feat(protect-ffi): vendor the package and run its own checks - #862

Merged

tobyhede merged 566 commits into

mainfrom

feat/protect-ffi-3-vendor

Aug 6, 2026

This pull request is big! We're only showing the most recent 250 commits

Commits on Apr 24, 2026

feat: support date and timestamp plaintexts
coderdan
committed
aabedb8
Merge pull request #81 from cipherstash/add-date-timestamp-support
coderdan
authored
4dafcc8

Commits on Apr 28, 2026

fix(deps): patch aws-lc-sys to 0.40.0
tobyhede
committed
db984ee
fix(deps): patch vite to 7.3.2
tobyhede
committed
fb3e2d3
fix(deps): patch rustls-webpki to 0.103.13
tobyhede
committed
1b25484
Merge pull request #83 from cipherstash/fix-cip-3017-aws-lc-sys-patch
tobyhede
authored
4718d29
Merge pull request #84 from cipherstash/fix-cip-3018-vite-patch
tobyhede
authored
7b8cd8c
Merge pull request #85 from cipherstash/fix-cip-3019-rustls-webpki-patch
tobyhede
authored
9e7b7a4
Merge pull request #79 from cipherstash/chore/set-glibc-version
yujiyokoo
authored
cf9e58c
v0.21.3
github-actions
committed
22dc9ec

Commits on Apr 30, 2026

v0.21.4
github-actions
committed
7d21304

Commits on May 12, 2026

chore(deps): upgrade cipherstash-client to 0.34.1-alpha.4
freshtonic
committed
3433824

Commits on May 17, 2026

Merge pull request #86 from cipherstash/chore/upgrade-cipherstash-client-0.34.1-alpha.4
coderdan
authored
ab61d6f

Commits on May 20, 2026

chore(deps): upgrade cipherstash-client to 0.34.1-alpha.5
freshtonic
committed
46aec68
feat(ste-vec): expose SteVec encoding mode option
freshtonic
committed
53390b4
chore: ignore .worktrees/ directory
freshtonic
committed
aaa6946
chore(deps): upgrade cipherstash-client to 0.34.1-alpha.7
freshtonic
committed
df62066
feat: add normalizeEncryptConfig cast_as translation helper
freshtonic
committed
6dcba63
refactor: replace hand-rolled encrypt config with CanonicalEncryptionConfig
freshtonic
committed
1d1f911
feat: normalize encrypt config vocabulary at the FFI boundary
freshtonic
committed
27205fe
docs: document CanonicalEncryptionConfig migration and breaking changes
freshtonic
committed
dba94ff
docs: correct SteVecMode default in JSDoc + cast_as union snippet
freshtonic
committed
1893410
test: cover newClient encrypt config validation paths
freshtonic
committed
5697774
test: update SteVec entry field assertions for Standard mode
freshtonic
committed
a17a6ee
docs: update EqlCiphertext field reference for Standard SteVec mode
freshtonic
committed
89125ba
docs: clarify root-level hm is unique-index only
freshtonic
committed
fdcf26f
test: use it.each for cast_as normalization cases
freshtonic
committed
e424fa0
Merge pull request #92 from cipherstash/refactor/use-eql-types-from-cipherstash-client
freshtonic
authored
d83b06b
refactor: upgrade cipherstash-client to 0.35.0
freshtonic
committed
ff2c8c4
test: align json-containment with EQL v2.3 SteVec storage layout
freshtonic
committed
aca3bfe
Merge pull request #93 from cipherstash/refactor/upgrade-cipherstash-client
freshtonic
authored
049d808
chore: address PR feedback
calvinbrewer
committed
529bf11
chore: simplify
calvinbrewer
committed
67bf65d
chore: feedback
calvinbrewer
committed
1e6b228
Merge pull request #94 from cipherstash/refactor/upgrade-cipherstash-client-follow-up
calvinbrewer
authored
4d4fa9f
v0.22.0
github-actions
committed
8428cd9

Commits on May 21, 2026

fix(types): split storage Encrypted from query payload types
coderdan
committed
db9a8cf
fix(types): forbid ciphertext on EncryptedScalarQuery
freshtonic
committed
a125a86
Merge pull request #95 from cipherstash/fix/split-storage-query-types
freshtonic
authored
37066c0
v0.23.0
github-actions
committed
d4d9ff0

