secrets

type EnvResolver struct{}

type FileResolver struct{}

type Multi struct {
	// contains filtered or unexported fields
}

type OpenBaoResolver = VaultResolver

type Resolver interface {
	Resolve(ctx context.Context, ref SecretRef) (string, error)
}

type SecretRef struct {
	// Provider is the secret backend: "env", "file", "vault", "openbao", "bao"
	Provider string
	// Path is provider-specific: env var name, file path, or Vault/OpenBao path
	Path string
	// Key is the key within the secret (for Vault/OpenBao KV v2)
	Key string
}

type VaultResolver struct {
	// contains filtered or unexported fields
}