altcodepro-polydb-python 2.5.4__py3-none-any.whl → 2.5.6__py3-none-any.whl

{altcodepro_polydb_python-2.5.4.dist-info → altcodepro_polydb_python-2.5.6.dist-info}/METADATA

@@ -1,6 +1,6 @@
 Metadata-Version: 2.4
 Name: altcodepro-polydb-python
-Version: 2.5.4
+Version: 2.5.6
 Summary: Production-ready multi-cloud database abstraction layer with connection pooling, retry logic, and thread safety
 Author: AltCodePro
 Project-URL: Homepage, https://github.com/altcodepro/polydb-python
@@ -27,19 +27,6 @@ Requires-Dist: psycopg2-binary>=2.9.11
 Requires-Dist: tenacity>=9.1.4
 Requires-Dist: redis>=6.4.0
 Requires-Dist: python-dotenv>=1.1.1
-Requires-Dist: azure-storage-queue>=12.15.0
-Requires-Dist: azure-storage-blob>=12.29.0
-Requires-Dist: boto3>=1.43.18
-Requires-Dist: google-cloud-storage>=3.10.1
-Requires-Dist: azure-storage-file-share>=12.25.0
-Requires-Dist: azure-data-tables>=12.7.0
-Requires-Dist: ipfshttpclient>=0.7.0
-Requires-Dist: web3>=7.16.0
-Requires-Dist: google-cloud-firestore>=2.27.0
-Requires-Dist: google-cloud-pubsub>=2.38.0
-Requires-Dist: pymongo>=4.17.0
-Requires-Dist: build>=1.5.0
-Requires-Dist: twine>=6.2.0
 Provides-Extra: aws
 Requires-Dist: boto3>=1.42.47; extra == "aws"
 Requires-Dist: botocore>=1.42.47; extra == "aws"
@@ -49,6 +36,8 @@ Requires-Dist: azure-data-tables>=12.7.0; extra == "azure"
 Requires-Dist: azure-storage-blob>=12.28.0; extra == "azure"
 Requires-Dist: azure-storage-file-share>=12.24.0; extra == "azure"
 Requires-Dist: azure-storage-queue>=12.15.0; extra == "azure"
+Requires-Dist: azure-identity>=1.16.0; extra == "azure"
+Requires-Dist: azure-keyvault-secrets>=4.8.0; extra == "azure"
 Provides-Extra: gcp
 Requires-Dist: google-api-core>=2.29.0; extra == "gcp"
 Requires-Dist: google-auth>=2.48.0; extra == "gcp"
@@ -56,18 +45,27 @@ Requires-Dist: google-cloud-core>=2.5.0; extra == "gcp"
 Requires-Dist: google-cloud-firestore>=2.23.0; extra == "gcp"
 Requires-Dist: google-cloud-pubsub>=2.35.0; extra == "gcp"
 Requires-Dist: google-cloud-storage>=3.9.0; extra == "gcp"
+Requires-Dist: google-cloud-secret-manager>=2.20.0; extra == "gcp"
 Provides-Extra: mongodb
 Requires-Dist: pymongo>=4.16.0; extra == "mongodb"
 Provides-Extra: rabbitmq
 Requires-Dist: pika>=1.3.2; extra == "rabbitmq"
+Provides-Extra: kafka
+Requires-Dist: kafka-python>=2.0.2; extra == "kafka"
 Provides-Extra: vercel
 Requires-Dist: requests>=2.32.5; extra == "vercel"
+Provides-Extra: blockchain
+Requires-Dist: ipfshttpclient>=0.7.0; extra == "blockchain"
+Requires-Dist: web3>=7.14.1; extra == "blockchain"
 Provides-Extra: bolckchain
 Requires-Dist: ipfshttpclient>=0.7.0; extra == "bolckchain"
 Requires-Dist: web3>=7.14.1; extra == "bolckchain"
+Provides-Extra: secrets
+Requires-Dist: hvac>=2.1.0; extra == "secrets"
 Provides-Extra: generic
 Requires-Dist: pymongo>=4.16.0; extra == "generic"
 Requires-Dist: pika>=1.3.2; extra == "generic"
+Requires-Dist: kafka-python>=2.0.2; extra == "generic"
 Requires-Dist: boto3>=1.42.47; extra == "generic"
 Provides-Extra: security
 Requires-Dist: cryptography>=42.0.0; extra == "security"
@@ -79,13 +77,18 @@ Requires-Dist: azure-data-tables>=12.7.0; extra == "all"
 Requires-Dist: azure-storage-blob>=12.28.0; extra == "all"
 Requires-Dist: azure-storage-file-share>=12.24.0; extra == "all"
 Requires-Dist: azure-storage-queue>=12.15.0; extra == "all"
+Requires-Dist: azure-identity>=1.16.0; extra == "all"
+Requires-Dist: azure-keyvault-secrets>=4.8.0; extra == "all"
 Requires-Dist: google-cloud-firestore>=2.23.0; extra == "all"
 Requires-Dist: google-cloud-pubsub>=2.35.0; extra == "all"
 Requires-Dist: google-cloud-storage>=3.9.0; extra == "all"
+Requires-Dist: google-cloud-secret-manager>=2.20.0; extra == "all"
 Requires-Dist: pymongo>=4.16.0; extra == "all"
 Requires-Dist: pika>=1.3.2; extra == "all"
+Requires-Dist: kafka-python>=2.0.2; extra == "all"
 Requires-Dist: requests>=2.32.5; extra == "all"
 Requires-Dist: cryptography>=42.0.0; extra == "all"
+Requires-Dist: hvac>=2.1.0; extra == "all"
 Provides-Extra: dev
 Requires-Dist: black>=26.1.0; extra == "dev"
 Requires-Dist: flake8>=7.3.0; extra == "dev"
@@ -97,6 +100,7 @@ Requires-Dist: pytest-asyncio>=1.2.0; extra == "test"
 Requires-Dist: pytest-cov>=7.0.0; extra == "test"
 Requires-Dist: pytest-mock>=3.15.1; extra == "test"
 Requires-Dist: moto>=5.1.21; extra == "test"
+Requires-Dist: hvac>=2.1.0; extra == "test"
 Dynamic: license-file
 
