viewerpolicy

func Bump ¶

func Bump(ctx context.Context, db *sql.DB) error

Bump publishes a configuration policy transition before releasing its lease barrier.

func CheckSharedConfigVersion ¶

func CheckSharedConfigVersion(ctx context.Context, tx *sql.Tx, expected int64) error

CheckSharedConfigVersion rechecks the exact version captured by a held config policy lease using the same transaction that already fenced the durable viewer-policy epoch. A clustered caller must not substitute a separate pooled connection or silently ignore missing schema/errors. The epoch trigger on clusterconfig_shared prevents a writer from committing a new shared version while that fence is held. This is not authorization.

func Fence ¶

func Fence(ctx context.Context, db *sql.DB, tx *sql.Tx, expected int64) error

Fence locks the epoch until commit. PostgreSQL policy triggers update this same row. SQLite explicitly obtains the write lock even on connections that use deferred transactions; it must not rely on a particular DSN.

func Read ¶

func Read(ctx context.Context, db *sql.DB) (int64, error)