@cipherstash/protect-ffi 0.28.0 → 0.29.0

package/README.md

@@ -59,37 +59,53 @@ const v3 = await addon.newClient({ encryptConfig, eqlVersion: 3 })
 With `eqlVersion: 3`, each column's payload targets the `eql_v3` domain
 derived from its `cast_as` and indexes:
 
+Every public-schema column domain carries an `eql_v3_` prefix (so the SQL
+column type is `public.eql_v3_text_eq`); the term-only query twins do not
+(`eql_v3.query_text_eq`), because the `eql_v3` schema already versions them.
+
 | `cast_as` | family | indexes | domain |
 |-----------|--------|---------|--------|
-| `text` | `text` | `unique` + `ore` + `match` | `text_search` |
-| `text` | `text` | `unique` + `ore` | `text_ord_ore` |
-| `text` | `text` | `match` | `text_match` |
-| `text` | `text` | `unique` | `text_eq` |
-| `int` / `small_int` / `bigint` | `integer` / `smallint` / `bigint` | `ore` (with or without `unique`) | `<family>_ord_ore` |
-| `int` / `small_int` / `bigint` | `integer` / `smallint` / `bigint` | `unique` | `<family>_eq` |
+| `text` | `text` | `unique` + `ore` + `match` | `eql_v3_text_search_ore` |
+| `text` | `text` | `unique` + `ope` + `match` | `eql_v3_text_search` |
+| `text` | `text` | `unique` + `ore` | `eql_v3_text_ord_ore` |
+| `text` | `text` | `match` | `eql_v3_text_match` |
+| `text` | `text` | `unique` | `eql_v3_text_eq` |
+| `int` / `small_int` / `bigint` | `integer` / `smallint` / `bigint` | `ore` (with or without `unique`) | `eql_v3_<family>_ord_ore` |
+| `int` / `small_int` / `bigint` | `integer` / `smallint` / `bigint` | `unique` | `eql_v3_<family>_eq` |
 | `number` / `decimal` / `date` / `timestamp` | `double` / `numeric` / `date` / `timestamp` | as above | as above |
-| any scalar | — | none | storage-only domain (`text`, `integer`, …) |
-| `boolean` | `boolean` | none only | `boolean` (storage-only — any index errors) |
-| `json` | `json` | `ste_vec` (required) | `json` |
+| any scalar | — | none | storage-only domain (`eql_v3_text`, `eql_v3_integer`, …) |
+| `boolean` | `boolean` | none only | `eql_v3_boolean` (storage-only — any index errors) |
+| `json` | `json` | `ste_vec` (required, `compat` mode) | `eql_v3_json` |
 
 Notes:
 
 - The richest matching domain wins, and it must cover every configured
   capability — a combination that would silently drop a term errors instead
-  (e.g. `unique` + `match`, `unique` + `ope` + `match`, or `ore` + `match`
-  on text: no single domain carries those term sets, so add the missing
-  index to reach `text_search`, split the capabilities across columns, or
-  use `eqlVersion: 2`).
+  (e.g. `unique` + `match` or `ore` + `match` on text: no single domain
+  carries those term sets, so add the missing index to reach a search
+  domain, split the capabilities across columns, or use `eqlVersion: 2`).
+- The two text search domains differ only in the ordering term they carry:
+  `eql_v3_text_search_ore` carries `ob` (ORE), `eql_v3_text_search` carries
+  `op` (OPE). Configuring both `ore` and `ope` selects the ORE one.
 - Exception: dropping a *term* is fine when the *capability* survives.
   Non-text ordering domains carry only `ob`, so `unique` + `ore` on a
   numeric column drops `hm` — equality still works via the ORE operators.
-- Ordered text requires a `unique` index (`text_ord_ore`/`text_ord_ope`
-  carry `hm` + `ob`/`op`); `ore`-only text errors.
+- Ordered text requires a `unique` index (`eql_v3_text_ord_ore` /
+  `eql_v3_text_ord_ope` carry `hm` + `ob`/`op`); `ore`-only text errors.
+- A `json` column's `ste_vec` index must use the `compat` mode (the
+  `cipherstash-client` default since 0.40.0). v3 orders SteVec entries by
+  the CLLW-OPE `op` term; a `standard`-mode index emits CLLW-ORE `oc`, which
+  has no mechanical conversion, so such a column errors at config time.
 - `decrypt` accepts **both** formats regardless of `eqlVersion`, so v2 and
   v3 data can coexist during a migration.
-- v3 query encryption currently supports JSON containment only; scalar and
-  selector queries throw `EQL_V3_QUERY_UNSUPPORTED` and need an
-  `eqlVersion: 2` client.
+- v3 query encryption returns index-terms-only operands: scalar queries
+  produce the column domain's query twin (`{v, i, <terms>}`, no `c`
+  ciphertext) — bind with `col = $1::jsonb::eql_v3.query_<name>` (or the
+  ordering / `@>` match operator). The operand always carries ALL the
+  column domain's terms, whichever `indexType` was queried. JSON
+  containment queries produce the `eql_v3.query_jsonb` needle, and
+  `ste_vec_selector` queries return the bare selector hash (a string) for
+  the `->` / `->>` operators.
 - `ope`-indexed columns map to `<family>_ord_ope` and carry the `op`
   (CLLW-OPE) term (emitted since cipherstash-client 0.38.1).
 