 
@@ -291,19 +295,64 @@ Supported systems:
 * AWS SQS
 * Azure Queue
 * Google Pub/Sub
-* Vercel Queue
+* Vercel Queue (cloud REST API, or a plain local `redis://` URL for
+  dev/test)
+* Kafka
+* RabbitMQ
 * Blockchain event queues
 
-Example:
+Example (method names below match `QueueAdapter`'s actual signatures —
+`send`/`receive`/`ack`/`delete`, not `send_message`/`receive_message`):
 
 ```python
-queue = factory.get_queue()
+queue = factory.get_queue("rabbitmq")
 
-queue.send_message("jobs", {"task": "process"})
-msg = queue.receive_message("jobs")
-queue.delete_message("jobs", msg)
+message_id = queue.send({"task": "process"}, queue_name="jobs")
+messages = queue.receive(queue_name="jobs", max_messages=1)
+queue.ack(messages[0]["receipt_handle"], queue_name="jobs")
 ```
 
+## Extended queue management (`nack`/`purge`/`declare`/`status`)
+
+`QueueAdapter`'s base class also defines `nack`, `purge`, `declare`
+(explicit provisioning ahead of first use, with optional dead-letter
+queue wiring), and `status` — regular (non-abstract) base methods that
+raise `NotImplementedError` by default, overridden only where a
+subclass genuinely implements them. Honest status, verified against a
+real local broker/client, not assumed:
+
+* **RabbitMQAdapter** — all four implemented for real against a live
+  broker: `nack` is `basic_nack(requeue=True)` (immediate redelivery,
+  not dead-lettering); `purge` reads the real purged count off
+  `queue_purge`'s `Queue.PurgeOk` response; `declare` wires real AMQP
+  dead-lettering (`x-dead-letter-exchange`/`x-dead-letter-routing-key`
+  queue arguments — not a hand-rolled shadow re-router) when
+  `dead_letter_queue` is given, and `status` reads `message_count`/
+  `consumer_count` off a passive `queue_declare`. A message only
+  actually gets dead-lettered by a real reject-without-requeue
+  (`basic_nack`/`basic_reject` with `requeue=False`) or a TTL/
+  max-length policy — `nack()`'s own contract is "redeliver now", so it
+  deliberately does **not** trigger dead-lettering itself. `dlq_list`/
+  `dlq_replay` aren't separate adapter methods — they're just
+  `receive`/`send`+`ack` aimed at the DLQ's own queue name.
+* **KafkaQueueAdapter** — only `nack` is implemented, and it's a
+  documented no-op: `receive()` already never commits an offset until
+  `ack()`/`delete()` does, so a received-but-unacked message is already
+  effectively "nacked". `purge`/`declare`/`status` are **not**
+  implemented — not practical against `kafka-python`'s client-level API
+  without broker admin tooling; they raise the base class's
+  `NotImplementedError`.
+* **SQS / Azure Queue / GCP Pub/Sub / Blockchain** — none of the four
+  new methods are implemented; all raise the base class's
+  `NotImplementedError`. No credentials/emulator for any of these three
+  cloud providers, and no real blockchain node, were available where
+  this was built and tested.
+* **Vercel Queue (local-redis mode)** — also not implemented for these
+  four, though flagged as a real, likely-tractable gap for later: Redis
+  Streams' `XPENDING`/`XCLAIM`/`XTRIM` could plausibly back `nack`/
+  `status`/`purge` for the local-redis mode specifically. Deliberately
+  left out of this round rather than half-implemented.
+
 ---
 
 # Blockchain Storage

{altcodepro_polydb_python-2.5.4.dist-info → altcodepro_polydb_python-2.5.6.dist-info}/RECORD

