authorizedexecute

type AuthError struct{ Reason Reason }

type AuthorizedSelectResult struct {
	Allowed bool
	Reason  Reason
	Result  model.QueryResult
	Redact  mask.RedactReport
	Audit   ColumnAuthorizationAudit
	Encoded []byte
	Seal    DeliverySeal
}

type B5DMLAuthorizationConfig struct {
	PrincipalID          string
	DatasourceID         string
	Policies             []b5dml.Policy
	Decision             b5coordinator.Decision
	PreliminaryAllowed   bool
	DatasourceSupported  bool
	ReservedTarget       bool
	PolicySnapshotDigest string
}

type B5DMLPolicyProvider func(context.Context, b5dml.StatementFacts, b5coordinator.StatementRequest, int) (B5DMLAuthorizationConfig, error)

type B5PostgresRuntime struct {
	Analyzer b5coordinator.Analyzer
	Engine   b5coordinator.Engine
}

type Budget struct {
	// contains filtered or unexported fields
}

type ColumnAuditDetail struct {
	Identity string `json:"identity"`
	Usage    string `json:"usage"`
	Site     string `json:"site"`
	Reason   string `json:"reason"`
}

type ColumnAuthorizationAudit struct {
	Version        int                 `json:"version"`
	Decision       string              `json:"decision"`
	Reason         string              `json:"reason"`
	PlanDigest     string              `json:"plan_digest"`
	BinderDigest   string              `json:"binder_digest"`
	FpreDigest     string              `json:"fpre_digest"`
	FpostDigest    string              `json:"fpost_digest,omitempty"`
	Details        []ColumnAuditDetail `json:"details,omitempty"`
	Truncated      bool                `json:"truncated,omitempty"`
	CompleteDigest string              `json:"complete_digest,omitempty"`
}

type ColumnAuthorizationProvider interface {
	BeginColumnAuthorization(context.Context, string, model.Datasource) (ColumnAuthorizationRequest, func() error, error)
}

type ColumnAuthorizationRequest struct {
	Agent              model.Agent
	Policies           []model.Policy
	Redactor           mask.Redactor
	RowLimit           int
	PreliminaryAllowed bool
	// BindBeforePreliminaryDeny permits the prepare-only binder to resolve
	// object existence before honoring a preliminary static denial. The
	// preliminary denial remains part of the sealed authorization input, so a
	// successfully bound statement is still denied before execution.
	BindBeforePreliminaryDeny bool
	ControlRevisionDigest     string
	Limits                    Limits
	DurableAudit              func(context.Context, ColumnAuthorizationAudit, *model.QueryResult, mask.RedactReport) error
	FinalFence                func(context.Context) error
	Observe                   func(SelectPhase)
	// These credentials are supplied by the local, per-datasource configuration
	// and are used only by the fixed PROCESS-only TABLE_ID inspector.
	MySQLMetadataUsername string
	MySQLMetadataPassword string
}

type ColumnAuthorizedStatement interface {
	Statement
	ColumnAuthorizationResult() (AuthorizedSelectResult, bool)
}

type ColumnRef struct{ Schema, Table, Column string }

type DBError = businessdb.DBError

type DBErrorCode = businessdb.DBErrorCode

type DBErrorKind = businessdb.DBErrorKind

type DBStage = businessdb.DBStage

type DeliverySeal struct {
	// contains filtered or unexported fields
}

type Gateway struct {
	// contains filtered or unexported fields
}

type GatewayOption func(*Gateway)

type Limits struct {
	RawSQLBytes       int
	ParameterCount    int
	ParameterBytes    int
	ParametersBytes   int
	Tokens            int
	LexicalDepth      int
	ASTNodes          int
	QueryBlocks       int
	Projections       int
	OutputColumns     int
	Relations         int
	ViewDepth         int
	CatalogRoundTrips int
	DefinitionBytes   int
	BinderBytes       int
	CatalogBytes      int
	CatalogRows       int
	ColumnMetadata    int
	DependencyEdges   int
	ExpandedPaths     int
	WorkUnits         int
	FrameBytes        int
	RawCellBytes      int
	RawRowBytes       int
	RawResultBytes    int
	MaskedCellBytes   int
	MaskedResultBytes int
	EnvelopeBytes     int
}

