postgres

type AuthorityQueryer[R AuthorityRows] interface {
	// Query honors the bounded context and returns an owned cursor to close.
	Query(context.Context, string, ...any) (R, error)
}

type AuthorityRecord struct {
	// Scope is the exact primary row identity, not caller-selected authority.
	Scope AuthorityScope
	// Version is its positive epoch; zero never represents initialized authority.
	Version uint64
}

type AuthorityRows interface {
	// Next advances the borrowed cursor and reports whether a row is available.
	Next() bool
	// Scan copies the current row into supplied destinations without retaining them.
	Scan(...any) error
	// Err reports iteration failures after Next returns false.
	Err() error
	// Close drains or cancels this cursor without closing the owning transaction.
	Close()
}

type AuthorityScope struct {
	// TenantID is the exact tenant isolation boundary, not a defaultable label.
	TenantID authorization.TenantID
	// PolicyNamespace is a trusted domain in which SubjectID is unambiguous.
	PolicyNamespace string
	// SubjectID is the exact lifecycle subject within tenant and namespace.
	SubjectID authorization.SubjectID
}

type AuthorityStore struct {
	// contains filtered or unexported fields
}

type Migration struct {
	// Version is caller-owned migration ordering; SchemaMigration returns 1.
	Version uint
	// Name is the exact application label; do not place secrets in error-visible names.
	Name string
	// Up is forward SQL; SchemaMigration supplies singleton-table creation.
	Up string
	// Down is reverse SQL; SchemaMigration supplies a destructive table drop.
	Down string
}

type Store struct {
	// contains filtered or unexported fields
}