@@ -1,49 +1,55 @@
-altcodepro_polydb_python-2.5.4.dist-info/licenses/LICENSE,sha256=9X8GLocsBwy-5aR5JGOt2SAMDDPs9Qv-YnqmHBHOXrw,1067
+altcodepro_polydb_python-2.5.6.dist-info/licenses/LICENSE,sha256=9X8GLocsBwy-5aR5JGOt2SAMDDPs9Qv-YnqmHBHOXrw,1067
 polydb/PolyDB.py,sha256=MG7-nV59zDvrUQwXNEgV4eetHCeW9TYY9DQqtxu_r7k,23543
-polydb/__init__.py,sha256=d9KSz888A336904TPEjWPYBtyJLPB0lTdcaOnYp8byY,1535
+polydb/__init__.py,sha256=4-R-S5OD0aXGL2w2AJx5is4xqccdtWWOBrEHn18R51M,1535
 polydb/advanced_query.py,sha256=JZUQr4wyC9ydrcO9VbZiH2ueiQiC4dxOX9hzG_JaFhs,6931
 polydb/batch.py,sha256=_DjWZa1ZXYSk6MLKqFe0eT7SYVRZtYNqZb9bI8Y2sao,4566
-polydb/cache.py,sha256=JBXF1XEK-fY80ar8SDE893Z1Z116YtXAEG0PaJ0Nkcw,7658
-polydb/cloudDatabaseFactory.py,sha256=Gp6L__YtgrkGahD8B7ItzXMHCoj2ZUGDjXLS9w0TujY,17780
-polydb/databaseFactory.py,sha256=AdEMRtWcwf0elJ9JhrWS5krre-3RVFfIgt0mA93eJJQ,44068
+polydb/cache.py,sha256=9UUHhiCVSWHQ-x-Ac_kIHYAadj0AQeqE4x8dwtyYFII,11781
+polydb/cloudDatabaseFactory.py,sha256=M2qtHJmZUr6ZSZY6RCOgC3MLmq5o9WJeKgVubU77chk,22943
+polydb/databaseFactory.py,sha256=tznE9-CldL9sxo9ccCX2qBQYg56CEC6zDgx1DJXtQY0,51667
 polydb/decorators.py,sha256=L_WP2uXP_k8Ac49SUm-mthbM4jWI-XYfHXEyKzumOww,43062
-polydb/errors.py,sha256=ZM3XEefhDMo82v3MMRQ7CRLdKI4N_lYLZN6O0ajBM7M,1712
+polydb/errors.py,sha256=ynQ732utRGA3nFan0tv1CVNxZgV07r7lidpFf-wVhSU,1830
 polydb/json_safe.py,sha256=R5PrqAGirqjYKPyy-8KH-lSXjLH0FPr2TSGozy4eheU,149
-polydb/models.py,sha256=pkGpYnEEJmXdoWVpWS2K3CnuO9JZ_91DKp1bpVNQCns,10259
+polydb/models.py,sha256=HPOdcg0F1rPONJsnbwja75FDQ-38o94U1KsLktngwoI,12600
 polydb/monitoring.py,sha256=UMm3ybyRJjAQi-prXXMLl9zuHhnhMnYBzMD3XWK66y8,9571
 polydb/multitenancy.py,sha256=BfnSJRRyRl4ObM4noXDJhsGJHLESXzvYRsdKwic7TQc,8135
 polydb/py.typed,sha256=47DEQpj8HBSa-_TImW-5JCeuQeRkm5NMpJWZG3hSuFU,0
 polydb/query.py,sha256=72QbnQaljNGvIWktSD29BII0476MMjrJ-7dQmOcWuZc,8509
 polydb/registry.py,sha256=RD_elvFXcmhTdCyZDm2f3ej0elxqhArnSJ2aO9k5VCU,2352
-polydb/retry.py,sha256=QduWwDyiU-dt1fHFQmm6ltbnaJY2460cDfQ7ZE8wjXs,4466
+polydb/retry.py,sha256=tX8vniILKe1A_2MLXLACY5iGEBT_zSLYGggkzvxt618,4926
 polydb/schema.py,sha256=hI7uJM4WvH31A-h0kGZhCD5mCYcnrNvEega--_kvafE,6889
 polydb/security.py,sha256=KqV5cD19hLyIvykW2DkKCXuj1hBDLt3xQ1tFtz_sCQE,20202
 polydb/types.py,sha256=XB_85Un8_aWt4dSfpjIGotHbK3KBY2WurQGXr9EOxWY,2992
 polydb/utils.py,sha256=tS_KI1vt-VZ6JftbFxbnVxC0xpie1-zYikTGf1nSoFw,3183
 polydb/validation.py,sha256=a1o1d02k3c6PWQwkBbw_0nEmIgrdB5RR8OcpNQMn4cA,4810
+polydb/adapters/AWSSecretsManagerAdapter.py,sha256=W4B3xhQFcBAlNlwQ4uTgcDmRrOmZr6v-suC4qihTpJw,2747
 polydb/adapters/AzureBlobStorageAdapter.py,sha256=4vD55Z8DBTzBK66jIJbo5bNMY-AQ61MlP0-P2Fv_JgQ,7083
 polydb/adapters/AzureFileStorageAdapter.py,sha256=VZNprqlBXCuWUgtqClNT-NrQmRf-XFYEiRA2BLbf-Sc,7046
