User-JWT verifier + REST issuer-client + Hono/Express middleware for services that consume nodii-auth. Verifies RS256 tokens against the JWKS published by nodii-auth.

Substrate observability library for the Nodii microservice stack — OTel wrapper, log envelope, intent lifecycle, audit signal, agent registry, context propagation. Spec: planning hub docKey=telemetry.

Substrate gRPC interceptor library for the Nodii microservice stack — 8 cross-cutting interceptors (logging, audit, enrichAuthContext, tenantContext, auditContext, deadlineGuard, cancellationGuard, errorMap) + re-export façade over @nodii/grpc-auth/saga/i

gRPC service-to-service auth for Nodii microservices: server + client interceptors, JWKS fetch from S3, JWT verifier, token manager.

Tamper-evident audit chain for the Nodii microservice stack — implements `@nodii/telemetry.AuditChainAdapter` per doctrine 02-audit-doctrine.md § 13. v0.3.0 replaces the v0.2.x jsonb-event audit_rows row shape with the rich-column `<service>_audit_event`

Saga orchestration library for the Nodii microservice stack — createSaga + step + stepParallel + cross-saga signals + sagaContext interceptor + SagaAdminService factory + @sagaCallable discipline tag + real PostgresSagaStateStore + RedisSignalBus + Patter

Idempotency library for the Nodii microservice stack — wrapForSagaStep + wrapForWebhook + wrapConsumerWorker + computeIdempotencyKey + ioredis CLAIM via Lua + sweeper + gRPC idempotencyGuard interceptor. Polyglot ship: TS + Python + Go in parity. Spec: pl

Substrate PII library for the Nodii microservice stack — deterministic tokenization, per-subject DEK envelope encryption, redaction, DSAR helpers, extensible-entity scaffolding. Spec: planning hub docKey=pii.

GDPR Data Subject Access Request (DSAR) library for the Nodii microservice stack — 9-RPC DataLifecycleService surface with typed handler registry + DsarStore + retention policy helpers. Polyglot ship: TS + Python + Go in parity. Spec: planning hub docKey=

Pattern 3 replication consumer for the Nodii microservice stack — defineReplica + startReplicaConsumer + dedupe + LWW + apply-tx wrapping + DLQ + snapshot RPC bootstrap + drift sweeper. Polyglot ship: TS + Python + Go in parity. Spec: planning hub docKey=

Three-pool RLS dispatch + GUC-set + entry-point helpers + RLS policy DDL generator for the Nodii microservice stack. Polyglot per D159 (TS + Python + Go). Spec: planning hub docKey=db-rls.

Approval library for the Nodii microservice stack — defineApprovalKinds + requestApproval + bindApprovalHandlers + per-tenant policies + completion-event consumer + migrate-gen. Polyglot ship: TS + Python + Go in parity. Spec: planning hub docKey=approval

Boot-time permission-catalog publisher for Nodii module-services. Type-safe definePermissions + publishCatalogAtBoot wrapper (cold-start retry, idempotency, non-boot-blocking degrade + background repair per D410(3)) on top of the tenant-service RoleCatalo

Pattern 3 producer-side outbox drainer for the Nodii microservice stack — defineDispatcher + startDispatcher + single-active SET-NX-EX lease (D209) + FOR UPDATE SKIP LOCKED drain + XADD to Redis Streams + currentHwm + 24h-unpublished ops-alert sweep (D401

Nodii canonical postal Address value-object + validator (ISO-3166-1 alpha-2; AddressInvalid).

The retry / exponential-backoff / jitter policy for the Nodii microservice stack, as a real package. Consolidates 14 hand-rolled backoff implementations that had drifted across the shared libraries themselves (250ms/2x/60s no-jitter, 100ms/2x/30s ±12.5%,

Hermetic review gates for the Nodii microservice stack — the D367 / 12-testing-doctrine §3.1 service-wired gate (proves a service SERVES its own gRPC/consumers) as a consuming-repo-relative runner + BIN, so services adopt one dependency instead of copying

Nodii doctrine CI gates as one dependency: the D417 naming-conventions rules (gRPC FQN / RBAC key / outbox topic) plus the CROSS-TENANT RLS rule that blocks the membership-union policy shape and the untenanted user-session DB client — as named exports and

Browser SDK for the Nodii self-signup onboarding flow. Headless form state, reCAPTCHA integration, and a default themeable vanilla-TS widget. D540/D537 contract client.

Canonical gRPC interface contracts for the Nodii stack. Ships the vendored .proto bytes + runtime-loaded @grpc/grpc-js ServiceDefinitions for nodii.dsar.v1.DataLifecycleService and nodii.tenant.v1.TenantSnapshotService so consumer services can server.addS