package main

import (
	"dagger.io/dagger"
	"dagger.io/os"
)

// Test secret mount
SimpleSecret: {
	// 'encrypted' and 'cleartext' must be set from identical values
	encrypted: dagger.#Secret @dagger(input)
	cleartext: string         @dagger(input)

	ctr: os.#Container & {
		secret: "/secret-in": encrypted
		command: "cat /secret-in > /secret-out"
	}

	// Decrypted secret
	decrypted: (os.#File & {
			from: ctr
			path: "/secret-out"
	}).contents @dagger(output)

	// Assertion: decrypted value must match original cleartext
	decrypted: cleartext
}