Private preview · comparison & deployment reference

Search. Auth.
Realtime. Replicas.
One binary.

KynetraDB brings together a data-plane research catalogue: BM25 full-text search, brute-force vector evaluation, identity, realtime, storage, and replication design. Explore the API, competitor comparisons, operating requirements, and hosting targets in one place.

20Comparison profiles
19Hosting targets
BM25Full-text model
Brute-forceVector evaluation

The historical SDK sketch below preserves the API shape that informed KynetraDB’s design. Compatibility is scoped per preview; public parity is not claimed.

quickstart.tstypescript
import { createClient } from '@kynetra/client'

const kdb = createClient('https://api.myapp.com', PUBLISHABLE_KEY)

// Query — fluent builder, fully typed
const { data, error } = await kdb
  .from('posts')
  .select('id, title, author(name)')
  .eq('published', true)
  .order('created_at', { ascending: false })
  .range(0, 19)

// Auth
const { data: { session } } = await kdb.auth.signInWithPassword({ email, password })
const { data: { user } }    = await kdb.auth.getUser()

// Storage
await kdb.storage.from('avatars').upload(`${user.id}.png`, file)
const { data: { publicUrl } } = kdb.storage.from('avatars').getPublicUrl(fileId)

// Realtime — change events + presence + broadcast
kdb.channel('live')
  .on('postgres_changes', { event: 'INSERT', table: 'messages' }, payload => {
    console.log('new message', payload.new)
  })
  .subscribe()

// Edge functions
await kdb.functions.invoke('send-welcome', { body: { userId: user.id } })

// Full-text + vector search
const { data: hits } = await kdb.from('docs').textSearch('body', 'rust async')
const nearest = await kdb.rpc('vector_search', { query: embedding, top_k: 10 })
Reference package
Distribution is scoped during preview

The original client-package shape is retained for architecture review. It is not a public npm installation instruction.

Connect
const kdb = createClient(
  process.env.KYNETRA_URL,
  process.env.KYNETRA_KEY
)

Reference architecture — implementation scope is agreed per preview. One hundred capabilities are catalogued, each carrying the status a dated audit gave it after naming the source file, API surface and test result behind it.

The audit downgraded three of its own entries on review; those are published as found.Read the capability audit → ·Browse all 100 →

Measured, with the artifact attached

  • 2.305 msBM25 top-24 p99 over 5,000,000 documents, against a declared gate of 8 ms.artifact →
  • 8.075 msFiltered vector p99 at 0.1% selectivity — where recall@10 falls to 0.004. Published because tenant-scoped retrieval is exactly this shape.artifact →
  • 7,514 MBResident set for one million entities, about 7,874 bytes each.artifact →

Every figure on this site is local-scope: one host, one operator, no third-party reproduction. Artifacts are linked next to each number, and gates that were missed are published beside the gates that were met.

sdk + rest api

@kynetra/client TypeScript SDK

Fluent typed builder: from().select().eq().order(). Auth, storage, realtime channels, and edge functions — all under one import. REST API at /rest/v1 with select/filter/order/embed/count/upsert/pagination.

replicas

Read replicas + write proxy

Primary writes to a Postgres WAL log; N replicas tail the same log via apply_external, serving reads within ~750ms lag. Write proxy transparently forwards mutations from replica to primary. Lag-based /healthz 503.

target profiles

Deployment target profiles

AWS, GCP, Azure, Fly.io, DigitalOcean, Render, Heroku, Railway, Cloudflare, Oracle, and regional providers are catalogued as operating profiles. Provider automation is scoped during preview.

auth

GoTrue-shaped auth

Email + password, refresh tokens, magic-link/OTP, password reset, OAuth (Google/GitHub), anonymous sign-in. bcrypt (cost 12) + HS256 JWT. Routes at /auth/v1/.

rls

Row-Level Security

auth.uid() policy DSL with per-row enforcement. SELECT/INSERT/UPDATE/DELETE policies evaluated server-side. Service key bypasses RLS; user JWTs and anon keys respect it transparently.

realtime

Realtime — WebSocket + SSE

postgres_changes (insert/update/delete) + presence + broadcast over channels. RLS-filtered so subscribers only see permitted rows.

