@northstartech/cipher 0.0.0-stage → 1.0.0

package/dist/search.js

@@ -0,0 +1,258 @@
+/**
+ * Northstar Search: encrypted full-text search that runs inside the attested
+ * enclave. Index files are encrypted at rest under a key only the enclave can
+ * unwrap; documents and queries travel sealed to the enclave session.
+ *
+ * ```ts
+ * const customers = cipher.index('customers')
+ * await customers.ensure({ language: 'spanish', fields: { name: 'text', email: 'keyword', city: 'keyword', balance: 'number' } })
+ * await customers.upsert({ 42: { name: 'Ana García', city: 'CDMX', balance: 1500 } })
+ * const r = await customers.search({ q: 'ana garsia', filter: { city: 'cdmx' } })
+ * // r.hits = [{ id: '42', score: 3.1 }], r.total = 1
+ * ```
+ *
+ * Values may be ciphertexts: a string starting with `nsc:v1:` is decrypted in
+ * the enclave with context (index or `collection`, field, id), or pass
+ * `SearchIndex.ciphertext(ct, context)` to give the context explicitly.
+ */
+import { wireContext } from './client.js';
+import { CipherError } from './errors.js';
+const UPSERT_CHUNK = 1000;
+const DELETE_CHUNK = 5000;
+const seconds = (s) => new Date(s * 1000);
+function version(v) {
+    return { version: v.version, state: v.state, documents: v.documents, diskBytes: v.disk_bytes, createdAt: seconds(v.created_at), schema: v.schema };
+}
+/** @internal */
+export function indexInfo(r) {
+    if (!r || typeof r !== 'object' || !r.active)
+        throw new CipherError('PROTOCOL_ERROR', 'malformed search index description');
+    return {
+        index: r.index,
+        keyId: r.key_id,
+        createdAt: seconds(r.created_at),
+        updatedAt: seconds(r.updated_at),
+        active: version(r.active),
+        ...(r.building ? { building: version(r.building) } : {}),
+        ...(r.outcome ? { outcome: r.outcome } : {}),
+    };
+}
+function writeResult(r) {
+    return {
+        upserted: r.upserted ?? 0,
+        deleted: r.deleted ?? 0,
+        decrypted: r.decrypted ?? 0,
+        errors: (r.errors ?? []).map((e) => ({ id: e.id, error: new CipherError(e.error.code, e.error.message) })),
+        committed: r.committed === true,
+    };
+}
+function emptyWrite() {
+    return { upserted: 0, deleted: 0, decrypted: 0, errors: [], committed: false };
+}
+function isPlainObject(v) {
+    if (!v || typeof v !== 'object' || Array.isArray(v))
+        return false;
+    const p = Object.getPrototypeOf(v);
+    return p === Object.prototype || p === null;
+}
+function wireValue(v) {
+    if (v instanceof Date)
+        return v.toISOString();
+    if (Array.isArray(v))
+        return v.map(wireValue);
+    return v;
+}
+/** Fields as sent: `undefined` dropped, dates as RFC 3339 (an empty map stays `{}`). */
+function wireFields(fields, label) {
+    if (fields === undefined || fields === null)
+        return {};
+    if (!isPlainObject(fields))
+        throw new CipherError('INVALID_REQUEST', `${label}: fields must be an object`);
+    const out = {};
+    for (const [k, v] of Object.entries(fields))
+        if (v !== undefined)
+            out[k] = wireValue(v);
+    return out;
+}
+function docId(id, label) {
+    if (typeof id === 'string' && id)
+        return id;
+    if (typeof id === 'number' && Number.isSafeInteger(id))
+        return String(id);
+    if (typeof id === 'bigint')
+        return id.toString();
+    throw new CipherError('INVALID_REQUEST', `${label}: id must be a non-empty string or an integer`);
+}
+/** `[{ id, fields }]` or `{ [id]: fields }` → wire documents. */
+function wireDocuments(input) {
+    if (Array.isArray(input)) {
+        return input.map((d, i) => {
+            if (!d || typeof d !== 'object')
+                throw new CipherError('INVALID_REQUEST', `document ${i}: expected { id, fields }`);
+            const id = docId(d.id, `document ${i}`);
+            return { id, fields: wireFields(d.fields, `document ${id}`) };
+        });
+    }
+    if (isPlainObject(input))
+        return Object.entries(input).map(([id, fields]) => ({ id: docId(id, 'document'), fields: wireFields(fields, `document ${id}`) }));
+    throw new CipherError('INVALID_REQUEST', 'documents must be [{ id, fields }] or { [id]: fields }');
+}
+/**
+ * A Northstar Search index. Get one with `cipher.index(name)`; the handle is
+ * cheap and does no I/O until a method is called.
