peer' &&\n      expectedUsers > 1 &&\n      target.capabilities?.casAtomic === false\n    ) {\n      risks.push({\n        target: label,\n        code: 'no-atomic-cas-sync-peer',\n        severity: 'error',\n        message: `\"${label}\" has casAtomic:false — unsafe as sync-peer for ${expectedUsers} concurrent users`,\n      })\n    }\n\n    if (target.role === 'sync-peer' && primary.write.serial.p99 > target.write.serial.p99 * 2) {\n      risks.push({\n        target: label,\n        code: 'primary-slower-than-peer',\n        severity: 'warn',\n        message: `Primary p99 ${primary.write.serial.p99}ms is >2× peer \"${label}\" p99 ${target.write.serial.p99}ms — unusual topology`,\n      })\n    }\n\n    if (target.role === 'archive' && input?.hasPullPolicy === true) {\n      risks.push({\n        target: label,\n        code: 'archive-pull-configured',\n        severity: 'error',\n        message: `\"${label}\" is an archive target but has a pull policy — archives are push-only`,\n      })\n    }\n  })\n\n  return risks\n}\n\n/** Heuristic bundle detection: name includes 'drive' / 'webdav' / 'git'\n *  / 'bundle'. Adopters who wrap a bundle store under a custom name\n *  can silence this via `acknowledgeRisks: ['bundle-as-sync-peer']`. */\nfunction looksLikeBundleStore(name: string): boolean {\n  const n = name.toLowerCase()\n  return /drive|webdav|git|bundle/.test(n)\n}\n"],"mappings":";;;;;;;;;;;;;;;;;;;;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;;;ACyCA,IAAM,cAAc;AACpB,IAAM,mBAAmB;AAWzB,eAAsB,cACpB,OACA,UAAwB,CAAC,GACE;AAC3B,QAAM,UAAU,KAAK,IAAI;AACzB,QAAM,QAAQ,QAAQ,SAAS;AAC/B,QAAM,aAAa,QAAQ,cAAc;AACzC,QAAM,QAAQ,KAAK,IAAI,EAAE,SAAS,EAAE;AAEpC,QAAM,QAAQ,MAAM,WAAW,OAAO,OAAO,YAAY,OAAO,OAAO;AACvE,QAAM,MAAM,MAAM,SAAS,OAAO,OAAO,YAAY,OAAO,OAAO;AACnE,QAAM,YAAY,MAAM,eAAe,OAAO,OAAO,YAAY,OAAO,OAAO;AAC/E,QAAM,OAAO,MAAM,UAAU,OAAO,OAAO,YAAY,OAAO,OAAO;AACrE,QAAM,UAAU,MAAM,aAAa,KAAK;AAExC,QAAM,eAAe,QAAQ,gBAAgB;AAC7C,QAAM,QAAQ,aAAa,SAAS,OAAO,KAAK,WAAW,MAAM,SAAS,YAAY;AACtF,QAAM,cAAc,MAAM,KAAK;AAE/B,QAAM,kBAAkB,OAAO,OAAO,UAAU;AAEhD,SAAO;AAAA,IACL,OAAO,MAAM,QAAQ;AAAA,IACrB;AAAA,IACA;AAAA,IAAO;AAAA,IAAK;AAAA,IAAW;AAAA,IAAM;AAAA,IAC7B;AAAA,IACA,YAAY,KAAK,IAAI,IAAI;AAAA,IACzB,WAAU,oBAAI,KAAK,GAAE,YAAY;AAAA,EACnC;AACF;AAIA,eAAe,WACb,OACA,OACA,YACA,OACA,SACoB;AACpB,QAAM,IAAI,QAAQ,mBAAmB;AAGrC,QAAM,SAAS,KAAK,KAAK;AACzB,QAAM,YAAY,KAAK,IAAI;AAC3B,QAAM,MAAM,IAAI,OAAO,YAAY,QAAQ,SAAS,CAAC,CAAC;AACtD,QAAM,SAAS,KAAK,IAAI,IAAI;AAG5B,QAAM,gBAA0B,CAAC;AACjC,WAAS,IAAI,GAAG,IAAI,GAAG,KAAK;AAC1B,UAAM,KAAK,KAAK,IAAI;AACpB,UAAM,MAAM,IAAI,OAAO,YAAY,KAAK,KAAK,MAAM,CAAC,IAAI,SAAS,CAAC,CAAC;AACnE,kBAAc,KAAK,KAAK,IAAI,IAAI,EAAE;AAAA,EACpC;AAGA,QAAM,oBAA8B,CAAC;AACrC,WAAS,QAAQ,GAAG,QAAQ,GAAG,SAAS;AACtC,UAAM,KAAK,KAAK,IAAI;AACpB,UAAM,QAAQ;AAAA,MACZ,MAAM;AAAA,QAAK,EAAE,QAAQ,GAAG;AAAA,QAAG,CAAC,GAAG,MAC7B,MAAM,IAAI,OAAO,YAAY,KAAK,KAAK,MAAM,KAAK,IAAI,CAAC,IAAI,SAAS,CAAC,CAAC;AAAA,MACxE;AAAA,IACF;AACA,sBAAkB,KAAK,KAAK,IAAI,IAAI,EAAE;AAAA,EACxC;AAEA,SAAO;AAAA,IACL,WAAW;AAAA,IACX,QAAQ,MAAM,aAAa;AAAA,IAC3B,YAAY,MAAM,iBAAiB;AAAA,EACrC;AACF;AAIA,eAAe,SACb,OACA,OACA,YACA,OACA,SACkB;AAClB,QAAM,cAAc,QAAQ,kBAAkB;AAC9C,QAAM,KAAK,OAAO,KAAK;AAGvB,QAAM,MAAM,IAAI,OAAO,YAAY,IAAI,SAAS,CAAC,CAAC;AAKlD,QAAM,UAAU,MAAM,QAAQ;AAAA,IAC5B,MAAM;AAAA,MAAK,EAAE,QAAQ,YAAY;AAAA,MAAG,CAAC,GAAG,MACtC,MAAM,IAAI,OAAO,YAAY,IAAI,SAAS,GAAG,CAAC,GAAG,CAAC;AAAA,IACpD;AAAA,EACF;AACA,QAAM,YAAY,QAAQ,OAAO,CAAC,MAAM,EAAE,WAAW,WAAW,EAAE;AAClE,QAAM,aAAa,QAAQ,SAAS;AAGpC,QAAM,iBAAiB,QAAQ,cAAc,aAAa;AAC1D,QAAM,WAAW,mBAAmB,QAAQ,gBAAgB;AAE5D,SAAO,EAAE,YAAY,aAAa,WAAW,YAAY,SAAS;AACpE;AAIA,eAAe,eACb,OACA,OACA,YACA,OACA,SACwB;AACxB,QAAM,UAAU,QAAQ,oBAAoB;AAI5C,QAAM,WAAW,MAAM,MAAM,KAAK,OAAO,UAAU;AACnD,WAAS,IAAI,SAAS,QAAQ,IAAI,SAAS,KAAK;AAC9C,UAAM,MAAM,IAAI,OAAO,YAAY,KAAK,KAAK,IAAI,CAAC,IAAI,SAAS,CAAC,CAAC;AAAA,EACnE;AAEA,QAAM,KAAK,KAAK,IAAI;AACpB,QAAM,WAAW,MAAM,MAAM,QAAQ,KAAK;AAC1C,QAAM,YAAY,KAAK,IAAI,IAAI;AAE/B,QAAM,aAAa,cAAc,QAAQ;AACzC,QAAM,SAAS,OAAO,OAAO,QAAQ,EAAE;AAAA,IACrC,CAAC,KAAK,SAAS,MAAM,OAAO,KAAK,IAAI,EAAE;AAAA,IACvC;AAAA,EACF;AACA,QAAM,iBAAiB,SAAS,IAAI,KAAK,MAAM,aAAa,MAAM,IAAI;AAEtE,SAAO,EAAE,SAAS,QAAQ,WAAW,YAAY,eAAe;AAClE;AAIA,eAAe,UACb,OACA,OACA,YACA,OACA,SACmB;AACnB,QAAM,YAAY,QAAQ,iBAAiB;AAG3C,QAAM,cAAc,KAAK,IAAI;AAC7B,QAAM,MAAM,IAAI,OAAO,YAAY,QAAQ,KAAK,WAAW,SAAS,CAAC,CAAC;AACtE,QAAM,eAAe,KAAK,IAAI,IAAI;AAIlC,QAAM,KAAK,KAAK,IAAI;AACpB,WAAS,IAAI,GAAG,IAAI,WAAW,KAAK;AAClC,UAAM,MAAM,IAAI,OAAO,YAAY,QAAQ,KAAK,MAAM,CAAC,IAAI,SAAS,CAAC,CAAC;AAAA,EACxE;AACA,QAAM,cAAc,KAAK,IAAI,IAAI;AAGjC,QAAM,eAAe,oBAAoB;AAEzC,SAAO,EAAE,cAAc,aAAa,WAAW,aAAa;AAC9D;AAIA,eAAe,aAAa,OAAyC;AACnE,MAAI,OAAO,MAAM,SAAS,YAAY;AACpC,WAAO,EAAE,eAAe,OAAO,QAAQ,KAAK;AAAA,EAC9C;AACA,QAAM,KAAK,KAAK,IAAI;AACpB,MAAI;AACF,UAAM,MAAM,KAAK;AACjB,WAAO,EAAE,eAAe,MAAM,QAAQ,KAAK,IAAI,IAAI,GAAG;AAAA,EACxD,QAAQ;AACN,WAAO,EAAE,eAAe,MAAM,QAAQ,KAAK;AAAA,EAC7C;AACF;AAIA,SAAS,aACP,SACA,OACA,KACA,WACA,MACA,SACA,cACa;AACb,QAAM,QAAqB,CAAC;AAC5B,QAAM,cAAc,QAAQ,eAAe;AAC3C,QAAM,kBAAkB,QAAQ,mBAAmB;AACnD,QAAM,aAAa,QAAQ,cAAc;AAEzC,MAAI,MAAM,OAAO,MAAM,aAAa;AAClC,UAAM,KAAK;AAAA,MACT,MAAM;AAAA,MACN,UAAU;AAAA,MACV,SAAS,oBAAoB,MAAM,OAAO,GAAG,wBAAwB,WAAW;AAAA,IAClF,CAAC;AAAA,EACH;AACA,MAAI,UAAU,YAAY,iBAAiB;AACzC,UAAM,KAAK;AAAA,MACT,MAAM;AAAA,MACN,UAAU;AAAA,MACV,SAAS,WAAW,UAAU,OAAO,UAAU,UAAU,SAAS,iBAAiB,eAAe;AAAA,IACpG,CAAC;AAAA,EACH;AACA,MAAI,KAAK,eAAe,YAAY;AAClC,UAAM,KAAK;AAAA,MACT,MAAM;AAAA,MACN,UAAU;AAAA,MACV,SAAS,sBAAsB,KAAK,YAAY,cAAc,UAAU;AAAA,IAC1E,CAAC;AAAA,EACH;AACA,MAAI,cAAc,cAAc,QAAQ,IAAI,YAAY,GAAG;AACzD,UAAM,KAAK;AAAA,MACT,MAAM;AAAA,MACN,UAAU;AAAA,MACV,SAAS,qCAAqC,IAAI,SAAS,IAAI,IAAI,UAAU;AAAA,IAC/E,CAAC;AAAA,EACH;AACA,MAAI,cAAc,cAAc,OAAO;AACrC,UAAM,KAAK;AAAA,MACT,MAAM;AAAA,MACN,UAAU;AAAA,MACV,SAAS;AAAA,IACX,CAAC;AAAA,EACH;AACA,MAAI,CAAC,QAAQ,eAAe;AAC1B,UAAM,KAAK;AAAA,MACT,MAAM;AAAA,MACN,UAAU;AAAA,MACV,SAAS;AAAA,IACX,CAAC;AAAA,EACH;AAEA,SAAO;AACT;AAEA,SAAS,MAAM,OAA+C;AAC5D,QAAM,WAAW,MAAM,KAAK,CAAC,MAAM,EAAE,aAAa,OAAO;AACzD,QAAM,iBAAiB,MAAM,KAAK,CAAC,MAAM,EAAE,SAAS,iBAAiB;AACrE,QAAM,YAAY,MAAM,KAAK,CAAC,MAAM,EAAE,SAAS,gBAAgB;AAE/D,QAAM,cAA2B,CAAC;AAClC,MAAI,CAAC,UAAU;AACb,QAAI,CAAC,UAAW,aAAY,KAAK,SAAS;AAC1C,QAAI,CAAC,eAAgB,aAAY,KAAK,WAAW;AACjD,gBAAY,KAAK,UAAU,SAAS;AAAA,EACtC;AACA,SAAO,EAAE,aAAa,MAAM;AAC9B;AAOA,SAAS,SAAS,SAAiB,OAAO,GAAsB;AAC9D,QAAM,OAAO,SAAS,OAAO,IAAI,IAAI,GAAG,OAAO,IAAI,GAAG;AAGtD,QAAM,MAAM,aAAa,IAAI;AAC7B,SAAO;AAAA,IACL,QAAQ;AAAA,IACR,IAAI;AAAA,IACJ,MAAK,oBAAI,KAAK,GAAE,YAAY;AAAA,IAC5B,KAAK,aAAa,IAAI,OAAO,EAAE,CAAC;AAAA,IAChC,OAAO;AAAA,EACT;AACF;AAEA,SAAS,aAAa,GAAmB;AACvC,MAAI,OAAO,WAAW,YAAa,QAAO,OAAO,KAAK,GAAG,OAAO,EAAE,SAAS,QAAQ;AACnF,SAAO,KAAK,SAAS,mBAAmB,CAAC,CAAC,CAAC;AAC7C;AAEA,SAAS,sBAA8B;AACrC,SAAO,KAAK,UAAU,SAAS,CAAC,CAAC,EAAE;AACrC;AAEA,SAAS,cAAc,UAAiC;AACtD,MAAI,QAAQ;AACZ,aAAW,QAAQ,OAAO,OAAO,QAAQ,GAAG;AAC1C,eAAW,OAAO,OAAO,OAAO,IAAI,GAAG;AACrC,eAAS,KAAK,UAAU,GAAG,EAAE;AAAA,IAC/B;AAAA,EACF;AACA,SAAO;AACT;AAEA,SAAS,MAAM,SAAiC;AAC9C,MAAI,QAAQ,WAAW,EAAG,QAAO,EAAE,OAAO,GAAG,KAAK,GAAG,KAAK,GAAG,KAAK,EAAE;AACpE,QAAM,SAAS,CAAC,GAAG,OAAO,EAAE,KAAK,CAAC,GAAG,MAAM,IAAI,CAAC;AAChD,SAAO;AAAA,IACL,OAAO,OAAO;AAAA,IACd,KAAK,WAAW,QAAQ,GAAG;AAAA,IAC3B,KAAK,WAAW,QAAQ,IAAI;AAAA,IAC5B,KAAK,OAAO,OAAO,SAAS,CAAC;AAAA,EAC/B;AACF;AAEA,SAAS,WAAW,QAAkB,GAAmB;AACvD,QAAM,MAAM,KAAK,IAAI,OAAO,SAAS,GAAG,KAAK,MAAM,IAAI,OAAO,MAAM,CAAC;AACrE,SAAO,OAAO,GAAG;AACnB;AAEA,eAAe,kBACb,OACA,OACA,YACe;AACf,MAAI;AACF,UAAM,MAAM,MAAM,MAAM,KAAK,OAAO,UAAU;AAC9C,UAAM,QAAQ,IAAI,IAAI,IAAI,CAAC,OAAO,MAAM,OAAO,OAAO,YAAY,EAAE,EAAE,MAAM,MAAM;AAAA,IAAC,CAAC,CAAC,CAAC;AAAA,EACxF,QAAQ;AAAA,EAER;AACF;;;AC7VA,eAAsB,cACpB,SAC8B;AAC9B,QAAM,UAAU,KAAK,IAAI;AACzB,QAAM,gBAAgB,QAAQ,iBAAiB;AAE/C,QAAM,UAAU,MAAM,cAAc,QAAQ,OAAO,OAAO;AAC1D,QAAM,UAAkC,CAAC;AAEzC,aAAW,KAAK,QAAQ,QAAQ,CAAC,GAAG;AAClC,UAAM,QAAQ,EAAE,SAAS,EAAE,MAAM,QAAQ,EAAE;AAC3C,UAAM,SAAS,MAAM,cAAc,EAAE,OAAO,EAAE,GAAG,SAAS,OAAO,UAAU,KAAK,GAAG,CAAC;AACpF,YAAQ,KAAK,EAAE,GAAG,QAAQ,MAAM,EAAE,MAAM,MAAM,CAAC;AAAA,EACjD;AAEA,QAAM,WAAW,iBAAiB,QAAQ,OAAO,SAAS,SAAS,QAAQ,MAAM,aAAa;AAC9F,QAAM,YAAY;AAAA,IAChB,GAAG,QAAQ,YAAY;AAAA,IACvB,GAAG,QAAQ,QAAQ,CAAC,MAAM,EAAE,YAAY,KAAK;AAAA,IAC7C,GAAG;AAAA,EACL,EAAE,OAAO,CAAC,MAAM,EAAE,aAAa,OAAO;AAEtC,SAAO;AAAA,IACL;AAAA,IAAS;AAAA,IAAS;AAAA,IAClB,aAAa,UAAU,WAAW;AAAA,IAClC,YAAY,KAAK,IAAI,IAAI;AAAA,IACzB,WAAU,oBAAI,KAAK,GAAE,YAAY;AAAA,EACnC;AACF;AAEA,SAAS,iBACP,eACA,SACA,SACA,cAA4C,CAAC,GAC7C,eACgB;AAChB,QAAM,QAAwB,CAAC;AAE/B,UAAQ,QAAQ,CAAC,QAAQ,MAAM;AAC7B,UAAM,QAAQ,YAAY,CAAC;AAC3B,UAAM,QAAQ,OAAO;AAMrB,QAAI,OAAO,SAAS,eAAe,qBAAqB,OAAO,KAAK,GAAG;AACrE,YAAM,KAAK;AAAA,QACT,QAAQ;AAAA,QACR,MAAM;AAAA,QACN,UAAU;AAAA,QACV,SAAS,IAAI,KAAK;AAAA,MACpB,CAAC;AAAA,IACH;AAEA,QACE,OAAO,SAAS,eAChB,gBAAgB,KAChB,OAAO,cAAc,cAAc,OACnC;AACA,YAAM,KAAK;AAAA,QACT,QAAQ;AAAA,QACR,MAAM;AAAA,QACN,UAAU;AAAA,QACV,SAAS,IAAI,KAAK,wDAAmD,aAAa;AAAA,MACpF,CAAC;AAAA,IACH;AAEA,QAAI,OAAO,SAAS,eAAe,QAAQ,MAAM,OAAO,MAAM,OAAO,MAAM,OAAO,MAAM,GAAG;AACzF,YAAM,KAAK;AAAA,QACT,QAAQ;AAAA,QACR,MAAM;AAAA,QACN,UAAU;AAAA,QACV,SAAS,eAAe,QAAQ,MAAM,OAAO,GAAG,sBAAmB,KAAK,SAAS,OAAO,MAAM,OAAO,GAAG;AAAA,MAC1G,CAAC;AAAA,IACH;AAEA,QAAI,OAAO,SAAS,aAAa,OAAO,kBAAkB,MAAM;AAC9D,YAAM,KAAK;AAAA,QACT,QAAQ;AAAA,QACR,MAAM;AAAA,QACN,UAAU;AAAA,QACV,SAAS,IAAI,KAAK;AAAA,MACpB,CAAC;AAAA,IACH;AAAA,EACF,CAAC;AAED,SAAO;AACT;AAKA,SAAS,qBAAqB,MAAuB;AACnD,QAAM,IAAI,KAAK,YAAY;AAC3B,SAAO,0BAA0B,KAAK,CAAC;AACzC;","names":[]}

package/dist/index.d.cts

@@ -0,0 +1,189 @@
+import { StoreCapabilities, NoydbStore, SyncTargetRole } from '@noy-db/hub';
+
+/**
+ * Shared types for `@noy-db/to-probe`.
+ *
+ * Both `runStoreProbe()` and `probeTopology()` produce structured
+ * reports with the same vocabulary: a fixed set of per-axis measurement
+ * blocks, a `ProbeRisk[]` list with severity and a machine-readable
+ * `code`, and a `SuitabilityScore` triple (primary / sync-peer / backup)
+ * summarising whether the store is safe to use in that role.
+ *
+ * The `code` strings are the identifiers adopters pass to
+ * `createNoydb({ acknowledgeRisks: [...] })` to silence a known risk.
