secret

type Secreter interface {
	// Returns the value and an opaque version, which is empty without change detection
	Lookup(ctx context.Context, key string) (string, string, error)

	// Versions match keys positionally. An empty version means the key can't be watched
	Check(ctx context.Context, keys []string) ([]string, error)
}

type SecreterDeps struct {
	ErrorMessages config.ErrorMessages
	// Rebuilds the entity generation when a watched secret rotates. Nil disables watching
	ReloadFunc func(reason string)
}

type SecreterRegistration interface {
	Name() string
	Initialize(config any, deps SecreterDeps) (Secreter, error)
	InitializeConfig() any
	// Max keys per Check call. 0 means the backend can't be watched
	CheckBatchSize() int
}