Skip to content

test: alter_am_cleanup gets its pytest twin, and each arm reddens for its own reason (#1341 item 70) - #1467

Merged
jdatcmd merged 23 commits into
mainfrom
test/1341-alter-am-cleanup-twin
Oct 16, 2026
Merged

jdatcmd merged 23 commits into
mainfrom
test/1341-alter-am-cleanup-twin

Conversation

@OffgridwithJD

Copy link
Copy Markdown
Collaborator

Stacked on #1465 (merge after it). Two commits: 189cf7bc (the twin and the shell fixes) and 93d297d8 (the ledger seed). This is the second suite of #1341 item 70.

What was wrong

Every arm in the suite could already go red, but three went red for the wrong reason, so neither the log nor the ledger could say which arm a mutation actually broke.

  • Cumulative snapshots. Each cleanup arm compared the catalogs with the suite's starting $base, so one leak reddened every arm after it. With the cleanup gated on the columnar AM, the old shell reddened five arms, among them "dropping a heap table that was never columnar leaves the catalogs alone", on aac_t's leftover rows. Each arm now compares with the snapshot taken just before its own table, and the same mutation reddens exactly the two arms it breaks.
  • REFRESH inherited CREATE's failure. "and REFRESH MATERIALIZED VIEW does too" refreshed the CREATE arm's matview, and under the gate mutations it went red with relation "rwm" does not exist, the cascade the suite's own comment warns about. It now refreshes a matview of its own, made WITH NO DATA (a premise, green under every mutation), and goes red on the hook's own error.
  • A premise a product change reddens. "premise: and took pgcolumnar.options with it" went red with the member skip removed, because DROP EXTENSION aborted. It's an arm now (test: 87 arms have survived every mutation aimed at their neighbours: vacuous, or named for something they do not measure #1236).

Mutations of the drop hook (PG18), new shell and twin

mutation reds (shell) twin's first red
cleanup gated on the columnar AM (#304's shape) the converted-table arm, the pre-extension options row same
gate on the schema, not pgcolumnar.options the 7 after-DROP-EXTENSION paths DROP after DROP EXTENSION
no gate those 7, plus the 8 no-extension paths one of each
skip the whole schema, not the members the in-schema table same
no member skip DROP EXTENSION, "and took pgcolumnar.options with it" DROP EXTENSION
no declaration delete the converted-table arm same
no options delete 4 cleanup arms, each against its own snapshot the converted-table arm

The twin

test_alter_am_cleanup.py carries all 47 checks by the shell's name (compare_to_bash: 47 literal, 0 missing). It's four tests: conversion cleanup, no extension, pre-extension table, and after DROP EXTENSION. Each runs in a database of its own that the fixture drops. A statement's failure comes back as rc=1 ERROR: <message>, as in the shell.

Runs

Head is 47/47 in both twins on each of 15, 16, 17, 18 and 19.

Ledger

  • The suite had no rows. All 47 checks enter, 21 dated by the seven mutations.
  • Twenty-six arrive never:
    • the sixteen premises;
    • the conversion and round-trip reads;
    • the CREATE TABLE arms and the control;
    • the never-columnar heap arm;
    • the pre-extension DROP's exit code;
    • the two TRUNCATE arms. TRUNCATE drops no relation through the hook, so no gate mutation reaches them.
  • suites_not_covered 210 → 209. The census is 3900 / 2844 / 1056.
  • pgc_ledger.py gate returns rc 0.

Counts and guards

  • cluster_tests 683 → 687, and pytest collects 687.
  • COMPLETE gains alter_am_cleanup, and TESTS.md gains §154.
  • The NO_CLUSTER guards pass (438), harness_selftest.sh passes, and docs_style.sh passes.

🤖 Generated with Claude Code

@jdatcmd jdatcmd left a comment

Copy link
Copy Markdown
Collaborator

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Approving 93d297d.