+ *
+ * @module
+ */
+
+/** Role a store is being considered for. */
+type ProbeRole = 'primary' | 'sync-peer' | 'backup' | 'archive';
+/** Machine-readable risk identifiers. Keep this list closed — adopters
+ *  pass these exact strings to `acknowledgeRisks`. */
+type ProbeRiskCode = 'slow-write-p99' | 'slow-hydration' | 'slow-sync' | 'cas-mismatch' | 'cas-unsupported' | 'no-ping' | 'hydration-blocked' | 'bundle-as-sync-peer' | 'no-atomic-cas-sync-peer' | 'primary-slower-than-peer' | 'archive-pull-configured';
+interface ProbeRisk {
+    readonly code: ProbeRiskCode;
+    readonly severity: 'warn' | 'error';
+    readonly message: string;
+}
+/** Per-axis latency measurement — all numbers in milliseconds. */
+interface LatencyStats {
+    readonly count: number;
+    readonly p50: number;
+    readonly p99: number;
+    readonly max: number;
+}
+interface WriteAxis {
+    readonly serial: LatencyStats;
+    readonly concurrent: LatencyStats;
+    readonly coldStart: number;
+}
+interface CasAxis {
+    readonly concurrent: number;
+    readonly successes: number;
+    readonly rejections: number;
+    readonly expected: 'exactly-one' | 'multiple-ok';
+}
+interface HydrationAxis {
+    readonly records: number;
+    readonly loadAllMs: number;
+    readonly perRecordBytes: number;
+    readonly totalBytes: number;
+}
+interface SyncAxis {
+    readonly singlePushMs: number;
+    readonly batchPushMs: number;
+    readonly batchSize: number;
+    readonly bytesPerPush: number;
+}
+interface NetworkAxis {
+    readonly pingSupported: boolean;
+    readonly pingMs: number | null;
+}
+/** Suitability decision per role. */
+interface SuitabilityScore {
+    /** Roles the store passes (no error-severity risks apply). */
+    readonly recommended: readonly ProbeRole[];
+    /** Risks that caller may choose to acknowledge. */
+    readonly risks: readonly ProbeRisk[];
+}
+/** Full report produced by `runStoreProbe()`. */
+interface StoreProbeReport {
+    readonly store: string;
+    readonly capabilities: StoreCapabilities | null;
+    readonly write: WriteAxis;
+    readonly cas: CasAxis;
+    readonly hydration: HydrationAxis;
+    readonly sync: SyncAxis;
+    readonly network: NetworkAxis;
+    readonly suitability: SuitabilityScore;
+    readonly durationMs: number;
+    readonly probedAt: string;
+}
+/** Options for `runStoreProbe()`. */
+interface ProbeOptions {
+    /**
+     * Probe vault name. Isolated from real data — cleaned up at the
+     * end of the probe. Default `'probe-vault'`. Avoid `_`-prefixed
+     * values: several stores hide `_`-collections from `loadAll`,
+     * which would make D3 (hydration) measure zero records.
+     */
+    readonly vault?: string;
+    /**
+     * Collection used for probe writes. Default `'probe-benchmark'`.
+     * Leftover envelopes may persist if the probe is interrupted —
+     * adopters can safely delete anything under this name.
+     */
+    readonly collection?: string;
+    /**
+     * Declared capabilities of the store (for `casAtomic` verification).
+     * Stores in this codebase don't attach capabilities to the `NoydbStore`
+     * object itself — pass them explicitly so the probe can compare
+     * declared vs. measured behaviour.
+     */
+    readonly capabilities?: StoreCapabilities;
+    /** Number of serial writes in the D1 latency sample. Default 20. */
+    readonly writeSampleSize?: number;
+    /** Number of parallel writers in the D2 CAS test. Default 10. */
+    readonly casConcurrency?: number;
+    /** Records to populate before measuring loadAll. Default 100. */
+    readonly hydrationRecords?: number;
+    /** Batch size for D4 sync economics. Default 50. */
+    readonly syncBatchSize?: number;
+    /** p99 write-latency threshold (ms). Above this → `slow-write-p99`. Default 100. */
+    readonly slowWriteMs?: number;
+    /** loadAll threshold (ms). Above this → `slow-hydration`. Default 500. */
+    readonly slowHydrationMs?: number;
+    /** Single-record push threshold (ms). Above this → `slow-sync`. Default 250. */
+    readonly slowSyncMs?: number;
+}
+/** Input for `probeTopology()`. */
+interface TopologyProbeOptions extends ProbeOptions {
+    readonly store: NoydbStore;
+    readonly sync?: ReadonlyArray<{
+        readonly store: NoydbStore;
+        readonly role: SyncTargetRole;
+        readonly label?: string;
+        readonly hasPullPolicy?: boolean;
+    }>;
+    /** Expected number of concurrent human users. Default 1. */
+    readonly expectedUsers?: number;
+}
+interface TopologyRisk extends ProbeRisk {
+    /** Target label (or 'primary'). */
+    readonly target: string;
+}
+interface TopologyTargetReport extends StoreProbeReport {
+    readonly role: SyncTargetRole;
+    readonly label: string;
+}
+interface TopologyProbeReport {
+    readonly primary: StoreProbeReport;
+    readonly targets: readonly TopologyTargetReport[];
+    readonly topology: readonly TopologyRisk[];
+    /** `true` iff there are no error-severity risks across primary + targets + topology. */
+    readonly recommended: boolean;
+    readonly durationMs: number;
+    readonly probedAt: string;
+}
+
+/**
+ * `runStoreProbe()` — setup-time suitability test for a `NoydbStore`.
+ *
+ * Five measurement axes (D1-D5 per spec in issue ):
+ *
+ * | Axis | Measures |
+ * |------|----------|
+ * | D1 — Write responsiveness   | serial + concurrent put p50/p99, cold-start |
+ * | D2 — Conflict integrity     | N parallel puts with same `expectedVersion` |
+ * | D3 — Hydration cost         | `loadAll()` time and record-size footprint |
+ * | D4 — Sync economics         | single + batch `put` cost, bytes/push |
+ * | D5 — Network resilience     | `ping()` support + latency |
+ *
+ * Writes happen to an isolated `_probe / _probe` collection that the
+ * probe cleans up on completion. The probe does not mutate real
+ * application data — but if a probe is interrupted, stray envelopes
+ * may remain under that collection. Adopters can safely delete
+ * anything under the `_probe` vault.
+ *
+ * The probe never decrypts anything. It operates at the `NoydbStore`
+ * layer with handcrafted {@link EncryptedEnvelope}-shaped payloads — a
+ * probe run produces no keyring, no DEK, and no plaintext the store
+ * can see.
+ *
+ * @module
+ */
+
+/**
+ * Run the full 5-axis probe against `store`. Returns a structured
+ * report with per-axis measurements and a {@link SuitabilityScore}.
+ *
+ * The probe is **idempotent-per-run**: it picks unique record IDs per
+ * invocation using a monotonically increasing counter seeded by
+ * `Date.now()`, so concurrent probe runs against the same store do
+ * not collide.
+ */
+declare function runStoreProbe(store: NoydbStore, options?: ProbeOptions): Promise<StoreProbeReport>;
+
+declare function probeTopology(options: TopologyProbeOptions): Promise<TopologyProbeReport>;
+
+export { type CasAxis, type HydrationAxis, type LatencyStats, type NetworkAxis, type ProbeOptions, type ProbeRisk, type ProbeRiskCode, type ProbeRole, type StoreProbeReport, type SuitabilityScore, type SyncAxis, type TopologyProbeOptions, type TopologyProbeReport, type TopologyRisk, type TopologyTargetReport, type WriteAxis, probeTopology, runStoreProbe };

package/dist/index.d.ts

@@ -0,0 +1,189 @@
+import { StoreCapabilities, NoydbStore, SyncTargetRole } from '@noy-db/hub';
+
+/**
+ * Shared types for `@noy-db/to-probe`.
+ *
+ * Both `runStoreProbe()` and `probeTopology()` produce structured
+ * reports with the same vocabulary: a fixed set of per-axis measurement
+ * blocks, a `ProbeRisk[]` list with severity and a machine-readable
+ * `code`, and a `SuitabilityScore` triple (primary / sync-peer / backup)
+ * summarising whether the store is safe to use in that role.
+ *
+ * The `code` strings are the identifiers adopters pass to
+ * `createNoydb({ acknowledgeRisks: [...] })` to silence a known risk.
+ *
+ * @module
+ */
+
+/** Role a store is being considered for. */
+type ProbeRole = 'primary' | 'sync-peer' | 'backup' | 'archive';
+/** Machine-readable risk identifiers. Keep this list closed — adopters
+ *  pass these exact strings to `acknowledgeRisks`. */
+type ProbeRiskCode = 'slow-write-p99' | 'slow-hydration' | 'slow-sync' | 'cas-mismatch' | 'cas-unsupported' | 'no-ping' | 'hydration-blocked' | 'bundle-as-sync-peer' | 'no-atomic-cas-sync-peer' | 'primary-slower-than-peer' | 'archive-pull-configured';
+interface ProbeRisk {
+    readonly code: ProbeRiskCode;
+    readonly severity: 'warn' | 'error';
+    readonly message: string;
+}
+/** Per-axis latency measurement — all numbers in milliseconds. */
+interface LatencyStats {
+    readonly count: number;
+    readonly p50: number;
+    readonly p99: number;
+    readonly max: number;
+}
+interface WriteAxis {
+    readonly serial: LatencyStats;
+    readonly concurrent: LatencyStats;
+    readonly coldStart: number;
+}
+interface CasAxis {
+    readonly concurrent: number;
+    readonly successes: number;
+    readonly rejections: number;
+    readonly expected: 'exactly-one' | 'multiple-ok';
+}
+interface HydrationAxis {
+    readonly records: number;
+    readonly loadAllMs: number;
+    readonly perRecordBytes: number;
+    readonly totalBytes: number;
+}
+interface SyncAxis {
+    readonly singlePushMs: number;
+    readonly batchPushMs: number;
+    readonly batchSize: number;
+    readonly bytesPerPush: number;
+}
+interface NetworkAxis {
+    readonly pingSupported: boolean;
+    readonly pingMs: number | null;
+}
+/** Suitability decision per role. */
+interface SuitabilityScore {
+    /** Roles the store passes (no error-severity risks apply). */
+    readonly recommended: readonly ProbeRole[];
+    /** Risks that caller may choose to acknowledge. */
+    readonly risks: readonly ProbeRisk[];
+}
+/** Full report produced by `runStoreProbe()`. */
+interface StoreProbeReport {
+    readonly store: string;
+    readonly capabilities: StoreCapabilities | null;
+    readonly write: WriteAxis;
+    readonly cas: CasAxis;
+    readonly hydration: HydrationAxis;
+    readonly sync: SyncAxis;
+    readonly network: NetworkAxis;
+    readonly suitability: SuitabilityScore;
+    readonly durationMs: number;
+    readonly probedAt: string;
+}
+/** Options for `runStoreProbe()`. */
+interface ProbeOptions {
+    /**
+     * Probe vault name. Isolated from real data — cleaned up at the
+     * end of the probe. Default `'probe-vault'`. Avoid `_`-prefixed
+     * values: several stores hide `_`-collections from `loadAll`,
+     * which would make D3 (hydration) measure zero records.
+     */
+    readonly vault?: string;
+    /**
+     * Collection used for probe writes. Default `'probe-benchmark'`.
+     * Leftover envelopes may persist if the probe is interrupted —
+     * adopters can safely delete anything under this name.
+     */
+    readonly collection?: string;
+    /**
+     * Declared capabilities of the store (for `casAtomic` verification).
+     * Stores in this codebase don't attach capabilities to the `NoydbStore`
+     * object itself — pass them explicitly so the probe can compare
+     * declared vs. measured behaviour.