+ */
+export class SearchIndex {
+    name;
+    #t;
+    /** @internal Use `cipher.index(name)`. */
+    constructor(transport, name) {
+        if (typeof name !== 'string' || !name)
+            throw new CipherError('CONFIGURATION_ERROR', 'a search index needs a name');
+        this.#t = transport;
+        this.name = name;
+    }
+    /**
+     * A field value the enclave decrypts before indexing, with an explicit context
+     * (normalized like `encrypt`'s: `recordId` → `record_id`, values as strings).
+     */
+    static ciphertext(ciphertext, context) {
+        if (typeof ciphertext !== 'string' || !ciphertext.startsWith('nsc:v1:'))
+            throw new CipherError('INVALID_CIPHERTEXT', 'search ciphertext values must be nsc:v1: ciphertext');
+        return { ciphertext, context: wireContext(context) };
+    }
+    /** Normalize a schema: the map shorthand `{ fields: { name: 'text' } }` becomes the wire list form. */
+    static schema(input) {
+        if (!input || typeof input !== 'object')
+            throw new CipherError('INVALID_REQUEST', 'schema must be { language?, fields }');
+        const f = input.fields;
+        let fields;
+        if (Array.isArray(f))
+            fields = f.map((x) => ({ ...x }));
+        else if (isPlainObject(f)) {
+            fields = Object.entries(f).map(([name, spec]) => (typeof spec === 'string' ? { name, type: spec } : { ...spec, name }));
+        }
+        else
+            throw new CipherError('INVALID_REQUEST', 'schema.fields must be a list of { name, type } or a map of name → type');
+        return { ...(input.language ? { language: input.language } : {}), fields };
+    }
+    /**
+     * Create the index, or confirm it exists with this schema (`outcome`:
+     * `created` | `unchanged`). A different schema fails with `CONFLICT` unless
+     * `rebuild` is set: then a fresh version is built next to the live one
+     * (writes reach both, queries keep using the live one until {@link activate}).
+     * `key`: key alias or id protecting the index (default: the client's key).
+     */
+    async ensure(schema, opts = {}) {
+        return indexInfo(await this.#t.call('/v1/search/indexes', {
+            index: this.name,
+            schema: SearchIndex.schema(schema),
+            key: opts.key ?? this.#t.keyId,
+            rebuild: opts.rebuild === true,
+        }));
+    }
+    async describe() {
+        return indexInfo(await this.#t.call('/v1/search/indexes/describe', { index: this.name }));
+    }
+    /** Make the version being built (or `version`) live; the previous one is deleted. */
+    async activate(version) {
+        return indexInfo(await this.#t.call('/v1/search/indexes/activate', { index: this.name, ...(version !== undefined ? { version } : {}) }));
+    }
+    /** Delete the index and its files. `false` when there was none. */
+    async drop() {
+        try {
+            const r = await this.#t.call('/v1/search/indexes/drop', { index: this.name });
+            return r?.dropped === true;
+        }
+        catch (e) {
+            if (e instanceof CipherError && e.code === 'NOT_FOUND')
+                return false;
+            throw e;
+        }
+    }
+    /**
+     * Add or replace documents: `[{ id, fields }]` or `{ [id]: fields }`. Sent in
+     * chunks of 1 000; `wait` applies to the last chunk (so to all of them).
+     * Rejected documents are listed in `errors`; the others are indexed.
