Add AUTHORIZATION clause and IP range support for endpoints

- Add Owner field to CreateEndpointStatement
- Add AUTHORIZATION clause parsing for CREATE ENDPOINT
- Add colon-separated IP range support (IPv4PartTwo)

Co-Authored-By: Claude Opus 4.5 <noreply@anthropic.com>

Author: kyleconroy

ast/create_simple_statements.go

@@ -211,6 +211,7 @@ func (r *RouteOption) node() {}
 
 // CreateEndpointStatement represents a CREATE ENDPOINT statement.
 type CreateEndpointStatement struct {
+	Owner           *Identifier
 	Name            *Identifier
 	State           string
 	Affinity        *EndpointAffinity

parser/marshal.go

@@ -18796,6 +18796,9 @@ func createEndpointStatementToJSON(s *ast.CreateEndpointStatement) jsonNode {
 	node := jsonNode{
 		"$type": "CreateEndpointStatement",
 	}
+	if s.Owner != nil {
+		node["Owner"] = identifierToJSON(s.Owner)
+	}
 	if s.Name != nil {
 		node["Name"] = identifierToJSON(s.Name)
 	}

parser/parse_ddl.go

@@ -8082,6 +8082,11 @@ func (p *Parser) parseAlterEndpointStatement() (*ast.AlterEndpointStatement, err
 						} else if p.curTok.Type == TokenLParen {
 							p.nextToken() // consume (
 							ipOpt.IPv4PartOne = p.parseIPv4Address()
+							// Check for colon-separated second IP address
+							if p.curTok.Type == TokenColon {
+								p.nextToken() // consume :
+								ipOpt.IPv4PartTwo = p.parseIPv4Address()
+							}
 							if p.curTok.Type == TokenRParen {
 								p.nextToken() // consume )
 							}

parser/parse_statements.go

@@ -12808,6 +12808,12 @@ func (p *Parser) parseCreateEndpointStatement() (*ast.CreateEndpointStatement, e
 	}
 	hasOptions := false
 
+	// Check for AUTHORIZATION immediately after name
+	if p.curTok.Type == TokenAuthorization {
+		p.nextToken() // consume AUTHORIZATION
+		stmt.Owner = p.parseIdentifier()
+	}
+
 	// Parse endpoint options (STATE, AFFINITY, AS, FOR)
 	for p.curTok.Type != TokenEOF && p.curTok.Type != TokenSemicolon {
 		upper := strings.ToUpper(p.curTok.Literal)
@@ -12887,6 +12893,11 @@ func (p *Parser) parseCreateEndpointStatement() (*ast.CreateEndpointStatement, e
 						} else if p.curTok.Type == TokenLParen {
 							p.nextToken() // consume (
 							ipOpt.IPv4PartOne = p.parseIPv4Address()
+							// Check for colon-separated second IP address
+							if p.curTok.Type == TokenColon {
+								p.nextToken() // consume :
+								ipOpt.IPv4PartTwo = p.parseIPv4Address()
+							}
 							if p.curTok.Type == TokenRParen {
 								p.nextToken() // consume )
 							}