@cipherstash/stack 0.18.0 → 1.0.0-rc.0

package/dist/index.d.cts

@@ -1,23 +1,22 @@
-import { E as Encrypted } from './types-public-BTxqjmtv.cjs';
-export { e as encryptedColumn, a as encryptedField, b as encryptedTable } from './types-public-BTxqjmtv.cjs';
-export { E as Encryption } from './client-Dt98Rugc.cjs';
-import 'zod';
-import '@cipherstash/protect-ffi';
-import './errors/index.cjs';
+export { Encryption } from './encryption/index.cjs';
+export { e as encryptedToPgComposite, i as isEncryptedPayload } from './index-fhWTOV0K.cjs';
+export { p as Encrypted, Z as encryptedColumn, _ as encryptedField, $ as encryptedTable } from './types-public-QMjYNfQO.cjs';
+import auth from '@cipherstash/auth';
+export { AuthErrorCode, AuthFailure, TokenResult } from '@cipherstash/auth';
 import '@byteslice/result';
+import './errors/index.cjs';
+import '@cipherstash/protect-ffi';
 import './identity/index.cjs';
+import './base-operation-AOAIvsSB.cjs';
+import 'zod';
 
-type EncryptedPgComposite = {
-    data: Encrypted;
-};
-/**
- * Helper function to transform an encrypted payload into a PostgreSQL composite type.
- * Use this when inserting data via Supabase or similar clients.
- */
-declare function encryptedToPgComposite(obj: Encrypted): EncryptedPgComposite;
-/**
- * Helper function to check if a value is an encrypted payload
- */
-declare function isEncryptedPayload(value: unknown): value is Encrypted;
+declare const AccessKeyStrategy: typeof auth.AccessKeyStrategy;
+type AccessKeyStrategy = InstanceType<typeof auth.AccessKeyStrategy>;
+declare const AutoStrategy: typeof auth.AutoStrategy;
+type AutoStrategy = InstanceType<typeof auth.AutoStrategy>;
+declare const DeviceSessionStrategy: typeof auth.DeviceSessionStrategy;
+type DeviceSessionStrategy = InstanceType<typeof auth.DeviceSessionStrategy>;
+declare const OidcFederationStrategy: typeof auth.OidcFederationStrategy;
+type OidcFederationStrategy = InstanceType<typeof auth.OidcFederationStrategy>;
 
-export { Encrypted, encryptedToPgComposite, isEncryptedPayload };
+export { AccessKeyStrategy, AutoStrategy, DeviceSessionStrategy, OidcFederationStrategy };

package/dist/index.d.ts

@@ -1,23 +1,22 @@
-import { E as Encrypted } from './types-public-BTxqjmtv.js';
-export { e as encryptedColumn, a as encryptedField, b as encryptedTable } from './types-public-BTxqjmtv.js';
-export { E as Encryption } from './client-CIsfZ2zg.js';
-import 'zod';
-import '@cipherstash/protect-ffi';
-import './errors/index.js';
+export { Encryption } from './encryption/index.js';
+export { e as encryptedToPgComposite, i as isEncryptedPayload } from './index-BquA71_Y.js';
+export { p as Encrypted, Z as encryptedColumn, _ as encryptedField, $ as encryptedTable } from './types-public-QMjYNfQO.js';
+import auth from '@cipherstash/auth';
+export { AuthErrorCode, AuthFailure, TokenResult } from '@cipherstash/auth';
 import '@byteslice/result';
+import './errors/index.js';
+import '@cipherstash/protect-ffi';
 import './identity/index.js';
+import './base-operation-FXEzUXIq.js';
+import 'zod';
 
-type EncryptedPgComposite = {
-    data: Encrypted;
-};
-/**
- * Helper function to transform an encrypted payload into a PostgreSQL composite type.
- * Use this when inserting data via Supabase or similar clients.
- */
-declare function encryptedToPgComposite(obj: Encrypted): EncryptedPgComposite;
-/**
- * Helper function to check if a value is an encrypted payload
- */
-declare function isEncryptedPayload(value: unknown): value is Encrypted;
+declare const AccessKeyStrategy: typeof auth.AccessKeyStrategy;
+type AccessKeyStrategy = InstanceType<typeof auth.AccessKeyStrategy>;
+declare const AutoStrategy: typeof auth.AutoStrategy;
+type AutoStrategy = InstanceType<typeof auth.AutoStrategy>;
+declare const DeviceSessionStrategy: typeof auth.DeviceSessionStrategy;
+type DeviceSessionStrategy = InstanceType<typeof auth.DeviceSessionStrategy>;
+declare const OidcFederationStrategy: typeof auth.OidcFederationStrategy;
+type OidcFederationStrategy = InstanceType<typeof auth.OidcFederationStrategy>;
 
