dbrotate

type Apps interface {
	// Dependents splits linked apps into running ones, which restart, and
	// suspended ones, which pick the new credential up when started.
	Dependents(ctx context.Context, database string) (running, suspended []string, err error)
	Restart(ctx context.Context, database string) []string
}

type Auditor interface {
	Record(ctx context.Context, action, database, actor string)
}

type Databases interface {
	GetDesiredDatabase(ctx context.Context, name string) (*store.DesiredDatabase, error)
}

type Driver interface {
	// Set makes newPassword the owner password. adminPassword is the one in
	// force now, for engines that authenticate the admin session.
	Set(ctx context.Context, ex Exec, containerID, database, adminPassword, newPassword string) error
	// Verify logs in as the owner with password and fails if it is refused.
	Verify(ctx context.Context, ex Exec, containerID, database, password string) error
}

type Exec interface {
	ExecWithInput(ctx context.Context, containerID string, cmd []string, stdin io.Reader) (io.ReadCloser, error)
}

type Preview struct {
	Database        string
	Engine          string
	Supported       bool
	Reason          string
	RestartRequired bool
	Apps            []string
	SuspendedApps   []string
	State           string
	LastError       string
	LastChangedAt   time.Time
	IntervalDays    int
	NextDue         time.Time
}

type Result struct {
	Database      string
	RestartedApps []string
	RotatedAt     time.Time
}

type Secrets interface {
	Resolve(ctx context.Context, serviceName, envKey string) (string, error)
	Exists(ctx context.Context, serviceName, envKey string) (bool, error)
	SetValueGuarded(ctx context.Context, serviceName, envKey, plaintext string, overwriteLocked bool) error
	ListKeys(ctx context.Context, serviceName string) ([]store.SecretKeyInfo, error)
	DeleteValue(ctx context.Context, serviceName, envKey string) error
}

type Service struct {
	Store     Store
	Databases Databases
	Secrets   Secrets
	Target    Target
	Apps      Apps
	Auditor   Auditor
	Logger    *slog.Logger
	Now       func() time.Time
	// contains filtered or unexported fields
}

type Store interface {
	GetDatabasePasswordRotation(ctx context.Context, name string) (store.DatabasePasswordRotation, error)
	ListDatabasePasswordRotations(ctx context.Context) ([]store.DatabasePasswordRotation, error)
	SetDatabasePasswordRotationInterval(ctx context.Context, name string, days int, now time.Time) error
	SaveDatabasePasswordRotationState(ctx context.Context, name, state, reason string, lastRotated, pendingSince, now time.Time) error
	DeleteDatabasePasswordRotation(ctx context.Context, name string) error
}

type Target interface {
	Locate(ctx context.Context, d *store.DesiredDatabase) (Exec, string, error)
}