package/dist/wasm/protect_ffi.d.ts

@@ -77,8 +77,15 @@ export function isEncrypted(raw: any): boolean;
 /**
  * Construct a [`WasmClient`].
  *
- * `opts.strategy` must be an `@cipherstash/auth`-shaped object — anything
- * with a `getToken(): Promise<{ token: string, ... }>` method works. It is
- * required: wasm has no env / filesystem fallback path.
+ * `opts.strategy` must be an `@cipherstash/auth`-shaped object — anything with
+ * a `getToken()` method returning a `Promise` works. A non-`Promise` return is
+ * rejected with `strategy.getToken() did not return a Promise`.
+ *
+ * The promise may resolve either the bare `{ token: string, ... }` payload
+ * (`@cipherstash/auth` <= 0.40 and custom strategies) or a `@byteslice/result`
+ * envelope — `{ data: { token, ... } }` on success, `{ failure }` on error
+ * (`@cipherstash/auth` >= 0.41). Both are accepted.
+ *
+ * `strategy` is required: wasm has no env / filesystem fallback path.
  */
 export function newClient(opts: any): Promise<WasmClient>;

package/dist/wasm/protect_ffi_bg.js

@@ -237,9 +237,16 @@ export function isEncrypted(raw) {
 /**
  * Construct a [`WasmClient`].
  *
- * `opts.strategy` must be an `@cipherstash/auth`-shaped object — anything
- * with a `getToken(): Promise<{ token: string, ... }>` method works. It is
- * required: wasm has no env / filesystem fallback path.
+ * `opts.strategy` must be an `@cipherstash/auth`-shaped object — anything with
+ * a `getToken()` method returning a `Promise` works. A non-`Promise` return is
+ * rejected with `strategy.getToken() did not return a Promise`.
+ *
+ * The promise may resolve either the bare `{ token: string, ... }` payload
+ * (`@cipherstash/auth` <= 0.40 and custom strategies) or a `@byteslice/result`
+ * envelope — `{ data: { token, ... } }` on success, `{ failure }` on error
+ * (`@cipherstash/auth` >= 0.41). Both are accepted.
+ *
+ * `strategy` is required: wasm has no env / filesystem fallback path.
  * @param {any} opts
  * @returns {Promise<WasmClient>}
  */
@@ -592,7 +599,7 @@ export function __wbg_new_typed_aaaeaf29cf802876(arg0, arg1) {
             const a = state0.a;
             state0.a = 0;
             try {
-                return wasm_bindgen__convert__closures_____invoke__h0cb80728b35f261e(a, state0.b, arg0, arg1);
+                return wasm_bindgen_4fd6a40e72de90f0___convert__closures_____invoke___js_sys_64e80f16f18e69d0___Function_fn_wasm_bindgen_4fd6a40e72de90f0___JsValue_____wasm_bindgen_4fd6a40e72de90f0___sys__Undefined___js_sys_64e80f16f18e69d0___Function_fn_wasm_bindgen_4fd6a40e72de90f0___JsValue_____wasm_bindgen_4fd6a40e72de90f0___sys__Undefined_______true_(a, state0.b, arg0, arg1);
             } finally {
                 state0.a = a;
             }
@@ -784,13 +791,13 @@ export function __wbg_wasmclient_new(arg0) {
     return ret;
 }
 export function __wbindgen_cast_0000000000000001(arg0, arg1) {
-    // Cast intrinsic for `Closure(Closure { dtor_idx: 893, function: Function { arguments: [], shim_idx: 894, ret: Unit, inner_ret: Some(Unit) }, mutable: true }) -> Externref`.
