secret version list no longer shows a version without NOT_AFTER as expired (closes #150)

STATUS was `expired` for every version other than the current one, so after a promote the newest version, which has no NOT_AFTER, read `expired`. STATUS is now `current` for the current version, `expired` for another version whose NOT_AFTER has passed, and `inactive` for any other version. README describes the three. Judgement call: the issue left the third word to the owner; `inactive` is the word the plan comment on the issue chose. Model: opus-5-5
2026-10-15 04:48:53 +02:00
parent 0ffffd5e3f
commit 00e34b93ec
4 changed files with 76 additions and 3 deletions
@@ -32,7 +32,8 @@ type VersionMetadata struct {
 	ID        string     `json:"id"`                  // ULID
 	CreatedAt *time.Time `json:"createdAt,omitempty"` // When version was created
 	NotBefore *time.Time `json:"notBefore,omitempty"` // When this version becomes active
-	NotAfter  *time.Time `json:"notAfter,omitempty"`  // Expiry (nil = current)
+	// NotAfter is set when another version is added while this one is current
+	NotAfter *time.Time `json:"notAfter,omitempty"`
 }

 // Version represents a version of a secret