controlstatedb

type AcceptTeamInvitationParams struct {
	AcceptedAt   pgtype.Timestamptz
	IdentityID   pgtype.Text
	MembershipID pgtype.Text
	InvitationID string
}

type ActivateMemberSlugParams struct {
	IdentityID        pgtype.Text
	ActivatedAt       pgtype.Timestamptz
	SlugReservationID string
}

type AdvanceAuthorityRevisionParams struct {
	Issuer         string
	TeamID         string
	PolicyRevision int64
	UpdatedAt      pgtype.Timestamptz
}

type AdvanceTeamPolicyRevisionParams struct {
	UpdatedAt pgtype.Timestamptz
	TeamID    string
}

type ApplyIngressUsageReportParams struct {
	IngressID                      string
	IngressRunID                   string
	PublicURLID                    string
	PublishRunNumber               int64
	BucketStart                    pgtype.Timestamptz
	BucketEnd                      pgtype.Timestamptz
	ObservedThrough                pgtype.Timestamptz
	ReportRevision                 int64
	ConnectionAttempts             int64
	PolicyDenials                  int64
	CapacityDenials                int64
	VisitorStreamOpenFailures      int64
	SuccessfulStreams              int64
	ConnectionNanoseconds          int64
	IngressBytes                   int64
	EgressBytes                    int64
	HistogramData                  []byte
	Final                          bool
	ReceivedAt                     pgtype.Timestamptz
	DeltaConnectionAttempts        int64
	DeltaPolicyDenials             int64
	DeltaCapacityDenials           int64
	DeltaVisitorStreamOpenFailures int64
	DeltaSuccessfulStreams         int64
	DeltaConnectionNanoseconds     int64
	DeltaIngressBytes              int64
	DeltaEgressBytes               int64
	MergedHistogramData            []byte
}

type ApplyIngressUsageReportRow struct {
	ReportInserted       bool
	BucketUpdated        bool
	PolicyDenialsUpdated bool
}

type BeginAdminRelayDrainParams struct {
	DrainDeadline      pgtype.Timestamptz
	DrainedAt          pgtype.Timestamptz
	RelayID            string
	RelayRunID         string
	RelayLeaseRevision int64
}

type BeginAdminRelayDrainRow struct {
	ID                   int64
	RelayID              string
	RelayServiceID       string
	RelayRunID           string
	RelayLeaseRevision   int64
	ProtocolVersion      int64
	InternalRelayAddress string
	ObservedAddress      *netip.Addr
	InternalNetworks     []netip.Prefix
	ConnectionCapacity   int64
	StreamCapacity       int64
	ReportedConnections  int64
	ReportedStreams      int64
	Draining             bool
	DrainDeadline        pgtype.Timestamptz
	RegisteredAt         pgtype.Timestamptz
	RenewedAt            pgtype.Timestamptz
	LeaseExpiresAt       pgtype.Timestamptz
	RelayAddress         string
	TlsServerName        string
}

type BeginDNSAuthorityReleaseParams struct {
	ReleaseIdempotencyKey pgtype.Text
	UpdatedAt             pgtype.Timestamptz
	AuthorityReference    string
}

type BeginIngressDrainParams struct {
	DrainDeadline        pgtype.Timestamptz
	RenewedAt            pgtype.Timestamptz
	IngressID            string
	IngressRunID         string
	IngressLeaseRevision int64
}

type BeginRelayDrainParams struct {
	DrainDeadline      pgtype.Timestamptz
	RenewedAt          pgtype.Timestamptz
	RelayServiceID     string
	RelayID            string
	RelayRunID         string
	RelayLeaseRevision int64
}

type BeginRelayDrainRow struct {
	ID                   int64
	RelayID              string
	RelayServiceID       string
	RelayRunID           string
	RelayLeaseRevision   int64
	ProtocolVersion      int64
	InternalRelayAddress string
	ObservedAddress      *netip.Addr
	InternalNetworks     []netip.Prefix
	ConnectionCapacity   int64
	StreamCapacity       int64
	ReportedConnections  int64
	ReportedStreams      int64
	Draining             bool
	DrainDeadline        pgtype.Timestamptz
	RegisteredAt         pgtype.Timestamptz
	RenewedAt            pgtype.Timestamptz
	LeaseExpiresAt       pgtype.Timestamptz
	RelayAddress         string
	TlsServerName        string
}

type CancelOpenPublicURLRecoveryEpisodeParams struct {
	CanceledAt       pgtype.Timestamptz
	PublicURLID      string
	PublishRunNumber int64
}

type CancelPublishRunACMEAuthorizationsParams struct {
	CanceledAt   pgtype.Timestamptz
	PublishRunID string
}

type CancelPublishRunACMEOrdersParams struct {
	CanceledAt   pgtype.Timestamptz
	PublishRunID string
}

type CheckACMEChallengeRoutingReadyParams struct {
	CheckedAt  pgtype.Timestamptz
	IssuanceID string
}

type ClaimACMEOrderWorkParams struct {
	WorkOwner     pgtype.Text
	WorkExpiresAt pgtype.Timestamptz
	ClaimedAt     pgtype.Timestamptz
}

type ClaimDNSAuthorityWorkParams struct {
	WorkOwner     pgtype.Text
	WorkExpiresAt pgtype.Timestamptz
	ClaimedAt     pgtype.Timestamptz
}

type ClaimDNSPublicURLWorkParams struct {
	WorkOwner     pgtype.Text
	WorkExpiresAt pgtype.Timestamptz
	ClaimedAt     pgtype.Timestamptz
}

type ClaimPublicURLUsageDeliveriesParams struct {
	WorkOwner     pgtype.Text
	WorkExpiresAt pgtype.Timestamptz
	ClaimedAt     pgtype.Timestamptz
	BatchSize     int32
}

type ClaimPublisherConnectionParams struct {
	RelayID                      pgtype.Text
	RelayRunID                   pgtype.Text
	RelayLeaseRevision           pgtype.Int8
	ClaimID                      pgtype.Text
	ConnectedAt                  pgtype.Timestamptz
	PublisherConnectionID        string
	PublishRunID                 string
	PublicURLID                  string
	PublishRunNumber             int64
	ConnectionSlot               int16
	ConnectionAssignmentRevision int64
	RelayServiceID               string
}

type ClaimRelayCertificateOrderWorkParams struct {
	WorkOwner     pgtype.Text
	WorkExpiresAt pgtype.Timestamptz
	ClaimedAt     pgtype.Timestamptz
}

type ClaimRelayServiceForCertificateOrderParams struct {
	Now              pgtype.Timestamptz
	RetryFailedAfter pgtype.Timestamptz
}

type ClosePublishRunConnectionsParams struct {
	ClosedAt     pgtype.Timestamptz
	PublishRunID string
}

type ClosePublishRunParams struct {
	State        string
	ClosedAt     pgtype.Timestamptz
	CloseReason  pgtype.Text
	PublishRunID string
}

type CompleteACMEAuthorizationCleanupParams struct {
	CompletedAt pgtype.Timestamptz
	IssuanceID  string
}

type CompletePublicURLUsageDeliveryParams struct {
	CompletedAt pgtype.Timestamptz
	DeliveryID  int64
	WorkOwner   pgtype.Text
	WorkEpoch   int64
}

type ConsumeOIDCAssertionParams struct {
	AssertionDigest []byte
	ConsumedAt      pgtype.Timestamptz
	ExpiresAt       pgtype.Timestamptz
}

type ControlAcmeAccount struct {
	ID                     string
	DirectoryUrl           string
	ContactEmail           string
	AccountKeyCiphertext   []byte
	AccountKeyStorageKeyID string
	AccountUrl             pgtype.Text
	AcceptedTermsUrl       pgtype.Text
	CreatedAt              pgtype.Timestamptz
	UpdatedAt              pgtype.Timestamptz
}

type ControlAcmeAuthorization struct {
	ID                    string
	OrderID               string
	Identifier            string
	AuthorizationUrl      string
	ChallengeType         pgtype.Text
	ChallengeUrl          pgtype.Text
	ChallengeToken        pgtype.Text
	ChallengeDigest       []byte
	PresentationReference pgtype.Text
	State                 string
	AuthorizationRevision int64
	WorkOwner             pgtype.Text
	WorkEpoch             int64
	WorkExpiresAt         pgtype.Timestamptz
	Attempts              int64
	AvailableAt           pgtype.Timestamptz
	PresentedAt           pgtype.Timestamptz
	ValidatedAt           pgtype.Timestamptz
	CleanupCompletedAt    pgtype.Timestamptz
	ExpiresAt             pgtype.Timestamptz
	LastError             pgtype.Text
	CreatedAt             pgtype.Timestamptz
	UpdatedAt             pgtype.Timestamptz
}

type ControlAcmeOrder struct {
	ID                     string
	AccountID              string
	PublishRunID           string
	PublicURLID            string
	PublishRunNumber       int64
	IdempotencyKey         string
	RequestDigest          []byte
	CertificateCacheKey    string
	CertificateScope       string
	CertificateIdentifiers []string
	ChallengeMethod        string
	CsrDer                 []byte
	CsrDigest              []byte
	State                  string
	OrderRevision          int64
	OrderUrl               pgtype.Text
	FinalizeUrl            pgtype.Text
	CertificateUrl         pgtype.Text
	CertificatePem         []byte
	NotBefore              pgtype.Timestamptz
	NotAfter               pgtype.Timestamptz
	RenewAt                pgtype.Timestamptz
	InstalledAt            pgtype.Timestamptz
	WorkOwner              pgtype.Text
	WorkEpoch              int64
	WorkExpiresAt          pgtype.Timestamptz
	Attempts               int64
	AvailableAt            pgtype.Timestamptz
	LastError              pgtype.Text
	CreatedAt              pgtype.Timestamptz
	UpdatedAt              pgtype.Timestamptz
}

type ControlAdminAuditEvent struct {
	ID              int64
	ActorIdentityID pgtype.Text
	Actor           string
	RequestID       string
	Operation       string
	TargetKind      string
	TargetID        string
	Details         []byte
	OccurredAt      pgtype.Timestamptz
}

type ControlAuthorityRevisionState struct {
	ID                     int64
	Issuer                 string
	TeamID                 string
	ObservedPolicyRevision int64
	AppliedPolicyRevision  int64
	ObservedAt             pgtype.Timestamptz
	AppliedAt              pgtype.Timestamptz
}

type ControlControlSession struct {
	ID                           string
	IdentityID                   string
	AuthenticationMethod         string
	AuthenticationSourceRevision int64
	Administrator                bool
	AccessTokenID                string
	AccessTokenDigest            []byte
	AccessExpiresAt              pgtype.Timestamptz
	RefreshTokenID               string
	RefreshTokenDigest           []byte
	RetrySecretCiphertext        []byte
	RetrySecretStorageKeyID      string
	RefreshExpiresAt             pgtype.Timestamptz
	CreatedAt                    pgtype.Timestamptz
	LastRefreshedAt              pgtype.Timestamptz
	RevokedAt                    pgtype.Timestamptz
	RevokedBy                    pgtype.Text
}

type ControlControlTlsCache struct {
	ID                int64
	DirectoryUrl      string
	CacheKey          string
	CacheCiphertext   []byte
	CacheStorageKeyID string
	UpdatedAt         pgtype.Timestamptz
}

type ControlDnsAuthority struct {
	ID                    int64
	AuthorityReference    string
	TeamID                string
	DomainID              string
	CanonicalDomain       string
	CreateIdempotencyKey  string
	CreateRequestDigest   []byte
	ReleaseIdempotencyKey pgtype.Text
	Provider              string
	ProviderZoneID        pgtype.Text
	State                 string
	Nameservers           []string
	WorkRevision          int64
	WorkOwner             pgtype.Text
	WorkEpoch             int64
	WorkExpiresAt         pgtype.Timestamptz
	Attempts              int64
	AvailableAt           pgtype.Timestamptz
	LastError             pgtype.Text
	CreatedAt             pgtype.Timestamptz
	UpdatedAt             pgtype.Timestamptz
}

type ControlDnsChallengeChange struct {
	ID            int64
	ZoneID        string
	RecordName    string
	DesiredDigest []byte
	ChangeID      string
	UpdatedAt     pgtype.Timestamptz
}

type ControlDomain struct {
	ID                      string
	Kind                    string
	TeamID                  pgtype.Text
	CanonicalDomain         string
	DnsAuthorityReference   pgtype.Text
	State                   string
	AuthorityRevision       int64
	VerificationTokenDigest []byte
	CreatedByIdentityID     pgtype.Text
	ClaimIdempotencyKey     pgtype.Text
	ClaimRequestDigest      []byte
	MakeDefaultWhenReady    bool
	CreatedAt               pgtype.Timestamptz
	VerifiedAt              pgtype.Timestamptz
	ReusableAfter           pgtype.Timestamptz
	ReleasedAt              pgtype.Timestamptz
	UpdatedAt               pgtype.Timestamptz
}

type ControlIdentity struct {
	ID              string
	Kind            string
	Issuer          pgtype.Text
	Subject         pgtype.Text
	DisplayName     string
	NormalizedEmail pgtype.Text
	EmailVerified   bool
	Administrator   bool
	CreatedAt       pgtype.Timestamptz
	UpdatedAt       pgtype.Timestamptz
	DisabledAt      pgtype.Timestamptz
}