-    const ret = makeMutClosure(arg0, arg1, wasm.wasm_bindgen__closure__destroy__hd9dedd770edb0aa1, wasm_bindgen__convert__closures_____invoke__h8b170b34f8b593df);
+    // Cast intrinsic for `Closure(Closure { dtor_idx: 935, function: Function { arguments: [], shim_idx: 936, ret: Unit, inner_ret: Some(Unit) }, mutable: true }) -> Externref`.
+    const ret = makeMutClosure(arg0, arg1, wasm.wasm_bindgen_4fd6a40e72de90f0___closure__destroy___dyn_core_7d5f0a2ba6a62c33___ops__function__FnMut_____Output_______, wasm_bindgen_4fd6a40e72de90f0___convert__closures_____invoke_______true_);
     return ret;
 }
 export function __wbindgen_cast_0000000000000002(arg0, arg1) {
-    // Cast intrinsic for `Closure(Closure { dtor_idx: 946, function: Function { arguments: [Externref], shim_idx: 947, ret: Result(Unit), inner_ret: Some(Result(Unit)) }, mutable: true }) -> Externref`.
-    const ret = makeMutClosure(arg0, arg1, wasm.wasm_bindgen__closure__destroy__h94971d029da3e81d, wasm_bindgen__convert__closures_____invoke__hacad64c6c6b78997);
+    // Cast intrinsic for `Closure(Closure { dtor_idx: 983, function: Function { arguments: [Externref], shim_idx: 984, ret: Result(Unit), inner_ret: Some(Result(Unit)) }, mutable: true }) -> Externref`.
+    const ret = makeMutClosure(arg0, arg1, wasm.wasm_bindgen_4fd6a40e72de90f0___closure__destroy___dyn_core_7d5f0a2ba6a62c33___ops__function__FnMut__wasm_bindgen_4fd6a40e72de90f0___JsValue____Output___core_7d5f0a2ba6a62c33___result__Result_____wasm_bindgen_4fd6a40e72de90f0___JsError___, wasm_bindgen_4fd6a40e72de90f0___convert__closures_____invoke___wasm_bindgen_4fd6a40e72de90f0___JsValue__core_7d5f0a2ba6a62c33___result__Result_____wasm_bindgen_4fd6a40e72de90f0___JsError___true_);
     return ret;
 }
 export function __wbindgen_cast_0000000000000003(arg0) {
@@ -827,19 +834,19 @@ export function __wbindgen_init_externref_table() {
     table.set(offset + 2, true);
     table.set(offset + 3, false);
 }
-function wasm_bindgen__convert__closures_____invoke__h8b170b34f8b593df(arg0, arg1) {
-    wasm.wasm_bindgen__convert__closures_____invoke__h8b170b34f8b593df(arg0, arg1);
+function wasm_bindgen_4fd6a40e72de90f0___convert__closures_____invoke_______true_(arg0, arg1) {
+    wasm.wasm_bindgen_4fd6a40e72de90f0___convert__closures_____invoke_______true_(arg0, arg1);
 }
 
-function wasm_bindgen__convert__closures_____invoke__hacad64c6c6b78997(arg0, arg1, arg2) {
-    const ret = wasm.wasm_bindgen__convert__closures_____invoke__hacad64c6c6b78997(arg0, arg1, arg2);
+function wasm_bindgen_4fd6a40e72de90f0___convert__closures_____invoke___wasm_bindgen_4fd6a40e72de90f0___JsValue__core_7d5f0a2ba6a62c33___result__Result_____wasm_bindgen_4fd6a40e72de90f0___JsError___true_(arg0, arg1, arg2) {
+    const ret = wasm.wasm_bindgen_4fd6a40e72de90f0___convert__closures_____invoke___wasm_bindgen_4fd6a40e72de90f0___JsValue__core_7d5f0a2ba6a62c33___result__Result_____wasm_bindgen_4fd6a40e72de90f0___JsError___true_(arg0, arg1, arg2);
     if (ret[1]) {
         throw takeFromExternrefTable0(ret[0]);
     }
 }
 
