stash-cli
CipherStash CLI
Configure and use stash for project initialization, EQL database setup, encryption schema management, and Supabase integration. Previously published as @cipherstash/stack-forge; the stash-forge binary is now consolidated under stash. The AI-powered wizard formerly bundled here lives in @cipherstash/wizard.
Trigger
Use this skill when:
- The user asks about setting up CipherStash EQL in a database
- Code imports
stash(or legacy@cipherstash/stack-forge) - A
stash.config.tsfile exists or needs to be created - The user wants to install, configure, or manage the EQL extension in PostgreSQL
- The user is using any of the setup-lifecycle commands:
init,plan,impl,status - The user mentions "stash CLI", "stash db", "stack-forge", "stash-forge", "EQL install", or "encryption schema"
- The user has a
.cipherstash/directory withcontext.json,plan.md, orsetup-prompt.md
Do NOT trigger when:
- The user is working with
@cipherstash/stack(the runtime SDK) without needing database setup - The user is running the AI wizard — that's
@cipherstash/wizard, a separate package - General PostgreSQL questions unrelated to CipherStash
More from cipherstash/stack
stash-supabase
Integrate CipherStash encryption with Supabase using @cipherstash/stack/supabase. Covers the encryptedSupabase wrapper, transparent encryption/decryption on insert/update/select, encrypted query filters (eq, like, ilike, gt/gte/lt/lte, in, or, match), identity-aware encryption, and the complete query builder API. Use when adding encryption to a Supabase project, querying encrypted columns, or building secure Supabase applications.
11stash-encryption
Implement field-level encryption with @cipherstash/stack. Covers schema definition, encrypt/decrypt operations, searchable encryption (equality, free-text, range, JSON), bulk operations, model operations, identity-aware encryption with LockContext, multi-tenant keysets, and the full TypeScript type system. Use when adding encryption to a project, defining encrypted schemas, or working with the CipherStash Encryption API.
11stash-dynamodb
Integrate CipherStash encryption with Amazon DynamoDB using @cipherstash/stack/dynamodb. Covers the encryptedDynamoDB helper for encrypting items before PutItem and decrypting after GetItem, bulk encrypt/decrypt for BatchWrite and BatchGet, querying with encrypted partition and sort keys via HMAC attributes, nested object encryption, audit logging, and the DynamoDB attribute naming conventions (__source/__hmac). Use when adding encryption to a DynamoDB project, encrypting items before writes, decrypting items after reads, or querying encrypted DynamoDB attributes.
8stash-secrets
Manage encrypted secrets with @cipherstash/stack. Covers the Secrets API for storing, retrieving, listing, and deleting end-to-end encrypted secrets, the stash CLI for terminal-based secret management, environment-based isolation, and bulk secret retrieval. Use when implementing secret management, storing API keys or database URLs, or working with the CipherStash Secrets API or CLI.
8stash-drizzle
Integrate CipherStash encryption with Drizzle ORM using @cipherstash/stack/drizzle. Covers the encryptedType column type, encrypted query operators (eq, like, ilike, gt/gte/lt/lte, between, inArray, asc/desc), schema extraction, batched and/or conditions, EQL migration generation, and the complete Drizzle integration workflow. Use when adding encryption to a Drizzle ORM project, defining encrypted Drizzle schemas, or querying encrypted columns with Drizzle.
8stash-forge
Configure and use `@cipherstash/stack-forge` for EQL database setup, encryption schema management, and Supabase integration.
2