Measured on PG17, at 93d297d: alter_am_cleanup.sh 47/47, and test_alter_am_cleanup.py 47 checks over 4 tests. The tsv is 3900 / 2844 / 1056, as described.

Your per-arm snapshot claim, with the first mutant run myself: the drop hook returns early, after the storage-tree delete, unless the relation is still columnar (#304's shape).

shell arms red
main's 5: the converted-table arm, the round-trip, "dropping a heap table that was never columnar", the in-schema table, and the pre-extension options row. Each of the three middle ones shows aac_t's leftover 0/0/0/1/1.
this PR's 2: the converted-table arm and the pre-extension options row, exactly the two it breaks

I took the other six mutants from your table.

jdatcmd and others added 23 commits October 16, 2026 05:01
…es ALTER EXTENSION UPDATE (#1341 item 66)

Between installing a new library and running ALTER EXTENSION pgcolumnar UPDATE, a
database runs the 1.0-alpha5 library over its 1.0-alpha4 catalog. The library deletes
from pgcolumnar.retired_group, which that catalog lacks, so DROP TABLE, TRUNCATE and
pgcolumnar.vacuum() on a columnar table fail there with 42P01 'columnar metadata
table "pgcolumnar.retired_group" does not exist', which names neither the cause nor
the remedy. Measured: each refusal changes nothing, reads and writes work throughout,
and after the update all three succeed on the same rows.

open_columnar_table's error now carries a hint naming the update.
docs/installation.md's "If you skipped step 3" shows the error and the hint.

Red first, both twins, PG18: native_upgrade_converge gains the window's arms in a
database at the previous release's catalog (the newest fixture), and the three
refusal arms fail on main with `got [42P01|no-hint]`. test_native_upgrade_converge.py
is their partial twin, declared INCOMPLETE; it stages the previous release's base
script from test/fixtures as the shell does. Green on 15-19 in both twins.

cluster_tests 660 -> 661 by collection; TESTS.md gets section 143.

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
… still be set to a row store (#1341)

test_fk_referencing.py asserts every shell check by name; compare_to_bash grades it as
covering all 28 (27 checks on PG17+, and the pre-17 branch's own), and it joins
COMPLETE.

The conversion guard's over-rejection control converted a table with no foreign key
back to heap, so it could not see a guard that refused every SET ACCESS METHOD on a
referenced table whatever the target: with the guard's columnar-target test removed,
the suite stayed 26/26. A new arm sets the referenced table itself to heap; under that
mutant both twins now fail it.

cluster_tests 661 -> 666 by collection; TESTS.md gets section 144.

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
…tations of the foreign-key guards (#1341)

28 rows from five-major runs (27/27 on 17-19, 26/26 on 15-16). Dated on PG18 by:
the referenced-side refusal removed (5), the guard keyed on the referencing table
(8), the conversion refusal removed (8), and the conversion refused whatever the
target (1). suites_not_covered 219 -> 218; the census is 3647 rows, 2686 never,
961 dated, restated on main db56168.

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
test_truncate_cleanup.py asserts every shell check by name; compare_to_bash grades it
as covering all 25, and it joins COMPLETE. It runs in a private database, since the
snapshot counts every pgcolumnar catalog row and the shared one holds every other
test's. The shell suite needed no change: each of its arms already goes red under a
mutation of the path it names.

cluster_tests 666 -> 672 by collection; TESTS.md gets section 145.

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
…mutations of the truncate paths (#1341)

25 rows from five-major runs (25/25 on each of 15-19). Dated on PG18 by a rewrite
that keeps the retired storage's rows (7) or its stale write state (1), an in-place
truncate that skips the projections' storages (8), and a storage-tree delete that
skips them (1). suites_not_covered 218 -> 217; the census is 3672 rows, 2695 never,
977 dated, restated on main db56168.

