Skip to content

test: pg_dump_roundtrip gets its pytest twin, and its index and sort_by arms test what they name (#1341) - #1458

Merged
jdatcmd merged 15 commits into
mainfrom
test/1341-pg-dump-roundtrip-twin
Oct 16, 2026
Merged

jdatcmd merged 15 commits into
mainfrom
test/1341-pg-dump-roundtrip-twin

Conversation

@OffgridwithJD

Copy link
Copy Markdown
Collaborator

#1341's remaining twin-less suites: pg_dump_roundtrip.sh had no pytest twin. This PR adds one, every check by the shell's name, seeds the suite into the ledger, and fixes two arms that couldn't fail as their names claim.

Stacked on #1457, at the top of my chain. This branch is #1457's head plus two commits.

What changes

  • test/pytest/test_pg_dump_roundtrip.py, the twin: three tests.
  • "restored index answers a point lookup" didn't test the index. The lookup disables seqscan and bitmapscan, but the columnar scan is neither.
    • Measured: with the index dropped from the restored database, the lookup still answered 12345, and the suite stayed 36/36.
    • The fix: a premise now asserts that the lookup's plan uses dt_id_idx.
  • "restored sort_by resolves and applies" didn't test the order. It checked the row count after vacuum_sorted, which is 20000 whatever columns it sorted on.
    • Measured: with the sort keys replaced by column 1, the suite stayed 36/36.
    • The fix: the arm now counts (host, ts) inversions in scan order, which must be 0, with a premise that the restored table has some before the call. The twin runs these readers with parallel workers off, as the shell's cluster does.
  • Ledger: pg_dump_roundtrip is seeded with 40 rows from five-major runs, and 16 of the 40 rows dated. suites_not_covered goes 213 → 212, and the census is 3755 + 40 = 3795 rows, 2755 + 24 = 2779 never and 1000 + 16 = 1016 dated, matching the tsv. The gate gives rc=0 against origin/main.

Red first

Each mutation was run one at a time on PG18, through both twins, with the .so md5 printed every time. The SQL mutations edit pgcolumnar--1.0-alpha5.sql, which each suite's CREATE EXTENSION reads.

mutation pg_dump_roundtrip.sh test_pg_dump_roundtrip.py the arms that went red
none (the head) 40/40 40/40 none
pgcolumnar.options not registered with pg_extension_config_dump 34/40 2 of 3 tests fail both formats' options and declared sort_by: got [<none>] want [fast]
pgcolumnar.projection_declaration not registered 32/40 2 fail both formats' declaration and rebuild arms: got [0] want [1]
rebuild_projections() skips missing projections (NOT EXISTS → EXISTS) 33/40 3 fail the rebuild arms
drop_projection keeps its declaration 32/40 3 fail the drop arm, got [2] want [1], and every declaration count after it
vacuum_sorted sorts on column 1 38/40 (36/36 before this PR) 2 fail both formats' restored sort_by resolves and applies: got [20000|2000] want [20000|0]
harness: the restored database loses its index 38/40 (36/36 before this PR) — both formats' premise: the point lookup takes the restored index

Never red (24):

  • the dump and restore exit codes, and the dump's columnar AM;
  • the access method, the row count and the checksum;
  • the index premise and its lookup;
  • the pinned loss of projection storage (Projections are lost across pg_dump / restore #266);
  • the inversion premise;
  • the second rebuild's no-op;
  • the source's own premises.

Runs

major pg_dump_roundtrip.sh test_pg_dump_roundtrip.py
15 40/40 40/40
16 40/40 40/40
17 40/40 40/40
18 40/40 40/40
19 40/40 40/40

Also measured: the guard half (438 tests), harness_selftest 1245/1245 and docs_style. cluster_tests goes 677 → 680 by collection, and TESTS.md gets §150.

🤖 Generated with Claude Code

@jdatcmd jdatcmd left a comment

Copy link
Copy Markdown
Collaborator

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Approving 4b8447f.

Measured on PG17: pg_dump_roundtrip.sh 40/40; test_pg_dump_roundtrip.py 40 checks over 3 tests.

Your index claim, with the harness mutation run myself: DROP INDEX IF EXISTS dt_id_idx on the restored database just before the premise, in both twins. Both formats' premise: the point lookup takes the restored index go red, got [0] want [1], in each twin. The lookup arm after it still answers 12345, which is why the premise has to be there: the columnar scan answers without the index, as you measured.