-polydb/adapters/AzureQueueAdapter.py,sha256=LsNvrNHUgFF2UwXXTwlOiqK8VdP4htLaFnTu4oxZDlo,9468
+polydb/adapters/AzureKeyVaultAdapter.py,sha256=7Nizs9qGh6cytbZNgV78f-odOO4Z6sUlwm_HQYqt-pc,2339
+polydb/adapters/AzureQueueAdapter.py,sha256=15w0QQMBM53NIg10MZqdoweJyYtYdgR-SbZVwFqx3BI,13660
 polydb/adapters/AzureTableStorageAdapter.py,sha256=jMgGjiaqI6bUeKRa--f8xHz1pb8j8AMGaP-VA5CxlYw,30126
 polydb/adapters/BlockchainBlobAdapter.py,sha256=D01Yua9mkKfaQrxKYApblIyI6DSP0dtNAh4Tav51HJ4,3299
 polydb/adapters/BlockchainFileAdapter.py,sha256=G749xOVpG20HuKS8zCgi6PMjoJNu-YXK7zitygjLdzM,8335
 polydb/adapters/BlockchainKVAdapter.py,sha256=UFYHyTgvdW-sZUBqyHEG3Cdx6wSTiF2QowEVWL3XPTg,4564
 polydb/adapters/BlockchainQueueAdapter.py,sha256=XsN5ag9Wulaelfkb3RCuBuSBw_4MUx9Wi3Gd3DBn7ME,4196
-polydb/adapters/DynamoDBAdapter.py,sha256=bS4t-XgVMIqMEVfr4K2XMvs-YA1ORTI0Plg5jJ0tW_Q,18429
+polydb/adapters/DynamoDBAdapter.py,sha256=kULYZMa9hFxV2VHVO_VsJcTh9OqKR8vQg2ceO1OvYbk,19545
 polydb/adapters/EFSAdapter.py,sha256=Ca7-Esm3KNVm90Qo6tWmmftwk8Nq54DIzU3fAHX53io,2937
-polydb/adapters/FirestoreAdapter.py,sha256=e3DEODOZ-UAWULLtGTIED-Ym1JrxOKaOLPQVKhhehvk,13939
+polydb/adapters/FirestoreAdapter.py,sha256=WCYZ6EThZgDGsdJcKXBFXHckdLnIY9jvtVYHSb3z7ao,15260
 polydb/adapters/GCPFilestoreAdapter.py,sha256=yjFQQwsWYWc8mo8XwMViVTWb5_D--xAyTMvE-4AOpNM,3006
-polydb/adapters/GCPPubSubAdapter.py,sha256=7XNots2VA0ReEDku-rjg-OTYmftIpx5UgnXYDdXNkOo,8692
+polydb/adapters/GCPPubSubAdapter.py,sha256=NcxzvCqjWWNFuGUU5LS5IYSV32cg_AGwGmSBn_gXE6Y,10685
+polydb/adapters/GCPSecretManagerAdapter.py,sha256=ZFL2FGh7uTaBfpUo-HKXZAxS9s-w0w4yI_5I39KsG3A,2659
 polydb/adapters/GCPStorageAdapter.py,sha256=9yS1Jhcn5_rCRdZ5uOqcRW6Ba-UNb6VOYpwENP-C6Qk,7133
+polydb/adapters/KafkaQueueAdapter.py,sha256=JqzYGjeJtSLlL1jBqwWmBlnFKwwGIQUQzhsuM9wujm4,14411
 polydb/adapters/MongoDBAdapter.py,sha256=qB7RwQb3tvSLLPBiKV_BoAHCvl8Me3C02ieunj01Iew,11788
-polydb/adapters/PostgreSQLAdapter.py,sha256=9VI4-JOdDPeCDba8lRar4RkVMuF0bAymkvSTE3HILjs,38239
+polydb/adapters/PostgreSQLAdapter.py,sha256=tEzwFB-ENSOfOqDcGK5MUCN7cU7k4c1vFgm1fJUYf3A,43877
+polydb/adapters/RabbitMQAdapter.py,sha256=c6usZrKgvUYwkfhcGjGFPjZkCKscU2xH9Fh9Ov9frYE,19903
 polydb/adapters/S3Adapter.py,sha256=5R0zHAL2SkGFjp1L3bp-IU468bXYdSf6nKx974MN104,7586
 polydb/adapters/S3CompatibleAdapter.py,sha256=jpafqbAjA8-irdXBrfXa1QJySIzrcUQ6UrFt5h5FAEc,7006
-polydb/adapters/SQSAdapter.py,sha256=1vfbNoqIDy-b8t2xcxy91SoxSYBPFDfUh7yCQWxdS84,5778
+polydb/adapters/SQSAdapter.py,sha256=GhbbQKGA8P5teVdkeMZCl6aeH_8Dqi5qQJiJecwgV0A,8133
+polydb/adapters/VaultAdapter.py,sha256=6R1hpn-BlPEm4fwoKc6304GmLrQeJohFmlqijlolq68,2716
 polydb/adapters/VercelBlobAdapter.py,sha256=Hu1u8vE-3rvJMBDotnPKeRoVaH1Vl9PdM1hBKphgj2w,6983
