@cipherstash/stack 1.0.0-rc.0 → 1.0.0-rc.2

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@cipherstash/stack",
-  "version": "1.0.0-rc.0",
+  "version": "1.0.0-rc.2",
   "description": "CipherStash Stack for TypeScript and JavaScript",
   "keywords": [
     "encrypted",
@@ -192,24 +192,24 @@
   },
   "devDependencies": {
     "@cipherstash/eql": "3.0.0",
-    "@clack/prompts": "^1.4.0",
-    "@clerk/backend": "3.4.9",
-    "@supabase/postgrest-js": "2.105.4",
-    "@supabase/supabase-js": "^2.110.0",
+    "@clack/prompts": "^1.7.0",
+    "@clerk/backend": "3.11.2",
+    "@supabase/postgrest-js": "2.110.1",
+    "@supabase/supabase-js": "^2.110.1",
     "@types/pg": "^8.20.0",
     "@types/uuid": "^11.0.0",
     "dotenv": "17.4.2",
     "drizzle-orm": "^0.45.2",
     "execa": "^9.5.2",
-    "fast-check": "^4.8.0",
+    "fast-check": "^4.9.0",
     "fta-cli": "3.0.0",
     "json-schema-to-typescript": "^15.0.2",
-    "pg": "8.20.0",
+    "pg": "8.22.0",
     "postgres": "^3.4.8",
     "tsup": "8.5.1",
-    "tsx": "4.22.1",
+    "tsx": "4.23.0",
     "typescript": "5.9.3",
-    "vitest": "3.2.6"
+    "vitest": "3.2.7"
   },
   "publishConfig": {
     "access": "public"
@@ -219,17 +219,17 @@
     "@cipherstash/auth": "0.41.0",
     "@cipherstash/protect-ffi": "0.29.0",
     "evlog": "1.11.0",
-    "uuid": "14.0.0",
+    "uuid": "14.0.1",
     "zod": "3.25.76"
   },
   "//optionalDependencies": "@cipherstash/auth ships per-platform native bindings as optional peerDependencies. pnpm does not auto-install platform-matched optional peer deps, so we declare them here as optionalDependencies — pnpm then picks the binary matching the host's os/cpu (from each sub-package's own package.json) and ignores the rest. Required because @cipherstash/stack re-exports the Node auth strategies (OidcFederationStrategy, AccessKeyStrategy, …). All seven names share a single catalog entry to keep them in lockstep.",
   "optionalDependencies": {
-    "@cipherstash/auth-darwin-arm64": "0.41.0",
-    "@cipherstash/auth-darwin-x64": "0.41.0",
-    "@cipherstash/auth-linux-arm64-gnu": "0.41.0",
-    "@cipherstash/auth-linux-x64-gnu": "0.41.0",
-    "@cipherstash/auth-linux-x64-musl": "0.41.0",
-    "@cipherstash/auth-win32-x64-msvc": "0.41.0"
+    "@cipherstash/auth-darwin-arm64": "0.42.0",
+    "@cipherstash/auth-darwin-x64": "0.42.0",
+    "@cipherstash/auth-linux-arm64-gnu": "0.42.0",
+    "@cipherstash/auth-linux-x64-gnu": "0.42.0",
+    "@cipherstash/auth-linux-x64-musl": "0.42.0",
+    "@cipherstash/auth-win32-x64-msvc": "0.42.0"
   },
   "engines": {
     "node": ">=22"

package/dist/chunk-LBMC4D6D.js.map

@@ -1 +0,0 @@
-{"version":3,"sources":["../src/errors/index.ts"],"sourcesContent":["import type { ProtectErrorCode } from '@cipherstash/protect-ffi'\n\nexport const EncryptionErrorTypes = {\n  ClientInitError: 'ClientInitError',\n  EncryptionError: 'EncryptionError',\n  DecryptionError: 'DecryptionError',\n  LockContextError: 'LockContextError',\n  CtsTokenError: 'CtsTokenError',\n}\n\n/**\n * Base error interface returned by all encryption operations.\n *\n * Every operation that can fail returns `Result<T, EncryptionError>`.\n * Use the `type` field to narrow to a specific error kind, or use\n * {@link StackError} for an exhaustive discriminated union.\n *\n * @example\n * ```typescript\n * const result = await client.encrypt(value, opts)\n * if (result.failure) {\n *   switch (result.failure.type) {\n *     case EncryptionErrorTypes.EncryptionError:\n *       console.error('Encryption failed:', result.failure.message)\n *       break\n *     case EncryptionErrorTypes.LockContextError:\n *       console.error('Lock context issue:', result.failure.message)\n *       break\n *   }\n * }\n * ```\n */\nexport interface EncryptionError {\n  type: (typeof EncryptionErrorTypes)[keyof typeof EncryptionErrorTypes]\n  message: string\n  code?: ProtectErrorCode\n}\n\n// ---------------------------------------------------------------------------\n// Specific error types (discriminated union members)\n// ---------------------------------------------------------------------------\n\nexport interface ClientInitError {\n  type: typeof EncryptionErrorTypes.ClientInitError\n  message: string\n}\n\nexport interface EncryptionOperationError {\n  type: typeof EncryptionErrorTypes.EncryptionError\n  message: string\n  code?: ProtectErrorCode\n}\n\nexport interface DecryptionOperationError {\n  type: typeof EncryptionErrorTypes.DecryptionError\n  message: string\n  code?: ProtectErrorCode\n}\n\nexport interface LockContextError {\n  type: typeof EncryptionErrorTypes.LockContextError\n  message: string\n}\n\nexport interface CtsTokenError {\n  type: typeof EncryptionErrorTypes.CtsTokenError\n  message: string\n}\n\n/**\n * Discriminated union of all specific error types.\n *\n * Use `StackError` when you need exhaustive error handling via `switch` on the `type` field.\n *\n * @example\n * ```typescript\n * function handleError(error: StackError) {\n *   switch (error.type) {\n *     case 'ClientInitError':\n *       // re-initialize client\n *       break\n *     case 'EncryptionError':\n *     case 'DecryptionError':\n *       // log and retry\n *       break\n *     case 'LockContextError':\n *       // re-authenticate\n *       break\n *     case 'CtsTokenError':\n *       // refresh token\n *       break\n *     default:\n *       error satisfies never\n *   }\n * }\n * ```\n */\nexport type StackError =\n  | ClientInitError\n  | EncryptionOperationError\n  | DecryptionOperationError\n  | LockContextError\n  | CtsTokenError\n\n// ---------------------------------------------------------------------------\n// Error utilities\n// ---------------------------------------------------------------------------\n\n/**\n * Safely extract an error message from an unknown thrown value.\n * Unlike `(error as Error).message`, this handles non-Error values gracefully.\n */\nexport function getErrorMessage(error: unknown): string {\n  if (error instanceof Error) return error.message\n  if (typeof error === 'string') return error\n  return String(error)\n}\n"],"mappings":";AAEO,IAAM,uBAAuB;AAAA,EAClC,iBAAiB;AAAA,EACjB,iBAAiB;AAAA,EACjB,iBAAiB;AAAA,EACjB,kBAAkB;AAAA,EAClB,eAAe;AACjB;AAwGO,SAAS,gBAAgB,OAAwB;AACtD,MAAI,iBAAiB,MAAO,QAAO,MAAM;AACzC,MAAI,OAAO,UAAU,SAAU,QAAO;AACtC,SAAO,OAAO,KAAK;AACrB;","names":[]}