queryaccess

Aug 30, 2026

Changes in this version

+ var ErrBOMOnlySQL = errors.New("query access SQL must not be empty")

+ var ErrMySQLTiDBSchemaConflict = errors.New(...)

+ func ResolveMySQLTiDBOnlineSchema(dialect, database, connectionSchema, requestedSchema string) (string, string, error)

Aug 11, 2026

Changes in this version

+ func IsExactCountIntegerOneCandidate(candidate EffectCandidate) bool

type EffectIdentityFacts

+ AggregateClass string

type QueryAccessResult

+ ExactCountIntegerOneStatement bool

type TrustedEffectEntry

+ AggregateClass string

Jul 22, 2026

Changes in this version

type BuiltinSemanticCallClass

+ const BuiltinSemanticScalar

type BuiltinSemanticEntry

+ MaxArity int

+ MinArity int

Jul 19, 2026

Changes in this version

+ var ErrAnalysisProfileDialectMismatch = errors.New("query access analysis profile does not match dialect")

+ var ErrBuiltinSemanticManifestInvalid = errors.New("invalid builtin semantic manifest")

+ var ErrInvalidAnalysisProfile = errors.New("invalid query access analysis profile")

+ func ValidateAnalysisProfile(profile AnalysisProfile, dialect string) error

+ type AnalysisProfile string

+ const AnalysisProfileEmpty

+ const AnalysisProfileMySQL57

+ const AnalysisProfileMySQL80

+ const AnalysisProfileMySQL84

+ const AnalysisProfileTiDB85

+ type BuiltinSemanticCallClass string

+ const BuiltinSemanticAggregate

+ const BuiltinSemanticWindow

+ type BuiltinSemanticEntry struct

+ AllowAggOrder bool

+ AllowDistinct bool

+ AllowFilter bool

+ AllowFrame bool

+ AllowNamedWindow bool

+ AllowWindowOrder bool

+ AllowWindowPartition bool

+ AllowWithinGroup bool

+ Arity int

+ CallClass BuiltinSemanticCallClass

+ Dialect string

+ Name string

+ OperandKinds []string

+ Profile AnalysisProfile

+ RequireWindowOrder bool

+ RequireWindowPartition bool

+ type BuiltinSemanticManifest struct

+ func NewBuiltinSemanticManifest(entries []BuiltinSemanticEntry) (*BuiltinSemanticManifest, error)

+ func (m *BuiltinSemanticManifest) Entries() []BuiltinSemanticEntry

type EffectCandidate

+ Ambiguous bool

+ Canonical bool

+ HasNamedWindow bool

+ HasWindowOrder bool

+ HasWindowPartition bool

+ IsQuoted bool

+ OriginalNamePath []string

+ ParserClassification string

+ UnqualifiedRelation bool

+ WindowFrameKinds []string

+ WindowOrderColumnRefs []OperandColumnRef

+ WindowOrderKinds []string

+ WindowPartitionColumnRefs []OperandColumnRef

+ WindowPartitionKinds []string

type EffectCandidateKind

+ const EffectCandidateUnknown

type QueryAccessRequest

+ AnalysisProfile AnalysisProfile

type Service

+ func NewMySQLTiDBSemanticService(schemaResolver SchemaResolver) (*Service, error)

Jul 17, 2026

Changes in this version

+ func ValidatePhase1PureEffectCandidates(candidates []EffectCandidate) (bool, domain.ReasonCode)

type EffectCandidate

+ HasAggOrder bool

+ HasDistinct bool

+ HasFrame bool

+ HasWithinGroup bool

Jul 16, 2026

Changes in this version

+ const PgCatalogNamespaceName

+ var ErrDuplicateIdentityOrdinal = errors.New("duplicate effect identity candidate ordinal")

+ var ErrIdentityBatchIncomplete = errors.New("effect identity batch incomplete")

+ var ErrIdentityRequestInvalid = errors.New("invalid effect identity request")

+ var ErrManifestHashMismatch = errors.New("manifest hash mismatch")

+ var ErrManifestInvalid = errors.New("invalid trust manifest")

+ var ErrPolicyVersionMismatch = errors.New("server version outside manifest range")

+ var ErrTrustedBundleInvalid = errors.New("invalid trusted bundle")

+ var PG17Manifest = NewPG17Manifest()

+ func BatchIsFullyResolved(batch EffectIdentityBatch) bool

+ func CandidateExplicitPgCatalog(c EffectCandidate) bool

+ func CandidateExplicitSchemaName(c EffectCandidate) string

+ func CandidateExplicitlyQualified(c EffectCandidate) bool

+ func ComputeManifestHash(entries []TrustedEffectEntry) string

+ func FailClosedReasonCodes(batch EffectIdentityBatch) []domain.ReasonCode

+ func MapCatalogErrorToStatus(err error) domain.IdentityStatus

+ func MarshalManifestJSON(m TrustedEffectManifest) ([]byte, error)

