BE-930: Bind definition variables to workspace query parameters

[thehabbos007]

🌟 Purpose

This PR binds a definition's variables to the $NAME parameters of workspace queries, through WorkspaceConfig::variables.

🔍 Changes

• WorkspaceConfig::variables takes the definition's Variables, so the engine now depends on hash-integrations-definition.
• Values are bound as VARCHAR. A query casts a value where it needs another type, as in $MIN_SEATS::INTEGER.
• A parameter with no variable fails with StatementError::UnknownParameter. A positional parameter, ? or $1, fails the same way, as parameter 1.

[codspeed]

Merging this PR will not alter performance

⚠️ 6 benchmarks measured no execution time

Nothing ran under measurement, usually because the compiler removed the code under test. These results are not comparable, so they count as unchanged.

Preventing compiler optimizations

• as_constant
• constant_equal
• constant_not_equal
• access
• runtime_equal
• runtime_not_equal

⚠️ 1 benchmark spent significant time in system calls

System calls cannot be consistently instrumented, so they are not included in the measure, which understates the real cost. Please switch to the Walltime instrument to accurately measure system calls.

Measurement and system calls

• bit_matrix/dense/union_rows[1000]

✅ 98 untouched benchmarks

---

_{Comparing asa/hash-integrations/04c-engine-parameters (4562bd9) with main (2d7794a)¹}

Footnotes

1. No successful run was found on asa/hash-integrations/04b-engine-limits (1a598d5) during the generation of this report, so main (2d7794a) was used instead as the comparison base. There might be some changes unrelated to this pull request in this report. ↩

[vercel]

The latest updates on your projects. Learn more about Vercel for GitHub.

Project	Deployment	Actions	Updated
hash	Ready	Preview	Oct 19, 2026 12:49pm UTC
petrinaut	Ready	Preview	Oct 19, 2026 12:49pm UTC
petrinaut-docs	Ready	Preview	Oct 19, 2026 12:49pm UTC

1 Skipped Deployment

Project	Deployment	Actions	Updated
hashdotdesign-tokens	Ignored	Preview	Oct 19, 2026 12:49pm UTC

[codecov]

Codecov Report

✅ All modified and coverable lines are covered by tests.
✅ Project coverage is 68.31%. Comparing base (1a598d5) to head (4562bd9).

Additional details and impacted files

@@                           Coverage Diff                            @@
##           asa/hash-integrations/04b-engine-limits   #10004   +/-   ##
========================================================================
  Coverage                                    68.30%   68.31%           
========================================================================
  Files                                         2004     2004           
  Lines                                       205892   205917   +25     
  Branches                                      8746     8746           
========================================================================
+ Hits                                        140643   140669   +26     
+ Misses                                       63566    63565    -1     
  Partials                                      1683     1683           

Flag	Coverage Δ
hash-integrations-engine	90.93% <100.00%> (+0.48%)	⬆️

Flags with carried forward coverage won't be shown. Click here to find out more.

☔ View full report in Codecov by Harness.
📢 Have feedback on the report? Share it here.

🚀 New features to boost your workflow:

• ❄️ Test Analytics: Detect flaky tests, report on failures, and find test suite problems.
• 📦 JS Bundle Analysis: Save yourself from yourself by tracking and limiting bundle sizes in JS merges.

[github-actions]