I took the SQL and sort_by mutants from your table. This sits on top of the #1450 → #1457 stack I approved, and the stack's restate covers it.

jdatcmd and others added 15 commits October 16, 2026 05:01
…es ALTER EXTENSION UPDATE (#1341 item 66)

Between installing a new library and running ALTER EXTENSION pgcolumnar UPDATE, a
database runs the 1.0-alpha5 library over its 1.0-alpha4 catalog. The library deletes
from pgcolumnar.retired_group, which that catalog lacks, so DROP TABLE, TRUNCATE and
pgcolumnar.vacuum() on a columnar table fail there with 42P01 'columnar metadata
table "pgcolumnar.retired_group" does not exist', which names neither the cause nor
the remedy. Measured: each refusal changes nothing, reads and writes work throughout,
and after the update all three succeed on the same rows.

open_columnar_table's error now carries a hint naming the update.
docs/installation.md's "If you skipped step 3" shows the error and the hint.

Red first, both twins, PG18: native_upgrade_converge gains the window's arms in a
database at the previous release's catalog (the newest fixture), and the three
refusal arms fail on main with `got [42P01|no-hint]`. test_native_upgrade_converge.py
is their partial twin, declared INCOMPLETE; it stages the previous release's base
script from test/fixtures as the shell does. Green on 15-19 in both twins.

cluster_tests 660 -> 661 by collection; TESTS.md gets section 143.

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
… still be set to a row store (#1341)

test_fk_referencing.py asserts every shell check by name; compare_to_bash grades it as
covering all 28 (27 checks on PG17+, and the pre-17 branch's own), and it joins
COMPLETE.

The conversion guard's over-rejection control converted a table with no foreign key
back to heap, so it could not see a guard that refused every SET ACCESS METHOD on a
referenced table whatever the target: with the guard's columnar-target test removed,
the suite stayed 26/26. A new arm sets the referenced table itself to heap; under that
mutant both twins now fail it.

cluster_tests 661 -> 666 by collection; TESTS.md gets section 144.

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
…tations of the foreign-key guards (#1341)

28 rows from five-major runs (27/27 on 17-19, 26/26 on 15-16). Dated on PG18 by:
the referenced-side refusal removed (5), the guard keyed on the referencing table
(8), the conversion refusal removed (8), and the conversion refused whatever the
target (1). suites_not_covered 219 -> 218; the census is 3647 rows, 2686 never,
961 dated, restated on main db56168.

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
test_truncate_cleanup.py asserts every shell check by name; compare_to_bash grades it
as covering all 25, and it joins COMPLETE. It runs in a private database, since the
snapshot counts every pgcolumnar catalog row and the shared one holds every other
test's. The shell suite needed no change: each of its arms already goes red under a
mutation of the path it names.

cluster_tests 666 -> 672 by collection; TESTS.md gets section 145.

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
…mutations of the truncate paths (#1341)

25 rows from five-major runs (25/25 on each of 15-19). Dated on PG18 by a rewrite
that keeps the retired storage's rows (7) or its stale write state (1), an in-place
truncate that skips the projections' storages (8), and a storage-tree delete that
skips them (1). suites_not_covered 218 -> 217; the census is 3672 rows, 2695 never,
977 dated, restated on main db56168.

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
…zone-map answer that ignores deletes (#1341)

test_native_dml.py asserts every shell check by name; compare_to_bash grades it as
covering all 15, and it joins COMPLETE.

The min/max arm could not fail as its comment claimed. The deletes (id % 7 = 0)
removed neither the smallest nor the largest id, so min and max were the same
whether or not the deleted rows counted; and measured with groups that hold deletes
left on the zone-map path, min/max(id) still came out right while min/max(k) came
out wrong (10|50000 for 20|49990). The suite stayed 13/13. The deletes now include
ids 1 and 5000, a premise asserts on heap that min and max moved, and the arm takes
min/max over k as well as id; under that mutant both twins fail it.

The index arms gain a premise that the lookups take the primary-key index, so they
test the index fetch's delete check rather than the scan.

cluster_tests 672 -> 673 by collection; TESTS.md gets section 146.

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
…ons (#1341)

15 rows from five-major runs (15/15 on each of 15-19). Dated on PG18 by: a row group
with deletes still answering min/max from zone maps (1), count(*) from metadata not
subtracting deleted rows (3), and the index fetch ignoring the delete vector (5).
suites_not_covered 217 -> 216; the census is 3687 rows, 2702 never, 985 dated, restated on main db56168.

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
…longer pass its survival arm (#1341)

test_native_dict_underfill.py asserts every shell check by name; compare_to_bash
grades it as covering all 4, and it joins COMPLETE. It turns the post-codec encoding
choice off for its own session, where the shell sets it for its database.

The survival arm was a fresh SELECT 1, which a crashed backend passes once crash
recovery has finished, and the suite computed a crash flag it never checked. It now
counts "terminated by signal" in the server log. The rejection arm matched
'does not match|corrupt|invalid|out of' in any message, which "out of memory"
satisfies too; it now requires XX001. A premise asserts the inflation rewrote the
chunk's descriptor.

cluster_tests 673 -> 674 by collection; TESTS.md gets section 147.