Commits on May 25, 2026

chore: bump deps for wasm-ready cipherstash-client + vitaminc
coderdan
committed
5f327c0
feat(wasm): cfg-gate Neon-only code so wasm32 compiles
coderdan
committed
c6b9220
feat(wasm): add wasm-bindgen surface in src/wasm.rs
coderdan
committed
16101c1
fix(wasm): use CanonicalEncryptionConfig after the #92 config refactor
coderdan
committed
000fc94
fix: address CodeRabbit review feedback
coderdan
committed
d3aef99
fix(wasm): tighter typing + zeroize for client credentials
coderdan
committed
a026f22
fix(wasm): wrap client_key hex in ZeroizeOnDrop newtype from deserialization
coderdan
committed
b0944c6
chore: address review feedback from PR #87
coderdan
committed
143f654
Merge pull request #87 from cipherstash/feat/wasm-bindings
coderdan
authored
4507a42
feat(wasm): build pipeline + CI integration
coderdan
committed
fa0a7cf
style: collapse to single template literal in inline-wasm.mjs
coderdan
committed
b631340
style: apply biome format to inline-wasm.mjs
coderdan
committed
967494c
chore: address CodeRabbit review on PR #88
coderdan
committed
4cd6acf
fix(wasm): match Neon's flat API shape
coderdan
committed
d21d84e
Merge pull request #88 from cipherstash/feat/wasm-build-pipeline
coderdan
authored
b20e9c8
Merge pull request #89 from cipherstash/feat/wasm-api-parity
coderdan
authored
e5d8850

Commits on May 26, 2026

fix(wasm): drop @ts-self-types directive from inline shim
coderdan
committed
c476c36
test(wasm): integration test for end-to-end round-trip
coderdan
committed
188f706
Merge pull request #90 from cipherstash/feat/wasm-edge-spike
coderdan
authored
6043402
v0.24.0
github-actions
committed
35444a6

Commits on May 28, 2026

Commits on May 29, 2026

test: cover non-callable getToken and wasm required-strategy guards
coderdan
committed
66244c7
Merge pull request #96 from cipherstash/feat/strategy-in-opts
coderdan
authored
e77dc23
v0.25.0
github-actions
committed
88a969c

Commits on Jun 2, 2026

ci: publish to npm via OIDC trusted publishing
coderdan
committed
d4c70c7

Commits on Jun 6, 2026

Commits on Jun 8, 2026

test: keep a single hermetic OidcFederation contract test
coderdan
committed
245532b
Merge pull request #100 from cipherstash/chore/bump-cipherstash-stack-0.37
coderdan
authored
5992207
ci: harden release publish job (address review)
coderdan
committed
acafdda
ci: scope the publisher app token to contents:write (address review)
coderdan
committed
6d542f4
fix(npm): point dryrun script at release.yml
coderdan
committed
1b64ada
Merge pull request #99 from cipherstash/ci/npm-oidc-trusted-publishing
coderdan
authored
6184293
v0.26.0
github-actions
committed
7de2728

Commits on Jun 24, 2026

Commits on Jul 2, 2026

Commits on Jul 3, 2026

Commits on Jul 4, 2026

docs+meta: resolve license contradiction (MIT), fix rename fallout and stale env docs
coderdan
committed
d2cc510
docs+meta: address review feedback
coderdan
committed
4fa02f7
docs(jsonb): replace ASCII diagrams with Mermaid
coderdan
committed
a5a211d
Merge pull request #116 from cipherstash/docs/meta-refresh
coderdan
authored
c4b9039
ci: pass glibc-versioned target to cargo-zigbuild as a flag
freshtonic
committed
1296016
Merge pull request #118 from cipherstash/fix/zigbuild-glibc-target-flag
freshtonic
authored
471bbac
v0.26.1-0
github-actions
committed
a427841
v0.27.0
github-actions
committed
ca379eb

