vault

type AuditIntegration struct {
	// contains filtered or unexported fields
}

type ConfigIntegration struct {
	// contains filtered or unexported fields
}

type Credential struct {
	// ID is a unique identifier for the credential
	ID string `json:"id"`
	// Name is a human-readable name for the credential
	Name string `json:"name"`
	// Type is the type of credential
	Type CredentialType `json:"type"`
	// Service is the service this credential is for (e.g., "openai", "anthropic")
	Service string `json:"service"`
	// Value is the actual credential value (encrypted when stored)
	Value string `json:"value"`
	// Description is an optional description of the credential
	Description string `json:"description,omitempty"`
	// Tags are optional tags for organizing credentials
	Tags []string `json:"tags,omitempty"`
	// Metadata is additional metadata for the credential
	Metadata map[string]string `json:"metadata,omitempty"`
	// RotationPolicy is the rotation policy for this credential
	RotationPolicy *RotationPolicy `json:"rotation_policy,omitempty"`
	// CreatedAt is when the credential was created
	CreatedAt time.Time `json:"created_at"`
	// UpdatedAt is when the credential was last updated
	UpdatedAt time.Time `json:"updated_at"`
	// ExpiresAt is when the credential expires (if applicable)
	ExpiresAt time.Time `json:"expires_at,omitempty"`
	// LastUsedAt is when the credential was last used
	LastUsedAt time.Time `json:"last_used_at,omitempty"`
}

type CredentialManager struct {
	// contains filtered or unexported fields
}

type CredentialType string

type ManagerOptions struct {
	// ConfigDir is the directory for configuration files
	ConfigDir string
	// Passphrase is used to derive the encryption key
	Passphrase string
	// EnvPrefix is the prefix for environment variables
	EnvPrefix string
	// AuditLogger is used for logging credential access
	AuditLogger *securityAudit.AuditLoggerAdapter
	// AutoSave determines whether to automatically save after changes
	AutoSave bool
	// RotationCheckInterval is how often to check for credentials that need rotation
	RotationCheckInterval time.Duration
	// InstallGitHook determines whether to install a git hook to prevent credential leakage
	InstallGitHook bool
	// GitDir is the custom git directory to use for git hook installation (for testing)
	GitDir string
}

type RotationPolicy struct {
	// Enabled indicates whether automatic rotation is enabled
	Enabled bool `json:"enabled"`
	// IntervalDays is the number of days between rotations
	IntervalDays int `json:"interval_days"`
	// LastRotation is the timestamp of the last rotation
	LastRotation time.Time `json:"last_rotation"`
	// WarningDays is the number of days before expiration to start showing warnings
	WarningDays int `json:"warning_days"`
}

type SecureVault struct {
	// contains filtered or unexported fields
}

type VaultOptions struct {
	// Passphrase is used to derive the encryption key
	Passphrase string
	// AuditLogger is used for logging credential access
	AuditLogger *securityAudit.AuditLoggerAdapter
	// AutoSave determines whether to automatically save after changes
	AutoSave bool
	// RotationCheckInterval is how often to check for credentials that need rotation
	RotationCheckInterval time.Duration
	// AlertCallback is called when a credential needs rotation
	AlertCallback func(credential *Credential, daysUntilExpiration int)
}