@cipherstash/stack 0.9.0 → 0.11.0

package/dist/encryption/index.d.cts

@@ -1,7 +1,7 @@
 import '../errors/index.cjs';
-import '../types-public-B5YxQhR6.cjs';
+import '../types-public-WADaA-TW.cjs';
 import '@byteslice/result';
 import '@cipherstash/protect-ffi';
-export { E as Encryption, a as EncryptionClient, n as noClientError } from '../client-CV7X5Hrt.cjs';
+export { E as Encryption, a as EncryptionClient, n as noClientError } from '../client-bW-5wG9Y.cjs';
 import 'zod';
 import '../identity/index.cjs';

package/dist/encryption/index.d.ts

@@ -1,7 +1,7 @@
 import '../errors/index.js';
-import '../types-public-B5YxQhR6.js';
+import '../types-public-WADaA-TW.js';
 import '@byteslice/result';
 import '@cipherstash/protect-ffi';
-export { E as Encryption, a as EncryptionClient, n as noClientError } from '../client-_63nbmO7.js';
+export { E as Encryption, a as EncryptionClient, n as noClientError } from '../client-CZLBiToT.js';
 import 'zod';
 import '../identity/index.js';

package/dist/encryption/index.js

@@ -2,11 +2,10 @@ import {
   Encryption,
   EncryptionClient,
   noClientError
-} from "../chunk-4C52Q5R6.js";
+} from "../chunk-O4MBO4DJ.js";
 import "../chunk-4RNBI3UH.js";
-import "../chunk-Y3KSTOVR.js";
-import "../chunk-HCL75LXQ.js";
-import "../chunk-GXGEW6T4.js";
+import "../chunk-GNLU3I27.js";
+import "../chunk-46PDK2Z6.js";
 import "../chunk-Q5FTQLYG.js";
 import "../chunk-LBMC4D6D.js";
 export {

package/dist/index.cjs

@@ -77,8 +77,18 @@ var matchIndexOptsSchema = import_zod.z.object({
   m: import_zod.z.number().default(2048).optional(),
   include_original: import_zod.z.boolean().default(false).optional()
 });
+var arrayIndexModeSchema = import_zod.z.union([
+  import_zod.z.literal("all"),
+  import_zod.z.literal("none"),
+  import_zod.z.object({
+    item: import_zod.z.boolean().optional(),
+    wildcard: import_zod.z.boolean().optional(),
+    position: import_zod.z.boolean().optional()
+  })
+]);
 var steVecIndexOptsSchema = import_zod.z.object({
-  prefix: import_zod.z.string()
+  prefix: import_zod.z.string(),
+  array_index_mode: arrayIndexModeSchema.optional()
 });
 var indexesSchema = import_zod.z.object({
   ore: oreIndexOptsSchema.optional(),
@@ -275,7 +285,7 @@ var EncryptedColumn = class {
    */
   searchableJson() {
     this.castAsValue = "json";
-    this.indexesValue.ste_vec = { prefix: "enabled" };
+    this.indexesValue.ste_vec = { prefix: "enabled", array_index_mode: "all" };
     return this;
   }
   build() {
@@ -323,6 +333,7 @@ var EncryptedTable = class {
             indexes: {
               ...builtColumn.indexes,
               ste_vec: {
+                ...builtColumn.indexes.ste_vec,
                 prefix: `${this.tableName}/${colName}`
               }
             }
@@ -387,69 +398,6 @@ var EncryptionErrorTypes = {
   CtsTokenError: "CtsTokenError"
 };
 
