chore(stack): re-vendor EQL v3 bundle; move type domains to public.*

Adopt the latest EQL v3 SQL bundle and realign the v3 DSL so the SDK's
emitted domain names byte-match the installed bundle (a mismatch fails
CREATE TABLE/cast resolution at runtime, only caught by live-PG tests).

- Re-vendor packages/stack/__tests__/fixtures/eql-v3/cipherstash-encrypt-v3.sql
- Type domains eql_v3.* -> public.* (user-column domains now live in public
  so app tables survive EQL uninstall); eql_v3.bool -> public.boolean
- Index-term constructors hmac_256/ore_block_256/bloom_filter moved to
  eql_v3_internal in live-test SQL; operator extractors (eq_term/ord_term/
  match_term) stay in eql_v3
- Remap eqlType strings + catalog keys + type-level/unit assertions

Verified: test:types 60/60, schema-v3 unit 162/162, no regressions.
Live-PG contract suite runs in CI.

Author: tobyhede

.changeset/eql-v3-public-domains.md

@@ -0,0 +1,5 @@
+---
+'@cipherstash/stack': patch
+---
+
+Re-vendor the EQL v3 SQL bundle and align the v3 DSL to it: encrypted type domains now live in the `public` schema (`public.text`, `public.integer`, …) rather than `eql_v3`, and the boolean domain is `public.boolean` (was `eql_v3.bool`). The `eql_v3` schema now holds only the operator-backing functions, and the index-term constructors (`hmac_256`, `ore_block_256`, `bloom_filter`) moved to `eql_v3_internal`. This keeps the SDK's emitted domain names byte-matched to the installed bundle so `CREATE TABLE`/cast resolution succeeds.

packages/stack/__tests__/fixtures/eql-v3/cipherstash-encrypt-v3.sql

@@ -14,13 +14,13 @@ const eqlV3SqlPath = resolve(
 // The sentinel must be a type that exists ONLY in the currently vendored
 // bundle, so a database still carrying an older EQL v3 install is detected as
 // stale and reinstalled (the bundle's leading DROP SCHEMA … CASCADE replaces
-// the old install wholesale). eql_v3.timestamp is new in the current bundle
+// the old install wholesale). public.timestamp is new in the current bundle
 // (the timestamptz → timestamp rename, encrypt-query-language@2e64ca73); the
-// previous sentinel, eql_v3.text_search, exists in both generations and would
+// previous sentinel, public.text_search, exists in both generations and would
 // leave a stale install in place.
 async function hasCurrentEqlV3(sql: postgres.Sql): Promise<boolean> {
   const [row] = await sql<{ installed: boolean }[]>`
-    SELECT to_regtype('eql_v3.timestamp') IS NOT NULL AS installed
+    SELECT to_regtype('public.timestamp') IS NOT NULL AS installed
   `
   return row?.installed ?? false
 }
@@ -49,7 +49,7 @@ export async function installEqlV3IfNeeded(sql: postgres.Sql): Promise<void> {
       await reserved.unsafe(eqlV3Sql)
 
       if (!(await hasCurrentEqlV3(reserved))) {
-        throw new Error('EQL v3 installation did not create eql_v3.timestamp')
+        throw new Error('EQL v3 installation did not create public.timestamp')
       }
     } finally {
       await reserved`SELECT pg_advisory_unlock(${EQL_V3_ADVISORY_LOCK_ID})`

packages/stack/__tests__/helpers/eql-v3.ts

@@ -63,7 +63,7 @@ async function insertRow(label: string, email: string): Promise<number> {
 
   const [inserted] = await sql<{ id: number }[]>`
     INSERT INTO protect_ci_v3_text_search (email, label, test_run_id)
-    VALUES (${sql.json(encrypted)}::eql_v3.text_search, ${label}, ${TEST_RUN_ID})
+    VALUES (${sql.json(encrypted)}::public.text_search, ${label}, ${TEST_RUN_ID})
     RETURNING id
   `
 
