Start begins the polling goroutine that periodically reloads config.

updateTxStatus updates the transaction status based on the executed command. This is called after a successful command execution.

walkNode recursively walks a node and its children

Addr returns the bound listener address.

Stop stops the background debounce goroutine. Must be called on shutdown.

isCallerCancellation reports whether err is a cancellation that the caller asked for — either through pgwire CancelRequest, an explicit ctx cancel, or

skipIfKnown checks if the current test is in the known failures list and skips it with the documented reason. Call at the start of subtests.

Get returns a child process by PID

Transition validates a lifecycle change and returns the next worker state. When assignment metadata is omitted, the current assignment is carried forw

DB exposes the GORM database for direct CRUD operations (used by admin API).

Transform modifies the AST in place. Returns true if any changes were made. The result parameter can be used to set metadata like IsNoOp.

readMessage reads a single message from the client

SessionCount returns the number of active sessions.

Stop drains remaining entries and shuts down the flush goroutine.

String renders the human-readable single-line version string used by `--version` / `-v`.

Count returns the number of active child processes

List returns recent entries, newest first, optionally filtered by org/actor.

Remove unregisters a child process by PID

histogramVecLabelSampleCount returns the cumulative sample count of a HistogramVec series labelled with the given values.

NewControllerWithClient creates a Controller with a pre-built DucklingClient (for testing).

counterValue reads a Prometheus counter's current value without pulling in the testutil package (and its extra module deps). Used to assert the Open-v

logQueryError logs a query execution failure. DuckLake-specific retryable conditions and user-attributable errors get Warn / Info so the Error level s

reconcileHeadroom drives the placeholder pods toward the dynamic target. Leader-gated (called from the janitor, which runs only on the elected CP). Al

ExecuteQuery executes a query and returns the result

OrgID returns the org id the worker was assigned to at observation time. Empty for unassigned workers.

logQueryFinished records a query terminating on the worker. Counter- part to logQueryStarted; emit once per query regardless of outcome so the start/f

transformExpression recursively transforms an expression, replacing regex operators with function calls. Returns the new node if transformed, nil othe

Name returns the transform identifier for logging/debugging

RecordFailedAuth records a failed authentication attempt. Returns true if the IP is now banned.

UnregisterConnection decrements the active connection count for an IP.

classifyErrorCode returns the most appropriate PostgreSQL SQLSTATE for a DuckDB error. Transaction conflicts get 40001 (serialization_failure), which

initPgCatalog creates PostgreSQL compatibility functions and views in DuckDB DuckDB already has a pg_catalog schema with basic views, so we just add m

makeFakeWorker creates a ManagedWorker with a started process that stays alive. Returns the worker and a cancel function to kill it.

AssumeRole returns short-lived credentials for the given IAM role ARN, serving from cache when valid (Expiration is always the true STS expiration; th

Classify performs fast pre-parse classification of a SQL query. It does case-insensitive substring matching to detect PostgreSQL-specific patterns. Co

NewMemoryRebalancer creates a rebalancer with the given budgets. If memoryBudget is 0, it defaults to 75% of system RAM. If threadBudget is 0, it defa

NewTokenSet builds a TokenSet from the primary secret and rotation fallbacks, dropping empty strings so an unset slot can never validate.

Shutdown performs a graceful shutdown with the given context

Worker returns a worker by ID, or false if not found.

writeNoData sends no data response

Count returns the number of accepted tokens (for operability logging only — never log the values themselves).

RedactForLog returns a version of query safe to write to logs, traces, query logs, and pg_stat_activity. CREATE SECRET option lists carry credential m

RuntimeSchema returns the dedicated runtime coordination schema name.

Start begins serving in the background.

arrowTypeToDuckDB maps an Arrow DataType back to a DuckDB type name string.