Benchmark results

hash-graph-benches – Integrations

policy_resolution_large

Function	Value	Mean	Flame graphs
resolve_policies_for_actor	user: empty, selectivity: high, policies: 2002	$$29.0 \mathrm{ms} \pm 279 \mathrm{μs}\left({\color{gray}1.66 \mathrm{\%}}\right) $$	Flame Graph
resolve_policies_for_actor	user: empty, selectivity: low, policies: 1	$$3.56 \mathrm{ms} \pm 30.0 \mathrm{μs}\left({\color{gray}0.011 \mathrm{\%}}\right) $$	Flame Graph
resolve_policies_for_actor	user: empty, selectivity: medium, policies: 1002	$$13.8 \mathrm{ms} \pm 165 \mathrm{μs}\left({\color{gray}-0.801 \mathrm{\%}}\right) $$	Flame Graph
resolve_policies_for_actor	user: seeded, selectivity: high, policies: 3314	$$45.6 \mathrm{ms} \pm 511 \mathrm{μs}\left({\color{gray}-1.043 \mathrm{\%}}\right) $$	Flame Graph
resolve_policies_for_actor	user: seeded, selectivity: low, policies: 1	$$15.1 \mathrm{ms} \pm 174 \mathrm{μs}\left({\color{gray}-3.556 \mathrm{\%}}\right) $$	Flame Graph
resolve_policies_for_actor	user: seeded, selectivity: medium, policies: 1527	$$25.6 \mathrm{ms} \pm 279 \mathrm{μs}\left({\color{gray}-1.879 \mathrm{\%}}\right) $$	Flame Graph
resolve_policies_for_actor	user: system, selectivity: high, policies: 2078	$$29.8 \mathrm{ms} \pm 277 \mathrm{μs}\left({\color{gray}2.59 \mathrm{\%}}\right) $$	Flame Graph
resolve_policies_for_actor	user: system, selectivity: low, policies: 1	$$3.95 \mathrm{ms} \pm 36.7 \mathrm{μs}\left({\color{gray}3.05 \mathrm{\%}}\right) $$	Flame Graph
resolve_policies_for_actor	user: system, selectivity: medium, policies: 1033	$$15.5 \mathrm{ms} \pm 135 \mathrm{μs}\left({\color{red}7.14 \mathrm{\%}}\right) $$	Flame Graph

policy_resolution_medium

Function	Value	Mean	Flame graphs
resolve_policies_for_actor	user: empty, selectivity: high, policies: 102	$$3.96 \mathrm{ms} \pm 29.4 \mathrm{μs}\left({\color{gray}0.280 \mathrm{\%}}\right) $$	Flame Graph
resolve_policies_for_actor	user: empty, selectivity: low, policies: 1	$$3.20 \mathrm{ms} \pm 35.9 \mathrm{μs}\left({\color{gray}3.57 \mathrm{\%}}\right) $$	Flame Graph
resolve_policies_for_actor	user: empty, selectivity: medium, policies: 52	$$3.54 \mathrm{ms} \pm 34.0 \mathrm{μs}\left({\color{gray}0.260 \mathrm{\%}}\right) $$	Flame Graph
resolve_policies_for_actor	user: seeded, selectivity: high, policies: 269	$$5.41 \mathrm{ms} \pm 45.9 \mathrm{μs}\left({\color{gray}-1.702 \mathrm{\%}}\right) $$	Flame Graph
resolve_policies_for_actor	user: seeded, selectivity: low, policies: 1	$$3.71 \mathrm{ms} \pm 28.6 \mathrm{μs}\left({\color{gray}-0.525 \mathrm{\%}}\right) $$	Flame Graph
resolve_policies_for_actor	user: seeded, selectivity: medium, policies: 108	$$4.42 \mathrm{ms} \pm 52.4 \mathrm{μs}\left({\color{gray}0.764 \mathrm{\%}}\right) $$	Flame Graph
resolve_policies_for_actor	user: system, selectivity: high, policies: 133	$$4.71 \mathrm{ms} \pm 43.2 \mathrm{μs}\left({\color{gray}-1.083 \mathrm{\%}}\right) $$	Flame Graph
resolve_policies_for_actor	user: system, selectivity: low, policies: 1	$$3.53 \mathrm{ms} \pm 22.7 \mathrm{μs}\left({\color{gray}-1.975 \mathrm{\%}}\right) $$	Flame Graph
resolve_policies_for_actor	user: system, selectivity: medium, policies: 63	$$4.34 \mathrm{ms} \pm 45.9 \mathrm{μs}\left({\color{gray}-1.266 \mathrm{\%}}\right) $$	Flame Graph

