@vollcrypt/db-guard 0.1.0 → 0.1.1

package/dist/index.d.ts

@@ -4,5 +4,5 @@ export { createDrizzleGuard } from './drizzle';
 export { createTypeOrmSubscriber } from './typeorm';
 export { KmsProvider, AwsKmsProvider, GcpKmsProvider, VaultKmsProvider, unwrapDekLocal, Pkcs11KmsProvider } from './kms';
 export { computeBlindIndex } from './blind-index';
-export { dbGuardContextStore, configureAuditLogger, decryptWithSecurity, checkRateLimit, checkPageSize, resetFailClosedStatusForTesting, resetAuditLoggerForTesting, getCachedKey, setCachedKey, resetSecureKeyCacheForTesting, configureBreakGlass, deactivateBreakGlass, isBreakGlassActive, getBreakGlassKey, activateBreakGlass, parseCiphertext, CRYPTO_ALGORITHMS, VERSION_ALGORITHMS } from './security';
+export { dbGuardContextStore, configureAuditLogger, decryptWithSecurity, checkRateLimit, checkPageSize, resetFailClosedStatusForTesting, resetAuditLoggerForTesting, getCachedKey, setCachedKey, resetSecureKeyCacheForTesting, configureBreakGlass, deactivateBreakGlass, isBreakGlassActive, getBreakGlassKey, activateBreakGlass, parseCiphertext, CRYPTO_ALGORITHMS, VERSION_ALGORITHMS, maskValue } from './security';
 export { auditConfiguration, generateComplianceHtmlReport, ComplianceAuditInput, ComplianceScorecard } from './compliance';

package/dist/index.js

@@ -1,6 +1,6 @@
 "use strict";
 Object.defineProperty(exports, "__esModule", { value: true });
-exports.generateComplianceHtmlReport = exports.auditConfiguration = exports.VERSION_ALGORITHMS = exports.CRYPTO_ALGORITHMS = exports.parseCiphertext = exports.activateBreakGlass = exports.getBreakGlassKey = exports.isBreakGlassActive = exports.deactivateBreakGlass = exports.configureBreakGlass = exports.resetSecureKeyCacheForTesting = exports.setCachedKey = exports.getCachedKey = exports.resetAuditLoggerForTesting = exports.resetFailClosedStatusForTesting = exports.checkPageSize = exports.checkRateLimit = exports.decryptWithSecurity = exports.configureAuditLogger = exports.dbGuardContextStore = exports.computeBlindIndex = exports.Pkcs11KmsProvider = exports.unwrapDekLocal = exports.VaultKmsProvider = exports.GcpKmsProvider = exports.AwsKmsProvider = exports.createTypeOrmSubscriber = exports.createDrizzleGuard = exports.mongooseDbGuard = exports.resolveKeys = exports.decryptValue = exports.encryptValue = exports.prismaDbGuard = void 0;
+exports.generateComplianceHtmlReport = exports.auditConfiguration = exports.maskValue = exports.VERSION_ALGORITHMS = exports.CRYPTO_ALGORITHMS = exports.parseCiphertext = exports.activateBreakGlass = exports.getBreakGlassKey = exports.isBreakGlassActive = exports.deactivateBreakGlass = exports.configureBreakGlass = exports.resetSecureKeyCacheForTesting = exports.setCachedKey = exports.getCachedKey = exports.resetAuditLoggerForTesting = exports.resetFailClosedStatusForTesting = exports.checkPageSize = exports.checkRateLimit = exports.decryptWithSecurity = exports.configureAuditLogger = exports.dbGuardContextStore = exports.computeBlindIndex = exports.Pkcs11KmsProvider = exports.unwrapDekLocal = exports.VaultKmsProvider = exports.GcpKmsProvider = exports.AwsKmsProvider = exports.createTypeOrmSubscriber = exports.createDrizzleGuard = exports.mongooseDbGuard = exports.resolveKeys = exports.decryptValue = exports.encryptValue = exports.prismaDbGuard = void 0;
 var prisma_1 = require("./prisma");
 Object.defineProperty(exports, "prismaDbGuard", { enumerable: true, get: function () { return prisma_1.prismaDbGuard; } });
 Object.defineProperty(exports, "encryptValue", { enumerable: true, get: function () { return prisma_1.encryptValue; } });
@@ -39,6 +39,7 @@ Object.defineProperty(exports, "activateBreakGlass", { enumerable: true, get: fu
 Object.defineProperty(exports, "parseCiphertext", { enumerable: true, get: function () { return security_1.parseCiphertext; } });
 Object.defineProperty(exports, "CRYPTO_ALGORITHMS", { enumerable: true, get: function () { return security_1.CRYPTO_ALGORITHMS; } });
 Object.defineProperty(exports, "VERSION_ALGORITHMS", { enumerable: true, get: function () { return security_1.VERSION_ALGORITHMS; } });
+Object.defineProperty(exports, "maskValue", { enumerable: true, get: function () { return security_1.maskValue; } });
 var compliance_1 = require("./compliance");
 Object.defineProperty(exports, "auditConfiguration", { enumerable: true, get: function () { return compliance_1.auditConfiguration; } });
 Object.defineProperty(exports, "generateComplianceHtmlReport", { enumerable: true, get: function () { return compliance_1.generateComplianceHtmlReport; } });

