# Repository Map

The `graph/` directory is the extension crate. Production code is under
`graph/src`; SQL tests, heavy release checks, fuzz targets, and benchmarks live
beside it in the crate tree.

## Top-Level Files

| Path | Purpose |
|---|---|
| `graph/Cargo.toml` | Crate metadata, pgrx features for PostgreSQL 14-18 support plus legacy pg13, dependency and lint policy |
| `graph/Cargo.lock` | Locked dependency set |
| `graph/rust-toolchain.toml` | Rust toolchain pin |
| `graph/graph.control` | PostgreSQL extension control file |
| `graph/sql/bootstrap.sql` | SQL bootstrap objects, durable catalog tables, privilege hardening |
| `graph/deny.toml` | Dependency audit policy |

## Source Modules

| Module | Responsibility |
|---|---|
| `lib.rs` | pgrx module magic, `_PG_init()`, GUC registration, SQL facade module registration, thread-local engine |
| `config.rs` | PostgreSQL GUC declarations, parsing, defaults, and contexts |
| `graph_policy.rs` | Named-graph identity, lifecycle, scheduler, quota, and job-status policy vocabulary |
| `safety.rs` | `GraphError`, SQLSTATE mapping, PostgreSQL error emission |
| `resource.rs` | Checked byte/time units and statement-local resource reservations |
| `acl.rs` | Source table privilege checks |
| `types.rs` | Shared domain types, traversal/search enums, filter operations, status rows |
| `api_types.rs` | SQL-facing row aliases and request structures |
| `runtime_state.rs` | Backend-local loaded graph slot metadata and runtime graph snapshots |
| `engine.rs` | Store orchestration, resolution dispatch, traversal, paths, status |
| `mapped_bytes.rs` | Shared ownership wrapper for production mmap bytes and aligned Miri test bytes |
| `node_store.rs` | Node SoA store with owned and mmap backings |
| `edge_store.rs` | CSR edge store with owned and mmap backings |
| `edge_type_registry.rs` | Validated ordered relationship-type dictionary with O(1) logical-ID lookup |
| `edge_type_contract_tests.rs` | P6 logical-ID, v6 adapter, compatibility, and retained-evidence contracts |
| `p7_contract_tests.rs` | P7 adaptive storage, dual-format migration, bounded policy, and release contracts |
| `p8_contract_tests.rs` | P8 adaptive segment, cumulative dictionary, recovery, and atomic publication contracts |
| `p9_contract_tests.rs` | P9 open-vocabulary query, inventory, migration, fuzz, and evidence contracts |
| `relationship_identity_store.rs` | Owned, mapped, and mapped-plus-suffix relationship identity storage |
| `resolution_index.rs` | Build-time and finalized table+PK lookup index |
| `filter_index.rs` | Typed filter column encoding and hybrid dense/sparse storage |
| `gql/` | pgrx-free frontend for the supported GQL subset |
| `query/` | GQL binding, logical planning, physical lowering, execution, and JSON projection |
| `builder.rs` | SPI cursor build pipeline and temp spool loading |
| `build_snapshot.rs` | Coherent build/vacuum source locking, catalog fingerprinting, and source watermark validation |
| `build_runs.rs` | Governed checksummed external-sort runs and fixed-fanout multi-pass merge primitives |
| `build_spool.rs` | Governed PostgreSQL temporary lookup spools shared by owned and persisted builders |
| `persisted_build_scanner.rs` | Bounded node, resolution, filter, dictionary, and tenant source-to-run scanning |
| `persisted_edge_scanner.rs` | Bounded endpoint resolution and relationship run normalization |
| `persisted_build.rs` | Checked adaptive v7 layout planning and direct 26-section artifact assembly |
| `persisted_build_pipeline.rs` | Persisted source scan, run merge, and candidate composition boundary |
| `catalog.rs` | Catalog module boundary for registration reads, writes, and validation |
| `catalog/read.rs` | Registered table, edge, and filter-column catalog reads |
| `catalog/validate.rs` | Source table, key, edge, and filter-column validation |
| `catalog/write.rs` | Catalog inserts and updates for registered graph metadata |
| `persistence.rs` | v6/v7 `.pggraph` loader, adaptive v7 writer, CRCs, 26-section validation, and mmap setup |
| `tenant_store.rs` | Owned/mapped tenant dictionaries, dense tokens, and sparse membership removals |
| `projection/` | Clean CSR and overlay-aware projection read helpers |
| `bfs.rs` | BFS and DFS traversal hot loops |
| `path_finder.rs` | Shortest path and weighted shortest path algorithms |
| `connected_components.rs` | Union-find connected component analysis |
| `discover.rs` | Schema/FK discovery |
| `sync.rs` | Trigger SQL generation and sync table creation |
| `sql_sync.rs` | Durable sync log reading and apply logic |
| `sql_build.rs` | Build/vacuum orchestration and locks |
| `sql_jobs.rs` | Durable background build/maintenance jobs and hosted job helpers |
| `sql_search.rs` | Source-table search SQL and match verification |
| `sql_traversal.rs` | Traversal request validation, formatting, pagination |
| `visibility.rs` | Pure query-scoped visibility coordinator, admission policy, execution context, and bounded ordered candidate/verdict domain |
| `sql_visibility.rs` | Sole PostgreSQL authority for policy preparation and governed eager source-key scans; it completes SPI work outside `ENGINE` borrows |
| `sql_filters.rs` | Structured filter parsing, typed operator conversion, hydration filtering |
| `sql_hydration.rs` | Source-row hydration |
| `sql_aggregation.rs` | Strict traversal specs, path count, and aggregates |
| `quote.rs` | SQL identifier/literal quoting helpers |

