queryReturnsResults checks if a SQL query returns a result set. This is used to determine whether to send RowDescription or NoData.

sendDataRowWithFormats sends a data row with optional binary encoding formatCodes: per-column format codes (0=text, 1=binary), or nil for all text typ

HealthCheckLoop runs periodic health checks on all workers. onCrash is called when a worker crash is detected. onProgress is called with per-session p

MatchKey is the identity used to decide whether an existing worker can serve a request. A nil profile shares the key of the zero/default profile, so l

NewWorkerLease constructs a WorkerLease from explicit identity fields. The expected callers are paths that already hold ownership information out-of-b

readStartupMessage reads the initial startup message from the client

newLifecycleClientConn builds a clientConn with both reader and writer wired so the disconnect monitor's bufio.Reader.Peek doesn't dereference nil. Th

NewLocalExecutor creates a new LocalExecutor wrapping the given *sql.DB.

NewRateLimiter creates a new rate limiter with the given config.

QuerySource returns the current value of the `duckgres.query_source` session GUC, or defaultQuerySource ("standard") if it was never set / set to empt

claimSessionLocked records one newly-assigned session on the worker: it increments the active session count and advances the peak-sessions high-water

eatKeyword consumes the given keyword (case-insensitive, word-bounded).

execUserSecretDDL is the shared (simple + extended protocol) handler for persistent-secret DDL. It returns handled=false when the statement is not sec

normalizeQueryHash computes a FNV-1a hash of a query after collapsing whitespace and replacing literals with placeholders. This groups queries that di

renameFuncAndStripPrefix renames a function and removes any pg_catalog/public schema prefix.

Capture records an event. orgID attributes the event to an org via group analytics; an empty orgID falls back to a non-org distinct_id and omits the g

Default returns the installed Tracker, or a no-op tracker if none is set.

InitSessionDatabaseMetadata installs session-local overrides for metadata surfaces (current_database, pg_database, information_schema views) so they r

RegisterConnection records a new connection from the given address. Returns true if the connection is allowed, false otherwise.

ShutdownAll stops all workers gracefully.

getTypeInfo extracts type info from a ColumnTyper (e.g. *sql.ColumnType).

pgxConnect creates a pgx connection to Duckgres (uses extended query protocol).

protectLongIdentifiers scans sql and replaces every identifier whose value exceeds maxIdentifierBytes with a unique short placeholder. It returns the

quoteIdent quotes a PostgreSQL identifier with double quotes. Any embedded double quotes are doubled per SQL standard.

readManifest reads a file relative to the project root (located by walking up to the go.mod), matching how the manifests ship in the repo.

--- Stranded-pod reconciler tests --- cleanupOrphanedWorkerPods closes a gap left by ShutdownAll: the CP marks the worker row terminal (retired/lost)

DestroySession closes and removes a session.

HandleProxy handles forward HTTP proxy requests from DuckDB httpfs. Expects absolute-form URIs (scheme + host + path in the request-line).

ListOrphanedWorkers returns workers in active states that no live CP is responsible for any longer. Three independent failure modes are covered, joine

PairFromMain builds a *DuckDBPair that points Main and Control at the same *sql.DB and owns no connector. Intended for test fixtures that don't exerci

SetDefault installs the global Tracker. Passing nil installs a no-op tracker.

Snapshot returns the current config snapshot.

beginConnWork fences any operation that uses the session connection while a raw SQL transaction may be open. It intentionally does not mutate queryAct

containsAny returns true if s contains any of the given substrings.

ensureLifecycle returns the pool's lifecycle service, lazily wiring it on first use when a runtimeStore is set but lifecycle is nil. Production paths

load fetches all config from the database and builds a Snapshot.

localScope reports whether this request is a peer-to-peer fan-out call that must return only the local CP's view (no further fan-out).

pgFrame builds a framed wire-protocol message: type byte + int32 length (including itself) + body.

pgxCursorRows issues stmt via the extended query protocol and returns the rows, command tag, and error. pgx.Conn.Query always goes through Parse/Bind/

resolveWorkerProfile turns the client's worker_cpu / worker_memory / worker_ttl startup options plus the org's operator-set default worker profile int

CheckConnection checks if a connection from the given address should be allowed. Returns an error message if the connection should be rejected, or emp

Close flushes any buffered events. Safe to call multiple times.

Has returns true if the cache contains the given key.

IsBanned checks if an IP is currently banned.

IsValidCacheKey returns true if key is a 64-char lowercase hex string.

SetConnectionLimiter replaces the local process limiter with a cluster-wide admission limiter. Local session maps still track only this control-plane'

StartCredentialRefresh starts a background goroutine that periodically refreshes S3 credentials for long-lived DuckDB connections using the credential

Tracer returns the package-level tracer.