flightsqlingress

type Config struct {
	SessionIdleTTL     time.Duration
	SessionReapTick    time.Duration
	HandleIdleTTL      time.Duration
	SessionTokenTTL    time.Duration
	WorkerQueueTimeout time.Duration // applied to CreateSession calls; 0 = use request context as-is

	// RejectPersistentSecretDDL rejects CREATE/DROP PERSISTENT SECRET with a
	// clear error. Set when the deployment runs the user persistent secret
	// manager: that manager intercepts secret DDL on the PG wire protocol
	// only, so a persistent secret created via Flight would execute, never be
	// stored, and then be silently deleted by the next session's hygiene wipe
	// — rejecting up front is the honest behavior until Flight gets its own
	// interception.
	RejectPersistentSecretDDL bool
}

type ControlPlaneFlightSQLHandler struct {
	flightsql.BaseServer
	// contains filtered or unexported fields
}

type CredentialValidator interface {
	ValidateCredentials(username, password string) bool
}

type DurableSessionMetadata struct {
	Username     string
	OrgID        string
	WorkerID     int
	OwnerEpoch   int64
	CPInstanceID string
}

type DurableSessionRecord struct {
	SessionToken string
	Username     string
	OrgID        string
	WorkerID     int
	OwnerEpoch   int64
	CPInstanceID string
	State        DurableSessionState
	ExpiresAt    time.Time
	LastSeenAt   time.Time
}

type DurableSessionState string

type DurableSessionStore interface {
	UpsertSession(record DurableSessionRecord) error
	GetSession(sessionToken string) (*DurableSessionRecord, error)
	TouchSession(sessionToken string, lastSeenAt time.Time) error
	CloseSession(sessionToken string, closedAt time.Time) error
}

type FlightIngress struct {
	// contains filtered or unexported fields
}

type FuncCredentialValidator func(username, password string) bool

type Hooks struct {
	OnSessionCountChanged func(int)
	OnSessionsReaped      func(trigger string, count int)
}

type MapCredentialValidator struct {
	Users map[string]string
}

type Options struct {
	Hooks       Hooks
	RateLimiter *server.RateLimiter
}

type SNIAwareCredentialValidator interface {
	ValidateCredentialsForSNI(sni, username, password string) bool
}

type SessionProvider interface {
	CreateSession(ctx context.Context, username string, pid int32, memoryLimit string, threads int) (int32, *flightclient.FlightExecutor, error)
	DestroySession(int32)
}