database

type CredsRequest struct {
	Role      string
	TTL       string
	TTLSecond int
	// TokenID is the hashed client token that issued the lease (cascade revoke).
	TokenID string
	// Tenant is optional namespace for lease ID scoping (W64-01).
	Tenant string
	// TenantMode enables lease ID prefixing.
	TenantMode bool
}

type CredsResult struct {
	LeaseID    string
	Username   string
	Password   string
	Role       string
	TTLSeconds int
	MaxTTL     int
	ExpiresAt  time.Time
	Statements []string
	Warnings   []string
}

type DefaultSQLRunner struct{}

type Engine struct {
	// contains filtered or unexported fields
}

type RegistryAdapter struct {
	*Engine
}

type RevokeResult struct {
	RevocationStatements []string `json:"revocation_statements,omitempty"`
}

type RoleConfig struct {
	Name                 string
	TTLSeconds           int
	DefaultTTL           int
	MaxTTL               int
	Period               int
	Renewable            *bool
	MaxLeases            int
	UsernamePrefix       string
	DefaultUsername      string
	CreationStatements   []string
	RevocationStatements []string
	ExecutionMode        string
	AdminCredentialsPath string
	Config               map[string]any
}

type SQLRunner interface {
	ExecStatements(ctx context.Context, connectionURL string, statements []string) error
}