@cipherstash/stack 0.19.0 → 1.0.0-rc.1

package/dist/index.d.cts

@@ -1,27 +1,15 @@
-export { f as Encryption } from './client-DSGHBN-g.cjs';
-import { a as Encrypted } from './types-public-CpS5KjwX.cjs';
-export { e as encryptedColumn, d as encryptedField, f as encryptedTable } from './types-public-CpS5KjwX.cjs';
+export { Encryption } from './encryption/index.cjs';
+export { e as encryptedToPgComposite, i as isEncryptedPayload } from './index-fhWTOV0K.cjs';
+export { p as Encrypted, Z as encryptedColumn, _ as encryptedField, $ as encryptedTable } from './types-public-QMjYNfQO.cjs';
 import auth from '@cipherstash/auth';
 export { AuthErrorCode, AuthFailure, TokenResult } from '@cipherstash/auth';
 import '@byteslice/result';
 import './errors/index.cjs';
 import '@cipherstash/protect-ffi';
 import './identity/index.cjs';
+import './base-operation-AOAIvsSB.cjs';
 import 'zod';
 
-type EncryptedPgComposite = {
-    data: Encrypted;
-};
-/**
- * Helper function to transform an encrypted payload into a PostgreSQL composite type.
- * Use this when inserting data via Supabase or similar clients.
- */
-declare function encryptedToPgComposite(obj: Encrypted): EncryptedPgComposite;
-/**
- * Helper function to check if a value is an encrypted payload
- */
-declare function isEncryptedPayload(value: unknown): value is Encrypted;
-
 declare const AccessKeyStrategy: typeof auth.AccessKeyStrategy;
 type AccessKeyStrategy = InstanceType<typeof auth.AccessKeyStrategy>;
 declare const AutoStrategy: typeof auth.AutoStrategy;
@@ -31,4 +19,4 @@ type DeviceSessionStrategy = InstanceType<typeof auth.DeviceSessionStrategy>;
 declare const OidcFederationStrategy: typeof auth.OidcFederationStrategy;
 type OidcFederationStrategy = InstanceType<typeof auth.OidcFederationStrategy>;
 
-export { AccessKeyStrategy, AutoStrategy, DeviceSessionStrategy, Encrypted, OidcFederationStrategy, encryptedToPgComposite, isEncryptedPayload };
+export { AccessKeyStrategy, AutoStrategy, DeviceSessionStrategy, OidcFederationStrategy };

package/dist/index.d.ts

@@ -1,27 +1,15 @@
-export { f as Encryption } from './client-DfCrlHXh.js';
-import { a as Encrypted } from './types-public-CpS5KjwX.js';
-export { e as encryptedColumn, d as encryptedField, f as encryptedTable } from './types-public-CpS5KjwX.js';
+export { Encryption } from './encryption/index.js';
+export { e as encryptedToPgComposite, i as isEncryptedPayload } from './index-BquA71_Y.js';
+export { p as Encrypted, Z as encryptedColumn, _ as encryptedField, $ as encryptedTable } from './types-public-QMjYNfQO.js';
 import auth from '@cipherstash/auth';
 export { AuthErrorCode, AuthFailure, TokenResult } from '@cipherstash/auth';
 import '@byteslice/result';
 import './errors/index.js';
 import '@cipherstash/protect-ffi';
 import './identity/index.js';
+import './base-operation-FXEzUXIq.js';
 import 'zod';
 
-type EncryptedPgComposite = {
-    data: Encrypted;
-};
-/**
- * Helper function to transform an encrypted payload into a PostgreSQL composite type.
- * Use this when inserting data via Supabase or similar clients.
- */
-declare function encryptedToPgComposite(obj: Encrypted): EncryptedPgComposite;
-/**
- * Helper function to check if a value is an encrypted payload
- */
-declare function isEncryptedPayload(value: unknown): value is Encrypted;
-
 declare const AccessKeyStrategy: typeof auth.AccessKeyStrategy;
 type AccessKeyStrategy = InstanceType<typeof auth.AccessKeyStrategy>;
 declare const AutoStrategy: typeof auth.AutoStrategy;
@@ -31,4 +19,4 @@ type DeviceSessionStrategy = InstanceType<typeof auth.DeviceSessionStrategy>;
 declare const OidcFederationStrategy: typeof auth.OidcFederationStrategy;
 type OidcFederationStrategy = InstanceType<typeof auth.OidcFederationStrategy>;
 
-export { AccessKeyStrategy, AutoStrategy, DeviceSessionStrategy, Encrypted, OidcFederationStrategy, encryptedToPgComposite, isEncryptedPayload };
+export { AccessKeyStrategy, AutoStrategy, DeviceSessionStrategy, OidcFederationStrategy };

package/dist/index.js

@@ -1,7 +1,7 @@
 import {
   Encryption
-} from "./chunk-36AA7IBJ.js";
-import "./chunk-OFQ555AX.js";
+} from "./chunk-L7ISHSG7.js";
+import "./chunk-IDKP6ABU.js";
 import {
   encryptedToPgComposite,
   isEncryptedPayload
@@ -10,12 +10,12 @@ import {
   encryptedColumn,
   encryptedField,
   encryptedTable
-} from "./chunk-MP3SSDNN.js";
-import "./chunk-IADZCZEA.js";
-import "./chunk-4AVL4VZD.js";
+} from "./chunk-CLM7E4I6.js";
+import "./chunk-7333ZC6L.js";
+import "./chunk-3B5ZX3IS.js";
 import "./chunk-JSG2AMDI.js";
 import "./chunk-HQANMV7R.js";
-import "./chunk-LBMC4D6D.js";
+import "./chunk-NVKK7UDN.js";
 import "./chunk-PZ5AY32C.js";
 
