@cipherstash/protect-ffi 0.18.0-9 → 0.18.1

package/lib/index.d.cts

@@ -5,82 +5,60 @@ export type Client = {
 };
 declare module './load.cjs' {
     function newClient(opts: NewClientOptions): Promise<Client>;
-    function encrypt<T extends EncryptConfig>(client: Client, opts: EncryptOptions<T>): Promise<AnyEncrypted<T>>;
-    function decrypt<T extends EncryptConfig>(client: Client, opts: DecryptOptions<T>): Promise<JsPlaintext>;
-    function isEncrypted<T extends EncryptConfig>(encrypted: AnyEncrypted<T>): boolean;
-    function encryptQuery<T extends EncryptConfig, Q extends EncryptedQueryTerm>(client: Client, opts: QueryOptions<T>): Promise<Q>;
-    function encryptBulk<T extends EncryptConfig>(client: Client, opts: EncryptBulkOptions<T>): Promise<AnyEncrypted<T>[]>;
-    function decryptBulk<T extends EncryptConfig>(client: Client, opts: DecryptBulkOptions<T>): Promise<JsPlaintext[]>;
-    function decryptBulkFallible<T extends EncryptConfig>(client: Client, opts: DecryptBulkOptions<T>): Promise<DecryptResult[]>;
+    function encrypt(client: Client, opts: EncryptOptions): Promise<Encrypted>;
+    function decrypt(client: Client, opts: DecryptOptions): Promise<JsPlaintext>;
+    function isEncrypted(encrypted: Encrypted): boolean;
+    function encryptBulk(client: Client, opts: EncryptBulkOptions): Promise<Encrypted[]>;
+    function decryptBulk(client: Client, opts: DecryptBulkOptions): Promise<JsPlaintext[]>;
+    function decryptBulkFallible(client: Client, opts: DecryptBulkOptions): Promise<DecryptResult[]>;
 }
 export type DecryptResult = {
     data: string;
 } | {
     error: string;
 };
-export type EncryptPayload<T extends EncryptConfig> = {
+export type EncryptPayload = {
     plaintext: JsPlaintext;
-    lockContext?: Context[];
-} & Identifier<T>;
-export type BulkDecryptPayload<T extends EncryptConfig> = {
-    ciphertext: AnyEncrypted<T>;
-    lockContext?: Context[];
+    column: string;
+    table: string;
+    lockContext?: Context;
+};
+export type BulkDecryptPayload = {
+    ciphertext: Encrypted;
+    lockContext?: Context;
 };
 export type CtsToken = {
     accessToken: string;
     expiry: number;
 };
 export type Context = {
-    identityClaim: string;
-} | {
-    tag: string;
-};
-export type Versioned = {
-    v: number;
+    identityClaim: string[];
 };
-export type Base85Ciphertext = string;
-export type BloomFilter = number[];
-export type HMAC = string;
-export type EncodedBlockOREArray = string[];
-export type EncodedFixedLengthORE = string;
-export type EncodedVariableLengthORE = string;
-export type JSONPathSelector = string;
-export type EncryptedCell<T extends EncryptConfig> = Versioned & {
+export type Encrypted = {
     k: 'ct';
-    c: Base85Ciphertext;
-    ob: EncodedBlockOREArray | null;
-    bf: BloomFilter | null;
-    hm: HMAC | null;
-    i: Identifier<T>;
-};
-export type EncryptedSV<T extends EncryptConfig> = Versioned & {
+    c: string;
+    ob: string[] | null;
+    bf: number[] | null;
+    hm: string | null;
+    i: {
+        c: string;
+        t: string;
+    };
+    v: number;
+} | {
     k: 'sv';
     sv: SteVecEncryptedEntry[];
-    i: Identifier<T>;
-};
-export type EncryptedSVE = {
-    k: 'sve';
-    sve: SteVecEncryptedEntry;
+    i: {
+        c: string;
+        t: string;
+    };
+    v: number;
 };
-export type AnyEncrypted<T extends EncryptConfig> = EncryptedCell<T> | EncryptedSV<T> | EncryptedSVE;
 export type SteVecEncryptedEntry = {
-    c: Base85Ciphertext;
+    tokenized_selector: string;
+    term: string;
+    record: string;
     parent_is_array: boolean;
-} & SteVecTerm & {
-    s: JSONPathSelector;
-};
-export type SteVecQuery = {
-    svq: SteQueryVecEntry[];
-};
-export type SteQueryVecEntry = {
-    s: JSONPathSelector;
-} & SteVecTerm;
-export type SteVecTerm = {
-    hm: HMAC;
-} | {
-    ocf: EncodedFixedLengthORE;
-} | {
-    ocv: EncodedVariableLengthORE;
 };
 export type EncryptConfig = {
     v: number;
@@ -90,7 +68,7 @@ export type Column = {
     cast_as?: CastAs;
     indexes?: Indexes;
 };
-export type CastAs = 'big_int' | 'boolean' | 'date' | 'real' | 'double' | 'int' | 'small_int' | 'text' | 'jsonb';
+export type CastAs = 'bigint' | 'boolean' | 'date' | 'number' | 'string' | 'json';
 type TablesOf<C extends EncryptConfig> = C['tables'];
 export type Identifier<C extends EncryptConfig> = {
     [T in keyof TablesOf<C>]: {
@@ -138,56 +116,35 @@ export type ClientOpts = {
     accessKey?: string;
     clientId?: string;
     clientKey?: string;
-    keyset?: IdentifiedBy;
+    keyset?: KeysetIdentifier;
+};
+export type KeysetIdentifier = {
+    Uuid: string;
+} | {
+    Name: string;
 };
-export type IdentifiedBy = string;
 export type JsPlaintext = string | number | Record<string, unknown> | JsPlaintext[];
-export type EncryptOptions<T extends EncryptConfig> = {
+export type EncryptOptions = {
     plaintext: JsPlaintext;
-    lockContext?: Context[];
+    column: string;
+    table: string;
+    lockContext?: Context;
     serviceToken?: CtsToken;
     unverifiedContext?: Record<string, unknown>;
-} & Identifier<T>;
-export type EncryptBulkOptions<T extends EncryptConfig> = {
-    plaintexts: EncryptPayload<T>[];
+};
+export type EncryptBulkOptions = {
+    plaintexts: EncryptPayload[];
     serviceToken?: CtsToken;
     unverifiedContext?: Record<string, unknown>;
 };
-export type DecryptOptions<T extends EncryptConfig> = {
-    ciphertext: AnyEncrypted<T>;
-    lockContext?: Context[];
+export type DecryptOptions = {
+    ciphertext: Encrypted;
+    lockContext?: Context;
     serviceToken?: CtsToken;
     unverifiedContext?: Record<string, unknown>;
 };
-export type DecryptBulkOptions<T extends EncryptConfig> = {
-    ciphertexts: BulkDecryptPayload<T>[];
+export type DecryptBulkOptions = {
+    ciphertexts: BulkDecryptPayload[];
     serviceToken?: CtsToken;
     unverifiedContext?: Record<string, unknown>;
 };
-export type QueryOptions<T extends EncryptConfig> = {
-    plaintext: JsPlaintext;
-    operator: QueryOperator;
-} & Identifier<T>;
-export type NumericOperator = '>' | '>=' | '<' | '<=' | '=';
-export type StringOperator = '~~' | '~~*' | '=';
-export type JsonbOperator = '@>' | '<@' | '->';
-export type QueryOperator = NumericOperator | StringOperator | JsonbOperator;
-export type EncryptedQueryTerm = {};
-export interface RangeQuery extends EncryptedQueryTerm {
-    ob: EncodedBlockOREArray;
-}
-export interface MatchQuery extends EncryptedQueryTerm {
-    bf: BloomFilter;
-}
-export interface ExactQuery extends EncryptedQueryTerm {
-    hm: HMAC;
-}
-export interface JsonSelect extends EncryptedQueryTerm {
-    s: JSONPathSelector;
-}
-export interface JsonContainsQuery extends EncryptedQueryTerm {
-    sv: SteQueryVecEntry[];
-}
-export interface JsonIsContainedByQuery extends EncryptedQueryTerm {
-    sv: SteQueryVecEntry[];
-}