+     */
+    async upsert(documents, opts = {}) {
+        const docs = wireDocuments(documents);
+        const total = emptyWrite();
+        for (let i = 0; i < docs.length; i += UPSERT_CHUNK) {
+            const r = await this.send({
+                upsert: docs.slice(i, i + UPSERT_CHUNK),
+                ...(opts.mode ? { mode: opts.mode } : {}),
+                ...(opts.collection ? { collection: opts.collection } : {}),
+                ...(opts.wait && i + UPSERT_CHUNK >= docs.length ? { wait: true } : {}),
+            });
+            total.upserted += r.upserted;
+            total.decrypted += r.decrypted;
+            total.errors.push(...r.errors);
+            total.committed = r.committed;
+        }
+        return total;
+    }
+    /** Remove documents by id (absent ids are ignored). */
+    async delete(ids, opts = {}) {
+        const list = ids.map((id) => docId(id, 'delete'));
+        const total = emptyWrite();
+        for (let i = 0; i < list.length; i += DELETE_CHUNK) {
+            const r = await this.send({ delete: list.slice(i, i + DELETE_CHUNK), ...(opts.wait && i + DELETE_CHUNK >= list.length ? { wait: true } : {}) });
+            total.deleted += r.deleted;
+            total.committed = r.committed;
+        }
+        return total;
+    }
+    /** Wait until everything written so far is searchable; `optimize` also merges segments (after bulk loads). */
+    async flush(opts = {}) {
+        return this.write({ wait: true, ...(opts.optimize ? { optimize: true } : {}) });
+    }
+    /** Raw write (≤ 5 000 documents and deletions): `upsert`, `delete`, `mode`, `collection`, `wait`, `optimize`. */
+    async write(request) {
+        const body = {};
+        if (request.upsert?.length)
+            body.upsert = wireDocuments(request.upsert);
+        if (request.delete?.length)
+            body.delete = request.delete.map((id) => docId(id, 'delete'));
+        if (request.mode)
+            body.mode = request.mode;
+        if (request.collection)
+            body.collection = request.collection;
+        if (request.wait)
+            body.wait = true;
+        if (request.optimize)
+            body.optimize = true;
+        return this.send(body);
+    }
+    async send(body) {
+        return writeResult(await this.#t.call('/v1/search/documents', { index: this.name, ...body }));
+    }
+    /** Search. Without `q`, every document matches (filters, facets and sorting still apply). */
+    async search(query = {}) {
+        const { purpose, facetLimit, filter, ...rest } = query;
+        const body = { index: this.name };
+        if (purpose)
+            body.purpose = purpose;
+        for (const [k, v] of Object.entries(rest))
+            if (v !== undefined && v !== null)
+                body[k] = wireValue(v);
+        if (facetLimit !== undefined && facetLimit !== null)
+            body.facet_limit = facetLimit;
