record

type Field struct {
	// Name is the field's name in the declaration: the key of its value in a
	// source and of its outputs in a result.
	Name string
	// Identity is the last segment of the field's label, under the plan's
	// context. It is the name unless a policy pinned another.
	Identity string
	// Kind is the declared type, or Untyped.
	Kind Kind
	// Outputs are the field's outputs: Ciphertext and/or terms, at least one
	// — unless the field names a Target, which has none of its own.
	Outputs []Output
	// Target is the EQL type the field seals into (encrypt_into), such as
	// TextEq, or "". A field has outputs or a target, never both: the EQL
	// type's own plan decides what is sealed and which terms sit beside it,
	// and the engine returns the finished value under EQLKey.
	Target string
}

type Kind string

type Output string

type Outputs struct {
	// Ciphertext is the frozen leaf bytes, or nil for an index-only field
	// or a target field.
	Ciphertext []byte
	// Terms are the index terms by output, each its frozen bytes.
	Terms map[Output][]byte
	// EQL is the EQL value's JSON bytes for a field that names a Target.
	EQL []byte
	// Context is the context field's value as the record stores it, in the
	// clear, and nothing for any other field.
	Context string
}

type Plan struct {
	// Context is the label every field's label extends: at least one plain
	// segment. The guest requires a field's label to have two or more
	// segments, which the identity supplies. Empty when ContextField is set.
	Context []string
	// ContextField is the name of the record's field whose value is the
	// context, when the declaration takes its context from a field rather
	// than from Context: the engine's context_field. The field is a string,
	// crosses the binding as a passthrough, and is not in Fields. Each
	// field's label is then its identity alone, under that value.
	ContextField string
	// Extension is the caller's parts, nested to the left of every field's
	// label, in order: a tenant, a region.
	Extension []any
	// Fields are the sealed fields, in declared order.
	Fields []Field
}

type Sealed = map[string]Outputs

type Source = map[string]any

type Target struct {
	// Name is the Go type name, and the value of encrypt_into: TextEq.
	Name string
	// Family and Suffix are the two halves of the name: Text, Eq.
	Family string
	Suffix string
	// Plaintext is the kind the type seals, or Untyped when the entry says
	// null.
	Plaintext Kind
	// SQLDomain is the Postgres domain of the stored value.
	SQLDomain string
	// Indexes are the terms the type carries.
	Indexes []Output
	// Query is the Go type name of the query value, or "" for none.
	Query string
	// QuerySQLDomain is the Postgres domain of the query value, or "".
	QuerySQLDomain string
	// Producible says whether this build of the engine produces the type;
	// Reason says why not when it does not.
	Producible bool
	Reason     string
}