Directories
¶
| Path | Synopsis |
|---|---|
|
Package approval holds the process-local registry of parked queries.
|
Package approval holds the process-local registry of parked queries. |
|
oidc
Package oidc implements a generic, configurable-issuer OpenID Connect login provider — the one that lets an organization sign in to dbbat with Google Workspace, Okta, Microsoft Entra, Keycloak, Authentik or anything else that speaks OIDC discovery.
|
Package oidc implements a generic, configurable-issuer OpenID Connect login provider — the one that lets an organization sign in to dbbat with Google Workspace, Okta, Microsoft Entra, Keycloak, Authentik or anything else that speaks OIDC discovery. |
|
Package events implements the in-process publish/subscribe broker behind dbbat's live event stream.
|
Package events implements the in-process publish/subscribe broker behind dbbat's live event stream. |
|
Package mcp exposes dbbat's databases to AI agents over the Model Context Protocol, without adding a second way into a database.
|
Package mcp exposes dbbat's databases to AI agents over the Model Context Protocol, without adding a second way into a database. |
|
Package notify implements notification channels for grant request lifecycle events.
|
Package notify implements notification channels for grant request lifecycle events. |
|
proxy
|
|
|
conncheck
Package conncheck validates that a configured server row is actually reachable and usable: that an SSH bastion accepts the stored key, and that a database target can be dialed (and authenticated against) — optionally through that bastion.
|
Package conncheck validates that a configured server row is actually reachable and usable: that an SSH bastion accepts the stored key, and that a database target can be dialed (and authenticated against) — optionally through that bastion. |
|
kubernetes
Package kubernetes holds the end-to-end integration suite for the Kubernetes port-forward tunnel: a real k3s cluster, a real PostgreSQL pod, and dbbat's own proxy dialing through `pods/portforward`.
|
Package kubernetes holds the end-to-end integration suite for the Kubernetes port-forward tunnel: a real k3s cluster, a real PostgreSQL pod, and dbbat's own proxy dialing through `pods/portforward`. |
|
mongodb
Package mongodb implements a transparent MongoDB wire-protocol proxy for dbbat: it terminates client authentication (SASL PLAIN over TLS or a dbb_ API key), authenticates to the upstream MongoDB with stored credentials (SCRAM-SHA-256), and grant-checks, classifies, logs and quota-enforces every command — the same pipeline as the PostgreSQL/Oracle/MySQL proxies.
|
Package mongodb implements a transparent MongoDB wire-protocol proxy for dbbat: it terminates client authentication (SASL PLAIN over TLS or a dbb_ API key), authenticates to the upstream MongoDB with stored credentials (SCRAM-SHA-256), and grant-checks, classifies, logs and quota-enforces every command — the same pipeline as the PostgreSQL/Oracle/MySQL proxies. |
|
testsupport
Package testsupport holds fixtures shared by the protocol proxies' test suites (PostgreSQL, MySQL, MongoDB, Oracle, SQL Server).
|
Package testsupport holds fixtures shared by the protocol proxies' test suites (PostgreSQL, MySQL, MongoDB, Oracle, SQL Server). |
|
upstream
Package upstream owns the single path dbbat takes from "a server row" to "an authenticated connection to that server".
|
Package upstream owns the single path dbbat takes from "a server row" to "an authenticated connection to that server". |
|
Package safe holds the goroutine panic guards every other package wraps its detached goroutines in.
|
Package safe holds the goroutine panic guards every other package wraps its detached goroutines in. |
|
Package store provides database access and persistence for DBBat.
|
Package store provides database access and persistence for DBBat. |
|
Package version contains build version information set via ldflags.
|
Package version contains build version information set via ldflags. |
Click to show internal directories.
Click to hide internal directories.