secrets

type Cryptor interface {
	GenerateKeyPairWithProfile(projectName, profile string) error
	GenerateEd25519KeyPairWithProfile(projectName, profile string) error
	ReadProfileConfig() error
	AddFile(path string) error
	RemoveFile(path string) error
	DecryptAll(forceChanged bool) error
	EncryptChanged(force bool, forceChanged bool) error
	ReadSecretFiles() error
	MarshalSecretsFile() error
	GetSecretFiles() EncryptedSecretFiles
	GetAndDecryptFileContent(relPath string) ([]byte, error)
	PublicKey() string
	PrivateKey() string
	Workdir() string
	// AddPublicKey allow another public key to encrypt secrets
	AddPublicKey(pubKey string) error
	// RemovePublicKey remove public key from encrypting secrets
	RemovePublicKey(pubKey string) error
	// GetKnownPublicKeys return all public keys
	GetKnownPublicKeys() []string

	Options() []Option
	GitRepo() git.Repo
}

type EncryptedSecretFile struct {
	Path          string   `json:"path" yaml:"path"`
	EncryptedData []string `json:"encryptedData" yaml:"encryptedData"`
}

type EncryptedSecretFiles struct {
	// SchemaVersion is the secrets.yaml schema version. Absent/0 = the original
	// format. A reader refuses any value above CurrentSecretsSchemaVersion (fail-closed).
	SchemaVersion int                         `json:"schemaVersion,omitempty" yaml:"schemaVersion,omitempty"`
	Registry      Registry                    `json:"registry" yaml:"registry"`
	Secrets       map[string]EncryptedSecrets `json:"secrets" yaml:"secrets"`
}

type EncryptedSecrets struct {
	Files     []EncryptedSecretFile `json:"secrets" yaml:"secrets"`
	PublicKey SshKey                `json:"publicKeys" yaml:"publicKeys"`

	// not to be serialized
	PrivateKey SshKey `json:"-" yaml:"-"`
}

type Option struct {
	// contains filtered or unexported fields
}

type Registry struct {
	Files []string `json:"files" yaml:"files"`
}

type SshKey struct {
	Data []byte `json:"data" yaml:"data"`
}