fabric

type APIClient struct {
	// contains filtered or unexported fields
}

type APIError struct {
	StatusCode int
	// ErrorCode is the API's own code, e.g. InsufficientWorkspaceRole.
	ErrorCode string
	Message   string
}

type FabricConf struct {
	// Host is the workspace SQL analytics endpoint, e.g.
	// "<workspace-id>.datawarehouse.fabric.microsoft.com".
	Host string
	// Database is the default execution database — the context in which
	// *unqualified* ad-hoc/monitor SQL resolves (e.g. `FROM sales.products`).
	// Optional: defaults to "master" (the always-present workspace entry point),
	// which is sufficient because metadata scrapping and generated metrics SQL
	// are fully database-qualified via cross-database three-part names. Set it
	// only when unqualified queries should resolve against a specific database.
	//
	// Which databases to *scrape* is a separate, scrapper-level concern — see
	// FabricScrapperConf.Databases — so it is deliberately not on this
	// connection config (mirroring TrinoScrapperConf.Catalogs /
	// BigQueryScrapperConf.Datasets).
	Database string

	// AuthType selects the authentication method. It accepts any of the
	// spellings in authTypeAliases — dbt-fabric ("ServicePrincipal", "CLI",
	// "auto"), Microsoft's ODBC "Authentication=" keyword
	// ("ActiveDirectoryServicePrincipal", ...), the Azure SDK names, or our own
	// AuthType* constants — collapsed to a canonical value via CanonicalAuthType.
	// Empty defaults to a service principal (ClientID + ClientSecret), unless
	// AccessToken is set (a non-empty AccessToken always wins). The ambient modes
	// (AuthTypeAzureCLI/Default/ManagedIdentity) authenticate as the host's own
	// Azure identity with no stored credential and are intended for on-prem
	// agents. They are opt-in — engaged only when AuthType names one — so a
	// hosted caller that leaves AuthType empty with no credentials fails closed
	// rather than silently inheriting the host process identity.
	AuthType string

	// ClientID is the Entra application (client) ID of the service principal
	// (default auth), or the user-assigned identity client ID for
	// AuthTypeManagedIdentity.
	ClientID string
	// ClientSecret is the service principal's client secret.
	ClientSecret string
	// TenantID is the Entra tenant (directory) ID. Optional: when empty the
	// tenant is inferred from the Fabric endpoint. Provide it for tenants where
	// the server-supplied authority is not the SP's home tenant.
	TenantID string

	// AccessToken is a pre-acquired Entra OAuth access token for the SQL scope
	// (https://database.windows.net/.default). When set it takes precedence over
	// all other authentication methods — used by hosts that acquire the token
	// out of band (managed identity, workload identity federation, certificate).
	AccessToken string
}

type FabricExecutor struct {
	*dwhexecmssql.MSSQLExecutor
	// contains filtered or unexported fields
}

type HostIdentity struct {
	// TenantID is the Entra tenant GUID.
	TenantID string
	// WorkspaceID is the Fabric workspace GUID — the Fabric REST API key for
	// /v1/workspaces/{id}/ items (warehouses, pipelines, notebooks, jobs …).
	WorkspaceID string
}

type WorkspacePrincipal struct {
	// ID is the Entra object id of the principal.
	ID          string `json:"id"`
	DisplayName string `json:"displayName"`
	// Type is User, Group, ServicePrincipal or ServicePrincipalProfile.
	Type        string `json:"type"`
	UserDetails *struct {
		UserPrincipalName string `json:"userPrincipalName"`
	} `json:"userDetails,omitempty"`
	ServicePrincipalDetails *struct {
		AadAppID string `json:"aadAppId"`
	} `json:"servicePrincipalDetails,omitempty"`
	GroupDetails *struct {
		GroupType string `json:"groupType"`
	} `json:"groupDetails,omitempty"`
}

type WorkspaceRoleAssignment struct {
	ID        string             `json:"id"`
	Principal WorkspacePrincipal `json:"principal"`
	Role      string             `json:"role"`
}