vault

type AuditEntry struct {
	ID         int64
	RepoID     int64
	SecretName string
	Action     string
	UserID     int64
	UserName   string
	IPAddress  string
	Success    bool
	FailReason string
	Timestamp  int64
}

type ConfigurablePlugin interface {
	// IsConfigured returns true if the plugin is properly configured (e.g., has master key)
	IsConfigured() bool
	// ConfigurationError returns the configuration error message, if any
	ConfigurationError() string
}

type CreateSecretOptions struct {
	Name        string
	Description string
	Type        string
	Value       string
	CreatorID   int64
}

type CreateTokenOptions struct {
	Description string
	Scope       string
	TTL         string // e.g., "1h", "24h", "168h"
	CreatorID   int64
}

type Plugin interface {
	plugins.Plugin
	plugins.LicensedPlugin

	// Secret operations
	ListSecrets(ctx context.Context, repoID int64, includeDeleted bool) ([]Secret, error)
	GetSecret(ctx context.Context, repoID int64, name string) (*Secret, error)
	GetSecretValue(ctx context.Context, repoID int64, name string, version int) (string, error)
	CreateSecret(ctx context.Context, repoID int64, opts CreateSecretOptions) (*Secret, error)
	UpdateSecret(ctx context.Context, repoID int64, name string, opts UpdateSecretOptions) (*Secret, error)
	DeleteSecret(ctx context.Context, repoID int64, name string, userID int64) error
	RestoreSecret(ctx context.Context, repoID int64, name string) error
	RollbackSecret(ctx context.Context, repoID int64, name string, version int, userID int64) error

	// Version operations
	ListVersions(ctx context.Context, repoID int64, name string) ([]SecretVersion, error)

	// Token operations
	ListTokens(ctx context.Context, repoID int64) ([]Token, error)
	CreateToken(ctx context.Context, repoID int64, opts CreateTokenOptions) (*Token, string, error) // returns token and raw value
	RevokeToken(ctx context.Context, repoID, tokenID int64) error
	ValidateToken(ctx context.Context, rawToken, action, secretName string) (*Token, error)

	// Audit operations
	ListAuditEntries(ctx context.Context, repoID int64, page, pageSize int) ([]AuditEntry, int64, error)
}

type Secret struct {
	ID             int64
	RepoID         int64
	Name           string
	Description    string
	Type           string
	CurrentVersion int
	CreatedUnix    int64
	UpdatedUnix    int64
	DeletedUnix    int64
}

type SecretVersion struct {
	ID          int64
	SecretID    int64
	Version     int
	CreatorID   int64
	CreatorName string
	Comment     string
	CreatedUnix int64
}

type Token struct {
	ID           int64
	RepoID       int64
	Description  string
	Scope        string
	CreatedUnix  int64
	ExpiresUnix  int64
	LastUsedUnix int64
	UsedCount    int64
	IsRevoked    bool
	IsExpired    bool
}

type UpdateSecretOptions struct {
	Type      string
	Value     string
	Comment   string
	UpdaterID int64
}