package vault

import "errors"

// Sentinel errors returned by vault operations.
var (
	// ErrMnemonicMismatch indicates the mnemonic-derived public key does
	// not match the vault's stored public key hash.
	ErrMnemonicMismatch = errors.New(
		"derived public key does not match vault: mnemonic may be incorrect",
	)

	// ErrInvalidVaultName indicates a vault name that does not match the
	// allowed pattern [a-z0-9.\-_]+.
	ErrInvalidVaultName = errors.New(
		"invalid vault name: must match pattern [a-z0-9.\\-_]+",
	)

	// ErrVaultNotFound indicates the named vault does not exist.
	ErrVaultNotFound = errors.New("vault does not exist")

	// ErrNilValueBuffer indicates a nil value buffer was supplied.
	ErrNilValueBuffer = errors.New("value buffer is nil")

	// ErrInvalidSecretName indicates a secret name that does not match
	// the allowed pattern [a-z0-9.\-_/]+.
	ErrInvalidSecretName = errors.New(
		"invalid secret name: must match pattern [a-z0-9.\\-_/]+",
	)

	// ErrSecretExists indicates the secret already exists and --force
	// was not supplied.
	ErrSecretExists = errors.New(
		"secret already exists (use --force to overwrite)",
	)

	// ErrSecretNotFound indicates the named secret does not exist.
	ErrSecretNotFound = errors.New("secret not found")

	// ErrVersionNotFound indicates the requested secret version does not
	// exist.
	ErrVersionNotFound = errors.New("version not found")

	// ErrNoVersions indicates the source secret has no versions.
	ErrNoVersions = errors.New("source secret has no versions")

	// ErrUnsupportedUnlockerType indicates an unlocker metadata type
	// that this build does not support.
	ErrUnsupportedUnlockerType = errors.New("unsupported unlocker type")

	// ErrUnlockerNotFound indicates no unlocker with the given ID exists.
	ErrUnlockerNotFound = errors.New("unlocker not found")
)