fix: sync array_index_mode to stack schema and clean up code

- Add array_index_mode support to packages/stack/src/schema (was
  only in packages/schema, causing silent divergence)
- Update stack schema builder tests for array_index_mode
- Remove empty constructors from ProtectClient and EncryptionClient
- Replace TOCTOU existsSync check with try/catch in drizzle migration generator

Author: coderdan

packages/drizzle/src/bin/generate-eql-migration.ts

@@ -85,13 +85,15 @@ async function main(): Promise<void> {
     const eqlSql = await response.text()
 
     const drizzlePath = resolve(process.cwd(), args.drizzleDir)
-    if (!existsSync(drizzlePath)) {
+
+    let files: string[]
+    try {
+      files = await readdir(drizzlePath)
+    } catch {
       throw new Error(
         `Drizzle directory not found: ${drizzlePath}\nMake sure to run this command from your project root.`,
       )
     }
-
-    const files = await readdir(drizzlePath)
     const migrationFile = files
       .filter(
         (file) => file.endsWith('.sql') && file.includes(args.migrationName),

packages/protect/src/ffi/index.ts

@@ -47,8 +47,6 @@ export const noClientError = () =>
 export class ProtectClient {
   private client: Client
   private encryptConfig: EncryptConfig | undefined
-  constructor() {}
-
 
   /**
    * Initializes the ProtectClient with the provided configuration.

packages/stack/__tests__/schema-builders.test.ts

@@ -114,7 +114,7 @@ describe('schema builders', () => {
       const built = col.build()
       expect(built.cast_as).toBe('json')
       expect(built.indexes).toHaveProperty('ste_vec')
-      expect(built.indexes.ste_vec).toEqual({ prefix: 'enabled' })
+      expect(built.indexes.ste_vec).toEqual({ prefix: 'enabled', array_index_mode: 'all' })
     })
 
     it('chaining multiple indexes: .equality().freeTextSearch().orderAndRange()', () => {
@@ -222,6 +222,7 @@ describe('schema builders', () => {
       expect(built.columns.metadata.cast_as).toBe('json')
       expect(built.columns.metadata.indexes.ste_vec).toEqual({
         prefix: 'documents/metadata',
+        array_index_mode: 'all',
       })
     })
 
@@ -296,6 +297,7 @@ describe('schema builders', () => {
 
       expect(config.tables.documents.metadata.indexes.ste_vec).toEqual({
         prefix: 'documents/metadata',
+        array_index_mode: 'all',
       })
     })
   })

packages/stack/src/encryption/index.ts

@@ -49,8 +49,6 @@ export class EncryptionClient {
   private client: Client
   private encryptConfig: EncryptConfig | undefined
 
-  constructor() {}
-
   /**
    * Initializes the EncryptionClient with the provided configuration.
    * @internal

packages/stack/src/schema/index.ts

@@ -104,8 +104,19 @@ const matchIndexOptsSchema = z.object({
   include_original: z.boolean().default(false).optional(),
 })
 
+const arrayIndexModeSchema = z.union([
+  z.literal('all'),
+  z.literal('none'),
+  z.object({
+    item: z.boolean().optional(),
+    wildcard: z.boolean().optional(),
+    position: z.boolean().optional(),
+  }),
+])
+
 const steVecIndexOptsSchema = z.object({
   prefix: z.string(),
+  array_index_mode: arrayIndexModeSchema.optional(),
 })
 
 const indexesSchema = z
@@ -379,7 +390,7 @@ export class EncryptedColumn {
    */
   searchableJson() {
     this.castAsValue = 'json'
-    this.indexesValue.ste_vec = { prefix: 'enabled' }
+    this.indexesValue.ste_vec = { prefix: 'enabled', array_index_mode: 'all' }
     return this
   }
 
@@ -461,6 +472,7 @@ export class EncryptedTable<T extends EncryptedTableColumn> {
             indexes: {
               ...builtColumn.indexes,
               ste_vec: {
+                ...builtColumn.indexes.ste_vec,
                 prefix: `${this.tableName}/${colName}`,
               },
             },