bigquery

type BigQueryConf struct {
	// ProjectId is the GCP project containing BigQuery datasets.
	ProjectId string
	// Region restricts queries to a specific BQ region (e.g. "EU", "us-central1").
	Region string
	// CredentialsJson is a GCP service account key in JSON format.
	CredentialsJson string
	// CredentialsFile is a path to a GCP service account key file.
	CredentialsFile string
	// AccessToken is an OAuth access token for user-level authentication.
	// When set, it takes precedence over CredentialsJson and CredentialsFile.
	AccessToken string
	// ImpersonateServiceAccounts is a chain of service account emails. The process's own default
	// credentials get a token for the first one, that one for the next, and BigQuery sees the last.
	// Each one must grant roles/iam.serviceAccountTokenCreator to the identity before it. Google
	// mints the tokens, so no key leaves anyone's project, and the chain needs no
	// AllowDefaultCredentials: whoever builds it decides which service accounts it names. It can not
	// be combined with CredentialsJson or CredentialsFile.
	ImpersonateServiceAccounts []string
	// AllowDefaultCredentials opts into Application Default Credentials (GOOGLE_APPLICATION_CREDENTIALS,
	// gcloud's login, the GKE or GCE metadata server) when no credential is set. Only a process running
	// in the customer's own environment sets it, such as the synq-dwh agent. On the hosted side it
	// stays false, so a connection with no credential is refused instead of running as our own
	// service account.
	AllowDefaultCredentials bool
	// AllowAnyCredentialType accepts every credential type Google's client libraries load in
	// CredentialsJson and CredentialsFile (external_account, impersonated_service_account,
	// authorized_user). Some of them read a file or call a URL that the credential names. Only a
	// process whose configuration comes from the host's owner sets it, such as the synq-dwh agent.
	// When false, the credential must pass ValidateServiceAccountKey.
	AllowAnyCredentialType bool
	// HTTPTimeout caps each BigQuery REST round-trip (table/dataset metadata,
	// table listing, query-result pages). Guards against a stalled connection
	// hanging a scrape until the caller's job deadline. Zero uses
	// defaultHTTPTimeout.
	HTTPTimeout time.Duration
}

type BigQueryExecutor struct {
	// contains filtered or unexported fields
}

type Executor interface {
	QueryRowsIterator(ctx context.Context, q string, args ...interface{}) (*bigquery.RowIterator, error)
}

type ImpersonationError struct {
	ServiceAccount string
	Caller         string
	Err            error
}

type Querier[T any] struct {
	// contains filtered or unexported fields
}