+        if (filter && Object.keys(filter).length)
+            body.filter = filter;
+        const r = await this.#t.call('/v1/search/query', body);
+        if (!r || !Array.isArray(r.hits))
+            throw new CipherError('PROTOCOL_ERROR', 'malformed search response');
+        return {
+            hits: r.hits.map((h) => ({
+                id: h.id,
+                ...(typeof h.score === 'number' ? { score: h.score } : {}),
+                ...(h.fields ? { fields: h.fields } : {}),
+                ...(h.highlights && Object.keys(h.highlights).length ? { highlights: h.highlights } : {}),
+            })),
+            total: r.total,
+            facets: r.facets ?? {},
+            tookMs: r.took_ms,
+        };
+    }
+}
+//# sourceMappingURL=search.js.map

package/dist/search.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"search.js","sourceRoot":"","sources":["../src/search.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;GAgBG;AACH,OAAO,EAAsB,WAAW,EAAE,MAAM,aAAa,CAAA;AAC7D,OAAO,EAAE,WAAW,EAAE,MAAM,aAAa,CAAA;AAiKzC,MAAM,YAAY,GAAG,IAAI,CAAA;AACzB,MAAM,YAAY,GAAG,IAAI,CAAA;AAiCzB,MAAM,OAAO,GAAG,CAAC,CAAS,EAAE,EAAE,CAAC,IAAI,IAAI,CAAC,CAAC,GAAG,IAAI,CAAC,CAAA;AAEjD,SAAS,OAAO,CAAC,CAAc;IAC7B,OAAO,EAAE,OAAO,EAAE,CAAC,CAAC,OAAO,EAAE,KAAK,EAAE,CAAC,CAAC,KAAK,EAAE,SAAS,EAAE,CAAC,CAAC,SAAS,EAAE,SAAS,EAAE,CAAC,CAAC,UAAU,EAAE,SAAS,EAAE,OAAO,CAAC,CAAC,CAAC,UAAU,CAAC,EAAE,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE,CAAA;AACpJ,CAAC;AAED,gBAAgB;AAChB,MAAM,UAAU,SAAS,CAAC,CAAW;IACnC,IAAI,CAAC,CAAC,IAAI,OAAO,CAAC,KAAK,QAAQ,IAAI,CAAC,CAAC,CAAC,MAAM;QAAE,MAAM,IAAI,WAAW,CAAC,gBAAgB,EAAE,oCAAoC,CAAC,CAAA;IAC3H,OAAO;QACL,KAAK,EAAE,CAAC,CAAC,KAAK;QACd,KAAK,EAAE,CAAC,CAAC,MAAM;QACf,SAAS,EAAE,OAAO,CAAC,CAAC,CAAC,UAAU,CAAC;QAChC,SAAS,EAAE,OAAO,CAAC,CAAC,CAAC,UAAU,CAAC;QAChC,MAAM,EAAE,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC;QACzB,GAAG,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,EAAE,QAAQ,EAAE,OAAO,CAAC,CAAC,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QACxD,GAAG,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;KAC7C,CAAA;AACH,CAAC;AAED,SAAS,WAAW,CAAC,CAAY;IAC/B,OAAO;QACL,QAAQ,EAAE,CAAC,CAAC,QAAQ,IAAI,CAAC;QACzB,OAAO,EAAE,CAAC,CAAC,OAAO,IAAI,CAAC;QACvB,SAAS,EAAE,CAAC,CAAC,SAAS,IAAI,CAAC;QAC3B,MAAM,EAAE,CAAC,CAAC,CAAC,MAAM,IAAI,EAAE,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,EAAE,EAAE,EAAE,CAAC,CAAC,EAAE,EAAE,KAAK,EAAE,IAAI,WAAW,CAAC,CAAC,CAAC,KAAK,CAAC,IAAI,EAAE,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC;QAC1G,SAAS,EAAE,CAAC,CAAC,SAAS,KAAK,IAAI;KAChC,CAAA;AACH,CAAC;AAED,SAAS,UAAU;IACjB,OAAO,EAAE,QAAQ,EAAE,CAAC,EAAE,OAAO,EAAE,CAAC,EAAE,SAAS,EAAE,CAAC,EAAE,MAAM,EAAE,EAAE,EAAE,SAAS,EAAE,KAAK,EAAE,CAAA;AAChF,CAAC;AAED,SAAS,aAAa,CAAC,CAAU;IAC/B,IAAI,CAAC,CAAC,IAAI,OAAO,CAAC,KAAK,QAAQ,IAAI,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC;QAAE,OAAO,KAAK,CAAA;IACjE,MAAM,CAAC,GAAG,MAAM,CAAC,