Skip to content

Conversation

@tobyhede
Copy link
Contributor

@tobyhede tobyhede commented Dec 9, 2025

Add new build variant that excludes config management and encryptindex components for customers who don't need database-side configuration.

Outputs:

  • release/cipherstash-encrypt-protect.sql
  • release/cipherstash-encrypt-protect-uninstall.sql

The protect variant excludes src/config/* and src/encryptindex/* while retaining all core encrypted types, operators, and index term types.

Add new build variant that excludes config management and encryptindex
components for customers who don't need database-side configuration.

Outputs:
- release/cipherstash-encrypt-protect.sql
- release/cipherstash-encrypt-protect-uninstall.sql

The protect variant excludes src/config/* and src/encryptindex/* while
retaining all core encrypted types, operators, and index term types.
Verify the protect build variant correctly excludes config and
encryptindex components while including core types and operators.

14 tests covering:
- File existence (installer and uninstaller)
- Config exclusions (table, state type, functions)
- Encryptindex exclusions (create_encrypted_columns, diff_config)
- Core inclusions (eql_v2_encrypted, operators, blake3, hmac_256)
- Size comparison (protect < full)
Add build variants table showing Main, Supabase, and Protect variants
with their exclusions and use cases.
@calvinbrewer calvinbrewer merged commit 9277114 into main Dec 9, 2025
4 checks passed
@calvinbrewer calvinbrewer deleted the protect-installer branch December 9, 2025 15:35
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

3 participants