feat(stack,cli): EQL v3 Supabase adapter (encryptedSupabaseV3) + v3 install path#547

Merged

freshtonic merged 68 commits into

mainfrom

james/cip-3300-spike-integrate-eql-v3-into-supabase-orm

Jul 5, 2026

Commits on Jul 4, 2026

docs(stack): design spec for eql_v3 text_search schema DSL (increment 1)

tobyhede
authored and
freshtonic
committed
docs(stack): implementation plan for eql_v3 text_search schema DSL

tobyhede
authored and
freshtonic
committed
docs(stack): incorporate plan review feedback for eql_v3 text_search

tobyhede
authored and
freshtonic
committed
docs(stack): scope v3 to working client integration + apply batch-2 review

tobyhede
authored and
freshtonic
committed
docs(stack): apply batch-3 plan review (widen internal consumers, scope typecheck)

tobyhede
authored and
freshtonic
committed
docs(stack): split query column contract so encryptQuery rejects non-queryable fields

tobyhede
authored and
freshtonic
committed
docs(stack): pin bulk-encrypt widen-site + note WASM v3 boundary

tobyhede
authored and
freshtonic
committed
docs(stack): pin concrete BuiltMatchIndexOpts type for v3 match opts

tobyhede
authored and
freshtonic
committed
docs(stack): fix @ts-expect-error placement in negative type tests

tobyhede
authored and
freshtonic
committed
feat(stack): add eql_v3 text_search column builder

tobyhede
authored and
freshtonic
committed
feat(stack): add eql_v3 encryptedTable and buildEncryptConfig

tobyhede
authored and
freshtonic
committed
feat(stack): wire @cipherstash/stack/schema/v3 export subpath

tobyhede
authored and
freshtonic
committed
test(stack): type-level tests for eql_v3 schema DSL + scoped CI typecheck

tobyhede
authored and
freshtonic
committed
feat(stack): widen public client types so v3 builders work with the client

tobyhede
authored and
freshtonic
committed
chore(stack): changeset for eql_v3 text_search DSL (minor)

tobyhede
authored and
freshtonic
committed
style(stack): biome format v3 tests + drop now-unused EncryptedTable import

tobyhede
authored and
freshtonic
committed
fix(stack): guard v3 encryptedTable against reserved column names

tobyhede
authored and
freshtonic
committed
fix(stack): resolve column name structurally in wasm-inline encrypt entry

tobyhede
authored and
freshtonic
committed
feat(stack): guard v3 buildEncryptConfig against duplicate table names

tobyhede
authored and
freshtonic
committed
feat(stack): extend v3 reserved-column guard to inherited prototype keys

tobyhede
authored and
freshtonic
committed
docs(stack): note text_search defaults to equality, needs queryType:'freeTextSearch' for match

tobyhede
authored and
freshtonic
committed
test(stack): cover eql v3 typed schema domains

tobyhede
authored and
freshtonic
committed
feat(stack): add eql v3 domain builders for all generated SQL domains

tobyhede
authored and
freshtonic
committed
feat(stack): support v3 tables and Date/bigint in client encryption

tobyhede
authored and
freshtonic
committed
test(stack): stabilize v3 client, pg, and wasm-inline coverage

tobyhede
authored and
freshtonic
committed
chore(stack): add changeset for eql v3 typed schema

tobyhede
authored and
freshtonic
committed
docs: add eql v3 typed schema plan and query API walkthrough

tobyhede
authored and
freshtonic
committed
fix(stack): address PR review feedback for eql v3 typed schema

tobyhede
authored and
freshtonic
committed
feat(stack): strongly-typed EQL v3 client surface (@cipherstash/stack/v3)

tobyhede
authored and
freshtonic
committed
fix(stack): use string plaintext for eql v3 int8 domains

tobyhede
authored and
freshtonic
committed
fix(stack): address code review findings for eql v3 typed client

tobyhede
authored and
freshtonic
committed
fix(stack): key v3 encrypt config by DB column name, not JS property