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
…zone-map answer that ignores deletes (#1341)

test_native_dml.py asserts every shell check by name; compare_to_bash grades it as
covering all 15, and it joins COMPLETE.

The min/max arm could not fail as its comment claimed. The deletes (id % 7 = 0)
removed neither the smallest nor the largest id, so min and max were the same
whether or not the deleted rows counted; and measured with groups that hold deletes
left on the zone-map path, min/max(id) still came out right while min/max(k) came
out wrong (10|50000 for 20|49990). The suite stayed 13/13. The deletes now include
ids 1 and 5000, a premise asserts on heap that min and max moved, and the arm takes
min/max over k as well as id; under that mutant both twins fail it.

The index arms gain a premise that the lookups take the primary-key index, so they
test the index fetch's delete check rather than the scan.

cluster_tests 672 -> 673 by collection; TESTS.md gets section 146.

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
…ons (#1341)

15 rows from five-major runs (15/15 on each of 15-19). Dated on PG18 by: a row group
with deletes still answering min/max from zone maps (1), count(*) from metadata not
subtracting deleted rows (3), and the index fetch ignoring the delete vector (5).
suites_not_covered 217 -> 216; the census is 3687 rows, 2702 never, 985 dated, restated on main db56168.

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
…longer pass its survival arm (#1341)

test_native_dict_underfill.py asserts every shell check by name; compare_to_bash
grades it as covering all 4, and it joins COMPLETE. It turns the post-codec encoding
choice off for its own session, where the shell sets it for its database.

The survival arm was a fresh SELECT 1, which a crashed backend passes once crash
recovery has finished, and the suite computed a crash flag it never checked. It now
counts "terminated by signal" in the server log. The rejection arm matched
'does not match|corrupt|invalid|out of' in any message, which "out of memory"
satisfies too; it now requires XX001. A premise asserts the inflation rewrote the
chunk's descriptor.

cluster_tests 673 -> 674 by collection; TESTS.md gets section 147.

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
4 rows from five-major runs (4/4 on each of 15-19). Dated on PG18 by the DICT fill
check removed (1) and replaced by a crash (2, one shared). suites_not_covered
216 -> 215; the census is 3691 rows, 2704 never, 987 dated, restated on main db56168.

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
…ers can see a double count and a deleted row (#1341)

test_native_decode_gating.py asserts every shell check by name; compare_to_bash
grades it as covering all 29, and it joins COMPLETE. It sets the width gate off for
its session, where the shell pins it off for its cluster.

Two of the filter counters' guarantees could not fail:
- every row of the needle's surviving vector matched, so the producer's re-test of
  that vector rejected nothing, and a producer counting its rejections a second time
  read exactly right: with the non-counting filter disabled the suite stayed 26/26.
  A qual that half of vector 0 passes now asserts its rejections are counted once.
- the counters were checked only on the table without deletes, so with the
  evaluator's deleted-row test removed the suite stayed 26/26. Rows Removed by Filter
  is now checked on the multi-group table with deletes, against heap's live count.

The multi-group fixture's DELETE ran through the gating it was built to test (its
WHERE is an unprunable qual too), so a gating mutant broke the fixture rather than
the arms. It now runs with the width gate out of reach, and its premise counts the
surviving rows with count(*) instead of a gated WHERE.

cluster_tests 674 -> 676 by collection; TESTS.md gets section 148.

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
…our mutations of phase 2 (#1341)

29 rows from five-major runs (29/29 on each of 15-19). Dated on PG18 by: the
per-vector evaluation never run (4), a deleted row counted as filtered (1), every
vector skipped (7), and a double count in the producer (2). No premise is dated: the
fixture no longer depends on the gating under test. suites_not_covered 215 -> 214;
the census is 3720 rows, 2722 never, 998 dated, restated on main db56168.

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
…d settings are proven absent by SQLSTATE (#1341)

test_native_decode_gate_width.py asserts every shell check by name; compare_to_bash
grades it as covering all 35, and it joins COMPLETE. It holds the threshold for its
session, where the shell sets it per database because every helper opens a new
connection.