 polydb/adapters/VercelFileAdapter.py,sha256=-fLRCi0AUbyXAR4nkHCV-wXkociHF2hzzEDqWtixIpE,1033
-polydb/adapters/VercelKVAdapter.py,sha256=QZxRkuYzVNWFCEFaJPSph8YEAut-YtlXPqbCt0JlROI,8647
-polydb/adapters/VercelQueueAdapter.py,sha256=cWtPaMIWCako0HHr_rzAE6vMLugSR6zBXqp3VP9MXwY,2375
+polydb/adapters/VercelKVAdapter.py,sha256=jcuhXUcvhd3-QJUu1C_P4lN8DMu6qmjNQa3HwkzYcAE,10005
+polydb/adapters/VercelQueueAdapter.py,sha256=lpfKdl-BPiQZJlwlyichTIWwj2iX9iEykAgoUd2wxmI,3894
 polydb/adapters/__init__.py,sha256=47DEQpj8HBSa-_TImW-5JCeuQeRkm5NMpJWZG3hSuFU,0
 polydb/audit/AuditStorage.py,sha256=6luCS7hTNL5MH2kkn6QlBlBsH-3FLuEFwP-cmkugRss,10469
 polydb/audit/__init__.py,sha256=Z7-y5djq3glQ2Yun6nj-13Efpj3oGz9Qc0veS2g06Y4,245
@@ -52,7 +58,8 @@ polydb/audit/manager.py,sha256=KzaaOf5bDfr4M-CkCAZBG_U_4xIBCKDLRAf3hsm-DAk,1236
 polydb/audit/models.py,sha256=cSDkzW22FnsMvjQFvLQACQUm9lYFcnJ2Ew5mngBF9yQ,7043
 polydb/base/NoSQLKVAdapter.py,sha256=U64nXaeHd40GCZV4DQnogZRUxvI8HHLEhNBMv4oddq4,14491
 polydb/base/ObjectStorageAdapter.py,sha256=VeJ3qXET6H0xd3lJpE8-WSsKs8EyK9S0-9VNR0EJzME,2288
-polydb/base/QueueAdapter.py,sha256=jFgyG-SUK4nhRNxm2NbzUbwnA9b_5iAC-ikLSUpXRwk,799
+polydb/base/QueueAdapter.py,sha256=rphkdq9LEErwAKbmapUiHDshiOvgzvS5ZgFoOS8m9xc,8207
+polydb/base/SecretsAdapter.py,sha256=HVk0H9637BkOJTykZNZbF2wKtSkFFj_-BZVpING6Hs4,989
 polydb/base/SharedFilesAdapter.py,sha256=kXbJmtn_cwEyAZ-1AvFrmesCLSwu43ycTV3S4BmwrO4,853
 polydb/base/__init__.py,sha256=47DEQpj8HBSa-_TImW-5JCeuQeRkm5NMpJWZG3hSuFU,0
 polydb/observability/__init__.py,sha256=ZIMx5ODCBZI_FnROJFb11Q9E5kRq0ZcCp6_RmlwG53k,122
@@ -60,7 +67,7 @@ polydb/observability/logging.py,sha256=gv1SshNjaSkmR98Uv7Qbwq3gkeQUzVCA4ichqHKL6
 polydb/services/__init__.py,sha256=nMolMXzmhejRSm7f42kU9fCHF0GIpqpejN2kywuBsUQ,241
 polydb/services/compliance_service.py,sha256=-0ncX7PrXy4-NuyWXIv65cLUsqz0jXzb3LtsD8rlrXE,4983
 polydb/services/security_service.py,sha256=q7GzK6sbMnBBsc4fuL4oXTd-ui2b-MYQyrWTBvdVNSk,5062
-altcodepro_polydb_python-2.5.4.dist-info/METADATA,sha256=MttihuAbzlmJ71naPgSMf8EhjvbYwhiZz47nQTlvJHc,12492
-altcodepro_polydb_python-2.5.4.dist-info/WHEEL,sha256=YVMoNqKzERt-wjUZwJ33xBGAwnFl-4cqbYkTtWa4itE,91
-altcodepro_polydb_python-2.5.4.dist-info/top_level.txt,sha256=WgLFWJoYjUhwvyPxJFl6jYLrVFuBJDX3OABf4ocwk_E,7
-altcodepro_polydb_python-2.5.4.dist-info/RECORD,,
+altcodepro_polydb_python-2.5.6.dist-info/METADATA,sha256=HY5mBLl5CIIUAJuIwhFNhs1wwhyD9PLIxvUtIfvuwlE,15598
+altcodepro_polydb_python-2.5.6.dist-info/WHEEL,sha256=YVMoNqKzERt-wjUZwJ33xBGAwnFl-4cqbYkTtWa4itE,91
+altcodepro_polydb_python-2.5.6.dist-info/top_level.txt,sha256=WgLFWJoYjUhwvyPxJFl6jYLrVFuBJDX3OABf4ocwk_E,7
+altcodepro_polydb_python-2.5.6.dist-info/RECORD,,

