pgbinding

type Access interface {
	postgres.Access
	EnsureBindingRole(context.Context, *engine.Context, string, int) error
	VerifyBindingRole(context.Context, *engine.Context, string) (uint32, error)
	OwnBindingDatabase(context.Context, *engine.Context, postgres.Database) error
	BindingEndpoint(context.Context, *engine.Context) (string, []byte, error)
}

type BackupBinder interface {
	Backup(ctx context.Context, bindingID, backupType, idempotencyKey string) (BackupRef, error)
	BackupStatus(ctx context.Context, bindingID, backupID string) (State, error)
	Restore(ctx context.Context, bindingID, backupID, idempotencyKey string, acknowledgeShared bool) (OperationRef, error)
	OperationStatus(ctx context.Context, bindingID, operationID string) (State, error)
}

type BackupRef struct{ ID string }

type Connection struct {
	BindingID string
	// Host and Port address the source's stable writer endpoint.
	Host      string
	Port      int
	Databases []string
	Username  string
	// PasswordSecretRef names the sealed password; resolve it only in-process
	// through Service.Password and never return it through an API read.
	PasswordSecretRef string
	TLS               TLS
	// MaxConnections is the role's connection limit; zero means unlimited.
	MaxConnections int
	// CredentialGeneration increases on every password rotation. Consumers
	// compare it in Sync and re-render/roll their configuration on change.
	CredentialGeneration int64
	// Shared reports other consumers bound to the same source; ConsumerCount
	// includes this binding. In-place restores and major upgrades of the source
	// affect every bound consumer.
	Shared        bool
	ConsumerCount int
}

type Manager struct {
	// contains filtered or unexported fields
}

type OperationRef struct{ ID string }

type Options struct {
	Store   *store.Store
	Source  func(context.Context, domain.ClusterRef) (*engine.Context, Access, error)
	Trigger func(domain.ClusterRef)
}

type Request struct {
	// ConsumerKind is the consumer provider, e.g. "keycloak", "temporal", "openbao".
	ConsumerKind      string
	ConsumerNamespace string
	ConsumerName      string
	SourceNamespace   string
	SourceCluster     string
	// Databases are created on the source and owned by the binding role (>=1, same cluster).
	Databases []string
	// Extensions are created in every bound database; each must be available on the source.
	Extensions []string
	// MinMajor and MaxMajor bound the PostgreSQL majors the consumer supports;
	// zero means unbounded. The source's major upgrades honour MaxMajor.
	MinMajor, MaxMajor int
}

type Service interface {
	Ensure(context.Context, Request) (Connection, error)
	Resolve(ctx context.Context, bindingID string) (Connection, error)
	// Release removes the binding. Unless keepData, the bound databases and role
	// are dropped on the source after the consumer's runtimes are gone; with
	// keepData the databases remain and the role is disabled (NOLOGIN).
	Release(ctx context.Context, bindingID string, keepData bool) error
	Password(ctx context.Context, ref string) (string, error)
}

type State struct {
	Phase       string
	CompletedAt time.Time
	Error       string
}

type TLS struct {
	Mode  string
	CAPEM []byte
}