@cipherstash/protect-ffi 0.18.1 → 0.19.0

package/lib/index.d.cts

@@ -34,32 +34,70 @@ export type CtsToken = {
 export type Context = {
     identityClaim: string[];
 };
+/**
+ * Represents encrypted data in the EQL format.
+ *
+ * This TypeScript type mirrors the Rust `EqlCiphertext` structure from `cipherstash-client`.
+ * The Rust type hierarchy is:
+ * - `EqlCiphertext` (identifier + version + body)
+ *   - `EqlCiphertextBody` (ciphertext + SEM fields + array flag)
+ *     - `EqlSEM` (all searchable encrypted metadata fields)
+ *
+ * In the serialized JSON format, `#[serde(flatten)]` is used in Rust to produce a flat
+ * structure where all fields appear at the top level rather than nested.
+ *
+ * Note: The ciphertext field (c) is serialized in MessagePack Base85 format.
+ */
 export type Encrypted = {
-    k: 'ct';
-    c: string;
-    ob: string[] | null;
-    bf: number[] | null;
-    hm: string | null;
+    /** The table and column identifier */
     i: {
-        c: string;
         t: string;
-    };
-    v: number;
-} | {
-    k: 'sv';
-    sv: SteVecEncryptedEntry[];
-    i: {
         c: string;
-        t: string;
     };
+    /** The encryption version */
     v: number;
-};
-export type SteVecEncryptedEntry = {
-    tokenized_selector: string;
-    term: string;
-    record: string;
-    parent_is_array: boolean;
-};
+    /** The encrypted ciphertext (mp_base85 encoded, optional for query-mode payloads) */
+    c?: string;
+    /** Whether this encrypted value is part of an array */
+    a?: boolean;
+    /** ORE block index for 64-bit integers */
+    ob?: string[];
+    /** Bloom filter for approximate match queries */
+    bf?: number[];
+    /** HMAC-SHA256 hash for exact matches */
+    hm?: string;
+    /** Selector value for field selection (SteVec) */
+    s?: string;
+    /** Blake3 hash for exact matches (SteVec) */
+    b3?: string;
+    /** ORE CLLW fixed-width index for 64-bit values (SteVec) */
+    ocf?: string;
+    /** ORE CLLW variable-width index for strings (SteVec) */
+    ocv?: string;
+    /** Structured encryption vector entries (recursive) */
+    sv?: EqlCiphertextBody[];
+};
+/**
+ * Body of an EQL ciphertext, used recursively in SteVec entries.
+ */
+export type EqlCiphertextBody = {
+    /** The encrypted ciphertext (mp_base85 encoded) */
+    c?: string;
+    /** Whether this entry is part of an array */
+    a?: boolean;
+    /** Selector value for field selection */
+    s?: string;
+    /** Blake3 hash for exact matches */
+    b3?: string;
+    /** ORE CLLW fixed-width index */
+    ocf?: string;
+    /** ORE CLLW variable-width index */
+    ocv?: string;
+    /** Nested SteVec entries (for deeply nested JSON) */
+    sv?: EqlCiphertextBody[];
+};
+/** @deprecated Use EqlCiphertextBody instead */
+export type SteVecEntry = EqlCiphertextBody;
 export type EncryptConfig = {
     v: number;
     tables: Record<string, Record<string, Column>>;

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@cipherstash/protect-ffi",
-  "version": "0.18.1",
+  "version": "0.19.0",
   "description": "",
   "main": "./lib/index.cjs",
   "scripts": {
@@ -67,11 +67,11 @@
     "@neon-rs/load": "^0.1.82"
   },
   "optionalDependencies": {
-    "@cipherstash/protect-ffi-darwin-x64": "0.18.1",
-    "@cipherstash/protect-ffi-darwin-arm64": "0.18.1",
-    "@cipherstash/protect-ffi-win32-x64-msvc": "0.18.1",
-    "@cipherstash/protect-ffi-linux-x64-gnu": "0.18.1",
-    "@cipherstash/protect-ffi-linux-arm64-gnu": "0.18.1",
-    "@cipherstash/protect-ffi-linux-x64-musl": "0.18.1"
+    "@cipherstash/protect-ffi-darwin-x64": "0.19.0",
+    "@cipherstash/protect-ffi-darwin-arm64": "0.19.0",
+    "@cipherstash/protect-ffi-win32-x64-msvc": "0.19.0",
+    "@cipherstash/protect-ffi-linux-x64-gnu": "0.19.0",
+    "@cipherstash/protect-ffi-linux-arm64-gnu": "0.19.0",
+    "@cipherstash/protect-ffi-linux-x64-musl": "0.19.0"
   }
 }