storage

Storage — buckets + signed URLs

Public and private buckets. Signed, time-boxed URLs. Object RLS. Two backends: local content-addressable or any S3-compatible endpoint (AWS S3, R2, MinIO, Wasabi, Spaces). SigV4 built-in.

search + vector

BM25 + vector evaluation

BM25 full-text and brute-force cosine vector evaluation are documented alongside the data-plane research catalogue. HNSW is not claimed on this public surface.

operations

Audit log + health probes

Tamper-evident hash-chained audit log (JSONL, /admin/audit/verify). Deep health probes (/healthz, /readyz) with per-check breakdown. Latency ring-buffer → p50/p95/p99 + error rate at /admin/db/metrics.

connect

MCP · CLI · Webhooks · API tokens

MCP server (JSON-RPC 2.0 over stdio) with kynetra_put/get/filter/search/vector_search/stats. Remote CLI with --remote flag. HMAC-SHA256 signed outbound webhooks. SHA-256 hashed API token management.

multitenancy

Organizations → Projects

Full SaaS control plane: Organizations → Projects → Members. Per-project isolated data, auth, storage, and API keys. Kind-prefixed isolation makes cross-tenant data access impossible by construction.

agents

Agentic admin

10 typed built-in actions, a real LLM tool-use loop (Anthropic + OpenAI + Ollama), persisted run audit trail, and an embedded admin SPA at /admin/v2. No JS build step.

Most backend stacks are a fleet of processes — a database, a search engine, a cache, an auth service, a storage API, a realtime broker. Each one is a separate deploy, a separate failure surface, and a separate ops burden.

The original KynetraDB architecture model collapses these concerns into a single data-plane boundary. The diagram is retained as a technical reference:

Your app (Next.js / React / Vue / mobile / CLI / MCP)
      │
      │  @kynetra/client  ·  REST  ·  MCP  ·  CLI
      ▼
kynetradb  ─── one process · one Dockerfile · one WAL
      ├── /rest/v1      query layer (select/filter/order/embed)
      ├── /auth/v1      email + OAuth + JWT + RLS
      ├── /storage/v1   buckets · signed URLs · S3-compatible
      ├── /realtime/v1  WebSocket channels · presence · broadcast
      ├── /functions/v1 WASM edge functions
      ├── BM25 full-text  p50 0.025 ms @ 100k ← built-in
      ├── vector search   HNSW + SPANN · p99 0.514 ms @ 1M ← built-in
      └── Read replicas   WAL fan-out · staleness p99 17 ms ← built-in

One reference model. One comparison catalogue. 19 target profiles.

Every figure on this site is local-scope: one host, one operator, no third-party reproduction. Artifacts are linked next to each number, and gates that were missed are published beside the gates that were met. See the full benchmark ledger →

Reference catalogue

Architecture scope: historical KynetraDB API, identity, storage, realtime, replication, and operations designs retained for review. PostgREST-style /rest/v1 (select/filter/order/embed/count/upsert/pagination); GoTrue-shaped /auth/v1 (email+password, refresh tokens, magic-link/OTP, OAuth Google/GitHub, anonymous); Row-Level Security with auth.uid() DSL; Realtime WebSocket channels (postgres_changes, presence, broadcast); Storage buckets + signed URLs + object RLS; Edge functions (WASM, sandboxed, 10s timeout); Multitenancy (Orgs → Projects → Members).

Operating model:Read replicas via Postgres WAL fan-out (apply_external, ~750ms lag, /healthz 503 on stale). The deployment catalogue records public-cloud, VPS, Kubernetes, and Indian-provider operating profiles. Provider integrations and automation are scoped during preview.

Search reference:BM25 full-text. Brute-force cosine vector evaluation. pgvector write-sync + offload opt-in.

Research directions

Indexed vector acceleration is a research direction, not a shipped public claim.
Auto-rebuild trigger on write threshold — Phase 2.3.
Recall / p99 integration test at 10M vectors — Phase 2.2.
Multi-writer clustering (single primary WAL today) — Phase 3.
Snapshot-and-tail boot (unbounded dataset per node) — Phase 3.
Shard the log (write scale) — Phase 4.
tantivy-grade fuzzy matching + synonyms.
Storage image transforms (width/height/resize).
Provider automation remains preview-scoped and is assessed against the chosen target profile.
Studio policy editor in /admin/v2.

This is a private-preview reference surface. Read the fullState sectionbefore betting anything serious on it.