+     */
+    readonly capabilities?: StoreCapabilities;
+    /** Number of serial writes in the D1 latency sample. Default 20. */
+    readonly writeSampleSize?: number;
+    /** Number of parallel writers in the D2 CAS test. Default 10. */
+    readonly casConcurrency?: number;
+    /** Records to populate before measuring loadAll. Default 100. */
+    readonly hydrationRecords?: number;
+    /** Batch size for D4 sync economics. Default 50. */
+    readonly syncBatchSize?: number;
+    /** p99 write-latency threshold (ms). Above this → `slow-write-p99`. Default 100. */
+    readonly slowWriteMs?: number;
+    /** loadAll threshold (ms). Above this → `slow-hydration`. Default 500. */
+    readonly slowHydrationMs?: number;
+    /** Single-record push threshold (ms). Above this → `slow-sync`. Default 250. */
+    readonly slowSyncMs?: number;
+}
+/** Input for `probeTopology()`. */
+interface TopologyProbeOptions extends ProbeOptions {
+    readonly store: NoydbStore;
+    readonly sync?: ReadonlyArray<{
+        readonly store: NoydbStore;
+        readonly role: SyncTargetRole;
+        readonly label?: string;
+        readonly hasPullPolicy?: boolean;
+    }>;
+    /** Expected number of concurrent human users. Default 1. */
+    readonly expectedUsers?: number;
+}
+interface TopologyRisk extends ProbeRisk {
+    /** Target label (or 'primary'). */
+    readonly target: string;
+}
+interface TopologyTargetReport extends StoreProbeReport {
+    readonly role: SyncTargetRole;
+    readonly label: string;
+}
+interface TopologyProbeReport {
+    readonly primary: StoreProbeReport;
+    readonly targets: readonly TopologyTargetReport[];
+    readonly topology: readonly TopologyRisk[];
+    /** `true` iff there are no error-severity risks across primary + targets + topology. */
+    readonly recommended: boolean;
+    readonly durationMs: number;
+    readonly probedAt: string;
+}
+
+/**
+ * `runStoreProbe()` — setup-time suitability test for a `NoydbStore`.
+ *
+ * Five measurement axes (D1-D5 per spec in issue ):
+ *
+ * | Axis | Measures |
+ * |------|----------|
+ * | D1 — Write responsiveness   | serial + concurrent put p50/p99, cold-start |
+ * | D2 — Conflict integrity     | N parallel puts with same `expectedVersion` |
+ * | D3 — Hydration cost         | `loadAll()` time and record-size footprint |
+ * | D4 — Sync economics         | single + batch `put` cost, bytes/push |
+ * | D5 — Network resilience     | `ping()` support + latency |
+ *
+ * Writes happen to an isolated `_probe / _probe` collection that the
+ * probe cleans up on completion. The probe does not mutate real
+ * application data — but if a probe is interrupted, stray envelopes
+ * may remain under that collection. Adopters can safely delete
+ * anything under the `_probe` vault.
+ *
+ * The probe never decrypts anything. It operates at the `NoydbStore`
+ * layer with handcrafted {@link EncryptedEnvelope}-shaped payloads — a
+ * probe run produces no keyring, no DEK, and no plaintext the store
+ * can see.
+ *
+ * @module
+ */
+
+/**
+ * Run the full 5-axis probe against `store`. Returns a structured
+ * report with per-axis measurements and a {@link SuitabilityScore}.
+ *
+ * The probe is **idempotent-per-run**: it picks unique record IDs per
+ * invocation using a monotonically increasing counter seeded by
+ * `Date.now()`, so concurrent probe runs against the same store do
+ * not collide.
+ */
+declare function runStoreProbe(store: NoydbStore, options?: ProbeOptions): Promise<StoreProbeReport>;
+
+declare function probeTopology(options: TopologyProbeOptions): Promise<TopologyProbeReport>;
+
+export { type CasAxis, type HydrationAxis, type LatencyStats, type NetworkAxis, type ProbeOptions, type ProbeRisk, type ProbeRiskCode, type ProbeRole, type StoreProbeReport, type SuitabilityScore, type SyncAxis, type TopologyProbeOptions, type TopologyProbeReport, type TopologyRisk, type TopologyTargetReport, type WriteAxis, probeTopology, runStoreProbe };

package/dist/index.js

@@ -0,0 +1,303 @@
+// src/probe.ts
+var PROBE_VAULT = "probe-vault";
+var PROBE_COLLECTION = "probe-benchmark";
+async function runStoreProbe(store, options = {}) {
+  const started = Date.now();
+  const vault = options.vault ?? PROBE_VAULT;
+  const collection = options.collection ?? PROBE_COLLECTION;
+  const runId = Date.now().toString(36);
+  const write = await probeWrite(store, vault, collection, runId, options);
+  const cas = await probeCas(store, vault, collection, runId, options);
+  const hydration = await probeHydration(store, vault, collection, runId, options);
+  const sync = await probeSync(store, vault, collection, runId, options);
+  const network = await probeNetwork(store);
+  const capabilities = options.capabilities ?? null;
+  const risks = collectRisks(options, write, cas, hydration, sync, network, capabilities);
+  const suitability = score(risks);
+  await bestEffortCleanup(store, vault, collection);
+  return {
+    store: store.name ?? "unnamed",
+    capabilities,
+    write,
+    cas,
+    hydration,
+    sync,
+    network,
+    suitability,
+    durationMs: Date.now() - started,
+    probedAt: (/* @__PURE__ */ new Date()).toISOString()
+  };
+}
+async function probeWrite(store, vault, collection, runId, options) {
+  const n = options.writeSampleSize ?? 20;
+  const coldId = `w-${runId}-cold`;
+  const coldStart = Date.now();
+  await store.put(vault, collection, coldId, envelope(1));
+  const coldMs = Date.now() - coldStart;
+  const serialSamples = [];
+  for (let i = 0; i < n; i++) {
+    const t0 = Date.now();
+    await store.put(vault, collection, `w-${runId}-s-${i}`, envelope(1));
+    serialSamples.push(Date.now() - t0);
+  }
+  const concurrentSamples = [];
+  for (let batch = 0; batch < 5; batch++) {
+    const t0 = Date.now();
+    await Promise.all(
+      Array.from(
+        { length: 10 },
+        (_, j) => store.put(vault, collection, `w-${runId}-c-${batch}-${j}`, envelope(1))
+      )
+    );
+    concurrentSamples.push(Date.now() - t0);
+  }
+  return {
+    coldStart: coldMs,
+    serial: stats(serialSamples),
+    concurrent: stats(concurrentSamples)
+  };
+}
+async function probeCas(store, vault, collection, runId, options) {
+  const concurrency = options.casConcurrency ?? 10;
+  const id = `cas-${runId}`;
+  await store.put(vault, collection, id, envelope(1));
+  const settled = await Promise.allSettled(
+    Array.from(
+      { length: concurrency },
+      (_, i) => store.put(vault, collection, id, envelope(2, i), 1)
+    )
+  );
+  const successes = settled.filter((r) => r.status === "fulfilled").length;
+  const rejections = settled.length - successes;
+  const declaredAtomic = options.capabilities?.casAtomic ?? null;
+  const expected = declaredAtomic === false ? "multiple-ok" : "exactly-one";
+  return { concurrent: concurrency, successes, rejections, expected };
+}
+async function probeHydration(store, vault, collection, runId, options) {
+  const records = options.hydrationRecords ?? 100;
+  const existing = await store.list(vault, collection);
+  for (let i = existing.length; i < records; i++) {
+    await store.put(vault, collection, `h-${runId}-${i}`, envelope(1));
+  }
+  const t0 = Date.now();
+  const snapshot = await store.loadAll(vault);
+  const loadAllMs = Date.now() - t0;
+  const totalBytes = estimateBytes(snapshot);
+  const loaded = Object.values(snapshot).reduce(
+    (sum, coll) => sum + Object.keys(coll).length,
+    0
+  );
+  const perRecordBytes = loaded > 0 ? Math.round(totalBytes / loaded) : 0;
+  return { records: loaded, loadAllMs, totalBytes, perRecordBytes };
+}
+async function probeSync(store, vault, collection, runId, options) {
+  const batchSize = options.syncBatchSize ?? 50;
+  const singleStart = Date.now();
+  await store.put(vault, collection, `sync-${runId}-single`, envelope(1));
+  const singlePushMs = Date.now() - singleStart;
+  const t0 = Date.now();
+  for (let i = 0; i < batchSize; i++) {
+    await store.put(vault, collection, `sync-${runId}-b-${i}`, envelope(1));
+  }
+  const batchPushMs = Date.now() - t0;
+  const bytesPerPush = approxEnvelopeBytes();
+  return { singlePushMs, batchPushMs, batchSize, bytesPerPush };
+}
+async function probeNetwork(store) {
+  if (typeof store.ping !== "function") {