policy_resolution_none

Function	Value	Mean	Flame graphs
resolve_policies_for_actor	user: empty, selectivity: high, policies: 2	$$2.84 \mathrm{ms} \pm 28.3 \mathrm{μs}\left({\color{gray}-0.142 \mathrm{\%}}\right) $$	Flame Graph
resolve_policies_for_actor	user: empty, selectivity: low, policies: 1	$$2.77 \mathrm{ms} \pm 23.5 \mathrm{μs}\left({\color{gray}1.29 \mathrm{\%}}\right) $$	Flame Graph
resolve_policies_for_actor	user: empty, selectivity: medium, policies: 2	$$2.89 \mathrm{ms} \pm 33.0 \mathrm{μs}\left({\color{gray}-0.140 \mathrm{\%}}\right) $$	Flame Graph
resolve_policies_for_actor	user: system, selectivity: high, policies: 8	$$3.19 \mathrm{ms} \pm 27.4 \mathrm{μs}\left({\color{gray}-0.832 \mathrm{\%}}\right) $$	Flame Graph
resolve_policies_for_actor	user: system, selectivity: low, policies: 1	$$2.92 \mathrm{ms} \pm 18.6 \mathrm{μs}\left({\color{gray}-3.017 \mathrm{\%}}\right) $$	Flame Graph
resolve_policies_for_actor	user: system, selectivity: medium, policies: 3	$$3.25 \mathrm{ms} \pm 23.3 \mathrm{μs}\left({\color{gray}-2.092 \mathrm{\%}}\right) $$	Flame Graph

policy_resolution_small

Function	Value	Mean	Flame graphs
resolve_policies_for_actor	user: empty, selectivity: high, policies: 52	$$3.21 \mathrm{ms} \pm 25.5 \mathrm{μs}\left({\color{gray}-0.466 \mathrm{\%}}\right) $$	Flame Graph
resolve_policies_for_actor	user: empty, selectivity: low, policies: 1	$$2.87 \mathrm{ms} \pm 24.6 \mathrm{μs}\left({\color{gray}-3.541 \mathrm{\%}}\right) $$	Flame Graph
resolve_policies_for_actor	user: empty, selectivity: medium, policies: 26	$$3.07 \mathrm{ms} \pm 26.2 \mathrm{μs}\left({\color{gray}-0.702 \mathrm{\%}}\right) $$	Flame Graph
resolve_policies_for_actor	user: seeded, selectivity: high, policies: 94	$$3.63 \mathrm{ms} \pm 28.3 \mathrm{μs}\left({\color{gray}-0.959 \mathrm{\%}}\right) $$	Flame Graph
resolve_policies_for_actor	user: seeded, selectivity: low, policies: 1	$$3.12 \mathrm{ms} \pm 24.8 \mathrm{μs}\left({\color{gray}-0.857 \mathrm{\%}}\right) $$	Flame Graph
resolve_policies_for_actor	user: seeded, selectivity: medium, policies: 27	$$3.39 \mathrm{ms} \pm 23.4 \mathrm{μs}\left({\color{gray}-0.465 \mathrm{\%}}\right) $$	Flame Graph
resolve_policies_for_actor	user: system, selectivity: high, policies: 66	$$3.63 \mathrm{ms} \pm 32.9 \mathrm{μs}\left({\color{gray}0.361 \mathrm{\%}}\right) $$	Flame Graph
resolve_policies_for_actor	user: system, selectivity: low, policies: 1	$$3.18 \mathrm{ms} \pm 33.1 \mathrm{μs}\left({\color{gray}-2.154 \mathrm{\%}}\right) $$	Flame Graph
resolve_policies_for_actor	user: system, selectivity: medium, policies: 29	$$3.48 \mathrm{ms} \pm 30.4 \mathrm{μs}\left({\color{gray}-3.412 \mathrm{\%}}\right) $$	Flame Graph

