exec

type CompiledField struct {
	Field    string
	SQL      string
	Args     []any
	Mutation bool
}

type Executor struct {
	Pool    *pgxpool.Pool
	Built   *schema.Built
	Compile compile.Func
	Hooks   []RequestHook
	Opts    Options
}

type MintOptions struct {
	Schema   string // pg schema of the composite, e.g. "public"
	Type     string // composite type name, e.g. "jwt"
	Secret   string
	Issuer   string
	Audience string
}

type Operation struct {
	Name       string
	Type       ast.Operation
	Document   *ast.QueryDocument
	Definition *ast.OperationDefinition
	Vars       map[string]any
	// Claims are the verified request claims exposed to RLS policies.
	Claims map[string]any
	// Role is the database role this operation runs as ("" = no switch).
	Role string
	// ForceTx forces a transaction even when the global policy would skip it.
	ForceTx bool
}

type Options struct {
	MaxDepth int
	MaxCost  int
	// MaxPageSize caps first/last and is the default page size when neither
	// is given.
	MaxPageSize int
	// TxMutations wraps every mutation in a transaction.
	TxMutations bool
	// TxPerRequest wraps the entire request (queries included) in one
	// transaction, so every root field reads a single snapshot.
	TxPerRequest bool
	// TxRetries re-runs a transactional operation after a serialization
	// failure or deadlock (SQLSTATE 40001/40P01); safe because the failed
	// attempt rolled back completely.
	TxRetries int
	Isolation pgx.TxIsoLevel
	// RLS enables SET LOCAL ROLE + claims set_config per operation.
	RLS          bool
	ClaimsPrefix string
	// DevErrors exposes full PG error details in GraphQL errors.
	DevErrors bool
	// StrictErrors hides every PG error message, including the
	// constraint-violation and data-exception classes that prod mode passes
	// through (errors.detail: strict). Ignored when DevErrors is set.
	StrictErrors bool
	// DisableIntrospection rejects __schema / __type root fields
	// (server.disable_introspection). __typename is unaffected.
	DisableIntrospection bool
	// ReadOnly, when non-nil and true, rejects mutation operations before
	// they compile or touch the database. It is a shared pointer so the
	// embedding App can flip it at runtime and the state survives watch-mode
	// executor swaps.
	ReadOnly *atomic.Bool
	// Mint signs function results of one composite type into JWTs.
	Mint   MintOptions
	Logger *slog.Logger
}

type Request struct {
	Query         string
	OperationName string
	Variables     map[string]any
	Claims        map[string]any
	Role          string
}

type RequestHook interface {
	BeforeOperation(ctx context.Context, op *Operation) (context.Context, error)
	AfterOperation(ctx context.Context, op *Operation, res *Result)
}

type Result struct {
	Data   map[string]json.RawMessage
	Errors gqlerror.List
}