-export { Encrypted, encryptedToPgComposite, isEncryptedPayload };
+export { AccessKeyStrategy, AutoStrategy, DeviceSessionStrategy, OidcFederationStrategy };

package/dist/index.js

@@ -1,20 +1,35 @@
 import {
   Encryption
-} from "./chunk-ZYOZHZMJ.js";
+} from "./chunk-ZTP5QJ27.js";
+import "./chunk-OFQ555AX.js";
 import {
   encryptedToPgComposite,
   isEncryptedPayload
-} from "./chunk-XWPGAHBZ.js";
+} from "./chunk-BNO32ZMV.js";
 import {
   encryptedColumn,
   encryptedField,
   encryptedTable
-} from "./chunk-YWQXTZ5M.js";
-import "./chunk-VPOTNP4K.js";
-import "./chunk-LLCCNKDL.js";
+} from "./chunk-CLM7E4I6.js";
+import "./chunk-7333ZC6L.js";
+import "./chunk-3B5ZX3IS.js";
+import "./chunk-JSG2AMDI.js";
+import "./chunk-HQANMV7R.js";
 import "./chunk-LBMC4D6D.js";
+import "./chunk-PZ5AY32C.js";
+
+// src/index.ts
+import auth from "@cipherstash/auth";
+var AccessKeyStrategy = auth.AccessKeyStrategy;
+var AutoStrategy = auth.AutoStrategy;
+var DeviceSessionStrategy = auth.DeviceSessionStrategy;
+var OidcFederationStrategy = auth.OidcFederationStrategy;
 export {
+  AccessKeyStrategy,
+  AutoStrategy,
+  DeviceSessionStrategy,
   Encryption,
+  OidcFederationStrategy,
   encryptedColumn,
   encryptedField,
   encryptedTable,

package/dist/index.js.map

@@ -1 +1 @@
-{"version":3,"sources":[],"sourcesContent":[],"mappings":"","names":[]}
+{"version":3,"sources":["../src/index.ts"],"sourcesContent":["// Re-export main stack components for convenience\n\nexport { Encryption } from '@/encryption'\n// Re-export encryption helpers for convenience\nexport {\n  encryptedToPgComposite,\n  isEncryptedPayload,\n} from '@/encryption/helpers'\nexport { encryptedColumn, encryptedField, encryptedTable } from '@/schema'\n\n// Re-export auth strategies for convenience. Pass one as `config.authStrategy`\n// to `Encryption()` to control how ZeroKMS requests are authenticated — notably\n// `OidcFederationStrategy` for per-user, identity-bound encryption (pair with\n// `.withLockContext({ identityClaim })`). Re-exported so integrators don't need\n// a separate `@cipherstash/auth` install.\n//\n// `@cipherstash/auth`'s Node entry is a CommonJS NAPI module whose exports come\n// via `module.exports = { ...native }`. The spread defeats cjs-module-lexer, so\n// Node's ESM loader can't see those names through a static `export { … } from`\n// re-export (it throws \"Named export not found\"). We default-import the module\n// (which IS `module.exports` at runtime, with every name present) and re-export\n// each binding explicitly — both the value and, for the strategy classes, the\n// instance type — so this works under real Node ESM, not just the bundler.\nimport auth from '@cipherstash/auth'\n\nexport const AccessKeyStrategy = auth.AccessKeyStrategy\nexport type AccessKeyStrategy = InstanceType<typeof auth.AccessKeyStrategy>\nexport const AutoStrategy = auth.AutoStrategy\nexport type AutoStrategy = InstanceType<typeof auth.AutoStrategy>\nexport const DeviceSessionStrategy = auth.DeviceSessionStrategy\nexport type DeviceSessionStrategy = InstanceType<\n  typeof auth.DeviceSessionStrategy\n>\nexport const OidcFederationStrategy = auth.OidcFederationStrategy\nexport type OidcFederationStrategy = InstanceType<\n  typeof auth.OidcFederationStrategy\n>\n\nexport type {\n  AuthErrorCode,\n  AuthFailure,\n  TokenResult,\n} from '@cipherstash/auth'\n// Re-export types for convenience\nexport type { Encrypted } from '@/types'\n"],"mappings":";;;;;;;;;;;;;;;;;;;;;AAuBA,OAAO,UAAU;AAEV,IAAM,oBAAoB,KAAK;AAE/B,IAAM,eAAe,KAAK;AAE1B,IAAM,wBAAwB,KAAK;AAInC,IAAM,yBAAyB,KAAK;","names":[]}