 // src/index.ts

package/dist/schema/index.cjs

@@ -4085,6 +4085,23 @@ function defaultMatchOpts() {
     include_original: true
   };
 }
+function cloneMatchOpts(opts) {
+  return {
+    ...opts,
+    tokenizer: { ...opts.tokenizer },
+    token_filters: opts.token_filters.map((f) => ({ ...f }))
+  };
+}
+function resolveMatchOpts(opts) {
+  const defaults = defaultMatchOpts();
+  return cloneMatchOpts({
+    tokenizer: opts?.tokenizer ?? defaults.tokenizer,
+    token_filters: opts?.token_filters ?? defaults.token_filters,
+    k: opts?.k ?? defaults.k,
+    m: opts?.m ?? defaults.m,
+    include_original: opts?.include_original ?? defaults.include_original
+  });
+}
 
 // src/schema/index.ts
 var eqlCastAsEnum = external_exports.enum([
@@ -4142,6 +4159,7 @@ var tokenizerSchema = external_exports.union([
   })
 ]).default({ kind: "ngram", token_length: 3 }).optional();
 var oreIndexOptsSchema = external_exports.object({});
+var opeIndexOptsSchema = external_exports.object({});
 var uniqueIndexOptsSchema = external_exports.object({
   token_filters: external_exports.array(tokenFilterSchema).default([]).optional()
 });
@@ -4163,10 +4181,12 @@ var arrayIndexModeSchema = external_exports.union([
 ]);
 var steVecIndexOptsSchema = external_exports.object({
   prefix: external_exports.string(),
-  array_index_mode: arrayIndexModeSchema.optional()
+  array_index_mode: arrayIndexModeSchema.optional(),
+  mode: external_exports.enum(["compat", "standard"]).optional()
 });
 var indexesSchema = external_exports.object({
   ore: oreIndexOptsSchema.optional(),
+  ope: opeIndexOptsSchema.optional(),
   unique: uniqueIndexOptsSchema.optional(),
   match: matchIndexOptsSchema.optional(),
   ste_vec: steVecIndexOptsSchema.optional()
@@ -4195,7 +4215,7 @@ var EncryptedField = class {
    * a different type so the encryption layer knows how to encode the plaintext
    * before encrypting.
    *
-   * @param castAs - The plaintext data type: `'string'`, `'number'`, `'boolean'`, `'date'`, `'text'`, `'bigint'`, or `'json'`.
+   * @param castAs - The plaintext data type: `'string'`, `'number'`, `'boolean'`, `'date'`, `'timestamp'`, `'text'`, `'bigint'`, or `'json'`. Use `'timestamp'` (not `'date'`) to preserve time-of-day — `'date'` truncates to midnight.
    * @returns This `EncryptedField` instance for method chaining.
    *
    * @example
@@ -4234,7 +4254,7 @@ var EncryptedColumn = class {
    * a different type so the encryption layer knows how to encode the plaintext
    * before encrypting.
    *
-   * @param castAs - The plaintext data type: `'string'`, `'number'`, `'boolean'`, `'date'`, `'bigint'`, or `'json'`.
+   * @param castAs - The plaintext data type: `'string'`, `'number'`, `'boolean'`, `'date'`, `'timestamp'`, `'text'`, `'bigint'`, or `'json'`. Use `'timestamp'` (not `'date'`) to preserve time-of-day — `'date'` truncates to midnight.
    * @returns This `EncryptedColumn` instance for method chaining.
    *
    * @example
@@ -4323,14 +4343,7 @@ var EncryptedColumn = class {
    * ```
    */
   freeTextSearch(opts) {
-    const defaults = defaultMatchOpts();
-    this.indexesValue.match = {
-      tokenizer: opts?.tokenizer ?? defaults.tokenizer,
-      token_filters: opts?.token_filters ?? defaults.token_filters,
-      k: opts?.k ?? defaults.k,
-      m: opts?.m ?? defaults.m,
-      include_original: opts?.include_original ?? defaults.include_original
-    };
+    this.indexesValue.match = resolveMatchOpts(opts);
     return this;
   }
   /**
@@ -4357,7 +4370,11 @@ var EncryptedColumn = class {
    */
   searchableJson() {
     this.castAsValue = "json";
-    this.indexesValue.ste_vec = { prefix: "enabled", array_index_mode: "all" };
+    this.indexesValue.ste_vec = {
+      prefix: "enabled",
+      array_index_mode: "all",
+      mode: "standard"
+    };
     return this;
   }
   build() {