+ func ResolutionContextSearchPathCompatible(a, b EffectIdentityResolutionContext) bool

+ func ResolutionContextSessionCompatible(a, b EffectIdentityResolutionContext) bool

+ func ResolutionContextSessionComplete(rc EffectIdentityResolutionContext) bool

+ func ResolutionContextUsableForUnqualified(rc EffectIdentityResolutionContext) bool

+ func ResolutionContextsCompatible(a, b EffectIdentityResolutionContext) bool

+ func StampFactsFromResolution(facts *EffectIdentityFacts, rc EffectIdentityResolutionContext)

+ func ValidEffectCastMethod(m EffectCastMethod) bool

+ func ValidEffectVolatility(v EffectVolatility) bool

+ func ValidTrustDecision(d TrustDecision) bool

+ func ValidateBatchOrdinals(batch EffectIdentityBatch, candidates []EffectCandidate) error

+ func ValidateEffectIdentityRequest(req EffectIdentityRequest) error

+ func ValidateFactPinning(facts *EffectIdentityFacts, finalCtx EffectIdentityResolutionContext) bool

+ func ValidateManifest(m TrustedEffectManifest) error

+ func ValidateResolutionContextForPromotion(initialCtx, finalCtx EffectIdentityResolutionContext, ...) error

+ type AtomicProofResolver interface

+ ResolveColumnTypesAndEffectIdentities func(ctx context.Context, candidates []EffectCandidate, req EffectIdentityRequest) (map[int][]uint32, EffectIdentityBatch, EffectIdentityResolutionContext, error)

type ColumnSchema

+ TypeOID uint32

+ type ColumnTypeOIDResolver interface

+ ResolveColumnTypeOIDs func(ctx context.Context, candidates []EffectCandidate) (map[int][]uint32, error)

+ type ControlledEffectIdentityResolver interface

+ CaptureExecutionBoundContext func(ctx context.Context) (EffectIdentityResolutionContext, error)

+ type EffectCandidate struct

+ Arity int

+ ExplicitSchema bool

+ HasFilter bool

+ HasWindow bool

+ IsAggregate bool

+ Kind EffectCandidateKind

+ NamePath []string

+ OperandColumnRefs []OperandColumnRef

+ OperandKinds []string

+ Ordinal int

+ TargetTypePath []string

+ type EffectCandidateKind string

+ const EffectCandidateCast

+ const EffectCandidateFunction

+ const EffectCandidateOperator

+ type EffectCastMethod string

+ const EffectCastMethodBinary

+ const EffectCastMethodFunction

+ const EffectCastMethodInOut

+ type EffectIdentityBatch struct

+ Items []EffectIdentityItem

+ func BuildUnavailableBatch(candidates []EffectCandidate) EffectIdentityBatch

+ func CompleteEffectIdentityBatch(req EffectIdentityRequest, batch EffectIdentityBatch) EffectIdentityBatch

+ func GateIdentityBatchAgainstLiveContext(req EffectIdentityRequest, batch EffectIdentityBatch, ...) EffectIdentityBatch

+ func GateIdentityBatchByResolutionContext(req EffectIdentityRequest, batch EffectIdentityBatch) EffectIdentityBatch

+ func NormalizeEffectIdentityBatch(items []EffectIdentityItem) EffectIdentityBatch

+ func ValidateCandidateFactBinding(batch EffectIdentityBatch, candidates []EffectCandidate) EffectIdentityBatch

+ func ValidateFactOperandTypeBinding(batch EffectIdentityBatch, resolvedTypeOIDs map[int][]uint32, ...) EffectIdentityBatch

