credentials

type AESEncryptor struct {
	// contains filtered or unexported fields
}

type ChainedStore struct {
	// contains filtered or unexported fields
}

type Credential struct {
	// Key is the credential identifier
	Key string `json:"key"`

	// Type categorizes the credential (api_key, token, password, certificate, etc.)
	Type CredentialType `json:"type"`

	// Value is the actual credential value
	Value string `json:"value"`

	// SecondaryValue holds additional values (e.g., client_secret for OAuth)
	SecondaryValue string `json:"secondary_value,omitempty"`

	// Metadata holds additional credential information
	Metadata map[string]string `json:"metadata,omitempty"`

	// ExpiresAt is the credential expiration time (if applicable)
	ExpiresAt *time.Time `json:"expires_at,omitempty"`

	// CreatedAt is when the credential was stored
	CreatedAt time.Time `json:"created_at"`

	// UpdatedAt is when the credential was last updated
	UpdatedAt time.Time `json:"updated_at"`
}

type CredentialType string

type EncryptedFileStore struct {
	// contains filtered or unexported fields
}

type Encryptor interface {
	// Encrypt encrypts plaintext and returns ciphertext.
	Encrypt(plaintext []byte) ([]byte, error)

	// Decrypt decrypts ciphertext and returns plaintext.
	Decrypt(ciphertext []byte) ([]byte, error)
}

type EnvStore struct {
	// Prefix is prepended to all key lookups (e.g., "OPENCTEM_")
	Prefix string

	// Mapping overrides key-to-env-var mapping
	Mapping map[string]string
}

type FileStore struct {
	// contains filtered or unexported fields
}

type MemoryStore struct {
	// contains filtered or unexported fields
}

type Store interface {
	// Get retrieves a credential by key.
	Get(ctx context.Context, key string) (*Credential, error)

	// Set stores a credential.
	Set(ctx context.Context, key string, cred *Credential) error

	// Delete removes a credential.
	Delete(ctx context.Context, key string) error

	// List returns all credential keys matching a prefix.
	List(ctx context.Context, prefix string) ([]string, error)

	// Exists checks if a credential exists.
	Exists(ctx context.Context, key string) (bool, error)
}