feat(cli, migrate): add `stash encrypt` commands + @cipherstash/migrate#357

Draft

coderdan wants to merge 10 commits intomainfrom

encryption-migrations

Commits on Apr 23, 2026

feat(cli, migrate): add `stash encrypt` commands + @cipherstash/migrate
coderdan
committed
docs(migrate, cli): flesh out TypeDoc on public API
coderdan
committed
test(migrate): integration test suite for runBackfill against real Postgres
coderdan
committed
fix(cli): include cs_migrations DDL in drizzle-generated install migration
coderdan
committed
fix(cli): auto-derive EncryptedTable schemas from drizzle pgTable exports
coderdan
committed
fix(migrate): correct schemaColumnKey default + add plaintext-leak guard
coderdan
committed
refactor(migrate): use isEncryptedPayload from @cipherstash/stack for leak guard
coderdan
committed
feat(cli, migrate): coerce pg plaintext to schema dataType before encryption
coderdan
committed
feat(cli): surface detected cast_as in backfill log
coderdan
committed
feat(cli): warn before backfilling date/timestamp columns unsupported by protect-ffi
coderdan
committed