@pioneer-platform/pioneer-cache 1.0.2 → 1.0.3

package/CHANGELOG.md

@@ -1,5 +1,13 @@
 # @pioneer-platform/pioneer-cache
 
+## 1.0.3
+
+### Patch Changes
+
+- cache work
+- Updated dependencies
+  - @pioneer-platform/redis-queue@8.11.1
+
 ## 1.0.2
 
 ### Patch Changes

package/dist/core/base-cache.js

@@ -151,9 +151,10 @@ class BaseCache {
         const t0 = Date.now();
         try {
             // Redis timeout for cache reads
-            // Increased from 100ms to 2000ms - 100ms was too aggressive and caused false cache misses
-            // Increased from 2000ms to 10000ms - IPv4/IPv6 DNS resolution can cause delays
-            const timeoutMs = 10000;
+            // PERFORMANCE FIX: Reduced from 10000ms to 100ms
+            // Local Redis should respond in <10ms. 100ms timeout prevents cascading failures
+            // when Redis is overloaded while still catching actual connection issues.
+            const timeoutMs = 100;
             const cached = await Promise.race([
                 this.redis.get(key),
                 new Promise((resolve) => setTimeout(() => {

package/dist/stores/balance-cache.d.ts

@@ -21,7 +21,12 @@ export declare class BalanceCache extends BaseCache<BalanceData> {
     constructor(redis: any, balanceModule: any, config?: Partial<CacheConfig>);
     /**
      * Build Redis key for balance data
-     * Format: balance_v2:caip:pubkey
+     * Format: balance_v2:caip:hashedPubkey
+     *
+     * PRIVACY: Uses SHA-256 hash of pubkey/xpub instead of plaintext
+     * - One-way: cannot recover pubkey from hash
+     * - Deterministic: same pubkey always produces same key
+     * - Fast: ~0.02ms per hash
      */
     protected buildKey(params: Record<string, any>): string;
     /**