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
4 rows from five-major runs (4/4 on each of 15-19). Dated on PG18 by the DICT fill
check removed (1) and replaced by a crash (2, one shared). suites_not_covered
216 -> 215; the census is 3691 rows, 2704 never, 987 dated, restated on main db56168.

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
…ers can see a double count and a deleted row (#1341)

test_native_decode_gating.py asserts every shell check by name; compare_to_bash
grades it as covering all 29, and it joins COMPLETE. It sets the width gate off for
its session, where the shell pins it off for its cluster.

Two of the filter counters' guarantees could not fail:
- every row of the needle's surviving vector matched, so the producer's re-test of
  that vector rejected nothing, and a producer counting its rejections a second time
  read exactly right: with the non-counting filter disabled the suite stayed 26/26.
  A qual that half of vector 0 passes now asserts its rejections are counted once.
- the counters were checked only on the table without deletes, so with the
  evaluator's deleted-row test removed the suite stayed 26/26. Rows Removed by Filter
  is now checked on the multi-group table with deletes, against heap's live count.

The multi-group fixture's DELETE ran through the gating it was built to test (its
WHERE is an unprunable qual too), so a gating mutant broke the fixture rather than
the arms. It now runs with the width gate out of reach, and its premise counts the
surviving rows with count(*) instead of a gated WHERE.

cluster_tests 674 -> 676 by collection; TESTS.md gets section 148.

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
…our mutations of phase 2 (#1341)

29 rows from five-major runs (29/29 on each of 15-19). Dated on PG18 by: the
per-vector evaluation never run (4), a deleted row counted as filtered (1), every
vector skipped (7), and a double count in the producer (2). No premise is dated: the
fixture no longer depends on the gating under test. suites_not_covered 215 -> 214;
the census is 3720 rows, 2722 never, 998 dated, restated on main db56168.

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
…d settings are proven absent by SQLSTATE (#1341)

test_native_decode_gate_width.py asserts every shell check by name; compare_to_bash
grades it as covering all 35, and it joins COMPLETE. It holds the threshold for its
session, where the shell sets it per database because every helper opens a new
connection.

The two premises that the rejected probe settings were not shipped compared SHOW's
output with the empty string: q returns empty for a dead connection too, and an empty
expectation is the shape the pytest layer refuses. Both twins now require SHOW to
raise 42704 (undefined_object).

cluster_tests 676 -> 677 by collection; TESTS.md gets section 149.

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
…y three mutations of the width gate (#1341)

35 rows from five-major runs (35/35 on each of 15-19). Dated on PG18 by gating
whatever the width (2), > for >= (1) and a payload count one too high (1, shared).
suites_not_covered 214 -> 213; the census is 3755 rows, 2754 never, 1001 dated, restated on main db56168.

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
…by arms test what they name (#1341)

test_pg_dump_roundtrip.py asserts every shell check by name; compare_to_bash grades it
as covering all 25 names (40 checks over the two formats), and it joins COMPLETE. It
dumps a private source database and restores it into fresh ones.

Two arms could not fail as claimed:
- "restored index answers a point lookup" disabled seqscan and bitmapscan, but the
  columnar scan is neither, and with the index dropped from the restored database the
  lookup still answered 12345: the suite stayed 36/36. A premise now asserts the
  lookup's plan uses dt_id_idx.
- "restored sort_by resolves and applies" checked the row count after vacuum_sorted,
  which is 20000 whatever it sorted on: with the sort keys replaced by column 1 the
  suite stayed 36/36. It now counts (host, ts) inversions in scan order, which must be
  0, with a premise that the restored table has some before the call.

cluster_tests 677 -> 680 by collection; TESTS.md gets section 150.

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
… mutations (#1341)

40 rows from five-major runs (40/40 on each of 15-19). Dated on PG18 by: options
(6) and projection declarations (8) no longer registered with
pg_extension_config_dump, rebuild_projections() skipping missing projections (7),
drop_projection keeping its declaration (8), and vacuum_sorted on the wrong column
(2). suites_not_covered 213 -> 212; the census is 3795 rows, 2778 never, 1017 dated, restated on main db56168.

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
@OffgridwithJD
OffgridwithJD force-pushed the test/1341-pg-dump-roundtrip-twin branch from 4b8447f to 1da9bbf Compare October 16, 2026 05:01

@jdatcmd jdatcmd left a comment

Copy link
Copy Markdown
Collaborator

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Re-approving 1da9bbf, the restate onto main db56168. I compared every commit's patch with the approved stack using git range-diff. The test and source commits are unchanged, and the ledger-seed commits changed only by re-anchoring on #1470. The census at this head matches its budget paragraph, and the counts step consistently. At #1467's head: the guards pass (438), 687 collected (matching the file), and harness_selftest is 1245/1245.

@jdatcmd
jdatcmd merged commit ace961d into main Oct 16, 2026
15 checks passed
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants