#pragma once

#include <functional>
#include <string>

#include "types.hh"

class sqlite3;
class sqlite3_stmt;

namespace nix {

/* RAII wrapper to close a SQLite database automatically. */
struct SQLite
{
    sqlite3 * db;
    SQLite() { db = 0; }
    ~SQLite();
    operator sqlite3 * () { return db; }
};

/* RAII wrapper to create and destroy SQLite prepared statements. */
struct SQLiteStmt
{
    sqlite3 * db = 0;
    sqlite3_stmt * stmt = 0;
    SQLiteStmt() { }
    void create(sqlite3 * db, const std::string & s);
    ~SQLiteStmt();
    operator sqlite3_stmt * () { return stmt; }

    /* Helper for binding / executing statements. */
    class Use
    {
        friend struct SQLiteStmt;
    private:
        SQLiteStmt & stmt;
        unsigned int curArg = 1;
        Use(SQLiteStmt & stmt);

    public:

        ~Use();

        /* Bind the next parameter. */
        Use & operator () (const std::string & value, bool notNull = true);
        Use & operator () (int64_t value, bool notNull = true);
        Use & bind(); // null

        int step();

        /* Execute a statement that does not return rows. */
        void exec();

        /* For statements that return 0 or more rows. Returns true iff
           a row is available. */
        bool next();

        std::string getStr(int col);
        int64_t getInt(int col);
    };

    Use use()
    {
        return Use(*this);
    }
};

/* RAII helper that ensures transactions are aborted unless explicitly
   committed. */
struct SQLiteTxn
{
    bool active = false;
    sqlite3 * db;

    SQLiteTxn(sqlite3 * db);

    void commit();

    ~SQLiteTxn();
};


MakeError(SQLiteError, Error);
MakeError(SQLiteBusy, SQLiteError);

[[noreturn]] void throwSQLiteError(sqlite3 * db, const format & f);

/* Convenience function for retrying a SQLite transaction when the
   database is busy. */
template<typename T>
T retrySQLite(std::function<T()> fun)
{
    while (true) {
        try {
            return fun();
        } catch (SQLiteBusy & e) {
        }
    }
}

}
h'/>
</form>
</td></tr></table>
<div class='path'>path: <a href='/guix/log/?id=3c822126bed8d3b7f3f0b1505161d354c56da69b'>root</a>/<a href='/guix/log/gnu?id=3c822126bed8d3b7f3f0b1505161d354c56da69b'>gnu</a>/<a href='/guix/log/gnu/system?id=3c822126bed8d3b7f3f0b1505161d354c56da69b'>system</a>/<a href='/guix/log/gnu/system/privilege.scm?id=3c822126bed8d3b7f3f0b1505161d354c56da69b'>privilege.scm</a></div><div class='content'><table class='list nowrap'><tr class='nohover'><th class='left'>Age</th><th class='left'>Commit message (<a href='/guix/log/gnu/system/privilege.scm?id=3c822126bed8d3b7f3f0b1505161d354c56da69b&amp;showmsg=1'>Expand</a>)</th><th class='left'>Author</th></tr>
<tr><td><span title='2024-09-08 02:00:00 +0200'>2024-09-08</span></td><td><a href='/guix/commit/gnu/system/privilege.scm?id=0dd8e4c35109ed8bc2406a0bc13e18823a334937'>privilege: Add file-like-&gt;setuid-program helper.</a><span class='msg-avail'>...<span class='msg-tooltip'>* gnu/system/privilege.scm (file-like-&gt;setuid-program): New public
procedure.
* gnu/system/setuid.scm: Re-export it for compatibility.
(file-like-&gt;setuid-program): Remove this old version.
* gnu/services/docker.scm (singularity-setuid-programs): Use it (again).
* gnu/services/desktop.scm (enlightenment-privileged-programs): Likewise.

Change-Id: I8e41144438677a15cdadb3063651dbc780715497
</span></span></td><td>Tobias Geerinckx-Rice</td></tr>
<tr><td><span title='2024-08-11 02:00:00 +0200'>2024-08-11</span></td><td><a href='/guix/commit/gnu/system/privilege.scm?id=71f0676a295841e2cc662eec0d3e9b7e69726035'>privilege: Add POSIX capabilities(7) support.</a><span class='msg-avail'>...<span class='msg-tooltip'>* gnu/system/privilege.scm (&lt;privileged-program&gt;): Add a field
representing the program's POSIX capabilities.
(privileged-program-capabilities): New public procedure.
* doc/guix.texi (Privileged Programs): Document it.
* gnu/build/activation.scm (activate-privileged-programs): Take a LIBCAP
package argument providing setcap(8) to apply said capabilities.
* gnu/services.scm (privileged-program-&gt;activation-gexp): Pass said
package argument where supported.  Include privileged-program-capabilities
in the compatibility hack.
</span></span></td><td>Tobias Geerinckx-Rice</td></tr>
<tr><td><span title='2024-08-11 02:00:00 +0200'>2024-08-11</span></td><td><a href='/guix/commit/gnu/system/privilege.scm?id=39471f2627bd63df0e9af02a46e5dda60e233ffc'>system: Add (gnu system privilege).</a><span class='msg-avail'>...<span class='msg-tooltip'>* gnu/system/privilege.scm: New file.
* gnu/local.mk (GNU_SYSTEM_MODULES): Add it.
</span></span></td><td>Tobias Geerinckx-Rice</td></tr>