sqlstore

type Config struct {
	// DB is the open SQL database handle. The caller owns its lifetime.
	DB *sql.DB

	// Table is the table that stores encrypted secrets. Defaults to
	// "omnivault_secrets".
	Table string

	// Dialect controls placeholder and upsert syntax. Supported values are
	// "mysql", "postgres", and "sqlite". Empty defaults to "mysql".
	Dialect string

	// EncryptionKey is the AES key used to encrypt secret payloads. It must be
	// 16, 24, or 32 bytes. Store this key outside the database, for example in
	// env, keyring, or a cloud secret manager.
	EncryptionKey []byte

	// KeyID is optional metadata that identifies which key encrypted a row.
	KeyID string

	// AutoMigrate creates the table if it does not already exist.
	AutoMigrate bool

	// ReadOnly prevents writes and deletes.
	ReadOnly bool
}

type Provider struct {
	// contains filtered or unexported fields
}