-// src/utils/config/index.ts
-var import_node_fs = __toESM(require("fs"), 1);
-var import_node_path = __toESM(require("path"), 1);
-function getWorkspaceCrn(tomlString) {
-  let currentSection = "";
-  let workspaceCrn;
-  const lines = tomlString.split(/\r?\n/);
-  for (const line of lines) {
-    const trimmedLine = line.trim();
-    if (!trimmedLine || trimmedLine.startsWith("#")) {
-      continue;
-    }
-    const sectionMatch = trimmedLine.match(/^\[([^\]]+)\]$/);
-    if (sectionMatch) {
-      currentSection = sectionMatch[1];
-      continue;
-    }
-    const kvMatch = trimmedLine.match(/^(\w+)\s*=\s*"([^"]+)"$/);
-    if (kvMatch) {
-      const [_, key, value] = kvMatch;
-      if (currentSection === "auth" && key === "workspace_crn") {
-        workspaceCrn = value;
-        break;
-      }
-    }
-  }
-  return workspaceCrn;
-}
-function extractWorkspaceIdFromCrn(crn) {
-  const match = crn.match(/crn:[^:]+:([^:]+)$/);
-  if (!match) {
-    throw new Error("Invalid CRN format");
-  }
-  return match[1];
-}
-function loadWorkSpaceId(suppliedCrn) {
-  const configPath = import_node_path.default.join(process.cwd(), "cipherstash.toml");
-  if (suppliedCrn) {
-    return extractWorkspaceIdFromCrn(suppliedCrn);
-  }
-  if (!import_node_fs.default.existsSync(configPath) && !process.env.CS_WORKSPACE_CRN) {
-    throw new Error(
-      "You have not defined a workspace CRN in your config file, or the CS_WORKSPACE_CRN environment variable."
-    );
-  }
-  if (process.env.CS_WORKSPACE_CRN) {
-    return extractWorkspaceIdFromCrn(process.env.CS_WORKSPACE_CRN);
-  }
-  if (!import_node_fs.default.existsSync(configPath)) {
-    throw new Error(
-      "You have not defined a workspace CRN in your config file, or the CS_WORKSPACE_CRN environment variable."
-    );
-  }
-  const tomlString = import_node_fs.default.readFileSync(configPath, "utf8");
-  const workspaceCrn = getWorkspaceCrn(tomlString);
-  if (!workspaceCrn) {
-    throw new Error(
-      "You have not defined a workspace CRN in your config file, or the CS_WORKSPACE_CRN environment variable."
-    );
-  }
-  return extractWorkspaceIdFromCrn(workspaceCrn);
-}
-
 // src/utils/logger/index.ts
 var import_evlog = require("evlog");
 var validLevels = ["debug", "info", "error"];
@@ -2409,11 +2357,6 @@ var noClientError = () => new Error(
 var EncryptionClient = class {
   client;
   encryptConfig;
-  workspaceId;
-  constructor(workspaceCrn) {
-    const workspaceId = loadWorkSpaceId(workspaceCrn);
-    this.workspaceId = workspaceId;
-  }
   /**
    * Initializes the EncryptionClient with the provided configuration.
    * @internal
@@ -2435,10 +2378,10 @@ var EncryptionClient = class {
         this.client = await (0, import_protect_ffi9.newClient)({
           encryptConfig: validated,
           clientOpts: {
-            workspaceCrn: config.workspaceCrn ?? process.env.CS_WORKSPACE_CRN,
-            accessKey: config.accessKey ?? process.env.CS_CLIENT_ACCESS_KEY,
-            clientId: config.clientId ?? process.env.CS_CLIENT_ID,
-            clientKey: config.clientKey ?? process.env.CS_CLIENT_KEY,
+            workspaceCrn: config.workspaceCrn,
+            accessKey: config.accessKey,
+            clientId: config.clientId,
+            clientKey: config.clientKey,
             keyset: toFfiKeysetIdentifier(config.keyset)
           }
         });
@@ -2823,12 +2766,6 @@ var EncryptionClient = class {
   bulkDecrypt(encryptedPayloads) {
     return new BulkDecryptOperation(this.client, encryptedPayloads);
   }
-  /** e.g., debugging or environment info */
-  clientInfo() {
-    return {
-      workspaceId: this.workspaceId
-    };
-  }
   /**
    * Get the encrypt config object.
    *
@@ -2850,7 +2787,7 @@ var Encryption = async (config) => {
       "[encryption]: Invalid UUID provided for keyset id. Must be a valid UUID."
     );
   }
-  const client = new EncryptionClient(clientConfig?.workspaceCrn);
+  const client = new EncryptionClient();
   const encryptConfig = buildEncryptConfig(...schemas);
   const result = await client.init({
     encryptConfig,
@@ -2862,6 +2799,17 @@ var Encryption = async (config) => {
   return result.data;
 };
 
+// src/utils/config/index.ts
+var import_node_fs = __toESM(require("fs"), 1);
+var import_node_path = __toESM(require("path"), 1);
+function extractWorkspaceIdFromCrn(crn) {
+  const match = crn.match(/crn:[^:]+:([^:]+)$/);
+  if (!match) {
+    throw new Error("Invalid CRN format");
+  }
+  return match[1];
+}
+
 // src/secrets/index.ts
 var Secrets = class {
   encryptionClient = null;