mssql

type MSSQLConf struct {
	// User is the SQL Server login or Azure AD username.
	// For Azure AD Service Principal, this is the Application (Client) ID.
	// Leave empty when using AccessToken or Azure AD Managed Identity.
	User string
	// Password is the SQL Server login password or Azure AD client secret.
	Password string
	// Host is the hostname or IP address.
	// For Azure SQL: e.g. "yourserver.database.windows.net"
	Host string
	// Port is the SQL Server port. Default: 1433.
	Port int
	// Database is the database name to connect to.
	// SQL Server is database-scoped — create a separate connection per database.
	Database string

	// TrustCert skips TLS server certificate verification.
	// Not recommended for production Azure SQL connections.
	TrustCert bool
	// Encrypt controls connection encryption.
	// Values: "true" (default, required for Azure SQL), "false", "disable".
	Encrypt string

	// FedAuth specifies the Azure AD federated authentication method.
	// When set, the azuread driver is used instead of the standard sqlserver driver.
	// Common values for cloud deployments:
	//   - "ActiveDirectoryDefault": chained credential (Managed Identity → environment → CLI)
	//   - "ActiveDirectoryMSI": Azure Managed Identity (system or user-assigned)
	//   - "ActiveDirectoryServicePrincipal": app registration with client ID + secret
	//   - "ActiveDirectoryAzCli": reuse Azure CLI authentication
	// See https://pkg.go.dev/github.com/microsoft/go-mssqldb/azuread for all options.
	FedAuth string

	// AccessToken is a pre-acquired Azure AD OAuth access token.
	// When set, it takes precedence over all other authentication methods.
	// The token is passed directly to the driver via NewAccessTokenConnector.
	AccessToken string

	// ApplicationClientID is the Azure AD Application (Client) ID.
	// Used with ActiveDirectoryServicePrincipal (identifies the app registration)
	// and ActiveDirectoryMSI with user-assigned managed identity (resource ID).
	ApplicationClientID string

	// IntegratedAuth signs in as the identity running the process, the same as `sqlcmd -E`:
	// the logged-in Windows user (SSPI) on Windows, and the Kerberos ticket from `kinit` elsewhere.
	// User, Password, AccessToken and FedAuth must be empty.
	IntegratedAuth bool
}

type MSSQLExecutor struct {
	// contains filtered or unexported fields
}