Commits on Jul 6, 2026

Commits on Jul 7, 2026

Commits on Jul 8, 2026

Merge branch 'main' into eql_v3
coderdan
committed
e1fafc9
fix(auth): harden failure-envelope reconstruction on both seams
coderdan
committed
a1bb91a
test: cover the gaps flagged in the PR test-coverage review
coderdan
committed
9590220
test+fix: address remaining PR review threads (CodeRabbit + Toby)
coderdan
committed
f998f7c
Merge pull request #127 from cipherstash/eql_v3
coderdan
authored
70bd8ff
v0.28.0
github-actions
committed
fc58f7d
build(deps): eql-bindings 3.0.0-alpha.3
freshtonic
committed
768f97c
feat(rust): EQL v3 scalar + selector query encryption — CIP-3423
freshtonic
committed
f7ad9d6
feat(ts): v3 query operand types, errors, vendored bindings
freshtonic
committed
6a1dd13
chore(sql): refresh the EQL v3 snapshot to 3.0.0-alpha.3 from the crate
freshtonic
committed
fe60256
test(integration): EQL v3 query round-trips
freshtonic
committed
3bea534
docs: EQL v3 query support
freshtonic
committed
e1893b1
chore(changelog): 0.29.0 notes for the EQL v3 query path
freshtonic
committed
1133fca
chore(types): vendor TS types from the locked eql-bindings release
freshtonic
committed
30c44ca
docs: release-agnostic phrasing for scalar query support
freshtonic
committed
49c944e
docs: the SteVec storage domain is public.json, not eql_v3.json
freshtonic
committed
0723c5a
refactor(rust): one prepare_query_plaintext seam for all query entry points
freshtonic
committed
e5274ec
Merge pull request #128 from cipherstash/james/cip-3423-protectjs-ffi-implement-eql-v3-scalar-jsonb-query-terms-in
freshtonic
authored
1268c52

Commits on Jul 9, 2026

Commits on Jul 17, 2026

Commits on Jul 18, 2026

Merge pull request #136 from cipherstash/james/cip-3359-c-protect-ffi-native-v3-storage
coderdan
authored
dee3ea5

Commits on Jul 19, 2026

feat: support cipherstash-client 0.42 SteVec wire format
coderdan
committed
a8ea398

Commits on Jul 20, 2026

build: adopt published EQL 3.0.2 packages
coderdan
committed
5c57d8d
test: emit an actual v2 domain fixture
coderdan
committed
347d8f7
fix: address PR 141 review feedback
coderdan
committed
5cffa3c
Merge pull request #141 from cipherstash/dan/cipherstash-client-0.42
coderdan
authored
0f92dbb
v0.30.0
github-actions
committed
361f026

Commits on Jul 21, 2026

fix(query): strip match include_original from query-term generation
freshtonic
committed
00cec83

Commits on Jul 23, 2026

refactor(query): build the query config in a single map pass
freshtonic
committed
5cb3140

Commits on Jul 26, 2026

Commits on Jul 27, 2026

Merge pull request #135 from cipherstash/james/issue-134-reject-include-original
coderdan
authored
0609540
merge main, and address the PR 143 review
coderdan
committed
45e4c34
refactor: make queryOp a named type in its own module
coderdan
committed
0098f13
docs: record what null-pruning costs for non-finite numbers
coderdan
committed
de0b9a9
fix!: reject unknown option keys instead of dropping them (#144)
coderdan
committed
634881f
fix: address review on the auth-key strip, and drop the war story from a doc
coderdan
committed
8aaeb2a
fix: copy option objects with try_assign, not assign
coderdan
committed
42d7f3e
test: cover the option structs that had no unknown-key test
coderdan
committed
1f787c0
fix: name the newClient option JSON.stringify cannot carry
coderdan
committed
2a2f306
docs: correct the DenyUnknown notes against serde-wasm-bindgen
coderdan
committed
9f34c58
Merge pull request #143 from cipherstash/fix/142-wasm-option-types
coderdan
authored
a19b732
Merge pull request #147 from cipherstash/fix/144-deny-unknown-fields
coderdan
authored
4fe0190
fix: make the wasm32 build lint clean (#145)
coderdan
committed
789fb6f
ci: give the Rust checks one entry point, and cover wasm32 (#145)
coderdan
committed
f9be4d1
feat: derive the error code in Rust and carry it to JS (#146)
coderdan
committed
a804fd8
feat!: read the error code off the error, not out of the message (#146)
coderdan
committed
0ac3b22
refactor!: delete ProtectError and the wrapper layer around it (#146)
coderdan
committed
794afef
fix: export wasm error helpers and preserve native stacks
coderdan
committed
4d2cbe2
fix: keep lint wiring checks inside their task block
coderdan
committed
71b78ff
Merge pull request #148 from cipherstash/fix/145-lint-wasm-and-fmt
coderdan
authored
dccd2fc
fix: preserve Neon query operation error codes
coderdan
committed
5515d97
Merge pull request #150 from cipherstash/fix/146-derive-error-codes
coderdan
authored
ac0bb1a
v0.31.0
github-actions
committed
ce820bb

Commits on Aug 6, 2026