@cipherstash/stack 0.14.0 → 0.15.1

package/CHANGELOG.md

@@ -1,5 +1,22 @@
 # @cipherstash/stack
 
+## 0.15.1
+
+### Patch Changes
+
+- 8513705: Fix mangled `eql_v2_encrypted` type in drizzle-kit migrations.
+
+  - `@cipherstash/stack/drizzle`'s `encryptedType` now returns the bare `eql_v2_encrypted` identifier from its Drizzle `customType.dataType()` callback. Returning the schema-qualified `"public"."eql_v2_encrypted"` (0.15.0) triggered a drizzle-kit quirk that wraps the return value in double-quotes and prepends `"{typeSchema}".` in ALTER COLUMN output — producing `"undefined".""public"."eql_v2_encrypted""`, which Postgres cannot parse.
+  - `stash db install` / `stash wizard`'s migration rewriter now matches all four forms drizzle-kit may emit (`eql_v2_encrypted`, `"public"."eql_v2_encrypted"`, `"undefined"."eql_v2_encrypted"`, `"undefined".""public"."eql_v2_encrypted""`) and rewrites each into the safe `ADD COLUMN … DROP COLUMN … RENAME COLUMN` sequence.
+
+  Users on 0.15.0 who hit this in generated migrations should upgrade and re-run `npx drizzle-kit generate` + `stash db install` (or re-run the wizard).
+
+## 0.15.0
+
+### Minor Changes
+
+- 1929c8f: Mark secrets as a coming soon feature and remove existing SDK integration.
+
 ## 0.14.0
 
 ### Minor Changes

package/dist/drizzle/index.cjs

@@ -1486,11 +1486,12 @@ function createEncryptionOperators(encryptionClient) {
 }
 
 // src/drizzle/index.ts
+var EQL_ENCRYPTED_DATA_TYPE = "eql_v2_encrypted";
 var columnConfigMap = /* @__PURE__ */ new Map();
 var encryptedType = (name, config) => {
   const customColumnType = (0, import_pg_core.customType)({
     dataType() {
-      return "eql_v2_encrypted";
+      return EQL_ENCRYPTED_DATA_TYPE;
     },
     toDriver(value) {
       const jsonStr = JSON.stringify(value);
@@ -1530,7 +1531,8 @@ var encryptedType = (name, config) => {
 function getEncryptedColumnConfig(columnName, column) {
   if (column && typeof column === "object") {
     const columnAny = column;
-    const isEncrypted = columnAny.sqlName === "eql_v2_encrypted" || columnAny.dataType === "eql_v2_encrypted" || columnAny.dataType && typeof columnAny.dataType === "function" && columnAny.dataType() === "eql_v2_encrypted";
+    const isEncryptedTypeString = (value) => value === EQL_ENCRYPTED_DATA_TYPE || value === '"public"."eql_v2_encrypted"';
+    const isEncrypted = isEncryptedTypeString(columnAny.sqlName) || isEncryptedTypeString(columnAny.dataType) || columnAny.dataType && typeof columnAny.dataType === "function" && isEncryptedTypeString(columnAny.dataType());
     if (isEncrypted) {
       if (columnAny._encryptionConfig) {
         return columnAny._encryptionConfig;