feat(stack-encrypt): passthrough, Index/Indexes, Encrypted<Terms> and field types for the plan builder

Cargo.toml

@@ -120,12 +120,13 @@ web-time = "1.1"
 zeroize = { version = "1.8.1", features = ["derive"] }
 # This is needed because lock_api 0.4.6 was breaking things and the branch forces the use of 0.4.12
 temp-env = { git = "https://github.com/cipherstash/temp-env", branch = "main" }
-vitaminc = { version = "0.5.0", features = ["random", "protected", "encrypt"] }
-vitaminc-aead = "0.5.0"
+vitaminc = { version = "0.5.1", features = ["random", "protected", "encrypt"] }
+vitaminc-aead = "0.5.1"
 # The dynamic value model (`FfiValue`) and its FFI transport codec, shared by
 # every language binding. Optional in stack-encrypt (the `dynamic` feature).
-vitaminc-aead-value = "0.5.0"
-vitaminc-encrypt = "0.5.0"
-vitaminc-hmac = "0.5.0"
-vitaminc-prf = "0.5.0"
-vitaminc-protected = "0.5.0"
+# 0.5.1 adds `ValueKind`, the field-type vocabulary a dynamic plan declares.
+vitaminc-aead-value = "0.5.1"
+vitaminc-encrypt = "0.5.1"
+vitaminc-hmac = "0.5.1"
+vitaminc-prf = "0.5.1"
+vitaminc-protected = "0.5.1"

docs/fuzzing.md

@@ -25,7 +25,7 @@ Current targets:
 | `fuzz:jwt-decode`    | `stack-auth`  | `jwt_decode`          | JWT claims (`Token::fuzz_decode_claims`)      |
 | `fuzz:client-key`    | `stack-kms`   | `client_key_encoded`  | `ClientKey::from_encoded_v1` (hex or base64)  |
 | `fuzz:sealed-value`  | `stack-encrypt` | `sealed_value_decode` | `SealedValue::from_bytes` (frozen v1 leaf); accepted input must re-encode to itself |
-| `fuzz:term-decode`   | `stack-encrypt` | `term_decode`       | the SEM term decoders (`EqualityTerm`, `MatchTerm`, `OreTerm`, `OpeTerm` `from_bytes`) |
+| `fuzz:term-decode`   | `stack-encrypt` | `term_decode`       | the SEM term decoders (`EqualityTerm`, `MatchTerms`, `OreTerm`, `OpeTerm` `from_bytes`) |
 | `fuzz:check-record`  | `stack-encrypt` | `check_record`      | `dynamic::record::check_record` over an `Arbitrary`-derived plan and tree, against a model of the record rules (structure-aware) |
 
 Each target is a few lines — `libfuzzer-sys` hands a `&str` (or `&[u8]`