+    return { pingSupported: false, pingMs: null };
+  }
+  const t0 = Date.now();
+  try {
+    await store.ping();
+    return { pingSupported: true, pingMs: Date.now() - t0 };
+  } catch {
+    return { pingSupported: true, pingMs: null };
+  }
+}
+function collectRisks(options, write, cas, hydration, sync, network, capabilities) {
+  const risks = [];
+  const slowWriteMs = options.slowWriteMs ?? 100;
+  const slowHydrationMs = options.slowHydrationMs ?? 500;
+  const slowSyncMs = options.slowSyncMs ?? 250;
+  if (write.serial.p99 > slowWriteMs) {
+    risks.push({
+      code: "slow-write-p99",
+      severity: "warn",
+      message: `Serial write p99 ${write.serial.p99}ms exceeds threshold ${slowWriteMs}ms`
+    });
+  }
+  if (hydration.loadAllMs > slowHydrationMs) {
+    risks.push({
+      code: "slow-hydration",
+      severity: "warn",
+      message: `loadAll(${hydration.records}) took ${hydration.loadAllMs}ms (threshold ${slowHydrationMs}ms)`
+    });
+  }
+  if (sync.singlePushMs > slowSyncMs) {
+    risks.push({
+      code: "slow-sync",
+      severity: "warn",
+      message: `Single-record push ${sync.singlePushMs}ms exceeds ${slowSyncMs}ms`
+    });
+  }
+  if (capabilities?.casAtomic === true && cas.successes > 1) {
+    risks.push({
+      code: "cas-mismatch",
+      severity: "error",
+      message: `Store declared casAtomic:true but ${cas.successes}/${cas.concurrent} concurrent puts succeeded (expected exactly 1)`
+    });
+  }
+  if (capabilities?.casAtomic === false) {
+    risks.push({
+      code: "cas-unsupported",
+      severity: "warn",
+      message: "Store lacks atomic CAS \u2014 unsafe for multi-writer sync-peer role"
+    });
+  }
+  if (!network.pingSupported) {
+    risks.push({
+      code: "no-ping",
+      severity: "warn",
+      message: "Store has no ping() \u2014 runtime monitor will rely on list() as liveness check"
+    });
+  }
+  return risks;
+}
+function score(risks) {
+  const hasError = risks.some((r) => r.severity === "error");
+  const casUnsupported = risks.some((r) => r.code === "cas-unsupported");
+  const slowWrite = risks.some((r) => r.code === "slow-write-p99");
+  const recommended = [];
+  if (!hasError) {
+    if (!slowWrite) recommended.push("primary");
+    if (!casUnsupported) recommended.push("sync-peer");
+    recommended.push("backup", "archive");
+  }
+  return { recommended, risks };
+}
+function envelope(version, seed = 0) {
+  const data = `probe-${version}-${seed}`.padEnd(64, "x");
+  const b64 = base64Encode(data);
+  return {
+    _noydb: 1,
+    _v: version,
+    _ts: (/* @__PURE__ */ new Date()).toISOString(),
+    _iv: base64Encode("0".repeat(12)),
+    _data: b64
+  };
+}
+function base64Encode(s) {
+  if (typeof Buffer !== "undefined") return Buffer.from(s, "utf-8").toString("base64");
+  return btoa(unescape(encodeURIComponent(s)));
+}
+function approxEnvelopeBytes() {
+  return JSON.stringify(envelope(1)).length;
+}
+function estimateBytes(snapshot) {
+  let total = 0;
+  for (const coll of Object.values(snapshot)) {
+    for (const rec of Object.values(coll)) {
+      total += JSON.stringify(rec).length;
+    }
+  }
+  return total;
+}
+function stats(samples) {
+  if (samples.length === 0) return { count: 0, p50: 0, p99: 0, max: 0 };
+  const sorted = [...samples].sort((a, b) => a - b);
+  return {
+    count: sorted.length,
+    p50: percentile(sorted, 0.5),
+    p99: percentile(sorted, 0.99),
+    max: sorted[sorted.length - 1]
+  };
+}
+function percentile(sorted, q) {
+  const idx = Math.min(sorted.length - 1, Math.floor(q * sorted.length));
+  return sorted[idx];
+}
+async function bestEffortCleanup(store, vault, collection) {
+  try {
+    const ids = await store.list(vault, collection);
+    await Promise.all(ids.map((id) => store.delete(vault, collection, id).catch(() => {
+    })));
+  } catch {
+  }
+}
+
+// src/topology.ts
+async function probeTopology(options) {
+  const started = Date.now();
+  const expectedUsers = options.expectedUsers ?? 1;
+  const primary = await runStoreProbe(options.store, options);
+  const targets = [];
+  for (const t of options.sync ?? []) {
+    const label = t.label ?? t.store.name ?? t.role;
+    const report = await runStoreProbe(t.store, { ...options, vault: `_probe-${label}` });
+    targets.push({ ...report, role: t.role, label });
+  }
+  const topology = evaluateTopology(options.store, primary, targets, options.sync, expectedUsers);
+  const allErrors = [
+    ...primary.suitability.risks,
+    ...targets.flatMap((t) => t.suitability.risks),
+    ...topology
+  ].filter((r) => r.severity === "error");
+  return {
+    primary,
+    targets,
+    topology,
+    recommended: allErrors.length === 0,
+    durationMs: Date.now() - started,
+    probedAt: (/* @__PURE__ */ new Date()).toISOString()
+  };
+}
+function evaluateTopology(_primaryStore, primary, targets, syncTargets = [], expectedUsers) {
+  const risks = [];
+  targets.forEach((target, i) => {
+    const input = syncTargets[i];
+    const label = target.label;
+    if (target.role === "sync-peer" && looksLikeBundleStore(target.store)) {
+      risks.push({
+        target: label,
+        code: "bundle-as-sync-peer",
+        severity: "warn",
+        message: `"${label}" looks bundle-shaped \u2014 use role 'backup' or 'archive' for push-only semantics`
+      });
+    }
+    if (target.role === "sync-peer" && expectedUsers > 1 && target.capabilities?.casAtomic === false) {
+      risks.push({
+        target: label,
+        code: "no-atomic-cas-sync-peer",
+        severity: "error",
+        message: `"${label}" has casAtomic:false \u2014 unsafe as sync-peer for ${expectedUsers} concurrent users`
+      });
+    }
+    if (target.role === "sync-peer" && primary.write.serial.p99 > target.write.serial.p99 * 2) {
+      risks.push({
+        target: label,
+        code: "primary-slower-than-peer",
+        severity: "warn",
+        message: `Primary p99 ${primary.write.serial.p99}ms is >2\xD7 peer "${label}" p99 ${target.write.serial.p99}ms \u2014 unusual topology`
+      });
+    }
+    if (target.role === "archive" && input?.hasPullPolicy === true) {
+      risks.push({
+        target: label,
+        code: "archive-pull-configured",
+        severity: "error",
+        message: `"${label}" is an archive target but has a pull policy \u2014 archives are push-only`
+      });
+    }
+  });
+  return risks;
+}
+function looksLikeBundleStore(name) {
+  const n = name.toLowerCase();
+  return /drive|webdav|git|bundle/.test(n);
+}
+export {
+  probeTopology,
+  runStoreProbe
+};
+//# sourceMappingURL=index.js.map

package/dist/index.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../src/probe.ts","../src/topology.ts"],"sourcesContent":["/**\n * `runStoreProbe()` — setup-time suitability test for a `NoydbStore`.\n *\n * Five measurement axes (D1-D5 per spec in issue ):\n *\n * | Axis | Measures |\n * |------|----------|\n * | D1 — Write responsiveness   | serial + concurrent put p50/p99, cold-start |\n * | D2 — Conflict integrity     | N parallel puts with same `expectedVersion` |\n * | D3 — Hydration cost         | `loadAll()` time and record-size footprint |\n * | D4 — Sync economics         | single + batch `put` cost, bytes/push |\n * | D5 — Network resilience     | `ping()` support + latency |\n *\n * Writes happen to an isolated `_probe / _probe` collection that the\n * probe cleans up on completion. The probe does not mutate real\n * application data — but if a probe is interrupted, stray envelopes\n * may remain under that collection. Adopters can safely delete\n * anything under the `_probe` vault.\n *\n * The probe never decrypts anything. It operates at the `NoydbStore`\n * layer with handcrafted {@link EncryptedEnvelope}-shaped payloads — a\n * probe run produces no keyring, no DEK, and no plaintext the store\n * can see.\n *\n * @module\n */\nimport type { EncryptedEnvelope, NoydbStore, StoreCapabilities, VaultSnapshot } from '@noy-db/hub'\nimport type {\n  CasAxis,\n  HydrationAxis,\n  LatencyStats,\n  NetworkAxis,\n  ProbeOptions,\n  ProbeRisk,\n  ProbeRole,\n  StoreProbeReport,\n  SuitabilityScore,\n  SyncAxis,\n  WriteAxis,\n} from './types.js'\n\nconst PROBE_VAULT = 'probe-vault'\nconst PROBE_COLLECTION = 'probe-benchmark'\n\n/**\n * Run the full 5-axis probe against `store`. Returns a structured\n * report with per-axis measurements and a {@link SuitabilityScore}.