secrets

type AWSResolver struct {
	// contains filtered or unexported fields
}

type AzureResolver struct {
	// contains filtered or unexported fields
}

type Config struct {
	// Provider specifies which secret manager to use
	// Valid values: "aws", "gcp", "azure", "env"
	Provider string

	// AWS specific
	AWSRegion string

	// GCP specific
	GCPProjectID string

	// Azure specific
	AzureVaultURL string
}

type EnvResolver struct{}

type GCPResolver struct {
	// contains filtered or unexported fields
}

type Resolver interface {
	// GetSecret retrieves a secret value by ID/ARN/name
	GetSecret(ctx context.Context, secretID string) (string, error)

	// GetSecretJSON retrieves a secret and parses it as JSON
	GetSecretJSON(ctx context.Context, secretID string) (map[string]any, error)

	// PutSecret creates or updates a secret value by ID/ARN/name
	PutSecret(ctx context.Context, secretID, value string) error

	// ListSecrets lists available secrets.
	// Filter behavior varies by provider:
	//   - AWS: uses API-side substring matching (FilterNameStringTypeName)
	//   - Azure: uses prefix matching (strings.HasPrefix)
	//   - GCP: uses prefix matching (strings.HasPrefix)
	//   - Env: uses prefix matching (strings.HasPrefix)
	ListSecrets(ctx context.Context, filter string) ([]string, error)

	// Close cleans up any resources
	Close() error
}