read_scaling_complete

Function	Value	Mean	Flame graphs
entity_by_id;one_depth	1 entities	$$33.5 \mathrm{ms} \pm 224 \mathrm{μs}\left({\color{gray}-0.694 \mathrm{\%}}\right) $$	Flame Graph
entity_by_id;one_depth	10 entities	$$74.2 \mathrm{ms} \pm 654 \mathrm{μs}\left({\color{gray}0.053 \mathrm{\%}}\right) $$	Flame Graph
entity_by_id;one_depth	25 entities	$$37.1 \mathrm{ms} \pm 280 \mathrm{μs}\left({\color{gray}-0.352 \mathrm{\%}}\right) $$	Flame Graph
entity_by_id;one_depth	5 entities	$$41.3 \mathrm{ms} \pm 349 \mathrm{μs}\left({\color{gray}-0.989 \mathrm{\%}}\right) $$	Flame Graph
entity_by_id;one_depth	50 entities	$$43.6 \mathrm{ms} \pm 278 \mathrm{μs}\left({\color{gray}0.810 \mathrm{\%}}\right) $$	Flame Graph
entity_by_id;two_depth	1 entities	$$34.8 \mathrm{ms} \pm 288 \mathrm{μs}\left({\color{gray}-1.065 \mathrm{\%}}\right) $$	Flame Graph
entity_by_id;two_depth	10 entities	$$437 \mathrm{ms} \pm 2.02 \mathrm{ms}\left({\color{gray}0.929 \mathrm{\%}}\right) $$	Flame Graph
entity_by_id;two_depth	25 entities	$$94.0 \mathrm{ms} \pm 728 \mathrm{μs}\left({\color{gray}-1.662 \mathrm{\%}}\right) $$	Flame Graph
entity_by_id;two_depth	5 entities	$$83.0 \mathrm{ms} \pm 998 \mathrm{μs}\left({\color{gray}1.02 \mathrm{\%}}\right) $$	Flame Graph
entity_by_id;two_depth	50 entities	$$285 \mathrm{ms} \pm 1.63 \mathrm{ms}\left({\color{gray}-0.147 \mathrm{\%}}\right) $$	Flame Graph
entity_by_id;zero_depth	1 entities	$$11.0 \mathrm{ms} \pm 88.2 \mathrm{μs}\left({\color{gray}-0.125 \mathrm{\%}}\right) $$	Flame Graph
entity_by_id;zero_depth	10 entities	$$11.2 \mathrm{ms} \pm 84.2 \mathrm{μs}\left({\color{gray}0.292 \mathrm{\%}}\right) $$	Flame Graph
entity_by_id;zero_depth	25 entities	$$11.3 \mathrm{ms} \pm 93.8 \mathrm{μs}\left({\color{gray}1.35 \mathrm{\%}}\right) $$	Flame Graph
entity_by_id;zero_depth	5 entities	$$11.1 \mathrm{ms} \pm 78.4 \mathrm{μs}\left({\color{gray}-1.881 \mathrm{\%}}\right) $$	Flame Graph
entity_by_id;zero_depth	50 entities	$$10.9 \mathrm{ms} \pm 100 \mathrm{μs}\left({\color{gray}-3.503 \mathrm{\%}}\right) $$	Flame Graph

read_scaling_linkless

Function	Value	Mean	Flame graphs
entity_by_id	1 entities	$$10.9 \mathrm{ms} \pm 76.3 \mathrm{μs}\left({\color{gray}-1.928 \mathrm{\%}}\right) $$	Flame Graph
entity_by_id	10 entities	$$10.9 \mathrm{ms} \pm 81.0 \mathrm{μs}\left({\color{gray}-3.995 \mathrm{\%}}\right) $$	Flame Graph
entity_by_id	100 entities	$$11.0 \mathrm{ms} \pm 88.0 \mathrm{μs}\left({\color{gray}0.222 \mathrm{\%}}\right) $$	Flame Graph
entity_by_id	1000 entities	$$11.2 \mathrm{ms} \pm 124 \mathrm{μs}\left({\color{gray}-3.185 \mathrm{\%}}\right) $$	Flame Graph
entity_by_id	10000 entities	$$11.4 \mathrm{ms} \pm 104 \mathrm{μs}\left({\color{gray}-2.705 \mathrm{\%}}\right) $$	Flame Graph