\n *\n * The probe is **idempotent-per-run**: it picks unique record IDs per\n * invocation using a monotonically increasing counter seeded by\n * `Date.now()`, so concurrent probe runs against the same store do\n * not collide.\n */\nexport async function runStoreProbe(\n  store: NoydbStore,\n  options: ProbeOptions = {},\n): Promise<StoreProbeReport> {\n  const started = Date.now()\n  const vault = options.vault ?? PROBE_VAULT\n  const collection = options.collection ?? PROBE_COLLECTION\n  const runId = Date.now().toString(36)\n\n  const write = await probeWrite(store, vault, collection, runId, options)\n  const cas = await probeCas(store, vault, collection, runId, options)\n  const hydration = await probeHydration(store, vault, collection, runId, options)\n  const sync = await probeSync(store, vault, collection, runId, options)\n  const network = await probeNetwork(store)\n\n  const capabilities = options.capabilities ?? null\n  const risks = collectRisks(options, write, cas, hydration, sync, network, capabilities)\n  const suitability = score(risks)\n\n  await bestEffortCleanup(store, vault, collection)\n\n  return {\n    store: store.name ?? 'unnamed',\n    capabilities,\n    write, cas, hydration, sync, network,\n    suitability,\n    durationMs: Date.now() - started,\n    probedAt: new Date().toISOString(),\n  }\n}\n\n// ── D1 · write latency ────────────────────────────────────────────────────\n\nasync function probeWrite(\n  store: NoydbStore,\n  vault: string,\n  collection: string,\n  runId: string,\n  options: ProbeOptions,\n): Promise<WriteAxis> {\n  const n = options.writeSampleSize ?? 20\n\n  // Cold start — single isolated write\n  const coldId = `w-${runId}-cold`\n  const coldStart = Date.now()\n  await store.put(vault, collection, coldId, envelope(1))\n  const coldMs = Date.now() - coldStart\n\n  // Serial sample\n  const serialSamples: number[] = []\n  for (let i = 0; i < n; i++) {\n    const t0 = Date.now()\n    await store.put(vault, collection, `w-${runId}-s-${i}`, envelope(1))\n    serialSamples.push(Date.now() - t0)\n  }\n\n  // Concurrent sample: 5 batches of 10, measured per-batch\n  const concurrentSamples: number[] = []\n  for (let batch = 0; batch < 5; batch++) {\n    const t0 = Date.now()\n    await Promise.all(\n      Array.from({ length: 10 }, (_, j) =>\n        store.put(vault, collection, `w-${runId}-c-${batch}-${j}`, envelope(1)),\n      ),\n    )\n    concurrentSamples.push(Date.now() - t0)\n  }\n\n  return {\n    coldStart: coldMs,\n    serial: stats(serialSamples),\n    concurrent: stats(concurrentSamples),\n  }\n}\n\n// ── D2 · CAS integrity ────────────────────────────────────────────────────\n\nasync function probeCas(\n  store: NoydbStore,\n  vault: string,\n  collection: string,\n  runId: string,\n  options: ProbeOptions,\n): Promise<CasAxis> {\n  const concurrency = options.casConcurrency ?? 10\n  const id = `cas-${runId}`\n\n  // Seed with version 1\n  await store.put(vault, collection, id, envelope(1))\n\n  // Fire N concurrent puts all with expectedVersion=1. For a casAtomic\n  // store: exactly one should succeed; the rest should reject with\n  // ConflictError.\n  const settled = await Promise.allSettled(\n    Array.from({ length: concurrency }, (_, i) =>\n      store.put(vault, collection, id, envelope(2, i), 1),\n    ),\n  )\n  const successes = settled.filter((r) => r.status === 'fulfilled').length\n  const rejections = settled.length - successes\n\n  // What the store promised\n  const declaredAtomic = options.capabilities?.casAtomic ?? null\n  const expected = declaredAtomic === false ? 'multiple-ok' : 'exactly-one'\n\n  return { concurrent: concurrency, successes, rejections, expected }\n}\n\n// ── D3 · hydration ────────────────────────────────────────────────────────\n\nasync function probeHydration(\n  store: NoydbStore,\n  vault: string,\n  collection: string,\n  runId: string,\n  options: ProbeOptions,\n): Promise<HydrationAxis> {\n  const records = options.hydrationRecords ?? 100\n\n  // Fill the probe collection to the target record count. Writes from\n  // D1/D2 already contributed some envelopes; we top up the rest.\n  const existing = await store.list(vault, collection)\n  for (let i = existing.length; i < records; i++) {\n    await store.put(vault, collection, `h-${runId}-${i}`, envelope(1))\n  }\n\n  const t0 = Date.now()\n  const snapshot = await store.loadAll(vault)\n  const loadAllMs = Date.now() - t0\n\n  const totalBytes = estimateBytes(snapshot)\n  const loaded = Object.values(snapshot).reduce(\n    (sum, coll) => sum + Object.keys(coll).length,\n    0,\n  )\n  const perRecordBytes = loaded > 0 ? Math.round(totalBytes / loaded) : 0\n\n  return { records: loaded, loadAllMs, totalBytes, perRecordBytes }\n}\n\n// ── D4 · sync economics ───────────────────────────────────────────────────\n\nasync function probeSync(\n  store: NoydbStore,\n  vault: string,\n  collection: string,\n  runId: string,\n  options: ProbeOptions,\n): Promise<SyncAxis> {\n  const batchSize = options.syncBatchSize ?? 50\n\n  // Single-record push\n  const singleStart = Date.now()\n  await store.put(vault, collection, `sync-${runId}-single`, envelope(1))\n  const singlePushMs = Date.now() - singleStart\n\n  // Batch push (simulated — sequential writes since the contract has no\n  // bulk put; saveAll would also rewrite existing data)\n  const t0 = Date.now()\n  for (let i = 0; i < batchSize; i++) {\n    await store.put(vault, collection, `sync-${runId}-b-${i}`, envelope(1))\n  }\n  const batchPushMs = Date.now() - t0\n\n  // Rough bytes-per-push — envelope size plus keys\n  const bytesPerPush = approxEnvelopeBytes()\n\n  return { singlePushMs, batchPushMs, batchSize, bytesPerPush }\n}\n\n// ── D5 · network resilience ───────────────────────────────────────────────\n\nasync function probeNetwork(store: NoydbStore): Promise<NetworkAxis> {\n  if (typeof store.ping !== 'function') {\n    return { pingSupported: false, pingMs: null }\n  }\n  const t0 = Date.now()\n  try {\n    await store.ping()\n    return { pingSupported: true, pingMs: Date.now() - t0 }\n  } catch {\n    return { pingSupported: true, pingMs: null }\n  }\n}\n\n// ── Risk aggregation + scoring ────────────────────────────────────────────\n\nfunction collectRisks(\n  options: ProbeOptions,\n  write: WriteAxis,\n  cas: CasAxis,\n  hydration: HydrationAxis,\n  sync: SyncAxis,\n  network: NetworkAxis,\n  capabilities: StoreCapabilities | null,\n): ProbeRisk[] {\n  const risks: ProbeRisk[] = []\n  const slowWriteMs = options.slowWriteMs ?? 100\n  const slowHydrationMs = options.slowHydrationMs ?? 500\n  const slowSyncMs = options.slowSyncMs ?? 250\n\n  if (write.serial.p99 > slowWriteMs) {\n    risks.push({\n      code: 'slow-write-p99',\n      severity: 'warn',\n      message: `Serial write p99 ${write.serial.p99}ms exceeds threshold ${slowWriteMs}ms`,\n    })\n  }\n  if (hydration.loadAllMs > slowHydrationMs) {\n    risks.push({\n      code: 'slow-hydration',\n      severity: 'warn',\n      message: `loadAll(${hydration.records}) took ${hydration.loadAllMs}ms (threshold ${slowHydrationMs}ms)`,\n    })\n  }\n  if (sync.singlePushMs > slowSyncMs) {\n    risks.push({\n      code: 'slow-sync',\n      severity: 'warn',\n      message: `Single-record push ${sync.singlePushMs}ms exceeds ${slowSyncMs}ms`,\n    })\n  }\n  if (capabilities?.casAtomic === true && cas.successes > 1) {\n    risks.push({\n      code: 'cas-mismatch',\n      severity: 'error',\n      message: `Store declared casAtomic:true but ${cas.successes}/${cas.concurrent} concurrent puts succeeded (expected exactly 1)`,\n    })\n  }\n  if (capabilities?.casAtomic === false) {\n    risks.push({\n      code: 'cas-unsupported',\n      severity: 'warn',\n      message: 'Store lacks atomic CAS — unsafe for multi-writer sync-peer role',\n    })\n  }\n  if (!network.pingSupported) {\n    risks.push({\n      code: 'no-ping',\n      severity: 'warn',\n      message: 'Store has no ping() — runtime monitor will rely on list() as liveness check',\n    })\n  }\n\n  return risks\n}\n\nfunction score(risks: readonly ProbeRisk[]): SuitabilityScore {\n  const hasError = risks.some((r) => r.severity === 'error')\n  const casUnsupported = risks.some((r) => r.code === 'cas-unsupported')\n  const slowWrite = risks.some((r) => r.code === 'slow-write-p99')\n\n  const recommended: ProbeRole[] = []\n  if (!hasError) {\n    if (!slowWrite) recommended.push('primary')\n    if (!casUnsupported) recommended.push('sync-peer')\n    recommended.push('backup', 'archive')\n  }\n  return { recommended, risks }\n}\n\n// ── helpers ───────────────────────────────────────────────────────────────\n\n/** Build a synthetic envelope with a tiny ciphertext payload. Safe —\n *  the store never decrypts, so the `_data` just needs to parse through\n *  whatever JSON round-tripping the store does. */\nfunction envelope(version: number, seed = 0): EncryptedEnvelope {\n  const data = `probe-${version}-${seed}`.padEnd(64, 'x')\n  // base64-encode a deterministic marker so stores that assert\n  // base64-shape on persist don't explode\n  const b64 = base64Encode(data)\n  return {\n    _noydb: 1,\n    _v: version,\n    _ts: new Date().toISOString(),\n    _iv: base64Encode('0'.repeat(12)),\n    _data: b64,\n  }\n}\n\nfunction base64Encode(s: string): string {\n  if (typeof Buffer !