type MySQLCatalogColumn = businessdb.MySQLBoundColumn

type MySQLCatalogLease struct {
	// contains filtered or unexported fields
}

type MySQLColumnCatalog = businessdb.MySQLBoundCatalog

type NativeCatalog = businessdb.NativeCatalog

type NativeNamespace = businessdb.NativeNamespace

type NativeQueryRequest = businessdb.NativeQueryRequest

type NativeQueryResult = businessdb.NativeQueryResult

type PoolStat = businessdb.PoolStat

type PostgresB2Capability struct {
	ServerMajor                                                           int
	ABI, ExtensionVersion, ExtensionHash, NodeManifestHash, AllowlistHash string
	Matview                                                               bool
	Mode, ClosedDigest, NativeDigest                                      string
	NativeAvailable                                                       bool
}

type PostgresEnrolledColumn struct {
	RelationOID  uint32
	Attnum       int16
	Name         string
	TypeOID      uint32
	CollationOID uint32
	TypeDigest   string
}

type PostgresEnrolledRelation struct {
	DatabaseOID, RelationOID, NamespaceOID uint32
	Schema, Name                           string
	Kind                                   byte
	ViewDepth                              int
	StableObjectID                         string
	CatalogFingerprint                     string
}

type PostgresPolicyColumnUse struct {
	RelationOID  uint32
	Attnum       int16
	Name         string
	TypeOID      uint32
	TypeModifier int32
	CollationOID uint32
	Usage        string
}

type PostgresPolicyEnrollment struct {
	Mode           string
	StatementClass string
	Action         b5dml.Action
	Relations      []PostgresPolicyRelation
	ColumnUses     []PostgresPolicyColumnUse
	WriteTargets   []PostgresPolicyWriteTarget
}

type PostgresPolicyRelation struct {
	DatabaseOID        uint32
	RelationOID        uint32
	Schema             string
	Name               string
	Kind               byte
	CatalogFingerprint string
}

type PostgresPolicyWriteTarget struct {
	RelationOID  uint32
	Attnum       int16
	Name         string
	TypeOID      uint32
	TypeModifier int32
	CollationOID uint32
	Kind         b5dml.WriteTargetKind
}

type PostgresRelationEnrollment struct {
	Fingerprint        string
	BinderFingerprint  string
	CatalogFingerprint string
	Relations          []PostgresEnrolledRelation
	Columns            []PostgresEnrolledColumn
}

type Reason string

type Reservation struct {
	// contains filtered or unexported fields
}

type ReservationLimits struct {
	PerAgent, PerTenant, PerDatasource int
	GlobalMemoryBytes                  int64
}

type ReservationPool struct {
	// contains filtered or unexported fields
}

type SchemaColumn struct {
	Schema, Table, Column, DataType string
	Ordinal                         int
}

type SealedResponseWriter struct {
	// contains filtered or unexported fields
}

type SelectPhase string

type Statement interface {
	Dialect() string
	Explain(context.Context) (model.ExplainInfo, error)
	Query(context.Context, int) (model.QueryResult, error)
	Execute(context.Context) (model.QueryResult, error)
	ExecuteTransactional(context.Context, func(model.QueryResult) error) (model.QueryResult, error)
	TableHasIndex(string, string) (bool, error)
	TableRowCount(string, string) (int64, error)
	TransactionState() (rules.TransactionState, error)
	MysqlTransactionState() (rules.MysqlTransactionState, error)
	// ReleaseReservation releases request-scoped concurrency and buffer quota
	// without closing a caller session. Wrappers must forward this method so
	// successful, failed, and canceled requests cannot leak global accounting.
	ReleaseReservation()
	Close() error
}

type TableRef struct{ Schema, Table string }