-function wasm_bindgen__convert__closures_____invoke__h0cb80728b35f261e(arg0, arg1, arg2, arg3) {
-    wasm.wasm_bindgen__convert__closures_____invoke__h0cb80728b35f261e(arg0, arg1, arg2, arg3);
+function wasm_bindgen_4fd6a40e72de90f0___convert__closures_____invoke___js_sys_64e80f16f18e69d0___Function_fn_wasm_bindgen_4fd6a40e72de90f0___JsValue_____wasm_bindgen_4fd6a40e72de90f0___sys__Undefined___js_sys_64e80f16f18e69d0___Function_fn_wasm_bindgen_4fd6a40e72de90f0___JsValue_____wasm_bindgen_4fd6a40e72de90f0___sys__Undefined_______true_(arg0, arg1, arg2, arg3) {
+    wasm.wasm_bindgen_4fd6a40e72de90f0___convert__closures_____invoke___js_sys_64e80f16f18e69d0___Function_fn_wasm_bindgen_4fd6a40e72de90f0___JsValue_____wasm_bindgen_4fd6a40e72de90f0___sys__Undefined___js_sys_64e80f16f18e69d0___Function_fn_wasm_bindgen_4fd6a40e72de90f0___JsValue_____wasm_bindgen_4fd6a40e72de90f0___sys__Undefined_______true_(arg0, arg1, arg2, arg3);
 }
 
 

package/dist/wasm/protect_ffi_bg.wasm.d.ts

@@ -15,21 +15,21 @@ export const newClient: (a: any) => any;
 export const __wbg_intounderlyingsource_free: (a: number, b: number) => void;
 export const intounderlyingsource_cancel: (a: number) => void;
 export const intounderlyingsource_pull: (a: number, b: any) => any;
-export const __wbg_intounderlyingsink_free: (a: number, b: number) => void;
-export const intounderlyingsink_abort: (a: number, b: any) => any;
-export const intounderlyingsink_close: (a: number) => any;
-export const intounderlyingsink_write: (a: number, b: any) => any;
 export const __wbg_intounderlyingbytesource_free: (a: number, b: number) => void;
+export const __wbg_intounderlyingsink_free: (a: number, b: number) => void;
 export const intounderlyingbytesource_autoAllocateChunkSize: (a: number) => number;
 export const intounderlyingbytesource_cancel: (a: number) => void;
 export const intounderlyingbytesource_pull: (a: number, b: any) => any;
 export const intounderlyingbytesource_start: (a: number, b: any) => void;
 export const intounderlyingbytesource_type: (a: number) => number;
-export const wasm_bindgen__closure__destroy__hd9dedd770edb0aa1: (a: number, b: number) => void;
-export const wasm_bindgen__closure__destroy__h94971d029da3e81d: (a: number, b: number) => void;
-export const wasm_bindgen__convert__closures_____invoke__hacad64c6c6b78997: (a: number, b: number, c: any) => [number, number];
-export const wasm_bindgen__convert__closures_____invoke__h0cb80728b35f261e: (a: number, b: number, c: any, d: any) => void;
-export const wasm_bindgen__convert__closures_____invoke__h8b170b34f8b593df: (a: number, b: number) => void;
+export const intounderlyingsink_abort: (a: number, b: any) => any;
+export const intounderlyingsink_close: (a: number) => any;
+export const intounderlyingsink_write: (a: number, b: any) => any;
+export const wasm_bindgen_4fd6a40e72de90f0___closure__destroy___dyn_core_7d5f0a2ba6a62c33___ops__function__FnMut_____Output_______: (a: number, b: number) => void;
+export const wasm_bindgen_4fd6a40e72de90f0___closure__destroy___dyn_core_7d5f0a2ba6a62c33___ops__function__FnMut__wasm_bindgen_4fd6a40e72de90f0___JsValue____Output___core_7d5f0a2ba6a62c33___result__Result_____wasm_bindgen_4fd6a40e72de90f0___JsError___: (a: number, b: number) => void;
+export const wasm_bindgen_4fd6a40e72de90f0___convert__closures_____invoke___wasm_bindgen_4fd6a40e72de90f0___JsValue__core_7d5f0a2ba6a62c33___result__Result_____wasm_bindgen_4fd6a40e72de90f0___JsError___true_: (a: number, b: number, c: any) => [number, number];
+export const wasm_bindgen_4fd6a40e72de90f0___convert__closures_____invoke___js_sys_64e80f16f18e69d0___Function_fn_wasm_bindgen_4fd6a40e72de90f0___JsValue_____wasm_bindgen_4fd6a40e72de90f0___sys__Undefined___js_sys_64e80f16f18e69d0___Function_fn_wasm_bindgen_4fd6a40e72de90f0___JsValue_____wasm_bindgen_4fd6a40e72de90f0___sys__Undefined_______true_: (a: number, b: number, c: any, d: any) => void;
+export const wasm_bindgen_4fd6a40e72de90f0___convert__closures_____invoke_______true_: (a: number, b: number) => void;
 export const __wbindgen_exn_store: (a: number) => void;
 export const __externref_table_alloc: () => number;
 export const __wbindgen_externrefs: WebAssembly.Table;