== 'undefined') return Buffer.from(s, 'utf-8').toString('base64')\n  return btoa(unescape(encodeURIComponent(s)))\n}\n\nfunction approxEnvelopeBytes(): number {\n  return JSON.stringify(envelope(1)).length\n}\n\nfunction estimateBytes(snapshot: VaultSnapshot): number {\n  let total = 0\n  for (const coll of Object.values(snapshot)) {\n    for (const rec of Object.values(coll)) {\n      total += JSON.stringify(rec).length\n    }\n  }\n  return total\n}\n\nfunction stats(samples: number[]): LatencyStats {\n  if (samples.length === 0) return { count: 0, p50: 0, p99: 0, max: 0 }\n  const sorted = [...samples].sort((a, b) => a - b)\n  return {\n    count: sorted.length,\n    p50: percentile(sorted, 0.5),\n    p99: percentile(sorted, 0.99),\n    max: sorted[sorted.length - 1]!,\n  }\n}\n\nfunction percentile(sorted: number[], q: number): number {\n  const idx = Math.min(sorted.length - 1, Math.floor(q * sorted.length))\n  return sorted[idx]!\n}\n\nasync function bestEffortCleanup(\n  store: NoydbStore,\n  vault: string,\n  collection: string,\n): Promise<void> {\n  try {\n    const ids = await store.list(vault, collection)\n    await Promise.all(ids.map((id) => store.delete(vault, collection, id).catch(() => {})))\n  } catch {\n    // Silent — cleanup failure is not a probe failure\n  }\n}\n","/**\n * `probeTopology()` — multi-backend health + suitability check.\n *\n * Runs {@link runStoreProbe} independently on the primary store and\n * every sync target, then layers topology-level rules that only make\n * sense across the whole graph:\n *\n * | Rule | Condition | Severity |\n * |------|-----------|----------|\n * | `bundle-as-sync-peer`        | Bundle-shaped store used as `sync-peer`                    | warn  |\n * | `no-atomic-cas-sync-peer`    | Non-atomic-CAS store used as `sync-peer` with >1 user      | error |\n * | `primary-slower-than-peer`   | Primary p99 > sync-peer p99 × 2                            | warn  |\n * | `archive-pull-configured`    | `archive` target declared with a pull policy               | error |\n *\n * Only one probe pass per store — if two targets happen to point at\n * the same backend, both get probed (the target identifies the\n * configuration, not the backend instance).\n *\n * @module\n */\nimport type { NoydbStore } from '@noy-db/hub'\nimport { runStoreProbe } from './probe.js'\nimport type {\n  StoreProbeReport,\n  TopologyProbeOptions,\n  TopologyProbeReport,\n  TopologyRisk,\n  TopologyTargetReport,\n} from './types.js'\n\nexport async function probeTopology(\n  options: TopologyProbeOptions,\n): Promise<TopologyProbeReport> {\n  const started = Date.now()\n  const expectedUsers = options.expectedUsers ?? 1\n\n  const primary = await runStoreProbe(options.store, options)\n  const targets: TopologyTargetReport[] = []\n\n  for (const t of options.sync ?? []) {\n    const label = t.label ?? t.store.name ?? t.role\n    const report = await runStoreProbe(t.store, { ...options, vault: `_probe-${label}` })\n    targets.push({ ...report, role: t.role, label })\n  }\n\n  const topology = evaluateTopology(options.store, primary, targets, options.sync, expectedUsers)\n  const allErrors = [\n    ...primary.suitability.risks,\n    ...targets.flatMap((t) => t.suitability.risks),\n    ...topology,\n  ].filter((r) => r.severity === 'error')\n\n  return {\n    primary, targets, topology,\n    recommended: allErrors.length === 0,\n    durationMs: Date.now() - started,\n    probedAt: new Date().toISOString(),\n  }\n}\n\nfunction evaluateTopology(\n  _primaryStore: NoydbStore,\n  primary: StoreProbeReport,\n  targets: readonly TopologyTargetReport[],\n  syncTargets: TopologyProbeOptions['sync'] = [],\n  expectedUsers: number,\n): TopologyRisk[] {\n  const risks: TopologyRisk[] = []\n\n  targets.forEach((target, i) => {\n    const input = syncTargets[i]\n    const label = target.label\n\n    // Bundle-shaped stores (drive/webdav/git) don't have atomic CAS\n    // and surface as sync-peer-unsuitable. For we detect by\n    // name heuristics; future hub work can annotate StoreCapabilities\n    // with a `shape: 'kv' | 'bundle'` field.\n    if (target.role === 'sync-peer' && looksLikeBundleStore(target.store)) {\n      risks.push({\n        target: label,\n        code: 'bundle-as-sync-peer',\n        severity: 'warn',\n        message: `\"${label}\" looks bundle-shaped — use role 'backup' or 'archive' for push-only semantics`,\n      })\n    }\n\n    if (\n      target.role === 'sync-peer' &&\n      expectedUsers > 1 &&\n      target.capabilities?.casAtomic === false\n    ) {\n      risks.push({\n        target: label,\n        code: 'no-atomic-cas-sync-peer',\n        severity: 'error',\n        message: `\"${label}\" has casAtomic:false — unsafe as sync-peer for ${expectedUsers} concurrent users`,\n      })\n    }\n\n    if (target.role === 'sync-peer' && primary.write.serial.p99 > target.write.serial.p99 * 2) {\n      risks.push({\n        target: label,\n        code: 'primary-slower-than-peer',\n        severity: 'warn',\n        message: `Primary p99 ${primary.write.serial.p99}ms is >2× peer \"${label}\" p99 ${target.write.serial.p99}ms — unusual topology`,\n      })\n    }\n\n    if (target.role === 'archive' && input?.hasPullPolicy === true) {\n      risks.push({\n        target: label,\n        code: 'archive-pull-configured',\n        severity: 'error',\n        message: `\"${label}\" is an archive target but has a pull policy — archives are push-only`,\n      })\n    }\n  })\n\n  return risks\n}\n\n/** Heuristic bundle detection: name includes 'drive' / 'webdav' / 'git'\n *  / 'bundle'. Adopters who wrap a bundle store under a custom name\n *  can silence this via `acknowledgeRisks: ['bundle-as-sync-peer']`. */\nfunction looksLikeBundleStore(name: string): boolean {\n  const n = name.toLowerCase()\n  return /drive|webdav|git|bundle/.test(n)\n}\n"],"mappings":";AAyCA,IAAM,cAAc;AACpB,IAAM,mBAAmB;AAWzB,eAAsB,cACpB,OACA,UAAwB,CAAC,GACE;AAC3B,QAAM,UAAU,KAAK,IAAI;AACzB,QAAM,QAAQ,QAAQ,SAAS;AAC/B,QAAM,aAAa,QAAQ,cAAc;AACzC,QAAM,QAAQ,KAAK,IAAI,EAAE,SAAS,EAAE;AAEpC,QAAM,QAAQ,MAAM,WAAW,OAAO,OAAO,YAAY,OAAO,OAAO;AACvE,QAAM,MAAM,MAAM,SAAS,OAAO,OAAO,YAAY,OAAO,OAAO;AACnE,QAAM,YAAY,MAAM,eAAe,OAAO,OAAO,YAAY,OAAO,OAAO;AAC/E,QAAM,OAAO,MAAM,UAAU,OAAO,OAAO,YAAY,OAAO,OAAO;AACrE,QAAM,UAAU,MAAM,aAAa,KAAK;AAExC,QAAM,eAAe,QAAQ,gBAAgB;AAC7C,QAAM,QAAQ,aAAa,SAAS,OAAO,KAAK,WAAW,MAAM,SAAS,YAAY;AACtF,QAAM,cAAc,MAAM,KAAK;AAE/B,QAAM,kBAAkB,OAAO,OAAO,UAAU;AAEhD,SAAO;AAAA,IACL,OAAO,MAAM,QAAQ;AAAA,IACrB;AAAA,IACA;AAAA,IAAO;AAAA,IAAK;AAAA,IAAW;AAAA,IAAM;AAAA,IAC7B;AAAA,IACA,YAAY,KAAK,IAAI,IAAI;AAAA,IACzB,WAAU,oBAAI,KAAK,GAAE,YAAY;AAAA,EACnC;AACF;AAIA,eAAe,WACb,OACA,OACA,YACA,OACA,SACoB;AACpB,QAAM,IAAI,QAAQ,mBAAmB;AAGrC,QAAM,SAAS,KAAK,KAAK;AACzB,QAAM,YAAY,KAAK,IAAI;AAC3B,QAAM,MAAM,IAAI,OAAO,YAAY,QAAQ,SAAS,CAAC,CAAC;AACtD,QAAM,SAAS,KAAK,IAAI,IAAI;AAG5B,QAAM,gBAA0B,CAAC;AACjC,WAAS,IAAI,GAAG,IAAI,GAAG,KAAK;AAC1B,UAAM,KAAK,KAAK,IAAI;AACpB,UAAM,MAAM,IAAI,OAAO,YAAY,KAAK,KAAK,MAAM,CAAC,IAAI,SAAS,CAAC,CAAC;AACnE,kBAAc,KAAK,KAAK,IAAI,IAAI,EAAE;AAAA,EACpC;AAGA,QAAM,oBAA8B,CAAC;AACrC,WAAS,QAAQ,GAAG,QAAQ,GAAG,SAAS;AACtC,UAAM,KAAK,KAAK,IAAI;AACpB,UAAM,QAAQ;AAAA,MACZ,MAAM;AAAA,QAAK