@cipherstash/wizard
v0.1.2
Published
AI-powered encryption setup for CipherStash. Reads your codebase, picks columns to encrypt, and wires everything up.
Keywords
Readme
@cipherstash/wizard
AI-powered encryption setup for CipherStash. Reads your codebase, asks which
columns to encrypt, and wires up @cipherstash/stack for you.
Usage
Run it via your package manager's runner — the wizard installs nothing permanently and is intended to be invoked once per project:
npx @cipherstash/wizard # npm / Node
pnpm dlx @cipherstash/wizard # pnpm
yarn dlx @cipherstash/wizard # yarn
bunx @cipherstash/wizard # bunPrerequisites
Before running the wizard, your project should have:
stashavailable (the wizard shells out tostash db install/db pushafter the agent finishes editing)- A
stash.config.ts(or the wizard will runstash db installto scaffold one) - A reachable database via
DATABASE_URL - An authenticated CipherStash session (
stash auth login)
What it does
- Detects your framework (Drizzle, Supabase, Prisma, generic) and TypeScript usage.
- Runs health checks against the CipherStash gateway and your database.
- Prompts you to pick the tables and columns to encrypt.
- Hands a surgical prompt to the Claude Agent SDK, which edits your schema
and call sites to use
@cipherstash/stack's encryption APIs. - Runs deterministic post-agent steps: package install,
db install,db push, framework-specific migrations. - Reports remaining call sites that need
encryptModel/decryptModelwiring.
The agent runs against a CipherStash-hosted LLM gateway — you authenticate with your CipherStash account, no Anthropic API key required.
License
MIT — see LICENSE.