representative_read_entity

Function	Value	Mean	Flame graphs
entity_by_id	entity type ID: https://blockprotocol.org/@alice/types/entity-type/block/v/1	$$11.5 \mathrm{ms} \pm 86.5 \mathrm{μs}\left({\color{gray}-0.319 \mathrm{\%}}\right) $$	Flame Graph
entity_by_id	entity type ID: https://blockprotocol.org/@alice/types/entity-type/book/v/1	$$11.3 \mathrm{ms} \pm 104 \mathrm{μs}\left({\color{gray}-1.393 \mathrm{\%}}\right) $$	Flame Graph
entity_by_id	entity type ID: https://blockprotocol.org/@alice/types/entity-type/building/v/1	$$11.2 \mathrm{ms} \pm 95.1 \mathrm{μs}\left({\color{gray}-2.424 \mathrm{\%}}\right) $$	Flame Graph
entity_by_id	entity type ID: https://blockprotocol.org/@alice/types/entity-type/organization/v/1	$$11.6 \mathrm{ms} \pm 102 \mathrm{μs}\left({\color{gray}2.12 \mathrm{\%}}\right) $$	Flame Graph
entity_by_id	entity type ID: https://blockprotocol.org/@alice/types/entity-type/page/v/2	$$11.2 \mathrm{ms} \pm 72.8 \mathrm{μs}\left({\color{gray}-1.842 \mathrm{\%}}\right) $$	Flame Graph
entity_by_id	entity type ID: https://blockprotocol.org/@alice/types/entity-type/person/v/1	$$11.4 \mathrm{ms} \pm 98.8 \mathrm{μs}\left({\color{gray}1.17 \mathrm{\%}}\right) $$	Flame Graph
entity_by_id	entity type ID: https://blockprotocol.org/@alice/types/entity-type/playlist/v/1	$$11.5 \mathrm{ms} \pm 82.9 \mathrm{μs}\left({\color{gray}0.857 \mathrm{\%}}\right) $$	Flame Graph
entity_by_id	entity type ID: https://blockprotocol.org/@alice/types/entity-type/song/v/1	$$11.3 \mathrm{ms} \pm 81.9 \mathrm{μs}\left({\color{gray}-1.597 \mathrm{\%}}\right) $$	Flame Graph
entity_by_id	entity type ID: https://blockprotocol.org/@alice/types/entity-type/uk-address/v/1	$$11.3 \mathrm{ms} \pm 104 \mathrm{μs}\left({\color{gray}-2.477 \mathrm{\%}}\right) $$	Flame Graph

representative_read_entity_type

Function	Value	Mean	Flame graphs
get_entity_type_by_id	Account ID: bf5a9ef5-dc3b-43cf-a291-6210c0321eba	$$8.50 \mathrm{ms} \pm 64.3 \mathrm{μs}\left({\color{gray}2.06 \mathrm{\%}}\right) $$	Flame Graph