polydb/__init__.py

@@ -4,7 +4,7 @@ PolyDB - Enterprise Cloud-Independent Database Abstraction
 Full LINQ support, field-level audit, cache, soft delete, overflow storage
 """
 
-__version__ = "2.2.3"
+__version__ = "2.5.6"
 
 from .cloudDatabaseFactory import CloudDatabaseFactory
 from .databaseFactory import DatabaseFactory

polydb/adapters/AWSSecretsManagerAdapter.py

@@ -0,0 +1,72 @@
+# src/polydb/adapters/AWSSecretsManagerAdapter.py
+import os
+from typing import Optional
+
+from ..base.SecretsAdapter import SecretsAdapter
+from ..retry import retry
+
+
+class AWSSecretsManagerAdapter(SecretsAdapter):
+    def __init__(self, region: str = ""):
+        super().__init__()
+
+        self.region = region or os.getenv("AWS_REGION", "us-east-1")
+        self._client = None
+        self._initialize_client()
+
+    def _initialize_client(self) -> None:
+        import boto3
+
+        self._client = boto3.client("secretsmanager", region_name=self.region)
+
+    @retry(max_attempts=3, delay=1.0, exceptions=(Exception,))
+    def get_secret(self, key: str) -> Optional[str]:
+        from botocore.exceptions import ClientError
+
+        try:
+            resp = self._client.get_secret_value(SecretId=key)
+        except ClientError as exc:
+            if exc.response["Error"]["Code"] == "ResourceNotFoundException":
+                return None
+            raise
+        return resp.get("SecretString")
+
+    @retry(max_attempts=3, delay=1.0, exceptions=(Exception,))
+    def set_secret(self, key: str, value: str) -> None:
+        from botocore.exceptions import ClientError
+
+        try:
+            self._client.put_secret_value(SecretId=key, SecretString=value)
+        except ClientError as exc:
+            if exc.response["Error"]["Code"] == "ResourceNotFoundException":
+                self._client.create_secret(Name=key, SecretString=value)
+            else:
+                raise
+
+    @retry(max_attempts=3, delay=1.0, exceptions=(Exception,))
+    def delete_secret(self, key: str) -> bool:
+        from botocore.exceptions import ClientError
+
+        # Real AWS raises ResourceNotFoundException for deleting a missing
+        # secret, but at least one mock (moto) returns a synthetic success
+        # response instead of raising -- checking existence explicitly
+        # first makes this return value correct regardless of what a given
+        # backend/mock does on delete of something that was never there.
+        if self.get_secret(key) is None:
+            return False
+
+        try:
+            self._client.delete_secret(SecretId=key, ForceDeleteWithoutRecovery=True)
+            return True
+        except ClientError as exc:
+            if exc.response["Error"]["Code"] == "ResourceNotFoundException":
+                return False
+            raise
+
+    @retry(max_attempts=3, delay=1.0, exceptions=(Exception,))
+    def list_secrets(self, prefix: str = "") -> list[str]:
+        names: list[str] = []
+        paginator = self._client.get_paginator("list_secrets")
+        for page in paginator.paginate():
+            names.extend(s["Name"] for s in page["SecretList"] if s["Name"].startswith(prefix))
+        return names

polydb/adapters/AzureKeyVaultAdapter.py

@@ -0,0 +1,65 @@
+# src/polydb/adapters/AzureKeyVaultAdapter.py
+import os
+from typing import Optional
+
+from ..base.SecretsAdapter import SecretsAdapter
+from ..errors import ConnectionError
+from ..retry import retry
+
+
+class AzureKeyVaultAdapter(SecretsAdapter):
+    def __init__(self, vault_url: str = ""):
+        super().__init__()
+
+        self.vault_url = vault_url or os.getenv("AZURE_KEY_VAULT_URL")
+        if not self.vault_url:
+            raise ConnectionError("AZURE_KEY_VAULT_URL is not configured")
+
+        self._client = None
+        self._initialize_client()
+
+    def _initialize_client(self) -> None:
+        from azure.identity import DefaultAzureCredential
+        from azure.keyvault.secrets import SecretClient
+
+        self._client = SecretClient(vault_url=self.vault_url, credential=DefaultAzureCredential())
+
+    # Key Vault secret names may only contain alphanumerics and dashes --
+    # our secret keys (e.g. "tenant-42/stripe/api_key") use slashes, so
+    # translate to a Key-Vault-safe name deterministically both ways.
+    @staticmethod
+    def _kv_name(key: str) -> str:
+        return key.replace("/", "--")
+
+    @retry(max_attempts=3, delay=1.0, exceptions=(Exception,))
+    def get_secret(self, key: str) -> Optional[str]:
+        from azure.core.exceptions import ResourceNotFoundError
+
+        try:
+            return self._client.get_secret(self._kv_name(key)).value
+        except ResourceNotFoundError:
+            return None
+
+    @retry(max_attempts=3, delay=1.0, exceptions=(Exception,))
+    def set_secret(self, key: str, value: str) -> None:
+        self._client.set_secret(self._kv_name(key), value)
+
+    @retry(max_attempts=3, delay=1.0, exceptions=(Exception,))
+    def delete_secret(self, key: str) -> bool:
+        from azure.core.exceptions import ResourceNotFoundError
+
+        try:
+            poller = self._client.begin_delete_secret(self._kv_name(key))
+            poller.wait()
+            return True
+        except ResourceNotFoundError:
+            return False
+
+    @retry(max_attempts=3, delay=1.0, exceptions=(Exception,))
+    def list_secrets(self, prefix: str = "") -> list[str]:
+        kv_prefix = self._kv_name(prefix)
+        return [
+            p.name.replace("--", "/")
+            for p in self._client.list_properties_of_secrets()
+            if p.name.startswith(kv_prefix)
+        ]