+ type EffectIdentityFacts struct

+ CanonicalSignature string

+ CastFunctionOID uint32

+ CastMethod EffectCastMethod

+ DatabaseOID uint32

+ ImplementationOID uint32

+ Kind EffectCandidateKind

+ NamespaceOID uint32

+ ObjectOID uint32

+ OperandTypeOIDs []uint32

+ ResolvedObjectName string

+ ResolvedSchemaName string

+ ResultTypeOID uint32

+ ServerVersionNum int

+ Volatility EffectVolatility

+ type EffectIdentityItem struct

+ Facts *EffectIdentityFacts

+ Ordinal int

+ Status domain.IdentityStatus

+ type EffectIdentityRequest struct

+ Candidates []EffectCandidate

+ Dialect string

+ OperandTypeOIDs map[int][]uint32

+ Resolution EffectIdentityResolutionContext

+ type EffectIdentityResolutionContext struct

+ Bound bool

+ DatabaseOID uint32

+ NamespaceSearchOIDs []uint32

+ PathEpoch uint64

+ RoleOID uint32

+ ServerVersionNum int

+ SessionBinding string

+ type EffectIdentityResolutionMode string

+ const ResolutionModeExplicitSchema

+ const ResolutionModeUnqualifiedBound

+ const ResolutionModeUnqualifiedUnbound

+ func ClassifyCandidateResolutionMode(c EffectCandidate, rc EffectIdentityResolutionContext) EffectIdentityResolutionMode

+ type EffectIdentityResolver interface

+ ResolveEffectIdentities func(ctx context.Context, req EffectIdentityRequest) (EffectIdentityBatch, error)

+ type EffectVolatility string

+ const EffectVolatilityImmutable

+ const EffectVolatilityStable

+ const EffectVolatilityVolatile

+ type LiveResolutionContext func() (EffectIdentityResolutionContext, error)

+ type OperandColumnRef struct

+ Column string

+ Schema string

+ Table string

type QueryAccessResult

+ EffectCandidates []EffectCandidate

type Service

+ func NewService() *Service

+ func NewTrustedService(effectResolver ControlledEffectIdentityResolver, trustPolicy *TrustPolicy, ...) (*Service, error)

+ type TrustDecision string

+ const TrustDecisionAllProven

+ const TrustDecisionEmpty

+ const TrustDecisionHasUnknown

+ const TrustDecisionHasUnproven

+ type TrustPolicy struct

+ func NewTrustPolicy(manifest TrustedEffectManifest) (*TrustPolicy, error)

+ func (p *TrustPolicy) IsTrusted(batch EffectIdentityBatch, serverVersionNum int) TrustDecision

+ func (p *TrustPolicy) Manifest() TrustedEffectManifest

+ type TrustedEffectEntry struct

+ AuditNotes string

+ CanonicalSignature string

+ ImplementationOID uint32

+ Kind EffectCandidateKind

+ NamespaceOID uint32

+ ObjectOID uint32

+ OperandTypeOIDs []uint32

+ ResultTypeOID uint32

+ Volatility EffectVolatility

+ type TrustedEffectManifest struct

+ Entries []TrustedEffectEntry

+ Hash string

+ PostgreSQLMajorMax int

+ PostgreSQLMajorMin int

+ SchemaVersion string

+ func NewPG17Manifest() TrustedEffectManifest

+ func UnmarshalManifestJSON(data []byte) (TrustedEffectManifest, error)

Jul 12, 2026

Changes in this version

+ const ReasonAmbiguousColumn

+ const ReasonColumnNotFound

+ const ReasonMissingMetadata

+ const ReasonRelationAmbiguous

+ const ReasonRelationNotFound

+ const ReasonUnresolvedAlias

+ const ReasonUnresolvedWildcard

+ var ErrExtractionFailed = errors.New("query access extraction failed")

+ var ErrPostgreSQLNotAvailable = errors.New("postgresql support requires build tag: go build -tags postgresql")

+ func BuildRequirements(mode domain.Mode, relations []domain.RelationReference, ...) ([]domain.Requirement, []domain.WarningCode, []domain.ReasonCode, error)

+ func FormatRelationSchemaKey(schema, name string) string

+ func NewResolutionState(ctx context.Context, resolver SchemaResolver, dialect, defaultSchema string, ...) *resolutionState

+ func ResolveMetadata(ctx context.Context, resolver SchemaResolver, dialect, defaultSchema string, ...) domain.Result

+ type ColumnSchema struct

+ Name string

+ Ordinal int

+ type QueryAccessRequest struct

+ DefaultSchema string

+ Dialect string

+ Mode string

+ SQL string

+ SchemaResolver SchemaResolver

+ type QueryAccessResult struct

+ DomainResult domain.Result

+ func AnalyzePostgreSQL(_ context.Context, _ QueryAccessRequest) (QueryAccessResult, error)

+ func ExtractTiDBQueryAccess(ctx context.Context, req QueryAccessRequest) (QueryAccessResult, error)

+ type RelationSchema struct

+ Columns []ColumnSchema

+ IsView bool

+ Kind string

+ Name string

+ Schema string

+ type SchemaResolver interface

+ ResolveRelation func(ctx context.Context, dialect string, schema, name string) (RelationSchema, error)

+ type Service struct

+ func (s *Service) Analyze(ctx context.Context, req QueryAccessRequest) (QueryAccessResult, error)