,EAAE,QAAQ,GAAG;AAAA,QAAG,CAAC,GAAG,MAC7B,MAAM,IAAI,OAAO,YAAY,KAAK,KAAK,MAAM,KAAK,IAAI,CAAC,IAAI,SAAS,CAAC,CAAC;AAAA,MACxE;AAAA,IACF;AACA,sBAAkB,KAAK,KAAK,IAAI,IAAI,EAAE;AAAA,EACxC;AAEA,SAAO;AAAA,IACL,WAAW;AAAA,IACX,QAAQ,MAAM,aAAa;AAAA,IAC3B,YAAY,MAAM,iBAAiB;AAAA,EACrC;AACF;AAIA,eAAe,SACb,OACA,OACA,YACA,OACA,SACkB;AAClB,QAAM,cAAc,QAAQ,kBAAkB;AAC9C,QAAM,KAAK,OAAO,KAAK;AAGvB,QAAM,MAAM,IAAI,OAAO,YAAY,IAAI,SAAS,CAAC,CAAC;AAKlD,QAAM,UAAU,MAAM,QAAQ;AAAA,IAC5B,MAAM;AAAA,MAAK,EAAE,QAAQ,YAAY;AAAA,MAAG,CAAC,GAAG,MACtC,MAAM,IAAI,OAAO,YAAY,IAAI,SAAS,GAAG,CAAC,GAAG,CAAC;AAAA,IACpD;AAAA,EACF;AACA,QAAM,YAAY,QAAQ,OAAO,CAAC,MAAM,EAAE,WAAW,WAAW,EAAE;AAClE,QAAM,aAAa,QAAQ,SAAS;AAGpC,QAAM,iBAAiB,QAAQ,cAAc,aAAa;AAC1D,QAAM,WAAW,mBAAmB,QAAQ,gBAAgB;AAE5D,SAAO,EAAE,YAAY,aAAa,WAAW,YAAY,SAAS;AACpE;AAIA,eAAe,eACb,OACA,OACA,YACA,OACA,SACwB;AACxB,QAAM,UAAU,QAAQ,oBAAoB;AAI5C,QAAM,WAAW,MAAM,MAAM,KAAK,OAAO,UAAU;AACnD,WAAS,IAAI,SAAS,QAAQ,IAAI,SAAS,KAAK;AAC9C,UAAM,MAAM,IAAI,OAAO,YAAY,KAAK,KAAK,IAAI,CAAC,IAAI,SAAS,CAAC,CAAC;AAAA,EACnE;AAEA,QAAM,KAAK,KAAK,IAAI;AACpB,QAAM,WAAW,MAAM,MAAM,QAAQ,KAAK;AAC1C,QAAM,YAAY,KAAK,IAAI,IAAI;AAE/B,QAAM,aAAa,cAAc,QAAQ;AACzC,QAAM,SAAS,OAAO,OAAO,QAAQ,EAAE;AAAA,IACrC,CAAC,KAAK,SAAS,MAAM,OAAO,KAAK,IAAI,EAAE;AAAA,IACvC;AAAA,EACF;AACA,QAAM,iBAAiB,SAAS,IAAI,KAAK,MAAM,aAAa,MAAM,IAAI;AAEtE,SAAO,EAAE,SAAS,QAAQ,WAAW,YAAY,eAAe;AAClE;AAIA,eAAe,UACb,OACA,OACA,YACA,OACA,SACmB;AACnB,QAAM,YAAY,QAAQ,iBAAiB;AAG3C,QAAM,cAAc,KAAK,IAAI;AAC7B,QAAM,MAAM,IAAI,OAAO,YAAY,QAAQ,KAAK,WAAW,SAAS,CAAC,CAAC;AACtE,QAAM,eAAe,KAAK,IAAI,IAAI;AAIlC,QAAM,KAAK,KAAK,IAAI;AACpB,WAAS,IAAI,GAAG,IAAI,WAAW,KAAK;AAClC,UAAM,MAAM,IAAI,OAAO,YAAY,QAAQ,KAAK,MAAM,CAAC,IAAI,SAAS,CAAC,CAAC;AAAA,EACxE;AACA,QAAM,cAAc,KAAK,IAAI,IAAI;AAGjC,QAAM,eAAe,oBAAoB;AAEzC,SAAO,EAAE,cAAc,aAAa,WAAW,aAAa;AAC9D;AAIA,eAAe,aAAa,OAAyC;AACnE,MAAI,OAAO,MAAM,SAAS,YAAY;AACpC,WAAO,EAAE,eAAe,OAAO,QAAQ,KAAK;AAAA,EAC9C;AACA,QAAM,KAAK,KAAK,IAAI;AACpB,MAAI;AACF,UAAM,MAAM,KAAK;AACjB,WAAO,EAAE,eAAe,MAAM,QAAQ,KAAK,IAAI,IAAI,GAAG;AAAA,EACxD,QAAQ;AACN,WAAO,EAAE,eAAe,MAAM,QAAQ,KAAK;AAAA,EAC7C;AACF;AAIA,SAAS,aACP,SACA,OACA,KACA,WACA,MACA,SACA,cACa;AACb,QAAM,QAAqB,CAAC;AAC5B,QAAM,cAAc,QAAQ,eAAe;AAC3C,QAAM,kBAAkB,QAAQ,mBAAmB;AACnD,QAAM,aAAa,QAAQ,cAAc;AAEzC,MAAI,MAAM,OAAO,MAAM,aAAa;AAClC,UAAM,KAAK;AAAA,MACT,MAAM;AAAA,MACN,UAAU;AAAA,MACV,SAAS,oBAAoB,MAAM,OAAO,GAAG,wBAAwB,WAAW;AAAA,IAClF,CAAC;AAAA,EACH;AACA,MAAI,UAAU,YAAY,iBAAiB;AACzC,UAAM,KAAK;AAAA,MACT,MAAM;AAAA,MACN,UAAU;AAAA,MACV,SAAS,WAAW,UAAU,OAAO,UAAU,UAAU,SAAS,iBAAiB,eAAe;AAAA,IACpG,CAAC;AAAA,EACH;AACA,MAAI,KAAK,eAAe,YAAY;AAClC,UAAM,KAAK;AAAA,MACT,MAAM;AAAA,MACN,UAAU;AAAA,MACV,SAAS,sBAAsB,KAAK,YAAY,cAAc,UAAU;AAAA,IAC1E,CAAC;AAAA,EACH;AACA,MAAI,cAAc,cAAc,QAAQ,IAAI,YAAY,GAAG;AACzD,UAAM,KAAK;AAAA,MACT,MAAM;AAAA,MACN,UAAU;AAAA,MACV,SAAS,qCAAqC,IAAI,SAAS,IAAI,IAAI,UAAU;AAAA,IAC/E,CAAC;AAAA,EACH;AACA,MAAI,cAAc,cAAc,OAAO;AACrC,UAAM,KAAK;AAAA,MACT,MAAM;AAAA,MACN,UAAU;AAAA,MACV,SAAS;AAAA,IACX,CAAC;AAAA,EACH;AACA,MAAI,CAAC,QAAQ,eAAe;AAC1B,UAAM,KAAK;AAAA,MACT,MAAM;AAAA,MACN,UAAU;AAAA,MACV,SAAS;AAAA,IACX,CAAC;AAAA,EACH;AAEA,SAAO;AACT;AAEA,SAAS,MAAM,OAA+C;AAC5D,QAAM,WAAW,MAAM,KAAK,CAAC,MAAM,EAAE,aAAa,OAAO;AACzD,QAAM,iBAAiB,MAAM,KAAK,CAAC,MAAM,EAAE,SAAS,iBAAiB;AACrE,QAAM,YAAY,MAAM,KAAK,CAAC,MAAM,EAAE,SAAS,gBAAgB;AAE/D,QAAM,cAA2B,CAAC;AAClC,MAAI,CAAC,UAAU;AACb,QAAI,CAAC,UAAW,aAAY,KAAK,SAAS;AAC1C,QAAI,CAAC,eAAgB,aAAY,KAAK,WAAW;AACjD,gBAAY,KAAK,UAAU,SAAS;AAAA,EACtC;AACA,SAAO,EAAE,aAAa,MAAM;AAC9B;AAOA,SAAS,SAAS,SAAiB,OAAO,GAAsB;AAC9D,QAAM,OAAO,SAAS,OAAO,IAAI,IAAI,GAAG,OAAO,IAAI,GAAG;AAGtD,QAAM,MAAM,aAAa,IAAI;AAC7B,SAAO;AAAA,IACL,QAAQ;AAAA,IACR,IAAI;AAAA,IACJ,MAAK,oBAAI,KAAK,GAAE,YAAY;AAAA,IAC5B,KAAK,aAAa,IAAI,OAAO,EAAE,CAAC;AAAA,IAChC,OAAO;AAAA,EACT;AACF;AAEA,SAAS,aAAa,GAAmB;AACvC,MAAI,OAAO,WAAW,YAAa,QAAO,OAAO,KAAK,GAAG,OAAO,EAAE,SAAS,QAAQ;AACnF,SAAO,KAAK,SAAS,mBAAmB,CAAC,CAAC,CAAC;AAC7C;AAEA,SAAS,sBAA8B;AACrC,SAAO,KAAK,UAAU,SAAS,CAAC,CAAC,EAAE;AACrC;AAEA,SAAS,cAAc,UAAiC;AACtD,MAAI,QAAQ;AACZ,aAAW,QAAQ,OAAO,OAAO,QAAQ,GAAG;AAC1C,eAAW,OAAO,OAAO,OAAO,IAAI,GAAG;AACrC,eAAS,KAAK,UAAU,GAAG,EAAE;AAAA,IAC/B;AAAA,EACF;AACA,SAAO;AACT;AAEA,SAAS,MAAM,SAAiC;AAC9C,MAAI,QAAQ,WAAW,EAAG,QAAO,EAAE,OAAO,GAAG,KAAK,GAAG,KAAK,GAAG,KAAK,EAAE;AACpE,QAAM,SAAS,CAAC,GAAG,OAAO,EAAE,KAAK,CAAC,GAAG,MAAM,IAAI,CAAC;AAChD,SAAO;AAAA,IACL,OAAO,OAAO;AAAA,IACd,KAAK,WAAW,QAAQ,GAAG;AAAA,IAC3B,KAAK,WAAW,QAAQ,IAAI;AAAA,IAC5B,KAAK,OAAO,OAAO,SAAS,CAAC;AAAA,EAC/B;AACF;AAEA,SAAS,WAAW,QAAkB,GAAmB;AACvD,QAAM,MAAM,KAAK,IAAI,OAAO,SAAS,GAAG,KAAK,MAAM,IAAI,OAAO,MAAM,CAAC;AACrE,SAAO,OAAO,GAAG;AACnB;AAEA,eAAe,kBACb,OACA,OACA,YACe;AACf,MAAI;AACF,UAAM,MAAM,MAAM,MAAM,KAAK,OAAO,UAAU;AAC9C,UAAM,QAAQ,IAAI,IAAI,IAAI,CAAC,OAAO,MAAM,OAAO,OAAO,YAAY,EAAE,EAAE,MAAM,MAAM;AAAA,IAAC,CAAC,CAAC,CAAC;AAAA,EACxF,QAAQ;AAAA,EAER;AACF;;;AC7VA,eAAsB,cACpB,SAC8B;AAC9B,QAAM,UAAU,KAAK,IAAI;AACzB,QAAM,gBAAgB,QAAQ,iBAAiB;AAE/C,QAAM,UAAU,MAAM,cAAc,QAAQ,OAAO,OAAO;AAC1D,QAAM,UAAkC,CAAC;AAEzC,aAAW,KAAK,QAAQ,QAAQ,CAAC,GAAG;AAClC,UAAM,QAAQ,EAAE,SAAS,EAAE,MAAM,QAAQ,EAAE;AAC3C,UAAM,SAAS,MAAM,cAAc,EAAE,OAAO,EAAE,GAAG,SAAS,OAAO,UAAU,KAAK,GAAG,CAAC;AACpF,YAAQ,KAAK,EAAE,GAAG,QAAQ,MAAM,EAAE,MAAM,MAAM,CAAC;AAAA,EACjD;AAEA,QAAM,WAAW,iBAAiB,QAAQ,OAAO,SAAS,SAAS,QAAQ,MAAM,aAAa;AAC9F,QAAM,YAAY;AAAA,IAChB,GAAG,QAAQ,YAAY;AAAA,IACvB,GAAG,QAAQ,QAAQ,CAAC,MAAM,EAAE,YAAY,KAAK;AAAA,IAC7C,GAAG;AAAA,EACL,EAAE,OAAO,CAAC,MAAM,EAAE,aAAa,OAAO;AAEtC,SAAO;AAAA,IACL;AAAA,IAAS;AAAA,IAAS;AAAA,IAClB,aAAa,UAAU,WAAW;AAAA,IAClC,YAAY,KAAK,IAAI,IAAI;AAAA,IACzB,WAAU,oBAAI,KAAK,GAAE,YAAY;AAAA,EACnC;AACF;AAEA,SAAS,iBACP,eACA,SACA,SACA,cAA4C,CAAC,GAC7C,eACgB;AAChB,QAAM,QAAwB,CAAC;AAE/B,UAAQ,QAAQ,CAAC,QAAQ,MAAM;AAC7B,UAAM,QAAQ,YAAY,CAAC;AAC3B,UAAM,QAAQ,OAAO;AAMrB,QAAI,OAAO,SAAS,eAAe,qBAAqB,OAAO,KAAK,GAAG;AACrE,YAAM,KAAK;AAAA,QACT,QAAQ;AAAA,QACR,MAAM;AAAA,QACN,UAAU;AAAA,QACV,SAAS,IAAI,KAAK;AAAA,MACpB,CAAC;AAAA,IACH;AAEA,QACE,OAAO,SAAS,eAChB,gBAAgB,KAChB,OAAO,cAAc,cAAc,OACnC;AACA,YAAM,KAAK;AAAA,QACT,QAAQ;AAAA,QACR,MAAM;AAAA,QACN,UAAU;AAAA,QACV,SAAS,IAAI,KAAK,wDAAmD,aAAa;AAAA,MACpF,CAAC;AAAA,IACH;AAEA,QAAI,OAAO,SAAS,eAAe,QAAQ,MAAM,OAAO,MAAM,OAAO,MAAM,OAAO,MAAM,GAAG;AACzF,YAAM,KAAK;AAAA,QACT,QAAQ;AAAA,QACR,MAAM;AAAA,QACN,UAAU;AAAA,QACV,SAAS,eAAe,QAAQ,MAAM,OAAO,GAAG,sBAAmB,KAAK,SAAS,OAAO,MAAM,OAAO,GAAG;AAAA,MAC1G,CAAC;AAAA,IACH;AAEA,QAAI,OAAO,SAAS,aAAa,OAAO,kBAAkB,MAAM;AAC9D,YAAM,KAAK;AAAA,QACT,QAAQ;AAAA,QACR,MAAM;AAAA,QACN,UAAU;AAAA,QACV,SAAS,IAAI,KAAK;AAAA,MACpB,CAAC;AAAA,IACH;AAAA,EACF,CAAC;AAED,SAAO;AACT;AAKA,SAAS,qBAAqB,MAAuB;AACnD,QAAM,IAAI,KAAK,YAAY;AAC3B,SAAO,0BAA0B,KAAK,CAAC;AACzC;","names":[]}

package/package.json

@@ -0,0 +1,68 @@
+{
+  "name": "@noy-db/to-probe",
+  "version": "0.1.0-pre.3",
+  "description": "Diagnostic companion for the @noy-db/to-* store family — not itself a storage backend. Setup-time suitability test + topology check + runtime reliability monitor. Exercises the 6-method NoydbStore contract across five axes (write latency, CAS integrity, hydration cost, sync economics, network resilience) and produces a structured risk-scored report.",
+  "license": "MIT",
+  "author": "vLannaAi <vicio@lanna.ai>",
+  "homepage": "https://github.com/vLannaAi/noy-db/tree/main/packages/to-probe#readme",
+  "repository": {
+    "type": "git",
+    "url": "git+https://github.com/vLannaAi/noy-db.git",
+    "directory": "packages/to-probe"
+  },
+  "bugs": {
+    "url": "https://github.com/vLannaAi/noy-db/issues"
+  },
+  "type": "module",
+  "sideEffects": false,
+  "exports": {
+    ".": {
+      "import": {
+        "types": "./dist/index.d.ts",
+        "default": "./dist/index.js"
+      },
+      "require": {
+        "types": "./dist/index.d.cts",
+        "default": "./dist/index.cjs"
+      }
+    }
+  },
+  "main": "./dist/index.cjs",
+  "module": "./dist/index.js",
+  "types": "./dist/index.d.ts",
+  "files": [
+    "dist",
+    "README.md",
+    "LICENSE"
+  ],
+  "engines": {
+    "node": ">=18.0.0"
+  },
+  "peerDependencies": {
+    "@noy-db/hub": "0.1.0-pre.3"
+  },
+  "devDependencies": {
+    "@types/node": "^22.0.0",
+    "@noy-db/hub": "0.1.0-pre.3"
+  },
+  "keywords": [
+    "noy-db",
+    "to-probe",
+    "benchmark",
+    "diagnostics",
+    "monitoring",
+    "suitability",
+    "health-check",
+    "zero-knowledge"
+  ],
+  "publishConfig": {
+    "access": "public",
+    "tag": "latest"
+  },
+  "scripts": {
+    "build": "tsup",
+    "test": "vitest run",
+    "lint": "eslint src/",
+    "typecheck": "tsc --noEmit"
+  }
+}