type ControlIngressLease struct {
	ID                   int64
	IngressID            string
	IngressRunID         string
	IngressLeaseRevision int64
	ProtocolVersion      int64
	ConnectionCapacity   int64
	ReportedConnections  int64
	RoutingTableRevision int64
	Draining             bool
	DrainDeadline        pgtype.Timestamptz
	RegisteredAt         pgtype.Timestamptz
	RenewedAt            pgtype.Timestamptz
	LeaseExpiresAt       pgtype.Timestamptz
}

type ControlIngressRoutingTableClock struct {
	ID                    int16
	CurrentRevision       int64
	RetainedAfterRevision int64
	UpdatedAt             pgtype.Timestamptz
}

type ControlIngressRoutingTableEvent struct {
	ID                 int64
	EventKind          string
	PublicURLID        string
	PublishRunNumber   int64
	CanonicalHostname  string
	EntryRevision      int64
	Projection         []byte
	PublicUrlExpiresAt pgtype.Timestamptz
	CreatedAt          pgtype.Timestamptz
}

type ControlIngressUsageReport struct {
	ID                        int64
	IngressID                 string
	IngressRunID              string
	PublicURLID               string
	PublishRunNumber          int64
	BucketStart               pgtype.Timestamptz
	BucketEnd                 pgtype.Timestamptz
	ObservedThrough           pgtype.Timestamptz
	ReportRevision            int64
	ConnectionAttempts        int64
	PolicyDenials             int64
	CapacityDenials           int64
	VisitorStreamOpenFailures int64
	SuccessfulStreams         int64
	ConnectionNanoseconds     int64
	IngressBytes              int64
	EgressBytes               int64
	HistogramData             []byte
	Final                     bool
	ReceivedAt                pgtype.Timestamptz
}

type ControlIngressUsageRun struct {
	ID                   int64
	IngressID            string
	IngressRunID         string
	IngressLeaseRevision int64
	StartedAt            pgtype.Timestamptz
	LeaseExpiresAt       pgtype.Timestamptz
	LastReportedAt       pgtype.Timestamptz
	ObservedThrough      pgtype.Timestamptz
	EndedAt              pgtype.Timestamptz
	CoverageComplete     bool
	IncompleteFrom       pgtype.Timestamptz
	IncompleteUntil      pgtype.Timestamptz
}

type ControlMaintenanceControl struct {
	ID          int64
	ControlName string
	Allowed     bool
	Revision    int64
	UpdatedAt   pgtype.Timestamptz
	UpdatedBy   string
}

type ControlManagedLabelReservation struct {
	ID        int64
	Label     string
	CreatedAt pgtype.Timestamptz
}

type ControlMemberSlugReservation struct {
	ID                   string
	TeamID               string
	MemberSlug           string
	State                string
	ReservedByIdentityID pgtype.Text
	CreatedAt            pgtype.Timestamptz
	ActivatedAt          pgtype.Timestamptz
	QuarantinedAt        pgtype.Timestamptz
	ReusableAfter        pgtype.Timestamptz
	ReleasedAt           pgtype.Timestamptz
}

type ControlOidcAssertionExchange struct {
	ID              int64
	AssertionDigest []byte
	ConsumedAt      pgtype.Timestamptz
	ExpiresAt       pgtype.Timestamptz
}

type ControlPublicUrl struct {
	ID                    string
	TeamID                string
	DomainID              string
	MembershipID          pgtype.Text
	CreatedByIdentityID   string
	IdempotencyKey        string
	RequestDigest         []byte
	CanonicalHostname     string
	Target                string
	PublicURLScope        string
	PolicyRevision        int64
	IpPolicy              string
	AllowedIpPrefixes     []netip.Prefix
	LifecycleState        string
	DnsAuthorityReference pgtype.Text
	DnsState              string
	DnsRevision           int64
	DnsWorkOwner          pgtype.Text
	DnsWorkEpoch          int64
	DnsWorkExpiresAt      pgtype.Timestamptz
	DnsAttempts           int64
	DnsAvailableAt        pgtype.Timestamptz
	DnsLastError          pgtype.Text
	NextPublishRunNumber  int64
	MutationRevision      int64
	Ephemeral             bool
	ExpiresAt             pgtype.Timestamptz
	SuspensionRevision    int64
	SuspensionReason      pgtype.Text
	CreatedAt             pgtype.Timestamptz
	UpdatedAt             pgtype.Timestamptz
	SuspendedAt           pgtype.Timestamptz
	DeletedAt             pgtype.Timestamptz
}

type ControlPublicUrlRecoveryEpisode struct {
	ID               int64
	PublicURLID      string
	PublishRunNumber int64
	State            string
	OpenedAt         pgtype.Timestamptz
	ObservedAt       pgtype.Timestamptz
	CanceledAt       pgtype.Timestamptz
	ObservedSeconds  pgtype.Float8
}

type ControlPublicUrlRecoveryHistogram struct {
	ID                    int16
	ObservationCount      int64
	ObservationSumSeconds float64
	BucketLe025           int64
	BucketLe05            int64
	BucketLe1             int64
	BucketLe2             int64
	BucketLe5             int64
	BucketLe10            int64
	BucketLe20            int64
	BucketLe30            int64
	BucketLe45            int64
	BucketLe60            int64
	BucketLe120           int64
	UpdatedAt             pgtype.Timestamptz
}

type ControlPublicUrlUsageBucket struct {
	ID                        int64
	PublicURLID               string
	PublishRunNumber          int64
	TeamID                    string
	ActingIdentityID          string
	BucketStart               pgtype.Timestamptz
	BucketEnd                 pgtype.Timestamptz
	BucketRevision            int64
	ObservedThrough           pgtype.Timestamptz
	ConnectionAttempts        int64
	PolicyDenials             int64
	CapacityDenials           int64
	VisitorStreamOpenFailures int64
	SuccessfulStreams         int64
	ConnectionNanoseconds     int64
	IngressBytes              int64
	EgressBytes               int64
	HistogramData             []byte
	Finalized                 bool
	Complete                  bool
	FinalizedAt               pgtype.Timestamptz
	UpdatedAt                 pgtype.Timestamptz
}

type ControlPublicUrlUsageConfiguration struct {
	ID                          int16
	VisitorNetworkHashMasterKey []byte
	CreatedAt                   pgtype.Timestamptz
}

type ControlPublicUrlUsageDelivery struct {
	ID              int64
	BucketID        int64
	BucketRevision  int64
	DeliveryKey     string
	State           string
	WorkOwner       pgtype.Text
	WorkEpoch       int64
	WorkExpiresAt   pgtype.Timestamptz
	Attempts        int64
	AvailableAt     pgtype.Timestamptz
	LastAttemptedAt pgtype.Timestamptz
	DeliveredAt     pgtype.Timestamptz
	LastError       pgtype.Text
	CreatedAt       pgtype.Timestamptz
}

type ControlPublishRun struct {
	ID                         string
	PublicURLID                string
	TeamID                     string
	MembershipID               pgtype.Text
	ActingIdentityID           string
	PublishRunNumber           int64
	IdempotencyKey             string
	RequestDigest              []byte
	PublishRunTokenID          string
	PublishRunTokenDigest      []byte
	PolicyRevision             int64
	PolicyDenials              int64
	CertificateCacheKey        string
	CertificateScope           string
	CertificateIdentifiers     []string
	CertificateChallengeMethod string
	State                      string
	CreatedAt                  pgtype.Timestamptz
	LastHeartbeatAt            pgtype.Timestamptz
	PublisherExpiresAt         pgtype.Timestamptz
	CertificateInstalledAt     pgtype.Timestamptz
	CertificateIssuanceID      pgtype.Text
	CertificateNotAfter        pgtype.Timestamptz
	ReadyAt                    pgtype.Timestamptz
	ClosedAt                   pgtype.Timestamptz
	CloseReason                pgtype.Text
	AssignmentsOpen            pgtype.Bool
}

type ControlPublishRunConnectionSlot struct {
	ID                                     int64
	PublishRunID                           string
	PublicURLID                            string
	PublishRunNumber                       int64
	ConnectionSlot                         int16
	PublisherConnectionID                  string
	ConnectionAssignmentRevision           int64
	RelayServiceID                         string
	RelayAddress                           string
	TlsServerName                          string
	PublisherConnectionCredentialDigest    []byte
	PublisherConnectionCredentialExpiresAt pgtype.Timestamptz
	ConnectedRelayID                       pgtype.Text
	ConnectedRelayRunID                    pgtype.Text
	ConnectedRelayLeaseRevision            pgtype.Int8
	ClaimID                                pgtype.Text
	State                                  string
	AssignedAt                             pgtype.Timestamptz
	ConnectedAt                            pgtype.Timestamptz
	ReadyAt                                pgtype.Timestamptz
	DisconnectedAt                         pgtype.Timestamptz
	ClosedAt                               pgtype.Timestamptz
	SessionOpen                            bool
}

type ControlRelayCertificateOrder struct {
	ID                     string
	AccountID              string
	RelayServiceID         string
	TlsServerName          string
	PrivateKeyCiphertext   []byte
	PrivateKeyStorageKeyID string
	CsrDer                 []byte
	CsrDigest              []byte
	State                  string
	OrderRevision          int64
	OrderUrl               pgtype.Text
	FinalizeUrl            pgtype.Text
	CertificateUrl         pgtype.Text
	AuthorizationUrl       pgtype.Text
	ChallengeUrl           pgtype.Text
	ChallengeToken         pgtype.Text
	ChallengeDigest        []byte
	PresentationReference  pgtype.Text
	CertificatePem         []byte
	NotBefore              pgtype.Timestamptz
	NotAfter               pgtype.Timestamptz
	RenewAt                pgtype.Timestamptz
	WorkOwner              pgtype.Text
	WorkEpoch              int64
	WorkExpiresAt          pgtype.Timestamptz
	Attempts               int64
	AvailableAt            pgtype.Timestamptz
	LastError              pgtype.Text
	CreatedAt              pgtype.Timestamptz
	UpdatedAt              pgtype.Timestamptz
	AuthorizationExpiresAt pgtype.Timestamptz
}

type ControlRelayLease struct {
	ID                   int64
	RelayID              string
	RelayServiceID       string
	RelayRunID           string
	RelayLeaseRevision   int64
	ProtocolVersion      int64
	InternalRelayAddress string
	ObservedAddress      *netip.Addr
	InternalNetworks     []netip.Prefix
	ConnectionCapacity   int64
	StreamCapacity       int64
	ReportedConnections  int64
	ReportedStreams      int64
	Draining             bool
	DrainDeadline        pgtype.Timestamptz
	RegisteredAt         pgtype.Timestamptz
	RenewedAt            pgtype.Timestamptz
	LeaseExpiresAt       pgtype.Timestamptz
}

type ControlRelayService struct {
	ID                              int64
	RelayServiceID                  string
	RelayAddress                    string
	TlsServerName                   string
	TransportCertificatePem         pgtype.Text
	TransportPrivateKeyCiphertext   []byte
	TransportPrivateKeyStorageKeyID pgtype.Text
	TransportCertificateSerial      pgtype.Text
	TransportCertificateExpiresAt   pgtype.Timestamptz
	Enabled                         bool
	CreatedAt                       pgtype.Timestamptz
	UpdatedAt                       pgtype.Timestamptz
}

type ControlRelayServiceAssignmentTotal struct {
	ID              int64
	RelayServiceID  string
	AssignmentCount int64
}

type ControlRuntimeSecret struct {
	ID                                 int16
	ExternalRetryMasterKeyCiphertext   []byte
	ExternalRetryMasterKeyStorageKeyID string
	CreatedAt                          pgtype.Timestamptz
}

type ControlTeam struct {
	ID                     string
	Kind                   string
	DisplayName            string
	ManagedLabel           string
	DefaultDomainID        pgtype.Text
	PolicyRevision         int64
	CreatedByIdentityID    string
	CreationIdempotencyKey pgtype.Text
	CreationRequestDigest  []byte
	CreatedAt              pgtype.Timestamptz
	UpdatedAt              pgtype.Timestamptz
	DeletedAt              pgtype.Timestamptz
}

type ControlTeamInvitation struct {
	ID                         string
	TeamID                     string
	SlugReservationID          string
	InitialRole                string
	InvitedByIdentityID        string
	IdempotencyKey             string
	RequestDigest              []byte
	TokenDigest                []byte
	NormalizedEmailRestriction pgtype.Text
	State                      string
	CreatedAt                  pgtype.Timestamptz
	ExpiresAt                  pgtype.Timestamptz
	AcceptedAt                 pgtype.Timestamptz
	AcceptedByIdentityID       pgtype.Text
	AcceptedMembershipID       pgtype.Text
	RevokedAt                  pgtype.Timestamptz
	RevokedByIdentityID        pgtype.Text
}

type ControlTeamMembership struct {
	ID                  string
	TeamID              string
	IdentityID          string
	SlugReservationID   string
	ManagedLabel        string
	Role                string
	AuthorityRevision   int64
	CreatedAt           pgtype.Timestamptz
	UpdatedAt           pgtype.Timestamptz
	RemovedAt           pgtype.Timestamptz
	RemovedByIdentityID pgtype.Text
}

type CountOpenPublishRunAssignmentsByRelayServiceRow struct {
	RelayServiceID  string
	AssignmentCount int64
}

type CountRelayActiveConnectionsParams struct {
	RelayID            pgtype.Text
	RelayRunID         pgtype.Text
	RelayLeaseRevision pgtype.Int8
}

type CreateActiveSlugReservationParams struct {
	ID         string
	TeamID     string
	MemberSlug string
	IdentityID pgtype.Text
	CreatedAt  pgtype.Timestamptz
}

type CreateClaimedDNSAuthorityParams struct {
	AuthorityReference   string
	TeamID               string
	DomainID             string
	CanonicalDomain      string
	CreateIdempotencyKey string
	CreateRequestDigest  []byte
	CreatedAt            pgtype.Timestamptz
}

type CreateClaimedDomainParams struct {
	ID                    string
	TeamID                pgtype.Text
	CanonicalDomain       string
	DnsAuthorityReference pgtype.Text
	AuthorityRevision     int64
	CreatedByIdentityID   pgtype.Text
	ClaimIdempotencyKey   pgtype.Text
	ClaimRequestDigest    []byte
	MakeDefaultWhenReady  bool
	CreatedAt             pgtype.Timestamptz
}

type CreateControlSessionParams struct {
	ID                           string
	IdentityID                   string
	AuthenticationMethod         string
	AuthenticationSourceRevision int64
	Administrator                bool
	AccessTokenID                string
	AccessTokenDigest            []byte
	AccessExpiresAt              pgtype.Timestamptz
	RefreshTokenID               string
	RefreshTokenDigest           []byte
	RetrySecretCiphertext        []byte
	RetrySecretStorageKeyID      string
	RefreshExpiresAt             pgtype.Timestamptz
	CreatedAt                    pgtype.Timestamptz
}

type CreateIdentityParams struct {
	ID              string
	Kind            string
	DisplayName     string
	NormalizedEmail pgtype.Text
	EmailVerified   bool
	Administrator   bool
	CreatedAt       pgtype.Timestamptz
	UpdatedAt       pgtype.Timestamptz
}

type CreateManagedDomainParams struct {
	ID              string
	CanonicalDomain string
	CreatedAt       pgtype.Timestamptz
}

type CreateOIDCIdentityParams struct {
	ID              string
	Issuer          pgtype.Text
	Subject         pgtype.Text
	DisplayName     string
	NormalizedEmail pgtype.Text
	EmailVerified   bool
	CreatedAt       pgtype.Timestamptz
}

type CreateOrGetDNSAuthorityParams struct {
	AuthorityReference   string
	TeamID               string
	DomainID             string
	CanonicalDomain      string
	CreateIdempotencyKey string
	CreateRequestDigest  []byte
	CreatedAt            pgtype.Timestamptz
}

type CreateOrganizationTeamParams struct {
	ID                     string
	DisplayName            string
	ManagedLabel           string
	DefaultDomainID        pgtype.Text
	CreatedByIdentityID    string
	CreationIdempotencyKey pgtype.Text
	CreationRequestDigest  []byte
	CreatedAt              pgtype.Timestamptz
}

type CreateOrganizationTeamRow struct {
	ID              string
	Kind            string
	DisplayName     string
	ManagedLabel    string
	DefaultDomainID pgtype.Text
	PolicyRevision  int64
	CreatedAt       pgtype.Timestamptz
	UpdatedAt       pgtype.Timestamptz
}

type CreateOwnerMembershipParams struct {
	ID                string
	TeamID            string
	IdentityID        string
	SlugReservationID string
	ManagedLabel      string
	CreatedAt         pgtype.Timestamptz
}

type CreatePersonalTeamParams struct {
	ID                  string
	DisplayName         string
	ManagedLabel        string
	CreatedByIdentityID string
	CreatedAt           pgtype.Timestamptz
}

type CreateTeamInvitationParams struct {
	ID                         string
	TeamID                     string
	SlugReservationID          string
	InitialRole                string
	InvitedByIdentityID        string
	IdempotencyKey             string
	RequestDigest              []byte
	TokenDigest                []byte
	NormalizedEmailRestriction pgtype.Text
	CreatedAt                  pgtype.Timestamptz
	ExpiresAt                  pgtype.Timestamptz
}

type CreateTeamMembershipParams struct {
	ID                string
	TeamID            string
	IdentityID        string
	SlugReservationID string
	ManagedLabel      string
	Role              string
	AuthorityRevision int64
	CreatedAt         pgtype.Timestamptz
}

type DBTX interface {
	Exec(context.Context, string, ...interface{}) (pgconn.CommandTag, error)
	Query(context.Context, string, ...interface{}) (pgx.Rows, error)
	QueryRow(context.Context, string, ...interface{}) pgx.Row
}

type DNSAuthorityReleaseReadyParams struct {
	AuthorityDomainID string
	ObservedAt        pgtype.Timestamptz
}

type DeleteControlTLSCacheEntryParams struct {
	DirectoryUrl string
	CacheKey     string
}

type DeletePublicURLParams struct {
	DeletedAt                pgtype.Timestamptz
	PublicURLID              string
	ExpectedMutationRevision int64
}

type DisconnectPublisherConnectionParams struct {
	DisconnectedAt               pgtype.Timestamptz
	PublisherConnectionID        string
	PublishRunID                 string
	PublicURLID                  string
	PublishRunNumber             int64
	ConnectionSlot               int16
	ConnectionAssignmentRevision int64
	RelayServiceID               string
	RelayID                      pgtype.Text
	RelayRunID                   pgtype.Text
	RelayLeaseRevision           pgtype.Int8
	ClaimID                      pgtype.Text
}

type EnsureACMEAccountParams struct {
	ID                     string
	DirectoryUrl           string
	ContactEmail           string
	AccountKeyCiphertext   []byte
	AccountKeyStorageKeyID string
	CreatedAt              pgtype.Timestamptz
}

type EnsureExternalAuthorityPrincipalParams struct {
	IdentityID string
	CreatedAt  pgtype.Timestamptz
}

type EnsureExternalRetryMasterKeyParams struct {
	ExternalRetryMasterKeyCiphertext   []byte
	ExternalRetryMasterKeyStorageKeyID string
	CreatedAt                          pgtype.Timestamptz
}

type EnsureExternalRetryMasterKeyRow struct {
	ExternalRetryMasterKeyCiphertext   []byte
	ExternalRetryMasterKeyStorageKeyID string
}

type EnsureIngressUsageRunParams struct {
	IngressID            string
	IngressRunID         string
	IngressLeaseRevision int64
	StartedAt            pgtype.Timestamptz
	LeaseExpiresAt       pgtype.Timestamptz
	ObservedThrough      pgtype.Timestamptz
}

type EnsurePublicURLUsageConfigurationParams struct {
	VisitorNetworkHashMasterKey []byte
	CreatedAt                   pgtype.Timestamptz
}

type ExpirePublisherConnectionParams struct {
	ExpiredAt                    pgtype.Timestamptz
	PublisherConnectionID        string
	PublishRunID                 string
	ConnectionAssignmentRevision int64
}

type ExpireTeamInvitationsParams struct {
	TeamID string
	Now    pgtype.Timestamptz
}

type FinalizePublicURLUsageBucketsParams struct {
	FinalizedAt pgtype.Timestamptz
	Through     pgtype.Timestamptz
}

type FindOIDCIdentityParams struct {
	Issuer  pgtype.Text
	Subject pgtype.Text
}

type GetACMEOrderByIdempotencyParams struct {
	PublishRunID   string
	IdempotencyKey string
}

type GetActivePublishRunChallengeExpiryParams struct {
	PublishRunID string
	Now          pgtype.Timestamptz
}

type GetActivePublishRunMembershipParams struct {
	TeamID     string
	IdentityID string
}

type GetActivePublishRunMembershipRow struct {
	ID             string
	Role           string
	PolicyRevision int64
}

type GetAdminRuntimeCountsRow struct {
	EnabledPublicURLs   int64
	SuspendedPublicURLs int64
	StartingPublishRuns int64
	ReadyPublishRuns    int64
	IngressLeases       int64
	RelayLeases         int64
}

type GetAuthorizedPublicURLByHostnameParams struct {
	TeamID            string
	CanonicalHostname string
}

type GetAuthorizedPublicURLByHostnameRow struct {
	ID                    string
	TeamID                string
	DomainID              string
	MembershipID          pgtype.Text
	CreatedByIdentityID   string
	IdempotencyKey        string
	RequestDigest         []byte
	CanonicalHostname     string
	Target                string
	PublicURLScope        string
	PolicyRevision        int64
	IpPolicy              string
	AllowedIpPrefixes     []netip.Prefix
	LifecycleState        string
	DnsAuthorityReference pgtype.Text
	DnsState              string
	DnsRevision           int64
	DnsWorkOwner          pgtype.Text
	DnsWorkEpoch          int64
	DnsWorkExpiresAt      pgtype.Timestamptz
	DnsAttempts           int64
	DnsAvailableAt        pgtype.Timestamptz
	DnsLastError          pgtype.Text
	NextPublishRunNumber  int64
	MutationRevision      int64
	Ephemeral             bool
	ExpiresAt             pgtype.Timestamptz
	SuspensionRevision    int64
	SuspensionReason      pgtype.Text
	CreatedAt             pgtype.Timestamptz
	UpdatedAt             pgtype.Timestamptz
	SuspendedAt           pgtype.Timestamptz
	DeletedAt             pgtype.Timestamptz
	OpenPublishRunID      string
}

type GetClaimedDomainByIdempotencyParams struct {
	IdentityID     pgtype.Text
	TeamID         pgtype.Text
	IdempotencyKey pgtype.Text
}

type GetClaimedDomainByIdempotencyRow struct {
	ID                      string
	Kind                    string
	TeamID                  pgtype.Text
	CanonicalDomain         string
	DnsAuthorityReference   pgtype.Text
	State                   string
	AuthorityRevision       int64
	VerificationTokenDigest []byte
	CreatedByIdentityID     pgtype.Text
	ClaimIdempotencyKey     pgtype.Text
	ClaimRequestDigest      []byte
	MakeDefaultWhenReady    bool
	CreatedAt               pgtype.Timestamptz
	VerifiedAt              pgtype.Timestamptz
	ReusableAfter           pgtype.Timestamptz
	ReleasedAt              pgtype.Timestamptz
	UpdatedAt               pgtype.Timestamptz
	Nameservers             []string
}

type GetControlSessionByAccessIDRow struct {
	ID                           string
	IdentityID                   string
	AuthenticationMethod         string
	AuthenticationSourceRevision int64
	AccessTokenDigest            []byte
	AccessExpiresAt              pgtype.Timestamptz
	RetrySecretCiphertext        []byte
	RetrySecretStorageKeyID      string
	RefreshExpiresAt             pgtype.Timestamptz
	Administrator                bool
}

type GetControlTLSCacheEntryParams struct {
	DirectoryUrl string
	CacheKey     string
}

type GetControlTLSCacheEntryRow struct {
	CacheCiphertext   []byte
	CacheStorageKeyID string
}

type GetDNSChallengeChangeParams struct {
	ZoneID     string
	RecordName string
}

type GetDNSChallengeChangeRow struct {
	DesiredDigest []byte
	ChangeID      string
}

type GetDNSChallengeContextParams struct {
	PublicURLID     string
	AuthorizationID string
}

type GetDNSChallengeContextRow struct {
	PublicURLID           string
	TeamID                string
	DomainID              string
	DnsAuthorityReference pgtype.Text
	CanonicalHostname     string
	CanonicalDomain       string
	AuthorizationID       string
	Identifier            string
	ChallengeDigest       []byte
	PresentationReference pgtype.Text
	State                 string
}

type GetExternalAuthorityPublicURLParams struct {
	PublishRunIdempotencyKey string
	PublicURLID              string
}

type GetExternalAuthorityPublicURLRow struct {
	ID                            string
	TeamID                        string
	DomainID                      string
	MembershipID                  pgtype.Text
	CreatedByIdentityID           string
	IdempotencyKey                string
	RequestDigest                 []byte
	CanonicalHostname             string
	Target                        string
	PublicURLScope                string
	PolicyRevision                int64
	IpPolicy                      string
	AllowedIpPrefixes             []netip.Prefix
	LifecycleState                string
	DnsAuthorityReference         pgtype.Text
	DnsState                      string
	DnsRevision                   int64
	DnsWorkOwner                  pgtype.Text
	DnsWorkEpoch                  int64
	DnsWorkExpiresAt              pgtype.Timestamptz
	DnsAttempts                   int64
	DnsAvailableAt                pgtype.Timestamptz
	DnsLastError                  pgtype.Text
	NextPublishRunNumber          int64
	MutationRevision              int64
	Ephemeral                     bool
	ExpiresAt                     pgtype.Timestamptz
	SuspensionRevision            int64
	SuspensionReason              pgtype.Text
	CreatedAt                     pgtype.Timestamptz
	UpdatedAt                     pgtype.Timestamptz
	SuspendedAt                   pgtype.Timestamptz
	DeletedAt                     pgtype.Timestamptz
	OpenPublishRunID              string
	AuthorizationPublishRunNumber int64
}

