secret

type CreateInput struct {
	Name        string
	Value       string
	Description string
	// Options carries provider-specific write options (e.g. AWS Secrets Manager
	// KMS key, rotation). They are passed through to the provider unchanged.
	Options []provider.WriteOption
}

type CreateOutput struct {
	Name      string
	VersionID string
}

type CreateUseCase struct {
	Writer provider.Writer
}

type DeleteInput struct {
	Name string
	// Options carries provider-specific delete options (e.g. AWS Secrets Manager
	// ForceDelete / RecoveryWindow). They are passed through to the provider
	// unchanged.
	Options []provider.DeleteOption
}

type DeleteOutput struct {
	Name string
}

type DeleteUseCase struct {
	Store provider.Store
}

type DiffInput struct {
	Spec1 *secretversion.Spec
	Spec2 *secretversion.Spec
}

type DiffOutput struct {
	OldName      string
	OldVersionID string
	OldValue     string
	NewName      string
	NewVersionID string
	NewValue     string
}

type DiffUseCase struct {
	Reader provider.Reader
}

type ListEntry struct {
	Name  string
	Value *string // nil when error or not requested
	Error error
}

type ListInput struct {
	Prefix    string // Name prefix filter (case-sensitive), replicating the AWS name filter
	Filter    string // Regex filter pattern (client-side)
	WithValue bool   // Include secret values
}

type ListOutput struct {
	Entries   []ListEntry
	NextToken string // Retained for API compatibility; always empty (provider lists all names)
}

type ListUseCase struct {
	Reader provider.Reader
}

type LogEntry struct {
	VersionID    string
	VersionStage []string
	Value        string
	CreatedDate  *time.Time
	IsCurrent    bool
	Error        error // Error from fetching value, if any
}

type LogInput struct {
	Name       string
	MaxResults int32
	Since      *time.Time
	Until      *time.Time
	Reverse    bool // Reverse chronological order
}

type LogOutput struct {
	Name    string
	Entries []LogEntry
}

type LogUseCase struct {
	Reader provider.Reader
}

type RestoreInput struct {
	Name string
}

type RestoreOutput struct {
	Name string
}

type RestoreUseCase struct {
	Restorer provider.Restorer
}

type ShowInput struct {
	Spec *secretversion.Spec
}

type ShowOutput struct {
	Name         string
	ARN          string
	Value        string
	VersionID    string
	VersionStage []string
	Description  string
	CreatedDate  *time.Time
	Tags         []ShowTag
}

type ShowTag struct {
	Key   string
	Value string
}

type ShowUseCase struct {
	Reader provider.Reader
}

type TagInput struct {
	Name   string
	Add    map[string]string // Tags to add or update
	Remove []string          // Tag keys to remove
}

type TagUseCase struct {
	Tagger provider.Tagger
}

type UpdateInput struct {
	Name        string
	Value       string
	Description string
	// Options carries provider-specific write options (e.g. AWS Secrets Manager
	// KMS key, rotation). They are passed through to the provider unchanged.
	Options []provider.WriteOption
}

type UpdateOutput struct {
	Name      string
	VersionID string
}

type UpdateUseCase struct {
	Store provider.Store
}