package/lib/load.cjs

@@ -12,6 +12,7 @@ module.exports = require('@neon-rs/load').proxy({
         'darwin-x64': () => require('@cipherstash/protect-ffi-darwin-x64'),
         'darwin-arm64': () => require('@cipherstash/protect-ffi-darwin-arm64'),
         'linux-x64-gnu': () => require('@cipherstash/protect-ffi-linux-x64-gnu'),
+        'linux-x64-musl': () => require('@cipherstash/protect-ffi-linux-x64-musl'),
         'linux-arm64-gnu': () => require('@cipherstash/protect-ffi-linux-arm64-gnu'),
     },
     debug: () => require('../index.node'),

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@cipherstash/protect-ffi",
-  "version": "0.18.0-9",
+  "version": "0.18.1",
   "description": "",
   "main": "./lib/index.cjs",
   "scripts": {
@@ -45,7 +45,14 @@
   "neon": {
     "type": "library",
     "org": "@cipherstash",
-    "platforms": "common",
+    "platforms": [
+      "darwin-x64",
+      "darwin-arm64",
+      "win32-x64-msvc",
+      "linux-x64-gnu",
+      "linux-arm64-gnu",
+      "linux-x64-musl"
+    ],
     "load": "./src/load.cts",
     "prefix": "protect-ffi-"
   },
@@ -60,10 +67,11 @@
     "@neon-rs/load": "^0.1.82"
   },
   "optionalDependencies": {
-    "@cipherstash/protect-ffi-win32-x64-msvc": "0.18.0-9",
-    "@cipherstash/protect-ffi-darwin-x64": "0.18.0-9",
-    "@cipherstash/protect-ffi-darwin-arm64": "0.18.0-9",
-    "@cipherstash/protect-ffi-linux-x64-gnu": "0.18.0-9",
-    "@cipherstash/protect-ffi-linux-arm64-gnu": "0.18.0-9"
+    "@cipherstash/protect-ffi-darwin-x64": "0.18.1",
+    "@cipherstash/protect-ffi-darwin-arm64": "0.18.1",
+    "@cipherstash/protect-ffi-win32-x64-msvc": "0.18.1",
+    "@cipherstash/protect-ffi-linux-x64-gnu": "0.18.1",
+    "@cipherstash/protect-ffi-linux-arm64-gnu": "0.18.1",
+    "@cipherstash/protect-ffi-linux-x64-musl": "0.18.1"
   }
 }