staticColumnType is a minimal ColumnTyper reporting a fixed DuckDB type name, used to synthesize a RowDescription without executing a query.

FlightSessionState is the durable reconnect state for Flight-only sessions.

LifecycleOperation is the stable, low-cardinality label that identifies a public WorkerLifecycle method on lifecycle-transition metrics. New values mu

Session represents a single DuckDB session.

TransitionOutcomeReason classifies why a lifecycle transition did or did not happen. The values are stable and meant for telemetry — PR 6 will hang pe

WorkerPool abstracts the lifecycle and scheduling of Flight SQL workers. Two implementations exist: - FlightWorkerPool: spawns workers as local child

ACMEDNSManager manages TLS certificates via ACME DNS-01 challenges using Route53. Unlike HTTP-01 (which requires port 80 reachable from the internet),

ACMEManager wraps autocert.Manager to provide Let's Encrypt TLS certificates. It starts an HTTP listener on port 80 for HTTP-01 challenge validation.

ActivationPayload carries the tenant-specific runtime that is delivered to a neutral shared warm worker over the control-plane RPC channel.

AdminAuditEntry is one append-only record of an admin-UI action. Every mutation (config-store write, user/secret change) and every impersonation state

Appender is a hook that handles append for value types arrowmap doesn't know about (typically driver-specific types like duckdb.Interval). It reports

AssumedCredentials holds the temporary credentials from STS AssumeRole.

AuditStore persists admin audit entries.

BackendKey identifies a backend connection for PostgreSQL cancel requests. Pid is the backend process id surfaced to the client; SecretKey is the matc

BooleanPredicateTransform normalizes boolean literal comparisons in predicate-valued contexts so DuckLake doesn't see `= true/false` or `!= true/false

BuildInfo carries the version/commit/date triple that each binary receives via -ldflags -X main.* at link time. Each package main owns its own var ver

CLIInputs carries the post-flag.Parse() values from the binary's main plus a Set map indicating which flags the user actually provided. The caller is

CPInstance is a live control-plane replica.

CPUserSecretManager implements server.UserSecretManager on top of the config store: it seals user CREATE PERSISTENT SECRET statements with AES-GCM and

CRMetadataStore is the metadata-store slice of one Duckling CR's status — the live (composition-assigned) backend, notably which cnpg shard a cnpg-sha

CacheProxy is a forward HTTP proxy that caches responses on local NVMe. DuckDB httpfs sends each S3 request as a signed plain-HTTP request to the prox

ChildConfig contains all configuration needed by a child worker process. It is passed from parent to child via the DUCKGRES_CHILD_CONFIG env var as JS

ChildProcess represents a spawned child worker process

ChildTracker manages spawned child worker processes

Cipher seals and opens user secret statements with AES-256-GCM. The (org, user, name) row key is bound in as additional authenticated data, so a ciphe

Classification is the result of pre-parse query classification.

ClusterStatus aggregates cluster state for the dashboard.

CodedError is a transform-detected error that carries an explicit PostgreSQL SQLSTATE. conn_errors.go reads the code via the SQLState() method when se

ColumnTyper provides type name information for a database column. *sql.ColumnType satisfies this interface.

CompareOptions configures comparison behavior

CompareResult holds the result of comparing two query results

ComputeUsageDelta is one accumulator's compute-usage for a single billing key + time-bucket, ready to be flushed into the durable buffer. Counts are w

ComputeUsageRow is one aggregated row served by the billing pull API: the sum of every closed bucket for one key on one UTC day. CPU and MemGiB are th

Config controls transpilation behavior

Config configures DuckLake catalog attachment.

ConfigStore manages configuration stored in a PostgreSQL database.

ConfigStoreInterface abstracts the config store for the control plane. Defined here to avoid circular imports with the configstore package.

ConnDetail is a redacted snapshot of one live client connection, for the admin live-query detail view. Query is the ALREADY-redacted current/last quer

ConnLiveSummary is the per-connection live state the admin Live list needs: the pg_stat_activity-style State and the current-query start. State is "ac

ControlPlane manages the TCP listener and routes connections to Flight SQL workers. The control plane owns client connections end-to-end: TLS, authent

ControlPlaneConfig extends server.Config with control-plane-specific settings.

ControlPlaneFlightSQLHandler implements Flight SQL over control-plane sessions.

ControlPlaneInstance is a runtime coordination record for one control-plane process. These rows live in the runtime schema, not the snapshot-backed co

NOTE: the cluster-wide singleton config tables (global_config, ducklake_config, rate_limit_config, query_log_config) were removed — they were seeded a

Controller polls the config store for actionable warehouses and reconciles their state against Duckling CRs in Kubernetes.

Controller is a stub for non-Kubernetes builds.

CopyFromOptions contains parsed options from a COPY FROM STDIN command

CopyFromStdinExecutor is an optional capability implemented by executors that need the CSV bytes shipped to a different filesystem than the one the CO

CopyToOptions contains parsed options from a COPY TO STDOUT command

CreateOptions carries per-org knobs that shape the generated Duckling CR.