package/dist/stores/balance-cache.js

@@ -5,10 +5,42 @@
     Extends BaseCache with balance-specific logic.
     All common logic is inherited from BaseCache.
 */
+var __importDefault = (this && this.__importDefault) || function (mod) {
+    return (mod && mod.__esModule) ? mod : { "default": mod };
+};
 Object.defineProperty(exports, "__esModule", { value: true });
 exports.BalanceCache = void 0;
 const base_cache_1 = require("../core/base-cache");
+const crypto_1 = __importDefault(require("crypto"));
 const log = require('@pioneer-platform/loggerdog')();
+/**
+ * Hash pubkey/xpub for privacy-protecting cache keys
+ * Uses SHA-256 for fast, deterministic, one-way hashing
+ */
+function hashPubkey(pubkey, salt = '') {
+    // Detect if this is an xpub (don't lowercase) or regular address (lowercase)
+    const isXpub = pubkey.match(/^[xyz]pub[1-9A-HJ-NP-Za-km-z]{100,}/);
+    const normalized = isXpub ? pubkey.trim() : pubkey.trim().toLowerCase();
+    const hash = crypto_1.default.createHash('sha256');
+    hash.update(normalized);
+    if (salt)
+        hash.update(salt);
+    // Return first 128 bits (32 hex chars) for shorter Redis keys
+    return hash.digest('hex').substring(0, 32);
+}
+/**
+ * Sanitize pubkey for safe logging
+ */
+function sanitizePubkey(pubkey) {
+    if (!pubkey || pubkey.length < 12)
+        return '[invalid]';
+    // Check if xpub (show first 8, last 8)
+    if (pubkey.match(/^[xyz]pub/)) {
+        return `${pubkey.substring(0, 8)}...${pubkey.substring(pubkey.length - 8)}`;
+    }
+    // Regular address (show first 6, last 4)
+    return `${pubkey.substring(0, 6)}...${pubkey.substring(pubkey.length - 4)}`;
+}
 /**
  * BalanceCache - Caches blockchain balance data
  */
@@ -42,7 +74,12 @@ class BalanceCache extends base_cache_1.BaseCache {
     }
     /**
      * Build Redis key for balance data
-     * Format: balance_v2:caip:pubkey
+     * Format: balance_v2:caip:hashedPubkey
+     *
+     * PRIVACY: Uses SHA-256 hash of pubkey/xpub instead of plaintext
+     * - One-way: cannot recover pubkey from hash
+     * - Deterministic: same pubkey always produces same key
+     * - Fast: ~0.02ms per hash
      */
     buildKey(params) {
         const { caip, pubkey } = params;
@@ -50,9 +87,9 @@ class BalanceCache extends base_cache_1.BaseCache {
             throw new Error('BalanceCache.buildKey: caip and pubkey required');
         }
         const normalizedCaip = caip.toLowerCase();
-        // Don't lowercase pubkeys - xpub/ypub/zpub are case-sensitive base58
-        const normalizedPubkey = pubkey;
-        return `${this.config.keyPrefix}${normalizedCaip}:${normalizedPubkey}`;
+        // Hash pubkey for privacy protection
+        const hashedPubkey = hashPubkey(pubkey, caip);
+        return `${this.config.keyPrefix}${normalizedCaip}:${hashedPubkey}`;
     }
     /**
      * Fetch balance from blockchain via balance module
@@ -61,12 +98,14 @@ class BalanceCache extends base_cache_1.BaseCache {
         const tag = this.TAG + 'fetchFromSource | ';
         try {
             const { caip, pubkey } = params;
-            // Fetch balance using balance module
+            // Log sanitized pubkey for debugging
+            log.debug(tag, `Fetching balance for ${caip}/${sanitizePubkey(pubkey)}`);
+            // Fetch balance using balance module (still uses real pubkey)
             const asset = { caip };
             const owner = { pubkey };
             const balanceInfo = await this.balanceModule.getBalance(asset, owner);
             if (!balanceInfo || !balanceInfo.balance) {
-                log.warn(tag, `No balance returned for ${caip}/${pubkey.substring(0, 10)}...`);
+                log.warn(tag, `No balance returned for ${caip}/${sanitizePubkey(pubkey)}`);
                 return {
                     caip,
                     pubkey,

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@pioneer-platform/pioneer-cache",
-  "version": "1.0.2",
+  "version": "1.0.3",
   "description": "Unified caching system for Pioneer platform with Redis backend",
   "main": "./dist/index.js",
   "types": "./dist/index.d.ts",
@@ -20,9 +20,9 @@
   "author": "Pioneer Platform",
   "license": "MIT",
   "dependencies": {
-    "@pioneer-platform/loggerdog": "^8.0.0",
-    "@pioneer-platform/redis-queue": "^8.0.0",
-    "@pioneer-platform/default-redis": "^8.0.0"
+    "@pioneer-platform/loggerdog": "^8.11.0",
+    "@pioneer-platform/redis-queue": "^8.11.1",
+    "@pioneer-platform/default-redis": "^8.11.7"
   },
   "devDependencies": {
     "@types/node": "^20.0.0",

package/src/core/base-cache.ts

@@ -185,9 +185,10 @@ export abstract class BaseCache<T> {
 
         try {
             // Redis timeout for cache reads
-            // Increased from 100ms to 2000ms - 100ms was too aggressive and caused false cache misses
-            // Increased from 2000ms to 10000ms - IPv4/IPv6 DNS resolution can cause delays
-            const timeoutMs = 10000;
+            // PERFORMANCE FIX: Reduced from 10000ms to 100ms
+            // Local Redis should respond in <10ms. 100ms timeout prevents cascading failures
+            // when Redis is overloaded while still catching actual connection issues.
+            const timeoutMs = 100;
             const cached = await Promise.race([
                 this.redis.get(key),
                 new Promise<null>((resolve) => setTimeout(() => {

package/src/stores/balance-cache.ts

@@ -7,9 +7,42 @@
 
 import { BaseCache } from '../core/base-cache';
 import type { CacheConfig } from '../types';
+import crypto from 'crypto';
 
 const log = require('@pioneer-platform/loggerdog')();
 