type GetIdentityContextIdentityRow struct {
	ID              string
	DisplayName     string
	NormalizedEmail pgtype.Text
	EmailVerified   bool
	Administrator   bool
	CreatedAt       pgtype.Timestamptz
	PersonalTeamID  string
}

type GetIdentityPublicURLParams struct {
	PublicURLID string
	IdentityID  string
}

type GetIdentityPublicURLRow struct {
	ID                    string
	TeamID                string
	DomainID              string
	MembershipID          pgtype.Text
	CreatedByIdentityID   string
	IdempotencyKey        string
	RequestDigest         []byte
	CanonicalHostname     string
	Target                string
	PublicURLScope        string
	PolicyRevision        int64
	IpPolicy              string
	AllowedIpPrefixes     []netip.Prefix
	LifecycleState        string
	DnsAuthorityReference pgtype.Text
	DnsState              string
	DnsRevision           int64
	DnsWorkOwner          pgtype.Text
	DnsWorkEpoch          int64
	DnsWorkExpiresAt      pgtype.Timestamptz
	DnsAttempts           int64
	DnsAvailableAt        pgtype.Timestamptz
	DnsLastError          pgtype.Text
	NextPublishRunNumber  int64
	MutationRevision      int64
	Ephemeral             bool
	ExpiresAt             pgtype.Timestamptz
	SuspensionRevision    int64
	SuspensionReason      pgtype.Text
	CreatedAt             pgtype.Timestamptz
	UpdatedAt             pgtype.Timestamptz
	SuspendedAt           pgtype.Timestamptz
	DeletedAt             pgtype.Timestamptz
	OpenPublishRunID      string
}

type GetIdentityTeamParams struct {
	IdentityID string
	TeamID     string
}

type GetIdentityTeamRow struct {
	ID              string
	Kind            string
	DisplayName     string
	ManagedLabel    string
	DefaultDomainID pgtype.Text
	PolicyRevision  int64
	CreatedAt       pgtype.Timestamptz
	UpdatedAt       pgtype.Timestamptz
}

type GetIngressLeaseParams struct {
	IngressID            string
	IngressRunID         string
	IngressLeaseRevision int64
	Now                  pgtype.Timestamptz
}

type GetIngressUsageReportParams struct {
	IngressID        string
	IngressRunID     string
	PublicURLID      string
	PublishRunNumber int64
	BucketStart      pgtype.Timestamptz
	ReportRevision   int64
}

type GetInvitationByIdempotencyParams struct {
	IdentityID     string
	TeamID         string
	IdempotencyKey string
}

type GetInvitationByIdempotencyRow struct {
	ID                         string
	TeamID                     string
	SlugReservationID          string
	InitialRole                string
	InvitedByIdentityID        string
	IdempotencyKey             string
	RequestDigest              []byte
	TokenDigest                []byte
	NormalizedEmailRestriction pgtype.Text
	State                      string
	CreatedAt                  pgtype.Timestamptz
	ExpiresAt                  pgtype.Timestamptz
	AcceptedAt                 pgtype.Timestamptz
	AcceptedByIdentityID       pgtype.Text
	AcceptedMembershipID       pgtype.Text
	RevokedAt                  pgtype.Timestamptz
	RevokedByIdentityID        pgtype.Text
	MemberSlug                 string
}

type GetOpenPublicURLRecoveryEpisodeParams struct {
	PublicURLID      string
	PublishRunNumber int64
}

type GetOrganizationTeamByIdempotencyParams struct {
	IdentityID     string
	IdempotencyKey pgtype.Text
}

type GetOrganizationTeamByIdempotencyRow struct {
	ID                    string
	Kind                  string
	DisplayName           string
	ManagedLabel          string
	DefaultDomainID       pgtype.Text
	PolicyRevision        int64
	CreationRequestDigest []byte
	CreatedAt             pgtype.Timestamptz
	UpdatedAt             pgtype.Timestamptz
}

type GetPublicURLByCreatorIdempotencyParams struct {
	IdentityID     string
	IdempotencyKey string
}

type GetPublicURLByCreatorIdempotencyRow struct {
	ID                    string
	TeamID                string
	DomainID              string
	MembershipID          pgtype.Text
	CreatedByIdentityID   string
	IdempotencyKey        string
	RequestDigest         []byte
	CanonicalHostname     string
	Target                string
	PublicURLScope        string
	PolicyRevision        int64
	IpPolicy              string
	AllowedIpPrefixes     []netip.Prefix
	LifecycleState        string
	DnsAuthorityReference pgtype.Text
	DnsState              string
	DnsRevision           int64
	DnsWorkOwner          pgtype.Text
	DnsWorkEpoch          int64
	DnsWorkExpiresAt      pgtype.Timestamptz
	DnsAttempts           int64
	DnsAvailableAt        pgtype.Timestamptz
	DnsLastError          pgtype.Text
	NextPublishRunNumber  int64
	MutationRevision      int64
	Ephemeral             bool
	ExpiresAt             pgtype.Timestamptz
	SuspensionRevision    int64
	SuspensionReason      pgtype.Text
	CreatedAt             pgtype.Timestamptz
	UpdatedAt             pgtype.Timestamptz
	SuspendedAt           pgtype.Timestamptz
	DeletedAt             pgtype.Timestamptz
	OpenPublishRunID      string
}

type GetPublicURLCreationContextParams struct {
	IdentityID string
	DomainID   string
	TeamID     string
}

type GetPublicURLCreationContextRow struct {
	TeamKind              string
	TeamCreatorIdentityID string
	PolicyRevision        int64
	IdentityKind          string
	ActorMembershipID     string
	ActorRole             string
	ActorManagedLabel     string
	ActorMemberSlug       string
	DomainKind            string
	DomainTeamID          pgtype.Text
	CanonicalDomain       string
	DomainState           string
	DnsAuthorityReference pgtype.Text
}

type GetPublicURLUsageBucketForUpdateParams struct {
	PublicURLID      string
	PublishRunNumber int64
	BucketStart      pgtype.Timestamptz
}

type GetPublishRunByIdempotencyParams struct {
	PublicURLID    string
	IdempotencyKey string
}

type GetRelayDNSChallengeContextRow struct {
	ID                    string
	RelayServiceID        string
	TlsServerName         string
	State                 string
	ChallengeDigest       []byte
	PresentationReference pgtype.Text
}

type GetRelayLeaseForClaimRow struct {
	ID                   int64
	RelayID              string
	RelayServiceID       string
	RelayRunID           string
	RelayLeaseRevision   int64
	ProtocolVersion      int64
	InternalRelayAddress string
	ObservedAddress      *netip.Addr
	InternalNetworks     []netip.Prefix
	ConnectionCapacity   int64
	StreamCapacity       int64
	ReportedConnections  int64
	ReportedStreams      int64
	Draining             bool
	DrainDeadline        pgtype.Timestamptz
	RegisteredAt         pgtype.Timestamptz
	RenewedAt            pgtype.Timestamptz
	LeaseExpiresAt       pgtype.Timestamptz
	RelayAddress         string
	TlsServerName        string
}

type GetRelayLeaseForReadyRow struct {
	ID                   int64
	RelayID              string
	RelayServiceID       string
	RelayRunID           string
	RelayLeaseRevision   int64
	ProtocolVersion      int64
	InternalRelayAddress string
	ObservedAddress      *netip.Addr
	InternalNetworks     []netip.Prefix
	ConnectionCapacity   int64
	StreamCapacity       int64
	ReportedConnections  int64
	ReportedStreams      int64
	Draining             bool
	DrainDeadline        pgtype.Timestamptz
	RegisteredAt         pgtype.Timestamptz
	RenewedAt            pgtype.Timestamptz
	LeaseExpiresAt       pgtype.Timestamptz
	RelayAddress         string
	TlsServerName        string
}

type GetRelayTransportCertificateParams struct {
	RelayServiceID     string
	RelayID            string
	RelayRunID         string
	RelayLeaseRevision int64
	Now                pgtype.Timestamptz
}

type GetTeamActorContextParams struct {
	IdentityID string
	TeamID     string
}

type GetTeamActorContextRow struct {
	ID                string
	Kind              string
	DisplayName       string
	ManagedLabel      string
	DefaultDomainID   pgtype.Text
	PolicyRevision    int64
	CreatedAt         pgtype.Timestamptz
	UpdatedAt         pgtype.Timestamptz
	ActorMembershipID string
	ActorRole         string
}

type GetTeamMembershipContextParams struct {
	MembershipID string
	TeamID       string
}

type GetTeamMembershipContextRow struct {
	ID              string
	TeamID          string
	IdentityID      string
	TeamDisplayName string
	TeamKind        string
	Role            string
	MemberSlug      string
	ManagedLabel    string
	PolicyRevision  int64
	CreatedAt       pgtype.Timestamptz
	UpdatedAt       pgtype.Timestamptz
}

type HeartbeatPublishRunParams struct {
	HeartbeatAt      pgtype.Timestamptz
	ExpiresAt        pgtype.Timestamptz
	PublishRunID     string
	PublicURLID      string
	PublishRunNumber int64
}

type InsertACMEOrderParams struct {
	ID                     string
	AccountID              string
	PublishRunID           string
	PublicURLID            string
	PublishRunNumber       int64
	IdempotencyKey         string
	RequestDigest          []byte
	CertificateCacheKey    string
	CertificateScope       string
	CertificateIdentifiers []string
	ChallengeMethod        string
	CsrDer                 []byte
	CsrDigest              []byte
	CreatedAt              pgtype.Timestamptz
}

type InsertAdminAuditEventParams struct {
	ActorIdentityID pgtype.Text
	Actor           string
	RequestID       string
	Operation       string
	TargetKind      string
	TargetID        string
	Details         []byte
	OccurredAt      pgtype.Timestamptz
}

type InsertCertificateIssuanceAuditEventParams struct {
	ActorIdentityID pgtype.Text
	RequestID       string
	IssuanceID      string
	OccurredAt      pgtype.Timestamptz
}

type InsertExpiredEphemeralPublicURLDeleteAuditEventParams struct {
	RequestID   string
	PublicURLID string
	OccurredAt  pgtype.Timestamptz
}

type InsertFinalIngressRoutingTableEventParams struct {
	EventKind          string
	PublicURLID        string
	PublishRunNumber   int64
	CanonicalHostname  string
	EntryRevision      int64
	Projection         []byte
	PublicUrlExpiresAt pgtype.Timestamptz
	CreatedAt          pgtype.Timestamptz
	UpdatedAt          pgtype.Timestamptz
}

type InsertIngressRoutingTableEventParams struct {
	EventKind          string
	PublicURLID        string
	PublishRunNumber   int64
	CanonicalHostname  string
	EntryRevision      int64
	Projection         []byte
	PublicUrlExpiresAt pgtype.Timestamptz
	CreatedAt          pgtype.Timestamptz
}

type InsertPublicURLCreateAuditEventParams struct {
	ActorIdentityID pgtype.Text
	RequestID       string
	PublicURLID     string
	OccurredAt      pgtype.Timestamptz
}

type InsertPublicURLDeleteAuditEventParams struct {
	ActorIdentityID pgtype.Text
	RequestID       string
	PublicURLID     string
	OccurredAt      pgtype.Timestamptz
}

type InsertPublicURLParams struct {
	ID                    string
	TeamID                string
	DomainID              string
	MembershipID          pgtype.Text
	CreatedByIdentityID   string
	IdempotencyKey        string
	RequestDigest         []byte
	CanonicalHostname     string
	Target                string
	PublicURLScope        string
	PolicyRevision        int64
	IpPolicy              string
	AllowedIpPrefixes     []netip.Prefix
	DnsAuthorityReference pgtype.Text
	DnsState              string
	CreatedAt             pgtype.Timestamptz
	Ephemeral             bool
	ExpiresAt             pgtype.Timestamptz
}

type InsertPublicURLUpdateAuditEventParams struct {
	ActorIdentityID pgtype.Text
	RequestID       string
	PublicURLID     string
	OccurredAt      pgtype.Timestamptz
}

type InsertPublicURLUsageDeliveryParams struct {
	BucketID       int64
	BucketRevision int64
	DeliveryKey    string
	AvailableAt    pgtype.Timestamptz
	CreatedAt      pgtype.Timestamptz
}

type InsertPublishRunAuditEventParams struct {
	ActorIdentityID pgtype.Text
	Actor           string
	RequestID       string
	PublishRunID    string
	OccurredAt      pgtype.Timestamptz
}

type InsertPublishRunConnectionsParams struct {
	PublishRunID                           string
	PublicURLID                            string
	PublishRunNumber                       int64
	PublisherConnectionIds                 []string
	RelayServiceIds                        []string
	RelayAddresses                         []string
	TlsServerNames                         []string
	CredentialDigests                      [][]byte
	PublisherConnectionCredentialExpiresAt pgtype.Timestamptz
	AssignedAt                             pgtype.Timestamptz
}

type InsertPublishRunParams struct {
	ID                         string
	PublicURLID                string
	TeamID                     string
	MembershipID               pgtype.Text
	ActingIdentityID           string
	IdempotencyKey             string
	RequestDigest              []byte
	PublishRunTokenID          string
	PublishRunTokenDigest      []byte
	PolicyRevision             int64
	CertificateCacheKey        string
	CertificateScope           string
	CertificateIdentifiers     []string
	CertificateChallengeMethod string
	CreatedAt                  pgtype.Timestamptz
	LastHeartbeatAt            pgtype.Timestamptz
	PublisherExpiresAt         pgtype.Timestamptz
	ExpectedMutationRevision   int64
}

type InsertRelayCertificateOrderParams struct {
	ID                     string
	AccountID              string
	RelayServiceID         string
	TlsServerName          string
	PrivateKeyCiphertext   []byte
	PrivateKeyStorageKeyID string
	CsrDer                 []byte
	CsrDigest              []byte
	CreatedAt              pgtype.Timestamptz
}

type LatestIngressRoutingEntryRevisionParams struct {
	PublicURLID      string
	PublishRunNumber int64
}

type ListAdminRelayLeasesParams struct {
	Now       pgtype.Timestamptz
	Cursor    pgtype.Text
	PageLimit int32
}

type ListAdminRelayLeasesRow struct {
	ID                   int64
	RelayID              string
	RelayServiceID       string
	RelayRunID           string
	RelayLeaseRevision   int64
	ProtocolVersion      int64
	InternalRelayAddress string
	ObservedAddress      *netip.Addr
	InternalNetworks     []netip.Prefix
	ConnectionCapacity   int64
	StreamCapacity       int64
	ReportedConnections  int64
	ReportedStreams      int64
	Draining             bool
	DrainDeadline        pgtype.Timestamptz
	RegisteredAt         pgtype.Timestamptz
	RenewedAt            pgtype.Timestamptz
	LeaseExpiresAt       pgtype.Timestamptz
	RelayAddress         string
	TlsServerName        string
}

type ListDNSChallengePresentationsRow struct {
	ChallengeDigest []byte
	State           string
}

type ListExternalAuthorityPublicURLsParams struct {
	TeamID string
	Cursor pgtype.Text
}

type ListExternalAuthorityPublicURLsRow struct {
	ID                    string
	TeamID                string
	DomainID              string
	MembershipID          pgtype.Text
	CreatedByIdentityID   string
	IdempotencyKey        string
	RequestDigest         []byte
	CanonicalHostname     string
	Target                string
	PublicURLScope        string
	PolicyRevision        int64
	IpPolicy              string
	AllowedIpPrefixes     []netip.Prefix
	LifecycleState        string
	DnsAuthorityReference pgtype.Text
	DnsState              string
	DnsRevision           int64
	DnsWorkOwner          pgtype.Text
	DnsWorkEpoch          int64
	DnsWorkExpiresAt      pgtype.Timestamptz
	DnsAttempts           int64
	DnsAvailableAt        pgtype.Timestamptz
	DnsLastError          pgtype.Text
	NextPublishRunNumber  int64
	MutationRevision      int64
	Ephemeral             bool
	ExpiresAt             pgtype.Timestamptz
	SuspensionRevision    int64
	SuspensionReason      pgtype.Text
	CreatedAt             pgtype.Timestamptz
	UpdatedAt             pgtype.Timestamptz
	SuspendedAt           pgtype.Timestamptz
	DeletedAt             pgtype.Timestamptz
	OpenPublishRunID      string
}

type ListIdentityMembershipContextsRow struct {
	ID              string
	TeamID          string
	IdentityID      string
	TeamDisplayName string
	TeamKind        string
	Role            string
	MemberSlug      string
	ManagedLabel    string
	PolicyRevision  int64
	CreatedAt       pgtype.Timestamptz
	UpdatedAt       pgtype.Timestamptz
}

type ListIdentityPublicURLsParams struct {
	TeamID     string
	Cursor     pgtype.Text
	IdentityID string
}

type ListIdentityPublicURLsRow struct {
	ID                    string
	TeamID                string
	DomainID              string
	MembershipID          pgtype.Text
	CreatedByIdentityID   string
	IdempotencyKey        string
	RequestDigest         []byte
	CanonicalHostname     string
	Target                string
	PublicURLScope        string
	PolicyRevision        int64
	IpPolicy              string
	AllowedIpPrefixes     []netip.Prefix
	LifecycleState        string
	DnsAuthorityReference pgtype.Text
	DnsState              string
	DnsRevision           int64
	DnsWorkOwner          pgtype.Text
	DnsWorkEpoch          int64
	DnsWorkExpiresAt      pgtype.Timestamptz
	DnsAttempts           int64
	DnsAvailableAt        pgtype.Timestamptz
	DnsLastError          pgtype.Text
	NextPublishRunNumber  int64
	MutationRevision      int64
	Ephemeral             bool
	ExpiresAt             pgtype.Timestamptz
	SuspensionRevision    int64
	SuspensionReason      pgtype.Text
	CreatedAt             pgtype.Timestamptz
	UpdatedAt             pgtype.Timestamptz
	SuspendedAt           pgtype.Timestamptz
	DeletedAt             pgtype.Timestamptz
	OpenPublishRunID      string
}

type ListIdentityTeamDomainsParams struct {
	TeamID     pgtype.Text
	IdentityID string
}

type ListIdentityTeamDomainsRow struct {
	ID                    string
	Kind                  string
	TeamID                pgtype.Text
	CanonicalDomain       string
	DnsAuthorityReference pgtype.Text
	State                 string
	AuthorityRevision     int64
	Nameservers           []string
	CreatedAt             pgtype.Timestamptz
	VerifiedAt            pgtype.Timestamptz
	UpdatedAt             pgtype.Timestamptz
}

type ListIdentityTeamsRow struct {
	ID              string
	Kind            string
	DisplayName     string
	ManagedLabel    string
	DefaultDomainID pgtype.Text
	PolicyRevision  int64
	CreatedAt       pgtype.Timestamptz
	UpdatedAt       pgtype.Timestamptz
}

type ListIngressRoutingTableEventsParams struct {
	AfterRevision   int64
	ThroughRevision int64
	PageLimit       int32
}

type ListIngressRoutingTableSnapshotParams struct {
	Now             pgtype.Timestamptz
	ThroughRevision int64
}

type ListLatestIngressUsageReportsParams struct {
	IngressID         string
	IngressRunID      string
	PublicUrlIds      []string
	PublishRunNumbers []int64
	BucketStarts      []pgtype.Timestamptz
}

type ListLatestIngressUsageReportsRow struct {
	PublicURLID               string
	PublishRunNumber          int64
	BucketStart               pgtype.Timestamptz
	BucketEnd                 pgtype.Timestamptz
	ObservedThrough           pgtype.Timestamptz
	ReportRevision            int64
	ConnectionAttempts        int64
	PolicyDenials             int64
	CapacityDenials           int64
	VisitorStreamOpenFailures int64
	SuccessfulStreams         int64
	ConnectionNanoseconds     int64
	IngressBytes              int64
	EgressBytes               int64
	Final                     bool
}

type ListRelayDNSChallengePresentationsRow struct {
	ChallengeDigest []byte
	State           string
}

type ListRelayServiceAssignmentTotalsRow struct {
	RelayServiceID  string
	AssignmentCount int64
}

type ListTeamInvitationsRow struct {
	ID                         string
	TeamID                     string
	SlugReservationID          string
	InitialRole                string
	InvitedByIdentityID        string
	IdempotencyKey             string
	RequestDigest              []byte
	TokenDigest                []byte
	NormalizedEmailRestriction pgtype.Text
	State                      string
	CreatedAt                  pgtype.Timestamptz
	ExpiresAt                  pgtype.Timestamptz
	AcceptedAt                 pgtype.Timestamptz
	AcceptedByIdentityID       pgtype.Text
	AcceptedMembershipID       pgtype.Text
	RevokedAt                  pgtype.Timestamptz
	RevokedByIdentityID        pgtype.Text
	MemberSlug                 string
}

type ListTeamMembershipContextsParams struct {
	TeamID     string
	IdentityID string
}

type ListTeamMembershipContextsRow struct {
	ID              string
	TeamID          string
	IdentityID      string
	TeamDisplayName string
	TeamKind        string
	Role            string
	MemberSlug      string
	ManagedLabel    string
	PolicyRevision  int64
	CreatedAt       pgtype.Timestamptz
	UpdatedAt       pgtype.Timestamptz
}

type ListTeamNamespaceLabelsRow struct {
	ManagedLabel string
	MemberSlug   string
}

type ListValidReadyPublisherConnectionsParams struct {
	PublishRunID string
	Now          pgtype.Timestamptz
}

type ListValidReadyPublisherConnectionsRow struct {
	PublishRunID                 string
	PublicURLID                  string
	PublishRunNumber             int64
	ConnectionSlot               int16
	PublisherConnectionID        string
	ConnectionAssignmentRevision int64
	RelayServiceID               string
	ConnectedRelayID             pgtype.Text
	ConnectedRelayRunID          pgtype.Text
	ConnectedRelayLeaseRevision  pgtype.Int8
	InternalRelayAddress         string
	TlsServerName                string
	LeaseExpiresAt               pgtype.Timestamptz
}

type LockACMEOrderForInstallParams struct {
	IssuanceID             string
	TeamID                 string
	CertificateCacheKey    string
	CertificateScope       string
	CertificateIdentifiers []string
	ChallengeMethod        string
	InstalledAt            pgtype.Timestamptz
	NotAfter               pgtype.Timestamptz
}

type LockControlSessionByRefreshIDRow struct {
	ID                           string
	IdentityID                   string
	AuthenticationMethod         string
	AuthenticationSourceRevision int64
	RefreshTokenDigest           []byte
	RefreshExpiresAt             pgtype.Timestamptz
	Administrator                bool
}

type LockDomainPublicURLsParams struct {
	TeamID   string
	DomainID string
}

type LockEligibleRelayLeasesParams struct {
	Now             pgtype.Timestamptz
	RelayServiceIds []string
	ProtocolVersion int64
}

type LockEligibleRelayLeasesRow struct {
	ID                   int64
	RelayID              string
	RelayServiceID       string
	RelayRunID           string
	RelayLeaseRevision   int64
	ProtocolVersion      int64
	InternalRelayAddress string
	ObservedAddress      *netip.Addr
	InternalNetworks     []netip.Prefix
	ConnectionCapacity   int64
	StreamCapacity       int64
	ReportedConnections  int64
	ReportedStreams      int64
	Draining             bool
	DrainDeadline        pgtype.Timestamptz
	RegisteredAt         pgtype.Timestamptz
	RenewedAt            pgtype.Timestamptz
	LeaseExpiresAt       pgtype.Timestamptz
	RelayAddress         string
	TlsServerName        string
}

type LockExpiredEphemeralPublicURLsParams struct {
	Now       pgtype.Timestamptz
	BatchSize int32
}

type LockExpiredPublishRunPublicURLsParams struct {
	Now       pgtype.Timestamptz
	BatchSize int32
}

type LockIdentityForTeamCreationRow struct {
	ID          string
	DisplayName string
}

type LockIdentityPublicURLForDeleteParams struct {
	IdentityID  string
	PublicURLID string
}

type LockIdentityPublicURLForDeleteRow struct {
	ID                    string
	TeamID                string
	DomainID              string
	MembershipID          pgtype.Text
	CreatedByIdentityID   string
	IdempotencyKey        string
	RequestDigest         []byte
	CanonicalHostname     string
	Target                string
	PublicURLScope        string
	PolicyRevision        int64
	IpPolicy              string
	AllowedIpPrefixes     []netip.Prefix
	LifecycleState        string
	DnsAuthorityReference pgtype.Text
	DnsState              string
	DnsRevision           int64
	DnsWorkOwner          pgtype.Text
	DnsWorkEpoch          int64
	DnsWorkExpiresAt      pgtype.Timestamptz
	DnsAttempts           int64
	DnsAvailableAt        pgtype.Timestamptz
	DnsLastError          pgtype.Text
	NextPublishRunNumber  int64
	MutationRevision      int64
	Ephemeral             bool
	ExpiresAt             pgtype.Timestamptz
	SuspensionRevision    int64
	SuspensionReason      pgtype.Text
	CreatedAt             pgtype.Timestamptz
	UpdatedAt             pgtype.Timestamptz
	SuspendedAt           pgtype.Timestamptz
	DeletedAt             pgtype.Timestamptz
	ActorMembershipID     string
	ActorRole             string
}

type LockIngressLeaseParams struct {
	IngressID            string
	IngressRunID         string
	IngressLeaseRevision int64
	Now                  pgtype.Timestamptz
}

type LockInvitationByTokenDigestParams struct {
	IdentityID  string
	TokenDigest []byte
}

type LockInvitationByTokenDigestRow struct {
	ID                         string
	TeamID                     string
	SlugReservationID          string
	InitialRole                string
	InvitedByIdentityID        string
	IdempotencyKey             string
	RequestDigest              []byte
	TokenDigest                []byte
	NormalizedEmailRestriction pgtype.Text
	State                      string
	CreatedAt                  pgtype.Timestamptz
	ExpiresAt                  pgtype.Timestamptz
	AcceptedAt                 pgtype.Timestamptz
	AcceptedByIdentityID       pgtype.Text
	AcceptedMembershipID       pgtype.Text
	RevokedAt                  pgtype.Timestamptz
	RevokedByIdentityID        pgtype.Text
	MemberSlug                 string
	TeamKind                   string
	TeamDisplayName            string
	AcceptingNormalizedEmail   pgtype.Text
	AcceptingEmailVerified     bool
}