@@ -98,7 +98,7 @@ beforeAll(async () => {
   await sql`
     CREATE TABLE IF NOT EXISTS protect_ci_v3_text_search (
       id INTEGER PRIMARY KEY GENERATED ALWAYS AS IDENTITY,
-      email eql_v3.text_search NOT NULL,
+      email public.text_search NOT NULL,
       label TEXT NOT NULL,
       test_run_id TEXT NOT NULL
     )
@@ -107,9 +107,9 @@ beforeAll(async () => {
   await sql`
     CREATE TABLE IF NOT EXISTS protect_ci_v3_typed_domains (
       id INTEGER PRIMARY KEY GENERATED ALWAYS AS IDENTITY,
-      age eql_v3.integer_ord NOT NULL,
-      nickname eql_v3.text_eq NOT NULL,
-      active eql_v3.bool NOT NULL,
+      age public.integer_ord NOT NULL,
+      nickname public.text_eq NOT NULL,
+      active public.boolean NOT NULL,
       test_run_id TEXT NOT NULL
     )
   `
@@ -143,7 +143,7 @@ afterAll(async () => {
 }, 30000)
 
 describeLivePg('eql_v3 text_search postgres integration', () => {
-  it('round-trips an encrypted value through an eql_v3.text_search column', async () => {
+  it('round-trips an encrypted value through an public.text_search column', async () => {
     const id = await insertRow('roundtrip', 'roundtrip@example.com')
 
     const [row] = await sql<InsertedRow[]>`
@@ -156,38 +156,38 @@ describeLivePg('eql_v3 text_search postgres integration', () => {
     await expect(decryptRow(row)).resolves.toBe('roundtrip@example.com')
   }, 30000)
 
-  it('queries equality terms with eql_v3.eq_term and eql_v3.hmac_256', async () => {
+  it('queries equality terms with eql_v3.eq_term and eql_v3_internal.hmac_256', async () => {
     const ids = await seedRows()
     const equalityTerm = await encryptQueryTerm('grace@example.com', 'equality')
 
     const rows = await sql<InsertedRow[]>`
       SELECT id, email::jsonb AS email, label
       FROM protect_ci_v3_text_search
       WHERE test_run_id = ${TEST_RUN_ID}
-        AND eql_v3.eq_term(email) = eql_v3.hmac_256(${sql.json(equalityTerm)}::jsonb)
+        AND eql_v3.eq_term(email) = eql_v3_internal.hmac_256(${sql.json(equalityTerm)}::jsonb)
       ORDER BY id
     `
 
     expect(rows.map((row) => row.id)).toEqual([ids.grace])
     await expect(decryptRow(rows[0])).resolves.toBe('grace@example.com')
   }, 30000)
 
-  it('queries free-text terms with eql_v3.match_term and eql_v3.bloom_filter', async () => {
+  it('queries free-text terms with eql_v3.match_term and eql_v3_internal.bloom_filter', async () => {
     await seedRows()
     const matchTerm = await encryptQueryTerm('example.com', 'freeTextSearch')
 
     const rows = await sql<InsertedRow[]>`
       SELECT id, email::jsonb AS email, label
       FROM protect_ci_v3_text_search
       WHERE test_run_id = ${TEST_RUN_ID}
-        AND eql_v3.match_term(email) @> eql_v3.bloom_filter(${sql.json(matchTerm)}::jsonb)
+        AND eql_v3.match_term(email) @> eql_v3_internal.bloom_filter(${sql.json(matchTerm)}::jsonb)
       ORDER BY label
     `
 
     expect(rows.map((row) => row.label)).toEqual(['ada', 'grace'])
   }, 30000)
 
-  it('queries range terms with eql_v3.ord_term and eql_v3.ore_block_256', async () => {
+  it('queries range terms with eql_v3.ord_term and eql_v3_internal.ore_block_256', async () => {
     await seedRows()
     const lower = await encryptQueryTerm('grace@example.com', 'orderAndRange')
     const upper = await encryptQueryTerm('zora@example.org', 'orderAndRange')
@@ -196,8 +196,8 @@ describeLivePg('eql_v3 text_search postgres integration', () => {
       SELECT id, email::jsonb AS email, label
       FROM protect_ci_v3_text_search
       WHERE test_run_id = ${TEST_RUN_ID}
-        AND eql_v3.ord_term(email) >= eql_v3.ore_block_256(${sql.json(lower)}::jsonb)
-        AND eql_v3.ord_term(email) <= eql_v3.ore_block_256(${sql.json(upper)}::jsonb)
+        AND eql_v3.ord_term(email) >= eql_v3_internal.ore_block_256(${sql.json(lower)}::jsonb)
+        AND eql_v3.ord_term(email) <= eql_v3_internal.ore_block_256(${sql.json(upper)}::jsonb)
       ORDER BY eql_v3.ord_term(email)
     `
 