+/**
+ * Hash pubkey/xpub for privacy-protecting cache keys
+ * Uses SHA-256 for fast, deterministic, one-way hashing
+ */
+function hashPubkey(pubkey: string, salt: string = ''): string {
+    // Detect if this is an xpub (don't lowercase) or regular address (lowercase)
+    const isXpub = pubkey.match(/^[xyz]pub[1-9A-HJ-NP-Za-km-z]{100,}/);
+    const normalized = isXpub ? pubkey.trim() : pubkey.trim().toLowerCase();
+
+    const hash = crypto.createHash('sha256');
+    hash.update(normalized);
+    if (salt) hash.update(salt);
+
+    // Return first 128 bits (32 hex chars) for shorter Redis keys
+    return hash.digest('hex').substring(0, 32);
+}
+
+/**
+ * Sanitize pubkey for safe logging
+ */
+function sanitizePubkey(pubkey: string): string {
+    if (!pubkey || pubkey.length < 12) return '[invalid]';
+
+    // Check if xpub (show first 8, last 8)
+    if (pubkey.match(/^[xyz]pub/)) {
+        return `${pubkey.substring(0, 8)}...${pubkey.substring(pubkey.length - 8)}`;
+    }
+
+    // Regular address (show first 6, last 4)
+    return `${pubkey.substring(0, 6)}...${pubkey.substring(pubkey.length - 4)}`;
+}
+
 /**
  * Balance data structure
  */
@@ -61,7 +94,12 @@ export class BalanceCache extends BaseCache<BalanceData> {
 
     /**
      * Build Redis key for balance data
-     * Format: balance_v2:caip:pubkey
+     * Format: balance_v2:caip:hashedPubkey
+     *
+     * PRIVACY: Uses SHA-256 hash of pubkey/xpub instead of plaintext
+     * - One-way: cannot recover pubkey from hash
+     * - Deterministic: same pubkey always produces same key
+     * - Fast: ~0.02ms per hash
      */
     protected buildKey(params: Record<string, any>): string {
         const { caip, pubkey } = params;
@@ -70,10 +108,11 @@ export class BalanceCache extends BaseCache<BalanceData> {
         }
 
         const normalizedCaip = caip.toLowerCase();
-        // Don't lowercase pubkeys - xpub/ypub/zpub are case-sensitive base58
-        const normalizedPubkey = pubkey;
 
-        return `${this.config.keyPrefix}${normalizedCaip}:${normalizedPubkey}`;
+        // Hash pubkey for privacy protection
+        const hashedPubkey = hashPubkey(pubkey, caip);
+
+        return `${this.config.keyPrefix}${normalizedCaip}:${hashedPubkey}`;
     }
 
     /**
@@ -85,13 +124,16 @@ export class BalanceCache extends BaseCache<BalanceData> {
         try {
             const { caip, pubkey } = params;
 
-            // Fetch balance using balance module
+            // Log sanitized pubkey for debugging
+            log.debug(tag, `Fetching balance for ${caip}/${sanitizePubkey(pubkey)}`);
+
+            // Fetch balance using balance module (still uses real pubkey)
             const asset = { caip };
             const owner = { pubkey };
             const balanceInfo = await this.balanceModule.getBalance(asset, owner);
 
             if (!balanceInfo || !balanceInfo.balance) {
-                log.warn(tag, `No balance returned for ${caip}/${pubkey.substring(0, 10)}...`);
+                log.warn(tag, `No balance returned for ${caip}/${sanitizePubkey(pubkey)}`);
                 return {
                     caip,
                     pubkey,