polydb/adapters/AzureQueueAdapter.py

@@ -116,10 +116,29 @@ class AzureQueueAdapter(QueueAdapter):
     # a still-in-flight message was becoming visible again and getting
     # picked up by a second worker mid-processing: two concurrent
     # executions of the same task, one of which stomps/duplicates the
-    # other's result. 300s covers realistic worst-case processing; ack()
-    # deletes the message immediately on completion regardless; a genuinely
-    # crashed worker still recovers the message after this timeout.
-    DEFAULT_VISIBILITY_TIMEOUT = 300
+    # other's result. ack() deletes the message immediately on completion
+    # regardless; a genuinely crashed worker recovers it after this timeout.
+    #
+    # This MUST be >= the longest a consumer may legitimately hold a message.
+    # It was 300s while the platform's durable tasks are allowed 3600s
+    # (execution/durable_job.py: timeout_seconds=3600.0), so every task that
+    # ran longer than five minutes was redelivered WHILE STILL RUNNING -- and
+    # again at ten, at fifteen, each redelivery starting another concurrent
+    # execution of the same job. Observed on an artifact generation run: the
+    # second invocation found the first's per-artifact lock held, recorded the
+    # artifact as `already_running`, and carried on to the next one, so the
+    # first artifact sat at `running` forever while its dependents blocked on
+    # it. CPU pegged, RSS climbed with every duplicate, and the process was
+    # eventually OOM-killed. The de-duplication guard upstream could not save
+    # it: a redelivery carries the SAME run id as the original, so nothing in
+    # the payload distinguishes them.
+    #
+    # Matched to the durable task timeout deliberately: the queue must not
+    # reclaim a message the executor is still allowed to be working on. The
+    # cost is that a hard worker crash now leaves the message invisible for up
+    # to an hour before recovery, which is the right trade -- a delayed retry
+    # is recoverable, two concurrent runs mutating the same rows are not.
+    DEFAULT_VISIBILITY_TIMEOUT = int(os.environ.get("POLYDB_QUEUE_VISIBILITY_TIMEOUT") or 3600)
 
     @retry(max_attempts=3, delay=1.0, exceptions=(QueueError,))
     def receive(
@@ -253,3 +272,62 @@ class AzureQueueAdapter(QueueAdapter):
             return True
         except Exception as e:
             raise QueueError(f"Azure Queue nack failed: {e}")
+
+    # ---------------------------------------------------------
+    # extend / delay / cancel -- all three real on Azure Queue.
+    # ---------------------------------------------------------
+
+    def extend(
+        self, ack_id: str, queue_name: str = "default", *, visibility_timeout: int = 30
+    ) -> bool:
+        """Real Azure UpdateMessage call extending visibility without
+        touching the stored body -- ack_id is the combined
+        "<message_id>|<pop_receipt>" receipt_handle receive() returned."""
+        message_id, pop_receipt = self._decode_receipt(ack_id)
+        if not message_id:
+            raise QueueError("AzureQueueAdapter.extend requires a receipt_handle from receive()")
+        try:
+            queue_name = self._normalize_queue_name(queue_name)
+            queue_client = self._get_queue(queue_name)
+            # No `content=` argument: this is the SDK's own documented
+            # way to leave the stored message body unchanged while only
+            # updating visibility_timeout.
+            queue_client.update_message(
+                message_id,
+                pop_receipt=pop_receipt,
+                visibility_timeout=visibility_timeout,
+            )
+            return True
+        except Exception as e:
+            raise QueueError(f"Azure Queue extend failed: {e}")
+
+    @retry(max_attempts=3, delay=1.0, exceptions=(QueueError,))
+    def delay(
+        self, message: Dict[str, Any], queue_name: str = "default", *, delay_seconds: int = 0
+    ) -> str:
+        """Real Azure send_message with its own visibility_timeout param
+        -- the message is stored immediately but not deliverable until
+        delay_seconds elapses. Returns the combined receipt (packed via
+        _encode_receipt) so cancel() has enough to delete it before then."""
+        try:
+            queue_name = self._normalize_queue_name(queue_name)
+            queue_client = self._get_queue(queue_name)
+
+            response = queue_client.send_message(
+                json.dumps(message, default=json_safe),
+                visibility_timeout=delay_seconds,
+            )
+
+            return self._encode_receipt(response.id, response.pop_receipt)
+
+        except Exception as e:
+            raise QueueError(f"Azure Queue delay failed: {e}")
+
+    def cancel(self, message_id: str, queue_name: str = "default") -> bool:
+        """Cancel a still-delayed message before its visibility_timeout
+        elapses. message_id is the combined receipt delay() returned."""
+        decoded_id, pop_receipt = self._decode_receipt(message_id)
+        if not decoded_id:
+            raise QueueError("AzureQueueAdapter.cancel requires the receipt delay() returned")
+        queue_name = self._normalize_queue_name(queue_name)
+        return self.delete(message_id=decoded_id, queue_name=queue_name, pop_receipt=pop_receipt)

polydb/adapters/DynamoDBAdapter.py

@@ -23,10 +23,12 @@ class DynamoDBAdapter(NoSQLKVAdapter):
     Production-grade DynamoDB adapter with optional S3 overflow.
 