cAAc,CAAC,CAAC,CAAC,CAAA;IAClC,OAAO,CAAC,KAAK,MAAM,CAAC,SAAS,IAAI,CAAC,KAAK,IAAI,CAAA;AAC7C,CAAC;AAED,SAAS,SAAS,CAAC,CAAU;IAC3B,IAAI,CAAC,YAAY,IAAI;QAAE,OAAO,CAAC,CAAC,WAAW,EAAE,CAAA;IAC7C,IAAI,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC;QAAE,OAAO,CAAC,CAAC,GAAG,CAAC,SAAS,CAAC,CAAA;IAC7C,OAAO,CAAC,CAAA;AACV,CAAC;AAED,wFAAwF;AACxF,SAAS,UAAU,CAAC,MAAe,EAAE,KAAa;IAChD,IAAI,MAAM,KAAK,SAAS,IAAI,MAAM,KAAK,IAAI;QAAE,OAAO,EAAE,CAAA;IACtD,IAAI,CAAC,aAAa,CAAC,MAAM,CAAC;QAAE,MAAM,IAAI,WAAW,CAAC,iBAAiB,EAAE,GAAG,KAAK,4BAA4B,CAAC,CAAA;IAC1G,MAAM,GAAG,GAA4B,EAAE,CAAA;IACvC,KAAK,MAAM,CAAC,CAAC,EAAE,CAAC,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,MAAM,CAAC;QAAE,IAAI,CAAC,KAAK,SAAS;YAAE,GAAG,CAAC,CAAC,CAAC,GAAG,SAAS,CAAC,CAAC,CAAC,CAAA;IACvF,OAAO,GAAG,CAAA;AACZ,CAAC;AAED,SAAS,KAAK,CAAC,EAAW,EAAE,KAAa;IACvC,IAAI,OAAO,EAAE,KAAK,QAAQ,IAAI,EAAE;QAAE,OAAO,EAAE,CAAA;IAC3C,IAAI,OAAO,EAAE,KAAK,QAAQ,IAAI,MAAM,CAAC,aAAa,CAAC,EAAE,CAAC;QAAE,OAAO,MAAM,CAAC,EAAE,CAAC,CAAA;IACzE,IAAI,OAAO,EAAE,KAAK,QAAQ;QAAE,OAAO,EAAE,CAAC,QAAQ,EAAE,CAAA;IAChD,MAAM,IAAI,WAAW,CAAC,iBAAiB,EAAE,GAAG,KAAK,+CAA+C,CAAC,CAAA;AACnG,CAAC;AAED,iEAAiE;AACjE,SAAS,aAAa,CAAC,KAAsD;IAC3E,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC;QACzB,OAAO,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE;YACxB,IAAI,CAAC,CAAC,IAAI,OAAO,CAAC,KAAK,QAAQ;gBAAE,MAAM,IAAI,WAAW,CAAC,iBAAiB,EAAE,YAAY,CAAC,2BAA2B,CAAC,CAAA;YACnH,MAAM,EAAE,GAAG,KAAK,CAAC,CAAC,CAAC,EAAE,EAAE,YAAY,CAAC,EAAE,CAAC,CAAA;YACvC,OAAO,EAAE,EAAE,EAAE,MAAM,EAAE,UAAU,CAAC,CAAC,CAAC,MAAM,EAAE,YAAY,EAAE,EAAE,CAAC,EAAE,CAAA;QAC/D,CAAC,CAAC,CAAA;IACJ,CAAC;IACD,IAAI,aAAa,CAAC,KAAK,CAAC;QAAE,OAAO,MAAM,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,MAAM,CAAC,EAAE,EAAE,CAAC,CAAC,EAAE,EAAE,EAAE,KAAK,CAAC,EAAE,EAAE,UAAU,CAAC,EAAE,MAAM,EAAE,UAAU,CAAC,MAAM,EAAE,YAAY,EAAE,EAAE,CAAC,EAAE,CAAC,CAAC,CAAA;IAC3J,MAAM,IAAI,WAAW,CAAC,iBAAiB,EAAE,wDAAwD,CAAC,CAAA;AACpG,CAAC;AAED;;;GAGG;AACH,MAAM,OAAO,WAAW;IACb,IAAI,CAAQ;IACZ,EAAE,CAAiB;IAE5B,0CAA0C;IAC1C,YAAY,SAA0B,EAAE,IAAY;QAClD,IAAI,OAAO,IAAI,KAAK,QAAQ,IAAI,CAAC,IAAI;YAAE,MAAM,IAAI,WAAW,CAAC,qBAAqB,EAAE,6BAA6B,CAAC,CAAA;QAClH,IAAI,CAAC,EAAE,GAAG,SAAS,CAAA;QACnB,IAAI,CAAC,IAAI,GAAG,IAAI,CAAA;IAClB,CAAC;IAED;;;OAGG;IACH,MAAM,CAAC,UAAU,CAAC,UAAkB,EAAE,OAAsB;QAC1D,IAAI,OAAO,UAAU,KAAK,QAAQ,IAAI,CAAC,UAAU,CAAC,UAAU,CAAC,SAAS,CAAC;YAAE,MAAM,IAAI,WAAW,CAAC,oBAAoB,EAAE,qDAAqD,CAAC,CAAA;QAC3K,OAAO,EAAE,UAAU,EAAE,OAAO,EAAE,WAAW,CAAC,OAAO,CAAC,EAAE,CAAA;IACtD,CAAC;IAED,uGAAuG;IACvG,MAAM,CAAC,MAAM,CAAC,KAAwB;QACpC,IAAI,CAAC,KAAK,IAAI,OAAO,KAAK,KAAK,QAAQ;YAAE,MAAM,IAAI,WAAW,CAAC,iBAAiB,EAAE,sCAAsC,CAAC,CAAA;QACzH,MAAM,CAAC,GAAG,KAAK,CAAC,MAAiB,CAAA;QACjC,IAAI,MAAqB,CAAA;QACzB,IAAI,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC;YAAE,MAAM,GAAG,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,EAAE,GAAI,CAAiB,EAAE,CAAC,CAAC,CAAA;aACnE,IAAI,aAAa,CAAC,CAAC,CAAC,EAAE,CAAC;YAC1B,MAAM,GAAG,MAAM,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,EAAE,IAAI,CAAC,EAAE,EAAE,CAAC,CAAC,OAAO,IAAI,KAAK,QAAQ,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,IAAI,EAAE,IAAuB,EAAE,CAAC,CAAC,CAAC,EAAE,GAAI,IAAkC,EAAE,IAAI,EAAE,CAAC,CAAC,CAAA;QAC3K,CAAC;;YAAM,MAAM,IAAI,WAAW,CAAC,iBAAiB,EAAE,wEAAwE,CAAC,CAAA;QACzH,OAAO,EAAE,GAAG,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC,CAAC,EAAE,QAAQ,EAAE,KAAK,CAAC,QAAQ,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,MAAM,EAAE,CAAA;IAC5E,CAAC;IAED;;;;;;OAMG;IACH,KAAK,CAAC,MAAM,CAAC,MAAyB,EAAE,OAA4C,EAAE;QACpF,OAAO,SAAS,CACd,MAAM,IAAI,CAAC,EAAE,CAAC,IAAI,CAAW,oBAAoB,EAAE;YACjD,KAAK,EAAE,IAAI,CAAC,IAAI;YAChB,MAAM,EAAE,WAAW,CAAC,MAAM,CAAC,MAAM,CAAC;YAClC,GAAG,EAAE,IAAI,CAAC,GAAG,IAAI,IAAI,CAAC,EAAE,CAAC,KAAK;YAC9B,OAAO,EAAE,IAAI,CAAC,OAAO,KAAK,IAAI;SAC/B,CAAC,CACH,CAAA;IACH,CAAC;IAED,KAAK,CAAC,QAAQ;QACZ,OAAO,SAAS,CAAC,MAAM,IAAI,CAAC,EAAE,CAAC,IAAI,CAAW,6BAA6B,EAAE,EAAE,KAAK,EAAE,IAAI,CAAC,IAAI,EAAE,CAAC,CAAC,CAAA;IACrG,CAAC;IAED,qFAAqF;IACrF,KAAK,CAAC,QAAQ,CAAC,OAAgB;QAC7B,OAAO,SAAS,CAAC,MAAM,IAAI,CAAC,EAAE,CAAC,IAAI,CAAW,6BAA6B,EAAE,EAAE,KAAK,EAAE,IAAI,CAAC,IAAI,EAAE,GAAG,CAAC,OAAO,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,CAAC,CAAC,CAAA;IACpJ,CAAC;IAED,mEAAmE;IACnE,KAAK,CAAC,IAAI;QACR,IAAI,CAAC;YACH,MAAM,CAAC,GAAG,MAAM,IAAI,CAAC,EAAE,CAAC,IAAI,CAAwB,yBAAyB,EAAE,EAAE,KAAK,EAAE,IAAI,CAAC,IAAI,EAAE,CAAC,CAAA;YACpG,OAAO,CAAC,EAAE,OAAO,KAAK,IAAI,CAAA;QAC5B,CAAC;QAAC,OAAO,CAAC,EAAE,CAAC;YACX,IAAI,CAAC,YAAY,WAAW,IAAI,CAAC,CAAC,IAAI,KAAK,WAAW;gBAAE,OAAO,KAAK,CAAA;YACpE,MAAM,CAAC,CAAA;QACT,CAAC;IACH,CAAC;IAED;;;;OAIG;IACH,KAAK,CAAC,MAAM,CACV,SAA0D,EAC1D,OAAwE,EAAE;QAE1E,MAAM,IAAI,GAAG,aAAa,CAAC,SAAS,CAAC,CAAA;QACrC,MAAM,KAAK,GAAG,UAAU,EAAE,CAAA;QAC1B,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,IAAI,CAAC,MAAM,EAAE,CAAC,IAAI,YAAY,EAAE,CAAC;YACnD,MAAM,CAAC,GAAG,MAAM,IAAI,CAAC,IAAI,CAAC;gBACxB,MAAM,EAAE,IAAI,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,GAAG,YAAY,CAAC;gBACvC,GAAG,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,IAAI,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;gBACzC,GAAG,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC,CAAC,EAAE,UAAU,EAAE,IAAI,CAAC,UAAU,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;gBAC3D,GAAG,CAAC,IAAI,CAAC,IAAI,IAAI,CAAC,GAAG,YAAY,IAAI,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;aACxE,CAAC,CAAA;YACF,KAAK,CAAC,QAAQ,IAAI,CAAC,CAAC,QAAQ,CAAA;YAC5B,KAAK,CAAC,SAAS,IAAI,CAAC,CAAC,SAAS,CAAA;YAC9B,KAAK,CAAC,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,MAAM,CAAC,CAAA;YAC9B,KAAK,CAAC,SAAS,GAAG,CAAC,CAAC,SAAS,CAAA;QAC/B,CAAC;QACD,OAAO,KAAK,CAAA;IACd,CAAC;IAED,uDAAuD;IACvD,KAAK,CAAC,MAAM,CAAC,GAAwB,EAAE,OAA2B,EAAE;QAClE,MAAM,IAAI,GAAG,GAAG,CAAC,GAAG,CAAC,CAAC,EAAE,EAAE,EAAE,CAAC,KAAK,CAAC,EAAE,EAAE,QAAQ,CAAC,CAAC,CAAA;QACjD,MAAM,KAAK,GAAG,UAAU,EAAE,CAAA;QAC1B,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,IAAI,CAAC,MAAM,EAAE,CAAC,IAAI,YAAY,EAAE,CAAC;YACnD,MAAM,CAAC,GAAG,MAAM,IAAI,CAAC,IAAI,CAAC,EAAE,MAAM,EAAE,IAAI,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,GAAG,YAAY,CAAC,EAAE,GAAG,CAAC,IAAI,CAAC,IAAI,IAAI,CAAC,GAAG,YAAY,IAAI,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,CAAC,CAAA;YAC/I,KAAK,CAAC,OAAO,IAAI,CAAC,CAAC,OAAO,CAAA;YAC1B,KAAK,CAAC,SAAS,GAAG,CAAC,CAAC,SAAS,CAAA;QAC/B,CAAC;QACD,OAAO,KAAK,CAAA;IACd,CAAC;IAED,8GAA8G;IAC9G,KAAK,CAAC,KAAK,CAAC,OAA+B,EAAE;QAC3C,OAAO,IAAI,CAAC,KAAK,CAAC,EAAE,IAAI,EAAE,IAAI,EAAE,GAAG,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC,CAAC,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,CAAC,CAAA;IACjF,CAAC;IAED,iHAAiH;IACjH,KAAK,CAAC,KAAK,CAAC,OAA2B;QACrC,MAAM,IAAI,GAA4B,EAAE,CAAA;QACxC,IAAI,OAAO,CAAC,MAAM,EAAE,MAAM;YAAE,IAAI,CAAC,MAAM,GAAG,aAAa,CAAC,OAAO,CAAC,MAAM,CAAC,CAAA;QACvE,IAAI,OAAO,CAAC,MAAM,EAAE,MAAM;YAAE,IAAI,CAAC,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,EAAE,EAAE,EAAE,CAAC,KAAK,CAAC,EAAE,EAAE,QAAQ,CAAC,CAAC,CAAA;QACzF,IAAI,OAAO,CAAC,IAAI;YAAE,IAAI,CAAC,IAAI,GAAG,OAAO,CAAC,IAAI,CAAA;QAC1C,IAAI,OAAO,CAAC,UAAU;YAAE,IAAI,CAAC,UAAU,GAAG,OAAO,CAAC,UAAU,CAAA;QAC5D,IAAI,OAAO,CAAC,IAAI;YAAE,IAAI,CAAC,IAAI,GAAG,IAAI,CAAA;QAClC,IAAI,OAAO,CAAC,QAAQ;YAAE,IAAI,CAAC,QAAQ,GAAG,IAAI,CAAA;QAC1C,OAAO,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,CAAA;IACxB,CAAC;IAEO,KAAK,CAAC,IAAI,CAAC,IAA6B;QAC9C,OAAO,WAAW,CAAC,MAAM,IAAI,CAAC,EAAE,CAAC,IAAI,CAAY,sBAAsB,EAAE,EAAE,KAAK,EAAE,IAAI,CAAC,IAAI,EAAE,GAAG,IAAI,EAAE,CAAC,CAAC,CAAA;IAC1G,CAAC;IAED,6FAA6F;IAC7F,KAAK,CAAC,MAAM,CAAC,QAAqB,EAAE;QAClC,MAAM,EAAE,OAAO,EAAE,UAAU,EAAE,MAAM,EAAE,GAAG,IAAI,EAAE,GAAG,KAA8C,CAAA;QAC/F,MAAM,IAAI,GAA4B,EAAE,KAAK,EAAE,IAAI,CAAC,IAAI,EAAE,CAAA;QAC1D,IAAI,OAAO;YAAE,IAAI,CAAC,OAAO,GAAG,OAAO,CAAA;QACnC,KAAK,MAAM,CAAC,CAAC,EAAE,CAAC,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,IAAI,CAAC;YAAE,IAAI,CAAC,KAAK,SAAS,IAAI,CAAC,KAAK,IAAI;gBAAE,IAAI,CAAC,CAAC,CAAC,GAAG,SAAS,CAAC,CAAC,CAAC,CAAA;QACpG,IAAI,UAAU,KAAK,SAAS,IAAI,UAAU,KAAK,IAAI;YAAE,IAAI,CAAC,WAAW,GAAG,UAAU,CAAA;QAClF,IAAI,MAAM,IAAI,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,MAAM;YAAE,IAAI,CAAC,MAAM,GAAG,MAAM,CAAA;QAC9D,MAAM,CAAC,GAAG,MAAM,IAAI,CAAC,EAAE,CAAC,IAAI,CAAa,kBAAkB,EAAE,IAAI,CAAC,CAAA;QAClE,IAAI,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,IAAI,CAAC;YAAE,MAAM,IAAI,WAAW,CAAC,gBAAgB,EAAE,2BAA2B,CAAC,CAAA;QACtG,OAAO;YACL,IAAI,EAAE,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;gBACvB,EAAE,EAAE,CAAC,CAAC,EAAE;gBACR,GAAG,CAAC,OAAO,CAAC,CAAC,KAAK,KAAK,QAAQ,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,CAAC,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;gBAC1D,GAAG,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;gBACzC,GAAG,CAAC,CAAC,CAAC,UAAU,IAAI,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,UAAU,EAAE,CAAC,CAAC,UAAU,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;aAC1F,CAAC,CAAC;YACH,KAAK,EAAE,CAAC,CAAC,KAAK;YACd,MAAM,EAAE,CAAC,CAAC,MAAM,IAAI,EAAE;YACtB,MAAM,EAAE,CAAC,CAAC,OAAO;SAClB,CAAA;IACH,CAAC;CACF"}

package/package.json

@@ -1,6 +1,103 @@
 {
   "name": "@northstartech/cipher",
-  "version": "0.0.0-stage",
-  "stub": true,
-  "description": "Temporary package placeholder for staged publishing"
-}
+  "version": "1.0.0",
+  "description": "Northstar Cipher SDK: field-level encryption backed by attested enclaves, for Node.js and browsers.",
+  "license": "SEE LICENSE IN LICENSE",
+  "type": "module",
+  "main": "./dist/index.js",
+  "types": "./dist/index.d.ts",
+  "exports": {
+    ".": {
+      "types": "./dist/index.d.ts",
+      "import": "./dist/index.js"
+    },
+    "./prisma": {
+      "types": "./dist/integrations/prisma.d.ts",
+      "import": "./dist/integrations/prisma.js"
+    },
+    "./sequelize": {
+      "types": "./dist/integrations/sequelize.d.ts",
+      "import": "./dist/integrations/sequelize.js"
+    },
+    "./mongoose": {
+      "types": "./dist/integrations/mongoose.d.ts",
+      "import": "./dist/integrations/mongoose.js"
+    },
+    "./drizzle": {
+      "types": "./dist/integrations/drizzle.d.ts",
+      "import": "./dist/integrations/drizzle.js"
+    },
+    "./typeorm": {
+      "types": "./dist/integrations/typeorm.d.ts",
+      "import": "./dist/integrations/typeorm.js"
+    }
+  },
+  "files": [
+    "dist",
+    "README.md",
+    "LICENSE"
+  ],
+  "engines": {
+    "node": ">=20"
+  },
+  "sideEffects": false,
+  "scripts": {
+    "build": "tsc -p tsconfig.build.json",
+    "test": "vitest run",
+    "prepare": "npm run build",
+    "prepublishOnly": "npm test && npm run build"
+  },
+  "dependencies": {
+    "@hpke/core": "1.9.0",
+    "@hpke/hybridkem-x-wing": "0.7.0"
+  },
+  "peerDependencies": {
+    "@prisma/client": "^7.0.0",
+    "drizzle-orm": ">=0.45.0 <1.0.0",
+    "mongoose": "^9.0.0",
+    "sequelize": "^6.37.0",
+    "typeorm": "^1.0.0"
+  },
+  "peerDependenciesMeta": {
+    "@prisma/client": {
+      "optional": true
+    },
+    "drizzle-orm": {
+      "optional": true
+    },
+    "mongoose": {
+      "optional": true
+    },
+    "sequelize": {
+      "optional": true
+    },
+    "typeorm": {
+      "optional": true
+    }
+  },
+  "devDependencies": {
+    "@prisma/adapter-pg": "7.10.0",
+    "@prisma/client": "7.10.0",
+    "@types/better-sqlite3": "7.6.13",
+    "@types/node": "22.20.5",
+    "@types/pg": "8.23.1",
+    "better-sqlite3": "12.11.1",
+    "drizzle-orm": "0.45.3",
+    "mongodb-memory-server": "11.3.0",
+    "mongoose": "9.10.2",
+    "pg": "8.23.0",
+    "pg-hstore": "2.3.4",
+    "prisma": "7.10.0",
+    "reflect-metadata": "0.2.2",
+    "sequelize": "6.37.8",
+    "sqlite3": "6.0.1",
+    "typeorm": "1.1.1",
+    "typescript": "5.9.3",
+    "vitest": "3.2.7"
+  },
+  "homepage": "https://bynorthstar.tech/cipher/",
+  "publishConfig": {
+    "access": "public",
+    "provenance": false
+  }
+}