@@ -242,14 +242,14 @@ describeLivePg('eql_v3 text_search postgres integration', () => {
     )
   }, 30000)
 
-  it('rejects query-only payloads cast as eql_v3.text_search values', async () => {
+  it('rejects query-only payloads cast as public.text_search values', async () => {
     const equalityTerm = await encryptQueryTerm('ada@example.com', 'equality')
 
     await expect(
       sql`
         INSERT INTO protect_ci_v3_text_search (email, label, test_run_id)
         VALUES (
-          ${sql.json(equalityTerm)}::eql_v3.text_search,
+          ${sql.json(equalityTerm)}::public.text_search,
           'query-only',
           ${TEST_RUN_ID}
         )
@@ -280,9 +280,9 @@ describeLivePg('eql_v3 text_search postgres integration', () => {
     const [inserted] = await sql<{ id: number }[]>`
       INSERT INTO protect_ci_v3_typed_domains (age, nickname, active, test_run_id)
       VALUES (
-        ${sql.json(age as postgres.JSONValue)}::eql_v3.integer_ord,
-        ${sql.json(nickname as postgres.JSONValue)}::eql_v3.text_eq,
-        ${sql.json(active as postgres.JSONValue)}::eql_v3.bool,
+        ${sql.json(age as postgres.JSONValue)}::public.integer_ord,
+        ${sql.json(nickname as postgres.JSONValue)}::public.text_eq,
+        ${sql.json(active as postgres.JSONValue)}::public.boolean,
         ${TEST_RUN_ID}
       )
       RETURNING id
@@ -300,7 +300,7 @@ describeLivePg('eql_v3 text_search postgres integration', () => {
       SELECT id
       FROM protect_ci_v3_typed_domains
       WHERE test_run_id = ${TEST_RUN_ID}
-        AND eql_v3.ord_term(age) >= eql_v3.ore_block_256(${sql.json(ageTerm)}::jsonb)
+        AND eql_v3.ord_term(age) >= eql_v3_internal.ore_block_256(${sql.json(ageTerm)}::jsonb)
     `
 
     expect(rows.map((row) => row.id)).toContain(inserted.id)
@@ -333,9 +333,9 @@ describeLivePg('eql_v3 text_search postgres integration', () => {
       const [row] = await sql<{ id: number }[]>`
         INSERT INTO protect_ci_v3_typed_domains (age, nickname, active, test_run_id)
         VALUES (
-          ${sql.json(ageCt)}::eql_v3.integer_ord,
-          ${sql.json(nick)}::eql_v3.text_eq,
-          ${sql.json(act)}::eql_v3.bool,
+          ${sql.json(ageCt)}::public.integer_ord,
+          ${sql.json(nick)}::public.text_eq,
+          ${sql.json(act)}::public.boolean,
           ${TEST_RUN_ID}
         )
         RETURNING id
@@ -363,7 +363,7 @@ describeLivePg('eql_v3 text_search postgres integration', () => {
       SELECT id
       FROM protect_ci_v3_typed_domains
       WHERE test_run_id = ${TEST_RUN_ID}
-        AND eql_v3.ord_term(age) = eql_v3.ore_block_256(${sql.json(equalityTerm)}::jsonb)
+        AND eql_v3.ord_term(age) = eql_v3_internal.ore_block_256(${sql.json(equalityTerm)}::jsonb)
       ORDER BY id
     `
     // Exactly the age=37 row — not the 30 or 42 rows.
@@ -383,7 +383,7 @@ describeLivePg('eql_v3 text_search postgres integration', () => {
       SELECT id
       FROM protect_ci_v3_typed_domains
       WHERE test_run_id = ${TEST_RUN_ID}
-        AND eql_v3.ord_term(age) = eql_v3.ore_block_256(${sql.json(missTerm)}::jsonb)
+        AND eql_v3.ord_term(age) = eql_v3_internal.ore_block_256(${sql.json(missTerm)}::jsonb)
     `
     expect(none).toHaveLength(0)
   }, 30000)