tobyhede
authored and
freshtonic
committed
fix(stack): match v3 model fields by JS property, encrypt by DB name

tobyhede
authored and
freshtonic
committed
ci(stack): add blocking FTA complexity gate for EQL v3

tobyhede
authored and
freshtonic
committed
test(stack): type-driven v3 domain test matrix

tobyhede
authored and
freshtonic
committed
feat(stack): equality-via-ORE fix + live v3 domain coverage

tobyhede
authored and
freshtonic
committed
test(stack): live Postgres SQL coverage for all 35 v3 domains

tobyhede
authored and
freshtonic
committed
fix(stack): address CodeRabbit review findings on eql v3 typed client

tobyhede
authored and
freshtonic
committed
test(stack): harden v3 CJS export check and preserve run() transcript order

tobyhede
authored and
freshtonic
committed
test(stack): disable timestamptz and matrix-live-pg tests failing on CI

tobyhede
authored and
freshtonic
committed
fix(stack): wrap ciphertext params with sql.json() in matrix-live-pg

tobyhede
authored and
freshtonic
committed
docs(stack): design for Stryker v3 blocking CI gate

tobyhede
authored and
freshtonic
committed
docs(stack): confirm lean, single-workflow Stryker v3 gate

tobyhede
authored and
freshtonic
committed
refactor(stack): extract EQL v3 DSL into eql/v3 types module

tobyhede
authored and
freshtonic
committed
fix(stack): guard against duplicate v3 column DB names in build()

tobyhede
authored and
freshtonic
committed
fix(stack): export v3 Buildable* contracts from public types entrypoint

tobyhede
authored and
freshtonic
committed
test(stack): migrate v3-matrix suite to eql/v3 types namespace

tobyhede
authored and
freshtonic
committed
test(stack): cover lock-context encrypt guards and wasm newClient shape

tobyhede
authored and
freshtonic
committed
test(stack): re-enable matrix-live-pg live SQL coverage (stale skip)

tobyhede
authored and
freshtonic
committed
fix(stack): emit hm index for text order domains (eql_v3 SQL domain requirement)

tobyhede
authored and
freshtonic
committed
test(stack): v3 lock-context coverage + text_match/no-op/empty-config guards

tobyhede
authored and
freshtonic
committed
chore(stack): EQL v3 maintainability follow-ups from the #547 review
freshtonic
committed
feat(stack): encryptedSupabaseV3 — EQL v3 dialect of the Supabase adapter
freshtonic
committed
feat(cli): EQL v3 install path — vendored bundles + --eql-version flag
freshtonic
committed
test(stack): live Supabase suites for v3 + the missing v2 range baseline
freshtonic
committed
docs(stack): EQL v3 Supabase docs + changeset
freshtonic
committed
fix(stack,cli): address #547 review — operand/typing guards, v3-aware status/upgrade, drift gate
freshtonic
committed
chore: retrigger CI after rebase onto main
freshtonic
committed
fix(stack): matrix-live-pg — ob-carrying text domains cannot store ''
freshtonic
committed
fix(stack): matrix-live-pg storage proof — parse lone-decrypt output before Date comparison
freshtonic
committed
docs(stack,cli): follow the stash db install → stash eql install rename
freshtonic
committed
chore(stack,cli): re-vendor EQL v3 bundle from upstream eql-3.0.0-alpha.2 release
freshtonic
committed
docs(stack,cli): re-baseline EQL v3 Supabase docs on eql-3.0.0-alpha.2
freshtonic
committed
refactor(stack)!: rename EQL v3 scalar domains to SQL-standard names (EQL#344)
freshtonic
committed
feat(stack): adopt protect-ffi 0.27 and wire eqlVersion through the client
freshtonic
committed
fix(stack,cli): integrate the re-baseline — v3 wire in live suites, handshake guard, internal-schema grants
freshtonic
committed
test(stack): bulkDecrypt malformed ciphertexts are per-item errors under protect-ffi 0.27
freshtonic
committed

Commits on Jul 5, 2026

fix(cli): reject --migrations-dir with --eql-version 3
freshtonic
committed