- `KvEngine::Postgres` slotted in: all six kv-op dispatch arms, the
`KvCursor::Postgres` materializing body behind `AnyCursor`'s kv arm
(the recorded sub-enum design point, landed as predicted), and the
engine-neutral `ensure_gc_schema` call creating `gc_pins` +
`gc_window` in the fresh schema at construction (the fleet host's
both-tables row, ADR-012 §5)
- The two named constructors behind feature `postgres` (default-off):
`dual_tier_postgres_local(config, opts, root, threshold,
window_delay)` — the fleet-capable-kv production shape — and
`kv_only_postgres(config, opts, threshold, window_delay)`; the DSN
connection settings + engine opts ride the constructor parameters,
never invented defaults. `PgOpts` is pub and re-exported from
`lib.rs` (it is on the public constructor signature now)
- The sweep's durable form runs on the postgres host: the form body
extracted into `sweep_window_durable<W: EngineWindowState>` (sqlite's
arm delegates, behavior unchanged), both SQL-backed arms keyed off
the kv-engine enum, never a flag — wave 5's pg-lo dormancy slots in
without reshaping
- Non-fleet posture recorded on both constructors (ADR-012 §3):
implicitly `fleet: false`, the ADR-005 in-process protocol verbatim,
the `fleet: true` declaration is wave 6 and slots in without
reshaping
- Stale scope notes updated to the landed state (engine-representation
doc, `KvCursor` design point, fleet-declaration paragraph,
one-window-host paragraph, postgres module doc, gc.rs companion-seam
note); the batch-delete helper's scope note stays (wave 6 consumer)
- 5 new env-driven construction tests (skipping server-less): the
modes construct and introspect, both GC tables exist in the fresh
schema, the window-delay default is the pinned 5-min constant and
tunable (`0` legal), the kv-only rejection wiring is unchanged, the
dual-tier shape round-trips through both tiers, and the durable
form is observed staging/executing across sweeps on the postgres
host
Verification: `cargo test` 69/19/3 ok; `cargo test --features postgres`
102/19/3 ok live (pglo-poc harness) and green server-less;
`cargo test --no-default-features --features postgres` (the pg-pure
build, ADR-013 §4) 75/2/3 ok server-less; `cargo test --all-features`
157/54/4 ok; clippy `-D warnings` green (default, postgres, pg-pure,
all-features); `cargo fmt --check` green; `cargo doc --no-deps` clean.
Five tasks against the wave-3 contract surface as reviewed (no
amendments from the gate):
- engine-postgres: the fleet-capable kv engine — the B5 row shape
(fillfactor 90) in one engine-owned schema, the deadpool pool with
per-connection prepared-statement discipline, the synchronous_commit
parity knob wired per-connection, ON CONFLICT DO NOTHING CAS, the
stable MVCC-snapshot list cursor, the batch-delete helper
(key = ANY($1), consumer wave 6), the read-only virgin-store split
- engine-postgres-fleet: the engine-state seam's full clause families
(ADR-012 §5's postgres row — every family yes): gc_pins + gc_window,
the joint tx ownership rule in the JointTx shape, pin_commit
atomicity, pin_renew/pin_check/arbitrate, the pg advisory lock as
the sweep lease's shipped provider; fleet activation stays wave 6
- store-postgres-construction: KvEngine::Postgres slots in, the
KvCursor arm, the dual-tier/kv-only constructors (DSN + opts +
threshold + window delay), the non-fleet posture recorded, the
pg-pure build verified
- suite-column-postgres: the first SKIP-posture column — the alkstore
pg-factory pattern reused (fresh schema per open, CASCADE teardown,
env-driven ALKBLOBS_PG_* settings), durable-schedule sweep rows,
acceptance green against the harness server (pglo-poc :15432,
verified live)
- review-wave-4: the engine-wave gate (engine-vs-contract conformance)
Verification: dependency graph validated (all ids resolve, no cycles,
topological order clean); docs-only change.
Refs: docs/plans/implementation.md §Wave 4
glm-5.3-flash