secrets_sync

type ConfigInfo struct {
	Valid         bool     // Whether the configuration is valid.
	ErrorMessage  string   // Error message if invalid.
	SourceCount   int      // Number of sources.
	TargetCount   int      // Number of targets.
	Sources       []string // List of source names, sorted alphabetically.
	Targets       []string // List of target names, sorted alphabetically.
	HasMergeStore bool     // Whether a merge store is configured.
	VaultAddress  string   // Vault address if configured.
	AWSRegion     string   // AWS region if configured.
}

type PipelineConfig struct {
	Path string // Path to YAML configuration file.
}

type ProviderSession struct {
	DelegateAuth       bool   // If true, ignore explicit session fields and let secrets-sync authenticate.
	VaultAddress       string // Vault address for an upstream-owned Vault session.
	VaultNamespace     string // Vault namespace for the upstream-owned Vault session.
	VaultToken         string // Vault token for the upstream-owned Vault session.
	AWSRegion          string // AWS region for the upstream-owned AWS session.
	AWSAccessKeyID     string // AWS access key ID for the upstream-owned AWS session.
	AWSSecretAccessKey string // AWS secret access key for the upstream-owned AWS session.
	AWSSessionToken    string // AWS session token for temporary credentials.
	AWSRoleARN         string // Optional role ARN to assume from the supplied AWS session.
	AWSEndpointURL     string // Optional AWS endpoint override for local or custom providers.
}

type StringListResult struct {
	Success      bool     // Whether the list was read successfully.
	ErrorMessage string   // Error message if the read failed.
	Values       []string // Sorted values.
}

type SyncOptions struct {
	DryRun          bool   // If true, do not make actual changes.
	Operation       string // "merge", "sync", or "pipeline".
	Targets         string // Comma-separated list of targets. Empty means all targets.
	ContinueOnError bool   // Continue on errors.
	Parallelism     int    // Number of parallel operations.
	ComputeDiff     bool   // Compute and return diff.
	OutputFormat    string // "human", "json", "github", "compact", or "side-by-side".
	ShowValues      bool   // If true, show unmasked secret values in diff output.
}

type SyncResult struct {
	Success          bool   // Overall success status.
	TargetCount      int    // Number of targets processed.
	SecretsProcessed int    // Total secrets processed.
	SecretsAdded     int    // Secrets added.
	SecretsModified  int    // Secrets modified.
	SecretsRemoved   int    // Secrets removed.
	SecretsUnchanged int    // Secrets unchanged.
	DurationMs       int64  // Duration in milliseconds.
	ErrorMessage     string // Error message if failed.
	ResultsJSON      string // Full results as JSON.
	DiffOutput       string // Diff output if computed.
}

type ValidationResult struct {
	Valid        bool   // Whether the configuration is valid.
	Message      string // Human-readable validation message.
	ErrorMessage string // Error message if validation failed.
}