type LockMembershipPublicURLsParams struct {
	TeamID       string
	MembershipID pgtype.Text
}

type LockPublishRunForUsageParams struct {
	PublishRunNumber int64
	PublicURLID      string
}

type LockTeamActorContextParams struct {
	IdentityID string
	TeamID     string
}

type LockTeamActorContextRow struct {
	ID                string
	Kind              string
	DisplayName       string
	ManagedLabel      string
	DefaultDomainID   pgtype.Text
	PolicyRevision    int64
	CreatedAt         pgtype.Timestamptz
	UpdatedAt         pgtype.Timestamptz
	ActorMembershipID string
	ActorRole         string
}

type LockTeamDomainParams struct {
	DomainID string
	TeamID   pgtype.Text
}

type LockTeamDomainRow struct {
	ID                      string
	Kind                    string
	TeamID                  pgtype.Text
	CanonicalDomain         string
	DnsAuthorityReference   pgtype.Text
	State                   string
	AuthorityRevision       int64
	VerificationTokenDigest []byte
	CreatedByIdentityID     pgtype.Text
	ClaimIdempotencyKey     pgtype.Text
	ClaimRequestDigest      []byte
	MakeDefaultWhenReady    bool
	CreatedAt               pgtype.Timestamptz
	VerifiedAt              pgtype.Timestamptz
	ReusableAfter           pgtype.Timestamptz
	ReleasedAt              pgtype.Timestamptz
	UpdatedAt               pgtype.Timestamptz
	Nameservers             []string
}

type LockTeamInvitationParams struct {
	InvitationID string
	TeamID       string
}

type LockTeamInvitationRow struct {
	ID                         string
	TeamID                     string
	SlugReservationID          string
	InitialRole                string
	InvitedByIdentityID        string
	IdempotencyKey             string
	RequestDigest              []byte
	TokenDigest                []byte
	NormalizedEmailRestriction pgtype.Text
	State                      string
	CreatedAt                  pgtype.Timestamptz
	ExpiresAt                  pgtype.Timestamptz
	AcceptedAt                 pgtype.Timestamptz
	AcceptedByIdentityID       pgtype.Text
	AcceptedMembershipID       pgtype.Text
	RevokedAt                  pgtype.Timestamptz
	RevokedByIdentityID        pgtype.Text
	MemberSlug                 string
}

type LockTeamMembershipParams struct {
	MembershipID string
	TeamID       string
}

type LockTeamMembershipRow struct {
	ID                  string
	TeamID              string
	IdentityID          string
	SlugReservationID   string
	ManagedLabel        string
	Role                string
	AuthorityRevision   int64
	CreatedAt           pgtype.Timestamptz
	UpdatedAt           pgtype.Timestamptz
	RemovedAt           pgtype.Timestamptz
	RemovedByIdentityID pgtype.Text
	MemberSlug          string
}

type MarkACMEAuthorizationsPresentedParams struct {
	PresentedAt pgtype.Timestamptz
	IssuanceID  string
}

type MarkACMEOrderInstalledParams struct {
	InstalledAt pgtype.Timestamptz
	IssuanceID  string
}

type MarkClaimedDomainReleasingParams struct {
	AuthorityRevision int64
	UpdatedAt         pgtype.Timestamptz
	DomainID          string
	TeamID            pgtype.Text
}

type MarkDNSAuthorityReleasingParams struct {
	UpdatedAt          pgtype.Timestamptz
	AuthorityReference string
}

type MarkExpiredIngressUsageRunIncompleteParams struct {
	EndedAt      pgtype.Timestamptz
	IngressID    string
	IngressRunID string
}

type MarkIngressUsageRunReportedParams struct {
	ReportedAt           pgtype.Timestamptz
	ObservedThrough      pgtype.Timestamptz
	Complete             bool
	IngressID            string
	IngressRunID         string
	IngressLeaseRevision int64
}

type MarkPublishRunCertificateInstalledParams struct {
	IssuanceID       pgtype.Text
	InstalledAt      pgtype.Timestamptz
	NotAfter         pgtype.Timestamptz
	PublishRunID     string
	PublicURLID      string
	PublishRunNumber int64
}

type MarkPublishRunReadyParams struct {
	ReadyAt          pgtype.Timestamptz
	PublishRunID     string
	PublicURLID      string
	PublishRunNumber int64
}

type MarkPublisherConnectionReadyParams struct {
	ReadyAt                      pgtype.Timestamptz
	PublisherConnectionID        string
	PublishRunID                 string
	PublicURLID                  string
	PublishRunNumber             int64
	ConnectionSlot               int16
	ConnectionAssignmentRevision int64
	RelayServiceID               string
	RelayID                      pgtype.Text
	RelayRunID                   pgtype.Text
	RelayLeaseRevision           pgtype.Int8
	ClaimID                      pgtype.Text
}

type ObserveAuthorityRevisionParams struct {
	Issuer         string
	TeamID         string
	PolicyRevision int64
	UpdatedAt      pgtype.Timestamptz
}

type ObservePublicURLRecoveryEpisodeParams struct {
	ObservedAt        pgtype.Timestamptz
	ObservedSeconds   pgtype.Float8
	RecoveryEpisodeID int64
	PublicURLID       string
	PublishRunNumber  int64
}

type OpenPublicURLRecoveryEpisodeParams struct {
	PublicURLID      string
	PublishRunNumber int64
	OpenedAt         pgtype.Timestamptz
}

type PruneIngressRoutingHistoryBatchRow struct {
	NextRevision int64
	Scanned      int64
	Deleted      int64
}

type PutControlTLSCacheEntryParams struct {
	DirectoryUrl      string
	CacheKey          string
	CacheCiphertext   []byte
	CacheStorageKeyID string
	UpdatedAt         pgtype.Timestamptz
}

type QuarantineMemberSlugParams struct {
	QuarantinedAt     pgtype.Timestamptz
	SlugReservationID string
}