The two premises that the rejected probe settings were not shipped compared SHOW's
output with the empty string: q returns empty for a dead connection too, and an empty
expectation is the shape the pytest layer refuses. Both twins now require SHOW to
raise 42704 (undefined_object).

cluster_tests 676 -> 677 by collection; TESTS.md gets section 149.

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
…y three mutations of the width gate (#1341)

35 rows from five-major runs (35/35 on each of 15-19). Dated on PG18 by gating
whatever the width (2), > for >= (1) and a payload count one too high (1, shared).
suites_not_covered 214 -> 213; the census is 3755 rows, 2754 never, 1001 dated, restated on main db56168.

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
…by arms test what they name (#1341)

test_pg_dump_roundtrip.py asserts every shell check by name; compare_to_bash grades it
as covering all 25 names (40 checks over the two formats), and it joins COMPLETE. It
dumps a private source database and restores it into fresh ones.

Two arms could not fail as claimed:
- "restored index answers a point lookup" disabled seqscan and bitmapscan, but the
  columnar scan is neither, and with the index dropped from the restored database the
  lookup still answered 12345: the suite stayed 36/36. A premise now asserts the
  lookup's plan uses dt_id_idx.
- "restored sort_by resolves and applies" checked the row count after vacuum_sorted,
  which is 20000 whatever it sorted on: with the sort keys replaced by column 1 the
  suite stayed 36/36. It now counts (host, ts) inversions in scan order, which must be
  0, with a premise that the restored table has some before the call.

cluster_tests 677 -> 680 by collection; TESTS.md gets section 150.

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
… mutations (#1341)

40 rows from five-major runs (40/40 on each of 15-19). Dated on PG18 by: options
(6) and projection declarations (8) no longer registered with
pg_extension_config_dump, rebuild_projections() skipping missing projections (7),
drop_projection keeping its declaration (8), and vacuum_sorted on the wrong column
(2). suites_not_covered 213 -> 212; the census is 3795 rows, 2778 never, 1017 dated, restated on main db56168.

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
…dex (#1341)

The shell's "the index still answers the same range" never touched the index:
right after pg_upgrade there are no planner statistics, the planner took the
columnar scan for the range even with seqscan off, and the arm passed with
c_id dropped after the upgrade. The arm and a new premise now run with the
custom scan off, and the premise asserts the plan scans c_id.

test_pg_upgrade.py carries all 16 checks by the shell's name. Like the shell it
needs two majors: --pg-config is the new one, PGC_UPGRADE_FROM_PG_CONFIG the
old one, whose extension it builds from a copy of the tree. The matrix runs one
major at a time, so there it declines, listed for 15-19 in
expected_unrunnable.txt. cluster_tests 680 -> 681, TESTS.md section 151.

The suite has its own check() and records nothing, so no ledger rows.

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
…nd names a refused step (#1341)

jdatcmd, reviewing #1461: under root, initdb refused ("cannot be run as root"),
_sh discarded the code, and the failure surfaced one step later as a
FileNotFoundError for postgresql.conf. initdb, pg_ctl and pg_upgrade now go
through _server_tool, which drops to postgres with runuser when euid is 0
(as pgc_cluster._asroot and lib.sh do), chowns the data directories, and
raises naming the step and its stderr. initdb passes -U postgres, and the
socket directory is the datadir, as pgc_cluster pins it. A failed make of the
old major's extension now shows its stderr too.

Measured as root (sudo, PG17 -> PG18): 585369d fails with that
FileNotFoundError, this commit is 16/16. As a normal user: 16/16.

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
…ms replay a write (#1341)

Measured: compact on r retired nothing, because vacuum had already reclaimed
every deleted row, so "compact replays identically" compared a state compact
never changed. The fixture now gives compact one fully deleted row group, and
a new arm asserts it was retired (1|1). "vacuum rewrote r into a new
relfilenode on the primary" does the same for vacuum, and a premise pins r2's
second batch, without which the module-less replay arms passed on a failed
INSERT.