package/dist/provenance.json

@@ -52,13 +52,13 @@
     {
       "name": "dist/index.d.ts",
       "digest": {
-        "sha256": "7f7c57559ed6b17bd5698a248c18d636c65f812406b685bb6b2fe243d6df59b8"
+        "sha256": "ec2f9fbf66e83818e0fb9e9e97780941f7078def441e2b8a7e0a8fb99d64a532"
       }
     },
     {
       "name": "dist/index.js",
       "digest": {
-        "sha256": "9a6c591ff862cca301b2b45455b884c2c5ab7e994dd4a31df1235ebdcff8393c"
+        "sha256": "b2f9f7e6a8b238911e9e9e303b13be231af846180da1321275752126dacf1264"
       }
     },
     {
@@ -100,13 +100,13 @@
     {
       "name": "dist/security.d.ts",
       "digest": {
-        "sha256": "85bbbfdbf47b5ce72c29071004664aa8d4c872107a9f1826daaec53f3b40182b"
+        "sha256": "554d9ba00f800470666ab66127079df889b8d717a9cf7b28ab252f0adad64304"
       }
     },
     {
       "name": "dist/security.js",
       "digest": {
-        "sha256": "8d3d398281d7d268e874f540c58371a4ba6410e19d5804d2cdde8fb7628531da"
+        "sha256": "5e907c9f5ec9fb93ef07f6360d7f8572aa5a1ea1c0a32d0b10496477d0b8fd33"
       }
     },
     {
@@ -129,7 +129,7 @@
       "externalParameters": {
         "packageJson": {
           "name": "@vollcrypt/db-guard",
-          "version": "0.1.0",
+          "version": "0.1.1",
           "scripts": {
             "build": "tsc && node scripts/generate-sbom.js",
             "test": "node --import tsx --test tests/*.test.ts"
@@ -213,9 +213,9 @@
         "id": "https://vollcrypt.dev/builders/local-hermetic-env"
       },
       "metadata": {
-        "invocationId": "6a158baa8a336e407b4daf328603e46e",
-        "startedOn": "2026-06-11T12:43:47.573Z",
-        "finishedOn": "2026-06-11T12:43:47.574Z"
+        "invocationId": "4038ab2da0eed20086c5bb329a4db9f2",
+        "startedOn": "2026-06-11T13:14:40.057Z",
+        "finishedOn": "2026-06-11T13:14:40.058Z"
       }
     }
   }

package/dist/provenance.json.sig

@@ -1 +1,2 @@
-�]�B�����8٨�3�e�1�,���d2@jIo~�Ҧ��r�4Hp�/9b=�uy'�>�dӰ3
+���ĸ�k��F؅2@����OCt��)�gT�� \�
+�����������bܤ�/W����>6

package/dist/sbom.json

@@ -1,10 +1,10 @@
 {
   "bomFormat": "CycloneDX",
   "specVersion": "1.5",
-  "serialNumber": "urn:uuid:922e2014-383d-4a96-a592-7fea3b6d4dc3",
+  "serialNumber": "urn:uuid:3f1b85cc-1214-411d-b559-97018328b572",
   "version": 1,
   "metadata": {
-    "timestamp": "2026-06-11T12:43:47.573Z",
+    "timestamp": "2026-06-11T13:14:40.057Z",
     "tools": [
       {
         "vendor": "Vollcrypt",
@@ -13,10 +13,10 @@
       }
     ],
     "component": {
-      "bomRef": "pkg:npm/@vollcrypt/db-guard@0.1.0",
+      "bomRef": "pkg:npm/@vollcrypt/db-guard@0.1.1",
       "type": "library",
       "name": "@vollcrypt/db-guard",
-      "version": "0.1.0",
+      "version": "0.1.1",
       "description": "Database field-level encryption integrations for Vollcrypt (Prisma, Mongoose, Drizzle, TypeORM)",
       "hashes": [
         {
@@ -53,11 +53,11 @@
         },
         {
           "alg": "SHA-256",
-          "content": "7f7c57559ed6b17bd5698a248c18d636c65f812406b685bb6b2fe243d6df59b8"
+          "content": "ec2f9fbf66e83818e0fb9e9e97780941f7078def441e2b8a7e0a8fb99d64a532"
         },
         {
           "alg": "SHA-256",
-          "content": "9a6c591ff862cca301b2b45455b884c2c5ab7e994dd4a31df1235ebdcff8393c"
+          "content": "b2f9f7e6a8b238911e9e9e303b13be231af846180da1321275752126dacf1264"
         },
         {
           "alg": "SHA-256",
@@ -85,11 +85,11 @@
         },
         {
           "alg": "SHA-256",
-          "content": "85bbbfdbf47b5ce72c29071004664aa8d4c872107a9f1826daaec53f3b40182b"
+          "content": "554d9ba00f800470666ab66127079df889b8d717a9cf7b28ab252f0adad64304"
         },
         {
           "alg": "SHA-256",
-          "content": "8d3d398281d7d268e874f540c58371a4ba6410e19d5804d2cdde8fb7628531da"
+          "content": "5e907c9f5ec9fb93ef07f6360d7f8572aa5a1ea1c0a32d0b10496477d0b8fd33"
         },
         {
           "alg": "SHA-256",

package/dist/security.d.ts

@@ -19,6 +19,8 @@ export interface UserContext {
     maxPageSize?: number;
     onPageSizeExceeded?: 'warn' | 'error' | 'bypass';
     tenantId?: string;
+    decryptCount?: number;
+    windowStart?: number;
 }
 export declare const dbGuardContextStore: AsyncLocalStorage<UserContext>;
 export declare function maskValue(val: any, rule: 'credit_card' | 'email' | 'tc_no' | ((v: any) => any) | string): any;

package/dist/security.js

@@ -370,17 +370,38 @@ function checkRateLimit(options) {
     const limit = context?.maxDecryptionsPerSecond || options?.maxDecryptionsPerSecond || 500;
     const mode = context?.rateLimiterMode || options?.mode || 'fail_closed';
     const now = Date.now();
-    if (now - windowStart > 1000) {
-        decryptCount = 0;
-        windowStart = now;
-    }
-    decryptCount++;
-    if (decryptCount > limit) {
-        if (mode === 'fail_closed') {
-            triggerFailClosed(options?.onFailClosed);
+    if (context) {
+        if (context.windowStart === undefined || context.decryptCount === undefined) {
+            context.windowStart = now;
+            context.decryptCount = 0;
         }
-        else if (mode === 'warn') {
-            console.warn(`Vollcrypt Warning: Decryption rate limit exceeded. ${decryptCount} decryptions in the current window (limit: ${limit}).`);
+        if (now - context.windowStart > 1000) {
+            context.decryptCount = 0;
+            context.windowStart = now;
+        }
+        context.decryptCount++;
+        if (context.decryptCount > limit) {
+            if (mode === 'fail_closed') {
+                triggerFailClosed(options?.onFailClosed);
+            }
+            else if (mode === 'warn') {
+                console.warn(`Vollcrypt Warning: Decryption rate limit exceeded. ${context.decryptCount} decryptions in the current window (limit: ${limit}).`);
+            }
+        }
+    }
+    else {
+        if (now - windowStart > 1000) {
+            decryptCount = 0;
+            windowStart = now;
+        }
+        decryptCount++;
+        if (decryptCount > limit) {
+            if (mode === 'fail_closed') {
+                triggerFailClosed(options?.onFailClosed);
+            }
+            else if (mode === 'warn') {
+                console.warn(`Vollcrypt Warning: Decryption rate limit exceeded. ${decryptCount} decryptions in the current window (limit: ${limit}).`);
+            }
         }
     }
 }

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@vollcrypt/db-guard",
-  "version": "0.1.0",
+  "version": "0.1.1",
   "description": "Database field-level encryption integrations for Vollcrypt (Prisma, Mongoose, Drizzle, TypeORM)",
   "main": "dist/index.js",
   "types": "dist/index.d.ts",