-- pgGraph 1.0.0 -> 1.1.0
--
-- Existing functions are altered in place so their owner and explicit EXECUTE
-- grants remain unchanged.

ALTER FUNCTION graph.traverse(
    oid, text, integer, text[], text, oid[], jsonb, text, text, text,
    boolean, boolean, integer, integer, integer, integer
) SECURITY INVOKER;
ALTER FUNCTION graph.traverse(
    oid, text, integer, text[], text, oid[], jsonb, text, text, text,
    boolean, boolean, integer, integer, integer, integer
) RESET search_path;

ALTER FUNCTION graph.connected_components() SECURITY INVOKER;
ALTER FUNCTION graph.connected_components() RESET search_path;
ALTER FUNCTION graph.component_stats() SECURITY INVOKER;
ALTER FUNCTION graph.component_stats() RESET search_path;

-- Query start now passes catalog-derived table OIDs through backend-private
-- one-shot state. Remove the 1.0 helper that accepted a caller-supplied
-- watermark and replace it with a no-argument mediator.
DROP FUNCTION IF EXISTS graph._pending_sync_rows_for_current_role(bigint);
CREATE OR REPLACE FUNCTION graph._pending_sync_rows_for_current_role()
RETURNS bigint
STRICT SECURITY DEFINER
SET search_path TO pg_catalog, pg_temp
LANGUAGE c
AS 'MODULE_PATHNAME', 'pending_sync_rows_for_current_role_wrapper';
GRANT EXECUTE ON FUNCTION graph._pending_sync_rows_for_current_role() TO PUBLIC;

CREATE OR REPLACE FUNCTION graph._max_sync_log_id_for_query_state()
RETURNS bigint
STRICT SECURITY DEFINER
SET search_path TO pg_catalog, pg_temp
LANGUAGE c
AS 'MODULE_PATHNAME', 'max_sync_log_id_for_query_state_wrapper';
GRANT EXECUTE ON FUNCTION graph._max_sync_log_id_for_query_state() TO PUBLIC;

-- Job status remains callable by readers, but executes through a pinned
-- catalog-only boundary after raw job-table access is revoked.
ALTER FUNCTION graph.build_status(text) SECURITY DEFINER
SET search_path TO pg_catalog, pg_temp;
ALTER FUNCTION graph.build_status_for_graph(text, text, text, integer) SECURITY DEFINER
SET search_path TO pg_catalog, pg_temp;
ALTER FUNCTION graph.maintenance_status(text) SECURITY DEFINER
SET search_path TO pg_catalog, pg_temp;
ALTER FUNCTION graph.maintenance_status_for_graph(text, text, text, integer) SECURITY DEFINER
SET search_path TO pg_catalog, pg_temp;

REVOKE ALL ON TABLE graph._build_jobs FROM PUBLIC;
REVOKE ALL ON TABLE graph._maintenance_jobs FROM PUBLIC;

-- Relationship-typed path overloads preserve the 1.0 signatures while
-- allowing callers to restrict route selection without a second projection.
CREATE FUNCTION graph.shortest_path(
    source_table oid,
    source_id text,
    target_table oid,
    target_id text,
    max_depth integer,
    hydrate boolean,
    edge_types text[]
) RETURNS TABLE (
    step integer,
    node_table oid,
    node_id text,
    edge_label text,
    node jsonb,
    node_table_name text
)
STRICT LANGUAGE c
AS 'MODULE_PATHNAME', 'shortest_path_typed_wrapper';

CREATE FUNCTION graph.weighted_shortest_path(
    source_table oid,
    source_id text,
    target_table oid,
    target_id text,
    edge_types text[]
) RETURNS TABLE (
    step integer,
    node_table oid,
    node_table_name text,
    node_id text,
    edge_label text,
    edge_weight bigint,
    step_cost bigint,
    total_cost bigint
)
STRICT LANGUAGE c
AS 'MODULE_PATHNAME', 'weighted_shortest_path_typed_wrapper';