Red first: with vacuum returning before it rewrites, the old shell is 41/41
green and the new one reddens the vacuum arm. With compact retiring nothing,
the new compact arm is red.

test_replication.py carries all 44 checks by the shell's name, on a private
primary, a streaming standby and an isolated restore. COMPLETE gains
replication, TESTS.md section 152, cluster_tests 681 -> 682.

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
…ions (#1341)

The suite had no rows. All 44 checks enter from five-major runs (44/44 on
each of 15-19). Dated by: no SMGR truncate record, data and gap pages
written without WAL, vacuum returning early, compact retiring nothing.
suites_not_covered 212 -> 211; census 3839 rows / 2811 never / 1028 dated.

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
…e recluster's visibility-map rule (#1341 item 70)

Two measured gaps in "index scan returns each row once":
- with the index dropped after the recluster it stayed green, because with
  only seqscan and the custom scan off the count went through the disabled
  seqscan. Bitmap scans are off now too, and "premise: the count takes an
  index-only scan of n_id_uq" asserts the plan.
- with recluster's PgColumnarVMClearForRowRange removed the whole suite
  stayed green: no VM bit was ever set, so every index-only probe fetched
  from the heap. A VACUUM before the recluster sets them (an arm checks the
  pre-recluster count answers from the index), and the old entries, still in
  the index, are then counted twice: 81409 for 40960.

test_native_recluster.py carries all 14 checks by the shell's name.
COMPLETE gains native_recluster, TESTS.md section 153, cluster_tests
682 -> 683.

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
…utations (#1341 item 70)

The suite had no rows. All 14 checks enter from five-major runs (14/14 on
each of 15-19). Dated by: no index entry for a rewritten row, no old group
retired, the VM left set over the retired row numbers, AccessExclusiveLock,
and a sort key of no columns. suites_not_covered 211 -> 210; census
3853 rows / 2817 never / 1036 dated.

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
… its own reason (#1341 item 70)

Three attribution faults, measured under mutations of the drop hook:
- every cleanup arm compared with the suite's starting snapshot, so one leak
  reddened every arm after it: with the cleanup gated on the columnar AM,
  the never-columnar heap arm went red on aac_t's rows. Each now compares
  with the snapshot taken just before its own table.
- REFRESH MATERIALIZED VIEW reused the CREATE arm's matview and went red as
  'relation "rwm" does not exist'. It now refreshes a matview of its own,
  made WITH NO DATA (a premise), and reddens on the hook's own error.
- "premise: and took pgcolumnar.options with it" went red when the member
  skip was removed, because DROP EXTENSION aborted: a product change, so an
  arm (#1236).

test_alter_am_cleanup.py carries all 47 checks by the shell's name, in four
tests on databases of their own. COMPLETE gains alter_am_cleanup, TESTS.md
section 154, cluster_tests 683 -> 687.

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
… mutations of the drop hook (#1341 item 70)

The suite had no rows. All 47 checks enter from five-major runs (47/47 on
each of 15-19). suites_not_covered 210 -> 209; census 3900 rows / 2843
never / 1057 dated.

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>

@jdatcmd jdatcmd left a comment

Copy link
Copy Markdown
Collaborator

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Re-approving 62c80a4, the restate onto main db56168. I compared every commit's patch with the approved stack using git range-diff. The test and source commits are unchanged, and the ledger-seed commits changed only by re-anchoring on #1470. The census at this head matches its budget paragraph, and the counts step consistently. At #1467's head: the guards pass (438), 687 collected (matching the file), and harness_selftest is 1245/1245.

@jdatcmd
jdatcmd merged commit 31ca5d7 into main Oct 16, 2026
15 checks passed
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants