Minor Changes
-
bb9764d:
stash db pushis no longer included by default instash plan/stash implagent prompts or the wizard's post-agent step. SDK users (Drizzle, Supabase, plain PostgreSQL) no longer seestash db pushbaked into their rollout/cutover walkthroughs — the encryption config lives in app code, so the database doesn't need a copy.Pass
--proxytostash init(or answer the new interactive prompt) if you query encrypted data via CipherStash Proxy. The choice is persisted to.cipherstash/context.jsonasusesProxyand is honoured bystash plan,stash impl, and the wizard's post-agent step. Existing.cipherstash/context.jsonfiles without the field default to SDK-only.Known gap:
stash encrypt cutovercurrently requires a pending EQL config registered viastash db push, so SDK-only users running the migrate-existing-column flow will hit a "No pending EQL configuration" error from cutover. Workaround: runstash db pushonce beforestash encrypt cutover. Decoupling cutover from EQL config for SDK-only users is tracked as a follow-up to #447.