packages/stack/__tests__/schema-v3-pg.test.ts

@@ -158,27 +158,27 @@ describe('eql_v3 text_match column', () => {
 
 describe('eql_v3 concrete type names', () => {
   it('preserves public factory names while exposing concrete Postgres domain names', () => {
-    expect(types.Integer('n').getEqlType()).toBe('eql_v3.integer')
-    expect(types.IntegerEq('n').getEqlType()).toBe('eql_v3.integer_eq')
-    expect(types.IntegerOrdOre('n').getEqlType()).toBe('eql_v3.integer_ord_ore')
-    expect(types.IntegerOrd('n').getEqlType()).toBe('eql_v3.integer_ord')
+    expect(types.Integer('n').getEqlType()).toBe('public.integer')
+    expect(types.IntegerEq('n').getEqlType()).toBe('public.integer_eq')
+    expect(types.IntegerOrdOre('n').getEqlType()).toBe('public.integer_ord_ore')
+    expect(types.IntegerOrd('n').getEqlType()).toBe('public.integer_ord')
 
-    expect(types.Smallint('n').getEqlType()).toBe('eql_v3.smallint')
-    expect(types.SmallintEq('n').getEqlType()).toBe('eql_v3.smallint_eq')
+    expect(types.Smallint('n').getEqlType()).toBe('public.smallint')
+    expect(types.SmallintEq('n').getEqlType()).toBe('public.smallint_eq')
     expect(types.SmallintOrdOre('n').getEqlType()).toBe(
-      'eql_v3.smallint_ord_ore',
+      'public.smallint_ord_ore',
     )
-    expect(types.SmallintOrd('n').getEqlType()).toBe('eql_v3.smallint_ord')
-
-    expect(types.Boolean('b').getEqlType()).toBe('eql_v3.bool')
-    expect(types.Real('n').getEqlType()).toBe('eql_v3.real')
-    expect(types.RealEq('n').getEqlType()).toBe('eql_v3.real_eq')
-    expect(types.RealOrdOre('n').getEqlType()).toBe('eql_v3.real_ord_ore')
-    expect(types.RealOrd('n').getEqlType()).toBe('eql_v3.real_ord')
-    expect(types.Double('n').getEqlType()).toBe('eql_v3.double')
-    expect(types.DoubleEq('n').getEqlType()).toBe('eql_v3.double_eq')
-    expect(types.DoubleOrdOre('n').getEqlType()).toBe('eql_v3.double_ord_ore')
-    expect(types.DoubleOrd('n').getEqlType()).toBe('eql_v3.double_ord')
+    expect(types.SmallintOrd('n').getEqlType()).toBe('public.smallint_ord')
+
+    expect(types.Boolean('b').getEqlType()).toBe('public.boolean')
+    expect(types.Real('n').getEqlType()).toBe('public.real')
+    expect(types.RealEq('n').getEqlType()).toBe('public.real_eq')
+    expect(types.RealOrdOre('n').getEqlType()).toBe('public.real_ord_ore')
+    expect(types.RealOrd('n').getEqlType()).toBe('public.real_ord')
+    expect(types.Double('n').getEqlType()).toBe('public.double')
+    expect(types.DoubleEq('n').getEqlType()).toBe('public.double_eq')
+    expect(types.DoubleOrdOre('n').getEqlType()).toBe('public.double_ord_ore')
+    expect(types.DoubleOrd('n').getEqlType()).toBe('public.double_ord')
   })
 })
 
@@ -450,12 +450,12 @@ describe('eql_v3 equality via ORE on order-capable columns (regression)', () =>
 })
 
 describe('eql_v3 text order domains carry the hm (unique) index (regression)', () => {
-  // The `eql_v3.text_ord` and `eql_v3.text_ord_ore` SQL domains require BOTH
+  // The `public.text_ord` and `public.text_ord_ore` SQL domains require BOTH
   // `hm` (HMAC) and `ob` (ORE) in the stored ciphertext: text equality is
   // HMAC-based (their `eql_v3.eq_term` extracts `hm`), unlike numeric/date order
   // domains which answer equality via `ob` and need only ORE. So text order
   // columns must emit `unique` (hm) IN ADDITION to `ore` (ob), or a real INSERT
-  // fails with `value for domain eql_v3.text_ord_ore violates check constraint`.
+  // fails with `value for domain public.text_ord_ore violates check constraint`.
   it.each([
     ['text_ord_ore', types.TextOrdOre],
     ['text_ord', types.TextOrd],