type Querier interface {
	AcceptTeamInvitation(ctx context.Context, arg AcceptTeamInvitationParams) (int64, error)
	ActivateMemberSlug(ctx context.Context, arg ActivateMemberSlugParams) (int64, error)
	AdvanceAuthorityRevision(ctx context.Context, arg AdvanceAuthorityRevisionParams) (int64, error)
	// commit the retention floor before pruning in another transaction. a crash
	// between them retains extra rows, never a missing advertised suffix.
	AdvanceIngressRoutingRetentionFloor(ctx context.Context, revision int64) (int64, error)
	AdvanceTeamPolicyRevision(ctx context.Context, arg AdvanceTeamPolicyRevisionParams) (int64, error)
	// callers hold the ingress/run, public URL/publish run, and existing bucket
	// guards. dependent writes insert the immutable report, apply its aggregate
	// delta, and update denials atomically. reject any missing required step and
	// roll back the whole page.
	ApplyIngressUsageReport(ctx context.Context, arg ApplyIngressUsageReportParams) (ApplyIngressUsageReportRow, error)
	BeginAdminRelayDrain(ctx context.Context, arg BeginAdminRelayDrainParams) (BeginAdminRelayDrainRow, error)
	BeginDNSAuthorityRelease(ctx context.Context, arg BeginDNSAuthorityReleaseParams) (ControlDnsAuthority, error)
	BeginIngressDrain(ctx context.Context, arg BeginIngressDrainParams) (ControlIngressLease, error)
	BeginRelayDrain(ctx context.Context, arg BeginRelayDrainParams) (BeginRelayDrainRow, error)
	CancelOpenPublicURLRecoveryEpisode(ctx context.Context, arg CancelOpenPublicURLRecoveryEpisodeParams) (ControlPublicUrlRecoveryEpisode, error)
	CancelPublishRunACMEAuthorizations(ctx context.Context, arg CancelPublishRunACMEAuthorizationsParams) error
	CancelPublishRunACMEOrders(ctx context.Context, arg CancelPublishRunACMEOrdersParams) error
	// claim-time checks can precede a publisher's challenge-ready transition.
	// recheck the current projection and every live ingress immediately before
	// asking the CA to validate, while the authorization is still presented.
	CheckACMEChallengeRoutingReady(ctx context.Context, arg CheckACMEChallengeRoutingReadyParams) (bool, error)
	ClaimACMEOrderWork(ctx context.Context, arg ClaimACMEOrderWorkParams) (ControlAcmeOrder, error)
	ClaimDNSAuthorityWork(ctx context.Context, arg ClaimDNSAuthorityWorkParams) (ControlDnsAuthority, error)
	ClaimDNSPublicURLWork(ctx context.Context, arg ClaimDNSPublicURLWorkParams) (ControlPublicUrl, error)
	ClaimPublicURLUsageDeliveries(ctx context.Context, arg ClaimPublicURLUsageDeliveriesParams) ([]ControlPublicUrlUsageDelivery, error)
	// require the exact publish run, assignment revision, and relay service. only
	// the same process and claim ID may repeat a connected or ready claim.
	ClaimPublisherConnection(ctx context.Context, arg ClaimPublisherConnectionParams) (ControlPublishRunConnectionSlot, error)
	ClaimRelayCertificateOrderWork(ctx context.Context, arg ClaimRelayCertificateOrderWorkParams) (ControlRelayCertificateOrder, error)
	ClaimRelayServiceForCertificateOrder(ctx context.Context, arg ClaimRelayServiceForCertificateOrderParams) (ControlRelayService, error)
	ClosePublishRun(ctx context.Context, arg ClosePublishRunParams) (ControlPublishRun, error)
	ClosePublishRunConnections(ctx context.Context, arg ClosePublishRunConnectionsParams) error
	CompleteACMEAuthorizationCleanup(ctx context.Context, arg CompleteACMEAuthorizationCleanupParams) (int64, error)
	CompletePublicURLUsageDelivery(ctx context.Context, arg CompletePublicURLUsageDeliveryParams) (ControlPublicUrlUsageDelivery, error)
	ConsumeOIDCAssertion(ctx context.Context, arg ConsumeOIDCAssertionParams) (int64, error)
	// diagnostic/test oracle only; placement reads trigger-maintained totals.
	CountOpenPublishRunAssignmentsByRelayService(ctx context.Context) ([]CountOpenPublishRunAssignmentsByRelayServiceRow, error)
	CountRelayActiveConnections(ctx context.Context, arg CountRelayActiveConnectionsParams) (int64, error)
	CountTeamOwners(ctx context.Context, teamID string) (int64, error)
	CreateActiveSlugReservation(ctx context.Context, arg CreateActiveSlugReservationParams) error
	CreateClaimedDNSAuthority(ctx context.Context, arg CreateClaimedDNSAuthorityParams) error
	CreateClaimedDomain(ctx context.Context, arg CreateClaimedDomainParams) (ControlDomain, error)
	CreateControlSession(ctx context.Context, arg CreateControlSessionParams) error
	CreateIdentity(ctx context.Context, arg CreateIdentityParams) error
	CreateManagedDomain(ctx context.Context, arg CreateManagedDomainParams) error
	CreateOIDCIdentity(ctx context.Context, arg CreateOIDCIdentityParams) (ControlIdentity, error)
	CreateOrGetDNSAuthority(ctx context.Context, arg CreateOrGetDNSAuthorityParams) (ControlDnsAuthority, error)
	CreateOrganizationTeam(ctx context.Context, arg CreateOrganizationTeamParams) (CreateOrganizationTeamRow, error)
	CreateOwnerMembership(ctx context.Context, arg CreateOwnerMembershipParams) error
	CreatePersonalTeam(ctx context.Context, arg CreatePersonalTeamParams) error
	CreateTeamInvitation(ctx context.Context, arg CreateTeamInvitationParams) (ControlTeamInvitation, error)
	CreateTeamMembership(ctx context.Context, arg CreateTeamMembershipParams) error
	DNSAuthorityReleaseReady(ctx context.Context, arg DNSAuthorityReleaseReadyParams) (pgtype.Bool, error)
	DeleteControlTLSCacheEntry(ctx context.Context, arg DeleteControlTLSCacheEntryParams) error
	DeleteExpiredOIDCAssertionExchanges(ctx context.Context, now pgtype.Timestamptz) error
	DeletePublicURL(ctx context.Context, arg DeletePublicURLParams) (int64, error)
	// close only the exact claim so a late disconnect cannot close its replacement.
	DisconnectPublisherConnection(ctx context.Context, arg DisconnectPublisherConnectionParams) (ControlPublishRunConnectionSlot, error)
	EnsureACMEAccount(ctx context.Context, arg EnsureACMEAccountParams) (ControlAcmeAccount, error)
	EnsureExternalAuthorityPrincipal(ctx context.Context, arg EnsureExternalAuthorityPrincipalParams) (ControlIdentity, error)
	EnsureExternalRetryMasterKey(ctx context.Context, arg EnsureExternalRetryMasterKeyParams) (EnsureExternalRetryMasterKeyRow, error)
	EnsureIngressUsageRun(ctx context.Context, arg EnsureIngressUsageRunParams) (ControlIngressUsageRun, error)
	EnsurePublicURLUsageConfiguration(ctx context.Context, arg EnsurePublicURLUsageConfigurationParams) (ControlPublicUrlUsageConfiguration, error)
	ExpirePublisherConnection(ctx context.Context, arg ExpirePublisherConnectionParams) (ControlPublishRunConnectionSlot, error)
	ExpireTeamInvitations(ctx context.Context, arg ExpireTeamInvitationsParams) ([]string, error)
	FinalizePublicURLUsageBuckets(ctx context.Context, arg FinalizePublicURLUsageBucketsParams) ([]ControlPublicUrlUsageBucket, error)
	FindBuiltinIdentity(ctx context.Context) (ControlIdentity, error)
	FindInvitationTeamByTokenDigest(ctx context.Context, tokenDigest []byte) (string, error)
	FindManagedDomain(ctx context.Context) (ControlDomain, error)
	FindOIDCIdentity(ctx context.Context, arg FindOIDCIdentityParams) (ControlIdentity, error)
	GetACMEAccountByDirectory(ctx context.Context, directoryUrl string) (ControlAcmeAccount, error)
	GetACMEOrder(ctx context.Context, issuanceID string) (ControlAcmeOrder, error)
	GetACMEOrderByIdempotency(ctx context.Context, arg GetACMEOrderByIdempotencyParams) (ControlAcmeOrder, error)
	GetActivePublishRunChallengeExpiry(ctx context.Context, arg GetActivePublishRunChallengeExpiryParams) (pgtype.Timestamptz, error)
	GetActivePublishRunMembership(ctx context.Context, arg GetActivePublishRunMembershipParams) (GetActivePublishRunMembershipRow, error)
	GetAdminRuntimeCounts(ctx context.Context, now pgtype.Timestamptz) (GetAdminRuntimeCountsRow, error)
	GetAuthorizedPublicURLByHostname(ctx context.Context, arg GetAuthorizedPublicURLByHostnameParams) (GetAuthorizedPublicURLByHostnameRow, error)
	GetClaimedDomainByIdempotency(ctx context.Context, arg GetClaimedDomainByIdempotencyParams) (GetClaimedDomainByIdempotencyRow, error)
	GetControlSessionByAccessID(ctx context.Context, accessTokenID string) (GetControlSessionByAccessIDRow, error)
	GetControlTLSCacheEntry(ctx context.Context, arg GetControlTLSCacheEntryParams) (GetControlTLSCacheEntryRow, error)
	GetDNSAuthority(ctx context.Context, authorityReference string) (ControlDnsAuthority, error)
	GetDNSAuthorityByReleaseIdempotency(ctx context.Context, releaseIdempotencyKey pgtype.Text) (ControlDnsAuthority, error)
	GetDNSChallengeChange(ctx context.Context, arg GetDNSChallengeChangeParams) (GetDNSChallengeChangeRow, error)
	GetDNSChallengeContext(ctx context.Context, arg GetDNSChallengeContextParams) (GetDNSChallengeContextRow, error)
	GetExternalAuthorityPublicURL(ctx context.Context, arg GetExternalAuthorityPublicURLParams) (GetExternalAuthorityPublicURLRow, error)
	GetIdentityContextIdentity(ctx context.Context, identityID string) (GetIdentityContextIdentityRow, error)
	GetIdentityPublicURL(ctx context.Context, arg GetIdentityPublicURLParams) (GetIdentityPublicURLRow, error)
	GetIdentityTeam(ctx context.Context, arg GetIdentityTeamParams) (GetIdentityTeamRow, error)
	GetIngressLease(ctx context.Context, arg GetIngressLeaseParams) (ControlIngressLease, error)
	GetIngressUsageReport(ctx context.Context, arg GetIngressUsageReportParams) (ControlIngressUsageReport, error)
	GetInvitationByIdempotency(ctx context.Context, arg GetInvitationByIdempotencyParams) (GetInvitationByIdempotencyRow, error)
	GetOpenPublicURLRecoveryEpisode(ctx context.Context, arg GetOpenPublicURLRecoveryEpisodeParams) (ControlPublicUrlRecoveryEpisode, error)
	GetOpenPublishRun(ctx context.Context, publicUrlID string) (ControlPublishRun, error)
	GetOrganizationTeamByIdempotency(ctx context.Context, arg GetOrganizationTeamByIdempotencyParams) (GetOrganizationTeamByIdempotencyRow, error)
	GetPublicURLByCreatorIdempotency(ctx context.Context, arg GetPublicURLByCreatorIdempotencyParams) (GetPublicURLByCreatorIdempotencyRow, error)
	GetPublicURLCreationContext(ctx context.Context, arg GetPublicURLCreationContextParams) (GetPublicURLCreationContextRow, error)
	GetPublicURLUsageBucketByID(ctx context.Context, bucketID int64) (ControlPublicUrlUsageBucket, error)
	GetPublicURLUsageBucketForUpdate(ctx context.Context, arg GetPublicURLUsageBucketForUpdateParams) (ControlPublicUrlUsageBucket, error)
	GetPublishRun(ctx context.Context, publishRunID string) (ControlPublishRun, error)
	GetPublishRunByIdempotency(ctx context.Context, arg GetPublishRunByIdempotencyParams) (ControlPublishRun, error)
	GetPublishRunByTokenID(ctx context.Context, publishRunTokenID string) (ControlPublishRun, error)
	GetPublisherConnectionForClaim(ctx context.Context, publisherConnectionID string) (ControlPublishRunConnectionSlot, error)
	GetRelayDNSChallengeContext(ctx context.Context, orderID string) (GetRelayDNSChallengeContextRow, error)
	// claims and readiness share the relay-service guard across processes.
	// claims take NO KEY UPDATE on the selected lease to serialize capacity with
	// other claims, renewal, and drain. readiness takes compatible KEY SHARE
	// because it uses an existing reservation. service guards precede lease rows.
	GetRelayLeaseForClaim(ctx context.Context, relayID string) (GetRelayLeaseForClaimRow, error)
	// keep the service guard through routing publication so registration cannot
	// replace the relay process between readiness and the published projection.
	// KEY SHARE does not block claims or other readiness work. renewal or drain may
	// overlap; readiness checks its lease, and projection reads exclude drained leases.
	GetRelayLeaseForReady(ctx context.Context, relayID string) (GetRelayLeaseForReadyRow, error)
	GetRelayTransportCertificate(ctx context.Context, arg GetRelayTransportCertificateParams) (ControlRelayService, error)
	GetTeamActorContext(ctx context.Context, arg GetTeamActorContextParams) (GetTeamActorContextRow, error)
	GetTeamMembershipContext(ctx context.Context, arg GetTeamMembershipContextParams) (GetTeamMembershipContextRow, error)
	HeartbeatPublishRun(ctx context.Context, arg HeartbeatPublishRunParams) (ControlPublishRun, error)
	InsertACMEOrder(ctx context.Context, arg InsertACMEOrderParams) (ControlAcmeOrder, error)
	InsertAdminAuditEvent(ctx context.Context, arg InsertAdminAuditEventParams) error
	InsertCertificateIssuanceAuditEvent(ctx context.Context, arg InsertCertificateIssuanceAuditEventParams) error
	InsertExpiredEphemeralPublicURLDeleteAuditEvent(ctx context.Context, arg InsertExpiredEphemeralPublicURLDeleteAuditEventParams) error
	// take the routing clock before allocating the revision in this command.
	// single-event publishers avoid an extra round trip; multi-event publishers
	// already hold the clock. keep it through commit to preserve revision order.
	InsertFinalIngressRoutingTableEvent(ctx context.Context, arg InsertFinalIngressRoutingTableEventParams) (int64, error)
	InsertIngressRoutingTableEvent(ctx context.Context, arg InsertIngressRoutingTableEventParams) (int64, error)
	InsertPublicURL(ctx context.Context, arg InsertPublicURLParams) (ControlPublicUrl, error)
	InsertPublicURLCreateAuditEvent(ctx context.Context, arg InsertPublicURLCreateAuditEventParams) error
	InsertPublicURLDeleteAuditEvent(ctx context.Context, arg InsertPublicURLDeleteAuditEventParams) error
	InsertPublicURLUpdateAuditEvent(ctx context.Context, arg InsertPublicURLUpdateAuditEventParams) error
	InsertPublicURLUsageDelivery(ctx context.Context, arg InsertPublicURLUsageDeliveryParams) (ControlPublicUrlUsageDelivery, error)
	InsertPublishRun(ctx context.Context, arg InsertPublishRunParams) (ControlPublishRun, error)
	InsertPublishRunAuditEvent(ctx context.Context, arg InsertPublishRunAuditEventParams) error
	InsertPublishRunConnections(ctx context.Context, arg InsertPublishRunConnectionsParams) ([]ControlPublishRunConnectionSlot, error)
	InsertRelayCertificateOrder(ctx context.Context, arg InsertRelayCertificateOrderParams) (ControlRelayCertificateOrder, error)
	LatestIngressRoutingEntryRevision(ctx context.Context, arg LatestIngressRoutingEntryRevisionParams) (int64, error)
	ListACMEOrderAuthorizations(ctx context.Context, issuanceID string) ([]ControlAcmeAuthorization, error)
	ListAdminRelayLeases(ctx context.Context, arg ListAdminRelayLeasesParams) ([]ListAdminRelayLeasesRow, error)
	ListCurrentDomainNames(ctx context.Context) ([]string, error)
	ListDNSChallengePresentations(ctx context.Context, baseIdentifier string) ([]ListDNSChallengePresentationsRow, error)
	ListExternalAuthorityPublicURLs(ctx context.Context, arg ListExternalAuthorityPublicURLsParams) ([]ListExternalAuthorityPublicURLsRow, error)
	ListIdentityMembershipContexts(ctx context.Context, identityID string) ([]ListIdentityMembershipContextsRow, error)
	ListIdentityPublicURLs(ctx context.Context, arg ListIdentityPublicURLsParams) ([]ListIdentityPublicURLsRow, error)
	ListIdentityTeamDomains(ctx context.Context, arg ListIdentityTeamDomainsParams) ([]ListIdentityTeamDomainsRow, error)
	ListIdentityTeams(ctx context.Context, identityID string) ([]ListIdentityTeamsRow, error)