GRANT EXECUTE ON FUNCTION
    graph.shortest_path(oid, text, oid, text, integer, boolean, text[])
TO PUBLIC;
GRANT EXECUTE ON FUNCTION
    graph.weighted_shortest_path(oid, text, oid, text, text[])
TO PUBLIC;

-- Pinned catalog mediators let invoker entry points authorize the outer role
-- without switching PostgreSQL user IDs or exposing internal catalog tables.
CREATE FUNCTION graph._require_selected_graph_privilege_for_current_role(
    privilege text
) RETURNS boolean
STRICT SECURITY DEFINER
SET search_path TO pg_catalog, pg_temp
LANGUAGE c
AS 'MODULE_PATHNAME', 'require_selected_graph_privilege_for_current_role_wrapper';

CREATE FUNCTION graph._graph_id_for_current_role_with_privilege(
    graph_name text,
    graph_tenant text DEFAULT NULL,
    graph_namespace text DEFAULT NULL,
    privilege text DEFAULT 'read'
) RETURNS text
SECURITY DEFINER
SET search_path TO pg_catalog, pg_temp
LANGUAGE c
AS 'MODULE_PATHNAME', 'graph_id_for_current_role_with_privilege_wrapper';

CREATE FUNCTION graph._expire_projection_heartbeats_for_current_role()
RETURNS boolean
STRICT SECURITY DEFINER
SET search_path TO pg_catalog, pg_temp
LANGUAGE c
AS 'MODULE_PATHNAME', 'expire_projection_heartbeats_for_current_role_wrapper';

CREATE FUNCTION graph._expire_sync_watermarks_for_current_role()
RETURNS boolean
STRICT SECURITY DEFINER
SET search_path TO pg_catalog, pg_temp
LANGUAGE c
AS 'MODULE_PATHNAME', 'expire_sync_watermarks_for_current_role_wrapper';

CREATE FUNCTION graph._record_sync_watermark_for_current_role()
RETURNS boolean
STRICT SECURITY DEFINER
SET search_path TO pg_catalog, pg_temp
LANGUAGE c
AS 'MODULE_PATHNAME', 'record_sync_watermark_for_current_role_wrapper';

CREATE FUNCTION graph._record_projection_heartbeat_for_current_role()
RETURNS boolean
STRICT SECURITY DEFINER
SET search_path TO pg_catalog, pg_temp
LANGUAGE c
AS 'MODULE_PATHNAME', 'record_projection_heartbeat_for_current_role_wrapper';

CREATE FUNCTION graph._active_generation_count_for_current_role()
RETURNS integer
STRICT SECURITY DEFINER
SET search_path TO pg_catalog, pg_temp
LANGUAGE c
AS 'MODULE_PATHNAME', 'active_generation_count_for_current_role_wrapper';

CREATE FUNCTION graph._enforce_loaded_graph_quota_for_current_role(
    projected_loaded_graphs bigint
) RETURNS boolean
STRICT SECURITY DEFINER
SET search_path TO pg_catalog, pg_temp
LANGUAGE c
AS 'MODULE_PATHNAME', 'enforce_loaded_graph_quota_for_current_role_wrapper';

GRANT EXECUTE ON FUNCTION
    graph._require_selected_graph_privilege_for_current_role(text)
TO PUBLIC;
GRANT EXECUTE ON FUNCTION
    graph._graph_id_for_current_role_with_privilege(text, text, text, text)
TO PUBLIC;
GRANT EXECUTE ON FUNCTION
    graph._expire_projection_heartbeats_for_current_role()
TO PUBLIC;
GRANT EXECUTE ON FUNCTION
    graph._expire_sync_watermarks_for_current_role()
TO PUBLIC;
GRANT EXECUTE ON FUNCTION
    graph._record_sync_watermark_for_current_role()
TO PUBLIC;
GRANT EXECUTE ON FUNCTION
    graph._record_projection_heartbeat_for_current_role()
TO PUBLIC;
GRANT EXECUTE ON FUNCTION
    graph._active_generation_count_for_current_role()
TO PUBLIC;
GRANT EXECUTE ON FUNCTION
    graph._enforce_loaded_graph_quota_for_current_role(bigint)
TO PUBLIC;