cyberneticlibrary

Initialize encryption and secret storage

stashskillsetup L20
cipherstash/stack
What it does

Initialize and manage CipherStash encrypted database schemas end-to-end

Best for

Setting up encrypted columns in Postgres with zero-footgun scaffolding into Claude Code / Codex

Inputs
  • · DATABASE_URL
  • · ORM type (Drizzle/Supabase/plain Postgres)
Outputs
  • · ./src/encryption/index.ts with auto-generated schema
  • · .cipherstash/context.json
  • · setup-prompt.md action plan
Requires
  • · PostgreSQL
  • · Node.js
  • · CipherStash CLI
  • · optional: Claude Code / Codex
Preconditions

PostgreSQL database running, DATABASE_URL resolvable

Failure modes

Cannot introspect schema if DB has no tables, ORM detection may need manual override

Trust signals
  • · ALCHEMY_PASSWORD generated via openssl
  • · .gitignore auto-enforced
  • · pre-commit hook scans for secrets