	ListIngressRoutingTableEvents(ctx context.Context, arg ListIngressRoutingTableEventsParams) ([]ControlIngressRoutingTableEvent, error)
	// select the latest revision for each entry before filtering kind or expiry;
	// filtering first could revive a superseded public URL or challenge.
	ListIngressRoutingTableSnapshot(ctx context.Context, arg ListIngressRoutingTableSnapshotParams) ([]ControlIngressRoutingTableEvent, error)
	// ingress and usage-run guards serialize this source's append-only history.
	// fetch bounded metadata; exact replays load histogram payloads separately.
	ListLatestIngressUsageReports(ctx context.Context, arg ListLatestIngressUsageReportsParams) ([]ListLatestIngressUsageReportsRow, error)
	ListMaintenanceControls(ctx context.Context) ([]ControlMaintenanceControl, error)
	ListPublishRunConnections(ctx context.Context, publishRunID string) ([]ControlPublishRunConnectionSlot, error)
	ListRelayDNSChallengePresentations(ctx context.Context, tlsServerName string) ([]ListRelayDNSChallengePresentationsRow, error)
	ListRelayServiceAssignmentTotals(ctx context.Context) ([]ListRelayServiceAssignmentTotalsRow, error)
	ListTeamInvitations(ctx context.Context, teamID string) ([]ListTeamInvitationsRow, error)
	ListTeamMembershipContexts(ctx context.Context, arg ListTeamMembershipContextsParams) ([]ListTeamMembershipContextsRow, error)
	ListTeamNamespaceLabels(ctx context.Context, teamID string) ([]ListTeamNamespaceLabelsRow, error)
	ListValidReadyPublisherConnections(ctx context.Context, arg ListValidReadyPublisherConnectionsParams) ([]ListValidReadyPublisherConnectionsRow, error)
	LockACMEOrder(ctx context.Context, issuanceID string) (ControlAcmeOrder, error)
	LockACMEOrderForInstall(ctx context.Context, arg LockACMEOrderForInstallParams) (ControlAcmeOrder, error)
	LockCertificateIssuanceControl(ctx context.Context) (bool, error)
	LockControlSessionByRefreshID(ctx context.Context, refreshTokenID string) (LockControlSessionByRefreshIDRow, error)
	LockDNSAuthority(ctx context.Context, authorityReference string) (ControlDnsAuthority, error)
	LockDNSAuthorityLocalDomain(ctx context.Context, authorityReference pgtype.Text) error
	LockDNSAuthorityLocalTeam(ctx context.Context, authorityReference pgtype.Text) error
	LockDomainPublicURLs(ctx context.Context, arg LockDomainPublicURLsParams) ([]ControlPublicUrl, error)
	LockEligibleRelayLeases(ctx context.Context, arg LockEligibleRelayLeasesParams) ([]LockEligibleRelayLeasesRow, error)
	LockExpiredEphemeralPublicURLs(ctx context.Context, arg LockExpiredEphemeralPublicURLsParams) ([]ControlPublicUrl, error)
	// lock public URLs before publish runs, as heartbeat and closure do. the
	// partial expiration index finds candidates; SKIP LOCKED leaves busy public
	// URLs to other controls and active publishers.
	LockExpiredPublishRunPublicURLs(ctx context.Context, arg LockExpiredPublishRunPublicURLsParams) ([]ControlPublicUrl, error)
	LockHostedTeamPublicURLs(ctx context.Context, teamID string) ([]ControlPublicUrl, error)
	LockIdentityBootstrap(ctx context.Context) error
	LockIdentityForTeamCreation(ctx context.Context, identityID string) (LockIdentityForTeamCreationRow, error)
	LockIdentityPublicURLForDelete(ctx context.Context, arg LockIdentityPublicURLForDeleteParams) (LockIdentityPublicURLForDeleteRow, error)
	LockIngressLease(ctx context.Context, arg LockIngressLeaseParams) (ControlIngressLease, error)
	LockIngressRoutingTableClock(ctx context.Context) (int64, error)
	LockInvalidReadyPublisherConnections(ctx context.Context, now pgtype.Timestamptz) ([]ControlPublishRunConnectionSlot, error)
	LockInvitationByTokenDigest(ctx context.Context, arg LockInvitationByTokenDigestParams) (LockInvitationByTokenDigestRow, error)
	LockLocalPublicURLTeamForMutation(ctx context.Context, publicUrlID string) (string, error)
	// local authority mutations lock the team before identities, memberships,
	// domains, DNS authorities, and public URLs. recheck authorization under this
	// transaction-held guard; hosted teams need no fabricated local rows.
	// queue writers with publish run readers through the advisory lock: row-lock
	// readers alone can bypass a waiting writer indefinitely.
	LockLocalTeamForMutation(ctx context.Context, teamID string) (string, error)
	// publish run creation reads authority under this guard before locking its
	// public URL. different public URLs may start together while team, role, or
	// domain mutations wait. callers must not upgrade this guard by writing the team.
	LockLocalTeamForSession(ctx context.Context, teamID string) (string, error)
	LockManagedDomainForClaim(ctx context.Context) (ControlDomain, error)
	LockMembershipPublicURLs(ctx context.Context, arg LockMembershipPublicURLsParams) ([]ControlPublicUrl, error)
	LockPublicURLCreationControl(ctx context.Context) (bool, error)
	// serialize creators without blocking publish run and audit foreign-key checks.
	LockPublicURLCreator(ctx context.Context, identityID string) (string, error)
	// publish run operations serialize with public URL mutations without changing
	// public URL identity. NO KEY UPDATE permits usage's KEY SHARE references;
	// overlapping usage pages could starve a stronger UPDATE heartbeat lock.
	LockPublicURLForRun(ctx context.Context, publicUrlID string) (ControlPublicUrl, error)
	LockPublicURLForUsage(ctx context.Context, publicUrlID string) (string, error)
	LockPublicURLRecoveryEpisode(ctx context.Context, recoveryEpisodeID int64) (ControlPublicUrlRecoveryEpisode, error)
	LockPublishRun(ctx context.Context, publishRunID string) (ControlPublishRun, error)
	LockPublishRunCreationControl(ctx context.Context) (bool, error)
	// acquire the public URL reference before the publish run in one statement.
	// read the bucket later: another ingress may create it while this statement
	// waits for the publish run lock, after this statement's snapshot was taken.
	LockPublishRunForUsage(ctx context.Context, arg LockPublishRunForUsageParams) (ControlPublishRun, error)
	LockRelayServiceForCertificate(ctx context.Context, relayServiceID string) (string, error)
	// callers hold affected public URL rows and any existing publish run rows.
	// take the assignment-total guard before relay-service guards and lease rows;
	// lock all services before checking capacity or locking leases.
	LockRelayServicesForPlacement(ctx context.Context) ([]string, error)
	LockTeamActorContext(ctx context.Context, arg LockTeamActorContextParams) (LockTeamActorContextRow, error)
	LockTeamDomain(ctx context.Context, arg LockTeamDomainParams) (LockTeamDomainRow, error)
	LockTeamForInvitationAcceptance(ctx context.Context, teamID string) (string, error)
	LockTeamInvitation(ctx context.Context, arg LockTeamInvitationParams) (LockTeamInvitationRow, error)
	LockTeamMembership(ctx context.Context, arg LockTeamMembershipParams) (LockTeamMembershipRow, error)
	MarkACMEAuthorizationsPresented(ctx context.Context, arg MarkACMEAuthorizationsPresentedParams) (int64, error)
	MarkACMEOrderInstalled(ctx context.Context, arg MarkACMEOrderInstalledParams) (ControlAcmeOrder, error)
	MarkClaimedDomainReleasing(ctx context.Context, arg MarkClaimedDomainReleasingParams) (int64, error)
	MarkDNSAuthorityReleasing(ctx context.Context, arg MarkDNSAuthorityReleasingParams) (int64, error)
	MarkExpiredIngressUsageRunIncomplete(ctx context.Context, arg MarkExpiredIngressUsageRunIncompleteParams) error
	MarkExpiredIngressUsageRunsIncomplete(ctx context.Context, now pgtype.Timestamptz) ([]ControlIngressUsageRun, error)
	MarkIngressUsageRunReported(ctx context.Context, arg MarkIngressUsageRunReportedParams) (ControlIngressUsageRun, error)
	MarkInvitationExpired(ctx context.Context, invitationID string) (int64, error)
	MarkPublishRunCertificateInstalled(ctx context.Context, arg MarkPublishRunCertificateInstalledParams) (ControlPublishRun, error)
	MarkPublishRunReady(ctx context.Context, arg MarkPublishRunReadyParams) (ControlPublishRun, error)
	// ready is idempotent for the exact claim; a replaced assignment cannot revive.
	MarkPublisherConnectionReady(ctx context.Context, arg MarkPublisherConnectionReadyParams) (ControlPublishRunConnectionSlot, error)
	ObserveAuthorityRevision(ctx context.Context, arg ObserveAuthorityRevisionParams) (int64, error)
	ObservePublicURLRecoveryEpisode(ctx context.Context, arg ObservePublicURLRecoveryEpisodeParams) (ControlPublicUrlRecoveryEpisode, error)
	OpenPublicURLRecoveryEpisode(ctx context.Context, arg OpenPublicURLRecoveryEpisodeParams) error
	// bound candidates scanned, even when an anchor cannot be removed. retain the
	// latest hostname/category projection, including tombstones and expired rows,
	// and each publish run number's latest revision. concurrent publication can
	// make an anchor redundant but cannot restore a superseded event.
	PruneIngressRoutingHistoryBatch(ctx context.Context, afterRevision int64) (PruneIngressRoutingHistoryBatchRow, error)
	PutControlTLSCacheEntry(ctx context.Context, arg PutControlTLSCacheEntryParams) error
	QuarantineMemberSlug(ctx context.Context, arg QuarantineMemberSlugParams) (int64, error)
	ReadIngressRoutingTableClock(ctx context.Context) (ControlIngressRoutingTableClock, error)
	RegisterIngress(ctx context.Context, arg RegisterIngressParams) (ControlIngressLease, error)
	// blocking relay-service operations take the transaction advisory guard before
	// service and lease rows. row readers can bypass a waiting writer without this
	// queue, starving registration, placement, or certificate updates.
	// SKIP LOCKED certificate preparation and key rotation only take row locks;
	// they must not wait for this guard while holding a row.
	RegisterRelay(ctx context.Context, arg RegisterRelayParams) (RegisterRelayRow, error)
	RejectPublicURLUsageDelivery(ctx context.Context, arg RejectPublicURLUsageDeliveryParams) (ControlPublicUrlUsageDelivery, error)
	ReleaseInvitedMemberSlug(ctx context.Context, arg ReleaseInvitedMemberSlugParams) (int64, error)
	RemoveTeamMembership(ctx context.Context, arg RemoveTeamMembershipParams) (int64, error)
	RenewEphemeralPublicURLExpiry(ctx context.Context, arg RenewEphemeralPublicURLExpiryParams) (pgtype.Timestamptz, error)
	RenewIngress(ctx context.Context, arg RenewIngressParams) (ControlIngressLease, error)
	RenewRelay(ctx context.Context, arg RenewRelayParams) (RenewRelayRow, error)
	// a failed ready connection can keep its existing service reservation. this
	// atomic ready -> assigned transition has zero counter delta and needs only the
	// caller's public URL/publish run locks, not placement's global/service/lease guards.
	// check failure and eligible service capacity in the statement snapshot. a
	// concurrent lease/configuration change may invalidate the returned assignment,
	// just as one immediately after commit can; claim checks the exact current lease
	// and process capacity under its exclusive lease guard. no capacity is added here.
	// closed or expired slots have no reservation and require guarded placement first.
	ReplacePublishRunConnection(ctx context.Context, arg ReplacePublishRunConnectionParams) (ControlPublishRunConnectionSlot, error)
	ReserveInvitedMemberSlug(ctx context.Context, arg ReserveInvitedMemberSlugParams) (string, error)
	ReserveManagedLabel(ctx context.Context, arg ReserveManagedLabelParams) (string, error)
	RetryPublicURLUsageDelivery(ctx context.Context, arg RetryPublicURLUsageDeliveryParams) (ControlPublicUrlUsageDelivery, error)
	RevokeControlSession(ctx context.Context, arg RevokeControlSessionParams) (int64, error)
	RevokeTeamInvitation(ctx context.Context, arg RevokeTeamInvitationParams) (int64, error)
	RotateACMEAccountKey(ctx context.Context, arg RotateACMEAccountKeyParams) error
	RotateControlSessionCredentials(ctx context.Context, arg RotateControlSessionCredentialsParams) (int64, error)
	RotateControlSessionRetrySecret(ctx context.Context, arg RotateControlSessionRetrySecretParams) error
	RotateControlTLSCacheEntry(ctx context.Context, arg RotateControlTLSCacheEntryParams) error
	RotateExternalRetryMasterKey(ctx context.Context, arg RotateExternalRetryMasterKeyParams) error
	RotateRelayCertificateOrderPrivateKey(ctx context.Context, arg RotateRelayCertificateOrderPrivateKeyParams) error
	RotateRelayServicePrivateKey(ctx context.Context, arg RotateRelayServicePrivateKeyParams) error
	SaveACMEAuthorizationWork(ctx context.Context, arg SaveACMEAuthorizationWorkParams) (ControlAcmeAuthorization, error)
	SaveACMEOrderWork(ctx context.Context, arg SaveACMEOrderWorkParams) (ControlAcmeOrder, error)
	SaveDNSAuthorityWork(ctx context.Context, arg SaveDNSAuthorityWorkParams) (ControlDnsAuthority, error)
	SaveDNSPublicURLWork(ctx context.Context, arg SaveDNSPublicURLWorkParams) (ControlPublicUrl, error)
	SaveRelayCertificateOrderWork(ctx context.Context, arg SaveRelayCertificateOrderWorkParams) (ControlRelayCertificateOrder, error)
	// find a committed prefix, not the largest old timestamp: request-start times
	// can be out of revision order. keep every recent event without taking the
	// publication clock during this scan.
	SelectIngressRoutingRetentionFloor(ctx context.Context, cutoff pgtype.Timestamptz) (int64, error)
	SetDNSReadyDomainDefault(ctx context.Context, arg SetDNSReadyDomainDefaultParams) (int64, error)
	SetDomainAuthorityRevision(ctx context.Context, arg SetDomainAuthorityRevisionParams) error
	SetMaintenanceControl(ctx context.Context, arg SetMaintenanceControlParams) (ControlMaintenanceControl, error)
	SetPersonalTeamDefaultDomain(ctx context.Context, arg SetPersonalTeamDefaultDomainParams) error
	SetTeamDefaultDomain(ctx context.Context, arg SetTeamDefaultDomainParams) (int64, error)
	StoreRelayTransportCertificate(ctx context.Context, arg StoreRelayTransportCertificateParams) (ControlRelayService, error)
	SuspendAuthorityPublicURL(ctx context.Context, arg SuspendAuthorityPublicURLParams) (int64, error)
	TeamMembershipIdentityExists(ctx context.Context, arg TeamMembershipIdentityExistsParams) (bool, error)
	// cleanup-only coordination; do not take public URL, placement, lease, or routing clock locks.
	TryLockIngressRoutingHistoryCleanup(ctx context.Context) (bool, error)
	UpdateACMEAccountRegistration(ctx context.Context, arg UpdateACMEAccountRegistrationParams) (ControlAcmeAccount, error)
	UpdateLocalDomainForDNSAuthority(ctx context.Context, arg UpdateLocalDomainForDNSAuthorityParams) (UpdateLocalDomainForDNSAuthorityRow, error)
	UpdateMembershipRole(ctx context.Context, arg UpdateMembershipRoleParams) (int64, error)
	UpdateOIDCIdentity(ctx context.Context, arg UpdateOIDCIdentityParams) (ControlIdentity, error)
	UpdatePublicURL(ctx context.Context, arg UpdatePublicURLParams) (ControlPublicUrl, error)
	UpdatePublicURLRecoveryHistogram(ctx context.Context, arg UpdatePublicURLRecoveryHistogramParams) (ControlPublicUrlRecoveryHistogram, error)
	UpsertDNSChallengeChange(ctx context.Context, arg UpsertDNSChallengeChangeParams) error
	// a publisher transition invalidates the worker's authorization snapshot.
	// call only after changing authorizations while holding the order lock.
	WakeACMEOrder(ctx context.Context, arg WakeACMEOrderParams) error
}