representative_read_multiple_entities

Function	Value	Mean	Flame graphs
entity_by_property	traversal_paths=0	0	$$58.6 \mathrm{ms} \pm 441 \mathrm{μs}\left({\color{gray}-0.037 \mathrm{\%}}\right) $$
entity_by_property	traversal_paths=255	1,resolve_depths=inherit:1;values:255;properties:255;links:127;link_dests:126;type:true	$$112 \mathrm{ms} \pm 745 \mathrm{μs}\left({\color{gray}0.870 \mathrm{\%}}\right) $$
entity_by_property	traversal_paths=2	1,resolve_depths=inherit:0;values:0;properties:0;links:0;link_dests:0;type:false	$$65.0 \mathrm{ms} \pm 622 \mathrm{μs}\left({\color{gray}0.475 \mathrm{\%}}\right) $$
entity_by_property	traversal_paths=2	1,resolve_depths=inherit:0;values:0;properties:0;links:1;link_dests:0;type:true	$$73.6 \mathrm{ms} \pm 689 \mathrm{μs}\left({\color{gray}-3.196 \mathrm{\%}}\right) $$
entity_by_property	traversal_paths=2	1,resolve_depths=inherit:0;values:0;properties:2;links:1;link_dests:0;type:true	$$84.5 \mathrm{ms} \pm 804 \mathrm{μs}\left({\color{gray}-1.747 \mathrm{\%}}\right) $$
entity_by_property	traversal_paths=2	1,resolve_depths=inherit:0;values:2;properties:2;links:1;link_dests:0;type:true	$$90.8 \mathrm{ms} \pm 698 \mathrm{μs}\left({\color{gray}-1.591 \mathrm{\%}}\right) $$
link_by_source_by_property	traversal_paths=0	0	$$47.0 \mathrm{ms} \pm 369 \mathrm{μs}\left({\color{gray}-1.534 \mathrm{\%}}\right) $$
link_by_source_by_property	traversal_paths=255	1,resolve_depths=inherit:1;values:255;properties:255;links:127;link_dests:126;type:true	$$75.0 \mathrm{ms} \pm 487 \mathrm{μs}\left({\color{gray}-2.736 \mathrm{\%}}\right) $$
link_by_source_by_property	traversal_paths=2	1,resolve_depths=inherit:0;values:0;properties:0;links:0;link_dests:0;type:false	$$54.2 \mathrm{ms} \pm 609 \mathrm{μs}\left({\color{gray}-1.260 \mathrm{\%}}\right) $$
link_by_source_by_property	traversal_paths=2	1,resolve_depths=inherit:0;values:0;properties:0;links:1;link_dests:0;type:true	$$62.0 \mathrm{ms} \pm 454 \mathrm{μs}\left({\color{gray}-3.439 \mathrm{\%}}\right) $$
link_by_source_by_property	traversal_paths=2	1,resolve_depths=inherit:0;values:0;properties:2;links:1;link_dests:0;type:true	$$63.8 \mathrm{ms} \pm 502 \mathrm{μs}\left({\color{gray}-1.644 \mathrm{\%}}\right) $$
link_by_source_by_property	traversal_paths=2	1,resolve_depths=inherit:0;values:2;properties:2;links:1;link_dests:0;type:true	$$64.2 \mathrm{ms} \pm 602 \mathrm{μs}\left({\color{gray}-1.765 \mathrm{\%}}\right) $$

scenarios

Function	Value	Mean	Flame graphs
full_test	query-limited	$$113 \mathrm{ms} \pm 944 \mathrm{μs}\left({\color{gray}-2.036 \mathrm{\%}}\right) $$	Flame Graph
full_test	query-unlimited	$$125 \mathrm{ms} \pm 839 \mathrm{μs}\left({\color{gray}-2.288 \mathrm{\%}}\right) $$	Flame Graph
linked_queries	query-limited	$$25.0 \mathrm{ms} \pm 288 \mathrm{μs}\left({\color{gray}3.05 \mathrm{\%}}\right) $$	Flame Graph
linked_queries	query-unlimited	$$511 \mathrm{ms} \pm 1.77 \mathrm{ms}\left({\color{gray}-2.221 \mathrm{\%}}\right) $$	Flame Graph

[cursor]

PR Summary

Medium Risk
Changes how all workspace SQL is executed (parameter binding path) and ties query behavior to caller-supplied variable values; incorrect or missing variables will fail queries that previously ran without parameters.

Overview
Integration definition variables are now bound to DuckDB $NAME parameters when the integrations engine runs workspace query and create_table.

WorkspaceConfig gains a variables field (hash-integrations-definition::Variables), stored on the workspace connection and passed into DuckDB via prepared-statement binding. Values are supplied as text; SQL is expected to cast where needed (e.g. $MIN_SEATS::INTEGER). Parameter names are resolved case-insensitively against the variable map. Missing bindings—including positional ? / $1—fail with StatementError::UnknownParameter.

The engine now depends on hash-integrations-definition. Integration tests cover successful binding (including injection-like string values) and refusal of unset parameters.

^{Reviewed by Cursor Bugbot for commit 4562bd9. Bugbot is set up for automated code reviews on this repo. Configure here.}