## SQL Facade Modules

`src/sql_facade/mod.rs` groups the pgrx SQL wrapper modules by user-facing area
and keeps shared facade imports local to the SQL boundary:

| File | SQL-facing responsibility |
|---|---|
| `admin.rs` | Status, build, registration, filter helpers, sync, vacuum, maintenance |
| `discovery.rs` | Auto-discovery wrappers |
| `traversal.rs` | Traversal, shortest paths, aggregation entrypoints |
| `search.rs` | Search and search-then-traverse entrypoints |
| `workflow.rs` | App-friendly workflow wrappers |
| `components.rs` | Connected component entrypoints |
| `gql.rs` | `graph.gql()` and `graph.gql_explain()` SQL entrypoints |
| `cypher.rs` | `graph.cypher()`, `graph.cypher_explain()`, and compatibility matrix entrypoints |
| `pgq.rs` | `graph.pgq()` SQL rejection entrypoint |
| `runtime.rs` | Reset, auto-load, current graph validation |

Contributor changes to SQL behavior usually touch one facade file plus one or
more supporting implementation modules.

## Test Layout

| Path | Scope |
|---|---|
| Module-local `#[cfg(test)]` blocks | Pure Rust invariants |
| `src/pg_tests/*.rs` | pgrx SQL integration tests |
| `tests/pg_regress/` | pg_regress setup smoke |
| `tests/heavy/` | external SQLSTATE/ACL, crash, stress, packaging, backup/restore, matrix, release gates |
| `fuzz/fuzz_targets/` | fuzz targets for file and parser boundaries |
| `benches/` | Criterion internals benchmarks |

See [SQL Tests](./sql-tests) for SQL test coverage and
[Benchmarking](./benchmarking) for benchmark usage and interpretation.

## Feature Flags

| Feature | Purpose |
|---|---|
| `pg14` to `pg18` | Select officially supported pgrx PostgreSQL major |
| `pg13` | Legacy best-effort pgrx PostgreSQL 13 feature; not release-gated after upstream EOL |
| `pg_test` | Enable pgrx SQL test modules |
| `fuzzing` | Export fuzz support wrappers |
| `development` | Enable hidden development/test helper functions and extra internals |

Default feature: `pg17`.

## Dependency Roles

| Dependency | Use |
|---|---|
| `pgrx` | PostgreSQL extension bindings |
| `roaring` | Visited sets, tenant bitmaps, filter bitmaps |
| `bitvec` | Packed active-node bits |
| `xxhash-rust` | Hashing support |
| `bincode` | Durable projection segment and compatibility encodings; base artifact v6 uses explicit sections |
| `crc32fast` | `.pggraph` file integrity |
| `thiserror` | Error type derive |
| `memmap2` | mmap-backed artifact loading |
| `serde`, `serde_json` | JSONB parsing and persisted filter index |