     Goals (matches your adapter test style)
-    - stored row keeps "id" == pk
-    - query({"id": ...}) works
+    - stored row keeps "id" == rk (the row key -- see NoSQLKVAdapter._get_pk_rk,
+      which derives rk from data.get(rk_field, ...) with rk_field defaulting
+      to "id"); put() returns the full stored record, not just {"id": ...}
+    - query({"id": ...}) works (matches the record's own "id"/rk, not PK)
     - patch() merges (handled by NoSQLKVAdapter.patch)
-    - delete() returns {"id": <pk>} and raises sqlite3.DatabaseError on missing
+    - delete() returns {"id": <rk>} and raises sqlite3.DatabaseError on missing
     - query_page() uses DynamoDB LastEvaluatedKey token (stable)
     - LocalStack support (endpoint_url) + auto create table/bucket in test/dev
     """
@@ -273,16 +275,24 @@ class DynamoDBAdapter(NoSQLKVAdapter):
             payload["PK"] = pk
             payload["SK"] = rk
 
-            # Ensure "id" field exists for tests/querying
-            payload.setdefault("id", pk)
+            # "id" is the row key (NoSQLKVAdapter._get_pk_rk derives `rk` from
+            # data.get(rk_field, ...) with rk_field defaulting to "id"), so it
+            # is already present in `payload` via dict(data) above whenever the
+            # caller supplied one. Only fall back to `rk` -- never `pk`, which
+            # would silently collide every row in the same partition onto the
+            # same "id" and break id-addressed lookups (query/get/patch/delete
+            # by {"id": ...}), the same corruption previously present here and
+            # in VercelKVAdapter.
+            payload.setdefault("id", rk)
             payload.setdefault("_pk", pk)
             payload.setdefault("_rk", rk)
 
             ref = self._maybe_overflow_to_s3(model, pk, rk, payload)
             table.put_item(Item=ref if ref is not None else payload)
 
-            # ✅ match pattern: put returns {"id": pk}
-            return {"id": pk}
+            # Return the full stored record, not just {"id": pk} -- callers
+            # (e.g. DatabaseFactory.create()) use this as the created row.
+            return payload
 
         except Exception as e:
             raise NoSQLError(f"DynamoDB put failed: {e}")
@@ -297,7 +307,7 @@ class DynamoDBAdapter(NoSQLKVAdapter):
             if not item:
                 return None
 
-            item.setdefault("id", pk)
+            item.setdefault("id", rk)
             return self._resolve_overflow(item)
 
         except Exception as e:
@@ -318,8 +328,11 @@ class DynamoDBAdapter(NoSQLKVAdapter):
             table = self._get_table(model)
             filters = filters or {}
 
-            # Treat 'id' as PK by convention (since we store PK=pk=id in NoSQLKVAdapter by default)
-            pk_value = filters.get("PK") or filters.get("partition_key") or filters.get("id")
+            # "id" is the row key by convention (see _put_raw), not the
+            # partition key -- only route to Query when the caller names the
+            # actual PK explicitly. A bare {"id": ...} filter falls through to
+            # Scan below with "id" applied as a normal attribute filter.
+            pk_value = filters.get("PK") or filters.get("partition_key")
 
             if pk_value is not None:
                 key_cond = Key("PK").eq(str(pk_value))
@@ -330,7 +343,7 @@ class DynamoDBAdapter(NoSQLKVAdapter):
 
                 # Other filters as FilterExpression
                 other = {
-                    k: v for k, v in filters.items() if k not in ("PK", "SK", "partition_key", "id")
+                    k: v for k, v in filters.items() if k not in ("PK", "SK", "partition_key")
                 }
                 if other:
                     expr = None
@@ -361,7 +374,7 @@ class DynamoDBAdapter(NoSQLKVAdapter):
 
             out: List[JsonDict] = []
             for it in items:
-                it.setdefault("id", it.get("_pk") or it.get("PK"))
+                it.setdefault("id", it.get("_rk") or it.get("SK"))
                 out.append(self._resolve_overflow(it))
             return out
 
@@ -392,7 +405,7 @@ class DynamoDBAdapter(NoSQLKVAdapter):
                         pass
 
             table.delete_item(Key={"PK": pk, "SK": rk})
-            return {"id": pk}
+            return {"id": rk}
 
         except DatabaseError:
             raise
@@ -427,7 +440,9 @@ class DynamoDBAdapter(NoSQLKVAdapter):
 
             start_key = self._decode_token(continuation_token) if continuation_token else None
 
-            pk_value = query.get("PK") or query.get("partition_key") or query.get("id")
+            # "id" is the row key by convention, not the partition key --
+            # see _query_raw.
+            pk_value = query.get("PK") or query.get("partition_key")
 
             items: List[JsonDict] = []
             last_key = start_key
@@ -448,7 +463,7 @@ class DynamoDBAdapter(NoSQLKVAdapter):
                     kwargs["ExclusiveStartKey"] = last_key
 
                 other_filters = {
-                    k: v for k, v in query.items() if k not in ("PK", "SK", "partition_key", "id")
+                    k: v for k, v in query.items() if k not in ("PK", "SK", "partition_key")
                 }
 
                 if other_filters:
@@ -501,7 +516,7 @@ class DynamoDBAdapter(NoSQLKVAdapter):
             out: List[JsonDict] = []
 
             for it in items:
-                it.setdefault("id", it.get("_pk") or it.get("PK"))
+                it.setdefault("id", it.get("_rk") or it.get("SK"))
                 out.append(self._resolve_overflow(it))
 
             next_tok = self._encode_token(last_key) if last_key else None